last executing test programs: 13m22.850854705s ago: executing program 4 (id=3511): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x101843) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x1c3001, 0x11) write$tcp_mem(r3, &(0x7f00000002c0)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) 13m21.614187858s ago: executing program 4 (id=3515): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x4c, 0xfffffffffffffffc, &(0x7f00000006c0)="cd521442c27309c3592a5d522f23fbd7ddff49d2f11e03176106543e17f155f8001e1cb79e0769f6b9743d19fbdfddac43158a9f0ba415abbb6ee57945da094409c4227f54cc029792801212"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x161, 0x40000867, r9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) clock_adjtime(0x1, &(0x7f0000000540)={0x6, 0x9, 0xfffffffffffffffb, 0x7fff, 0xfffffffffffffffd, 0x10001, 0xffffffffba8372f8, 0xfc84, 0x100000000, 0x1, 0x6, 0x4e3, 0x1ff, 0x2, 0x7, 0x80000000, 0x7, 0x4, 0x7, 0x5, 0x80000000, 0x0, 0x5, 0xffff, 0x0, 0xfffffffffffffffb}) 13m19.060323338s ago: executing program 4 (id=3521): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e000000200"/56, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffffac1414bb00000000000000000a00000087"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000400)) memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) timer_create(0x0, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045009, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000100)="5e9e12d9429779906c7fc46da78970d9a788b8f9dc19faa910d4755f4e0f0b891c2d91312199e0f95085b08824def6cdc9e8750692249c413776894970576b8f990d27fc960e3815973f2ab24b865200fbe381", 0x53}, {&(0x7f0000000700)="0fdd23bf869b9c123c1ff75976556f54cb74f9461db61d1f5e1f44f07a71437473e66ea03c4982594a88bcfd65653c7eebc0bfd905803d4fc98f20df73732dad5c1e53b629fa31f5084d83445a3789f9b1589e694a99e568850f506e985e83", 0x5f}, {&(0x7f0000000780)="fa795378e916924408aab220c9d71294eaf12cb80e5cbf4a2425252a34825dcee21cc9d3f05380dca6d412ce69f4beeb509ae457a7e720885f23d0a626e3", 0x3e}, {&(0x7f0000000ac0)="34bfb84882aec7c0652826bd8adc07309dc015c8d8a417b0080354cdc44f624de2e486a660f94e00ae44ff8dae5a59224183b44f0ad073b0bafad34077dd7ff9cfd3229f43a5b1600292c1706f0bd3345518f8f74550669f0b25ad8c6720ffab62c88b09ad38a5d342c1ae38ff27355c5880bd5d8a32ea844843b851e566bddaf6b327fbd5b0ed1cbf53db4e087f9970ea06fb58e1a5a4723d0bdad0e1a20a414948bb15a19c0ae1e61750b7e7aa46a917", 0xb1}, {&(0x7f0000000b80)}], 0x6) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r6, 0x400455c8, 0x2) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) bind$xdp(r8, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) 13m18.275537689s ago: executing program 4 (id=3522): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) read(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 13m17.288818806s ago: executing program 4 (id=3524): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x190) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="c30000000300000007000000cba8fbc5f53bffae9977000000000000000199d9fd2b41456114f17798c3209e38ec8d0c5c0853fefbcb7601e89b71def70f9c51af49a233cc05bc265278fbb43878832ec8f68f1e3ce995eae1a194a922477715408156fc3a38cb492583d927bcb400d4c1b2c83ac029b3340a6633e6617fb15d40cc203f1cd7c977e0394faaced5474acc022b022a952d1238cdeaaed8d6ba3871b0fd984e5e7bf47c54cb292e0779094ae22765a3de0186e425ca551f5fea45e1d7153de6054ebc06ad27c5819ffd302d548c7336c55e89d0dfba65e14d1d6dda46c38df3fc6364bedc37ede4f80fff7027f5aa197caee201b752ae74db8e7b58d73cec9f"]) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f00000004c0)=""/24, 0x18, 0x0, &(0x7f0000000540)=""/245, 0xf5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1a04bc0101e6010000000000fdffff6600000000b5040000308700007100000095bcf53aa4cec4a8aa634671439875034d4f7f2dcbebef613114f685d695865ffaa95b9676644972409b273a7a302e91e1ebac08f1af770a79c257f94cc079b86c507d190101000000000000000ba871395e786bca03befe48d50000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x298, 0x200, 0x168, 0x168, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0xfffd, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) capset(&(0x7f0000000500)={0x20080522}, 0x0) syz_open_dev$video4linux(&(0x7f0000000840), 0x0, 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xe0bb, 0xfffffffffffffffe}) 13m11.247021349s ago: executing program 4 (id=3528): syz_open_dev$usbfs(0x0, 0xb, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012100, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x8efb, 0xb91, 0xec, 0x951, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 12m54.548007342s ago: executing program 32 (id=3528): syz_open_dev$usbfs(0x0, 0xb, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012100, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x8efb, 0xb91, 0xec, 0x951, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 12m47.847952559s ago: executing program 3 (id=3553): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a301052400"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d0009"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20040080) r2 = io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0xb1e1, 0x2, 0x2000003, 0x22c}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000048882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x5dba6000) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, &(0x7f0000001bc0), 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x6, 0x40000000, 0x0, 0x3}, 0x0, 0x0, 0x0) 12m44.547560729s ago: executing program 3 (id=3558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00000002700090025bd7000fddbdf2512000000ac000100"], 0xc0}}, 0x4000080) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 12m38.22665966s ago: executing program 3 (id=3568): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x190) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x20000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="c30000000300000007000000cba8fbc5f53bffae9977000000000000000199d9fd2b41456114f17798c3209e38ec8d0c5c0853fefbcb7601e89b71def70f9c51af49a233cc05bc265278fbb43878832ec8f68f1e3ce995eae1a194a922477715408156fc3a38cb492583d927bcb400d4c1b2c83ac029b3340a6633e6617fb15d40cc203f1cd7c977e0394faaced5474acc022b022a952d1238cdeaaed8d6ba3871b0fd984e5e7bf47c54cb292e0779094ae22765a3de0186e425ca551f5fea45e1d7153de6054ebc06ad27c5819ffd302d548c7336c55e89d0dfba65e14d1d6dda46c38df3fc6364bedc37ede4f80fff7027f5aa197caee201b752ae74db8e7b58d73cec9f"]) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f00000004c0)=""/24, 0x18, 0x0, &(0x7f0000000540)=""/245, 0xf5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1a04bc0101e6010000000000fdffff6600000000b5040000308700007100000095bcf53aa4cec4a8aa634671439875034d4f7f2dcbebef613114f685d695865ffaa95b9676644972409b273a7a302e91e1ebac08f1af770a79c257f94cc079b86c507d190101000000000000000ba871395e786bca03befe48d50000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x298, 0x200, 0x168, 0x168, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x2, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0xfffd, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) capset(&(0x7f0000000500)={0x20080522}, 0x0) syz_open_dev$video4linux(&(0x7f0000000840), 0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xe0bb, 0xfffffffffffffffe}) 12m34.172757782s ago: executing program 3 (id=3575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x5) connect$inet6(r5, &(0x7f0000000040)={0x2a, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x22}, 0x200}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 12m31.423067094s ago: executing program 3 (id=3578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x6, 0x2001) ptrace(0x10, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r3 = syz_io_uring_setup(0x34b6, &(0x7f0000000040)={0x0, 0xd68a, 0x80082, 0x3, 0x800000c5}, &(0x7f0000000140)=0x0, 0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, 0x0, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x74}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, 0x0, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) 12m30.607266412s ago: executing program 3 (id=3579): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 12m14.491972427s ago: executing program 33 (id=3579): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7m42.948588815s ago: executing program 2 (id=3953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x55ac, 0xc000, 0x8, 0x34b}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) 7m40.644197302s ago: executing program 2 (id=3956): syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x844) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x31, &(0x7f0000000040)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x23, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0xf, 0x0, @gue={{0x1, 0x1, 0x2, 0x42, 0x0, @void}, "efc159"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0x6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x34b400, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) 7m39.319506888s ago: executing program 2 (id=3957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x8, 0x3, 0x0, 0x9, 0x8000, 0xfffffe0000000001, 0xfa11, 0x5}, 0x0) r1 = socket$inet(0x2, 0x3, 0x101) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000fc0)={'filter\x00', 0x4}, 0x68) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r3 = userfaultfd(0x80001) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000001780)) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x8008cfe, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) socket$igmp(0x2, 0x3, 0x2) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x80, 0xd0, {"d495bba648cec9e85c088ef0b988f218"}, 0x1800000000000, 0x7, 0x100}}}, 0xa0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m36.428445472s ago: executing program 2 (id=3961): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000696000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$evdev(r1, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0xffffffff, 0x0, 0x3231564e, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x400000}], 0x0, 0x0, 0x0, 0x0, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xc0, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xac, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xc0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={0x14, 0x0, 0x1, 0x703d28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) fanotify_init(0x1a, 0x800) 7m36.16708916s ago: executing program 2 (id=3962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x55ac, 0xc000, 0x8, 0x34b}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0xfffffffe, 0x3}) 7m34.950846112s ago: executing program 2 (id=3963): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}}, 0xf0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) socket$kcm(0xa, 0x3, 0x87) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES64], 0xfdef) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0xd4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r5, 0x2b, 0x0, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000006c0)}, 0x40) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000047c00000400c2800c000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7m18.520349417s ago: executing program 34 (id=3963): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}}, 0xf0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) socket$kcm(0xa, 0x3, 0x87) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES64], 0xfdef) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0xd4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r5, 0x2b, 0x0, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000006c0)}, 0x40) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000047c00000400c2800c000180"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 11.072115752s ago: executing program 7 (id=5560): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) syz_usb_disconnect(0xffffffffffffffff) 7.579681517s ago: executing program 7 (id=5564): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='123', 0x3) 7.281500751s ago: executing program 5 (id=5567): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setfsuid(0xee01) fchdir(0xffffffffffffffff) fchdir(r0) r1 = syz_clone(0x11, 0x0, 0xfffffc37, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getpriority(0x0, r1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) brk(0x9) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00') 7.260790425s ago: executing program 7 (id=5568): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5964, 0x10000, 0x3, 0x167}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x6020400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xe) 6.919873864s ago: executing program 0 (id=5570): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4d, 0x7fff0000}]}) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000400), &(0x7f0000000080)=@tcp6=r0, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[], 0x0) 6.226467267s ago: executing program 5 (id=5571): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x20044096) syz_usb_connect(0x6, 0x21, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 6.147626481s ago: executing program 0 (id=5572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4015, &(0x7f0000000380)={0x11, 0x8, 0x0, 0x1, 0x9, 0x6, @local}, 0x14) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4, 0x7f, 0x4}) 5.995330213s ago: executing program 7 (id=5574): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(0x0, 0x4) fcntl$setlease(r0, 0x400, 0x2) 5.672109208s ago: executing program 7 (id=5576): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0xe, 0x13, "2f2c1b862c78f4300b5972254419d836c4dbfd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.263199186s ago: executing program 0 (id=5578): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01fb"], 0x0, 0x26, 0x0, 0xa, 0x32e}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="17", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7ffd}, 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x3, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x9, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x20000, 0x1c, 0x0, 0x5, 0x1, 0xffffffffffffffff], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.191688942s ago: executing program 0 (id=5579): pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x0, 0x0, 0xa0000000, 0x2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46"], 0x78) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5.060895674s ago: executing program 1 (id=5580): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0)={[0xbb3]}, 0x8) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x210011, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 4.991184754s ago: executing program 6 (id=5581): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.282264726s ago: executing program 5 (id=5582): unshare(0x22020600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="05000000010000", 0x7) write(r1, 0x0, 0x0) write(r1, &(0x7f0000000100)="09000000010001", 0x7) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(0x0, 0x10) write(r1, &(0x7f0000000240)="190000000800aaaaaaaaaa1101", 0xd) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 4.202331109s ago: executing program 0 (id=5583): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000240)=""/157, 0x9d) 4.100086227s ago: executing program 6 (id=5584): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r3, 0x3, 0x0) 3.983147034s ago: executing program 1 (id=5585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.966393389s ago: executing program 0 (id=5586): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 3.687377118s ago: executing program 6 (id=5587): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.813837703s ago: executing program 1 (id=5588): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2, {0x2}}, 0x5) 2.70698194s ago: executing program 6 (id=5589): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r2) 2.61693126s ago: executing program 1 (id=5590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f00000049c0)=[@decrefs], 0x0, 0x0, 0x0}) 2.518168764s ago: executing program 1 (id=5591): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r1, r5, 0xf3a, 0x4) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x18c6) 2.48875976s ago: executing program 5 (id=5592): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/mem_sleep', 0x141a82, 0x20) sendfile(r0, r0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 1.713681583s ago: executing program 6 (id=5593): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.215207854s ago: executing program 5 (id=5594): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3f, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x1, 0xb0, 0xf2}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, 0x0, 0x0) 1.200110917s ago: executing program 5 (id=5595): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x3b8e, &(0x7f0000000000)) unshare(0x2040400) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/instances/foo\x00', 0x1ff) 750.404258ms ago: executing program 1 (id=5596): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 627.996614ms ago: executing program 7 (id=5597): connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x8}}, 0x20) 0s ago: executing program 6 (id=5598): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x6}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x6ca, 0x10}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000880)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000840)=0x1a}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000dc0)={'pimreg\x00', {0x2, 0x4e21, @empty}}) kernel console output (not intermixed with test programs): z [ 1807.769145][T13949] usb 8-1: Manufacturer: syz [ 1807.769159][T13949] usb 8-1: SerialNumber: syz [ 1808.010501][T13949] usb 8-1: config 0 descriptor?? [ 1808.184273][T13949] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1808.568954][T13949] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1808.710985][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1808.797613][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4549'. [ 1808.887238][T13949] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1809.087808][T13949] usb 8-1: USB disconnect, device number 6 [ 1809.435920][T13949] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1810.435138][T13949] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1810.436073][T13949] quatech2 8-1:0.51: device disconnected [ 1813.469012][T21669] ovs-dp0: entered promiscuous mode [ 1814.872316][T21701] netlink: 'syz.7.4577': attribute type 10 has an invalid length. [ 1814.932120][T21707] 9p: Bad value for 'rfdno' [ 1814.935539][T21708] netlink: 'syz.7.4577': attribute type 10 has an invalid length. [ 1815.106374][T21701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1815.117659][T21701] team0: Port device netdevsim1 added [ 1817.110520][T13949] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1817.111921][ T5734] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1817.270852][ T5734] usb 7-1: Using ep0 maxpacket: 16 [ 1817.271846][ T5734] usb 7-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 1817.272016][T13949] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1817.275821][ T5734] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.275849][ T5734] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.275870][ T5734] usb 7-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1817.276045][ T5734] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1817.276080][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.277338][T13949] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1817.277367][T13949] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1817.277392][T13949] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1817.287868][ T5734] usb 7-1: config 0 descriptor?? [ 1817.420064][T13949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.420095][T13949] usb 8-1: Product: syz [ 1817.420108][T13949] usb 8-1: Manufacturer: syz [ 1817.420122][T13949] usb 8-1: SerialNumber: syz [ 1817.480875][T13949] usb 8-1: config 0 descriptor?? [ 1817.481933][T21746] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1817.482143][T21746] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1817.576829][T13949] usb 8-1: ucan: probing device on interface #0 [ 1817.707180][ T37] kauditd_printk_skb: 90 callbacks suppressed [ 1817.707200][ T37] audit: type=1326 audit(1791078967.196:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.707315][ T37] audit: type=1326 audit(1791078967.196:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.800582][ T37] audit: type=1326 audit(1791078967.271:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.800642][ T37] audit: type=1326 audit(1791078967.271:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.800684][ T37] audit: type=1326 audit(1791078967.271:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.800724][ T37] audit: type=1326 audit(1791078967.271:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.800764][ T37] audit: type=1326 audit(1791078967.271:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.800805][ T37] audit: type=1326 audit(1791078967.271:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.800845][ T37] audit: type=1326 audit(1791078967.271:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.800884][ T37] audit: type=1326 audit(1791078967.271:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21770 comm="syz.1.4601" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1817.981933][ T5734] hid_parser_main: 30 callbacks suppressed [ 1817.982169][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.982202][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.982228][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.982255][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.982281][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.982319][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.982344][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.987235][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.987271][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.987303][ T5734] waltop 0003:172F:0032.0003: unknown main item tag 0x0 [ 1817.995176][T13949] usb 8-1: ucan: device reported invalid device info [ 1817.995197][T13949] usb 8-1: ucan: probe failed; try to update the device firmware [ 1818.355338][ T5734] waltop 0003:172F:0032.0003: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.6-1/input0 [ 1818.388931][T13949] usb 8-1: USB disconnect, device number 7 [ 1818.496103][ T5734] usb 7-1: USB disconnect, device number 9 [ 1818.527420][T21128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1818.849961][T21128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1818.979812][T21128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1819.025727][T21128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1819.037983][T21128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1819.369407][T21128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1819.374767][T21128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1819.556634][T21128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1819.676622][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4615'. [ 1819.849717][T21816] tap0: tun_chr_ioctl cmd 2148553947 [ 1820.218251][T21128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1820.268467][T21128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1820.295827][T15014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.295929][T15014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1820.377060][T15014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.377204][T15014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1820.650643][T13949] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1820.809671][T13949] usb 7-1: Using ep0 maxpacket: 32 [ 1820.810691][T13949] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1820.812255][T13949] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1820.812281][T13949] usb 7-1: config 0 has no interface number 0 [ 1820.816826][T13949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.816850][T13949] usb 7-1: Product: syz [ 1820.816865][T13949] usb 7-1: Manufacturer: syz [ 1820.816879][T13949] usb 7-1: SerialNumber: syz [ 1820.886834][T13949] usb 7-1: config 0 descriptor?? [ 1821.066205][ T5703] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1821.327933][ T5703] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1821.329115][ T5703] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1821.329140][ T5703] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1821.329158][ T5703] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.329170][ T5703] usb 8-1: config 220 has no interface number 2 [ 1821.329256][ T5703] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1821.329271][ T5703] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1821.329285][ T5703] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1821.329302][ T5703] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1821.409957][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.410070][ T5703] usb 8-1: Product: syz [ 1821.410086][ T5703] usb 8-1: Manufacturer: syz [ 1821.410098][ T5703] usb 8-1: SerialNumber: syz [ 1821.626384][T13949] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1821.626417][T13949] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1821.680049][T13949] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1821.680827][T13949] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1821.729080][T13949] usb 7-1: USB disconnect, device number 10 [ 1821.844263][T21128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1821.936563][ T5703] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1821.936601][ T5703] uvcvideo 8-1:220.0: No valid video chain found. [ 1821.936689][ T5703] usb 8-1: selecting invalid altsetting 0 [ 1821.984645][ T5703] usb 8-1: selecting invalid altsetting 0 [ 1821.984684][ T5703] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 1822.003164][ T5703] usb 8-1: USB disconnect, device number 8 [ 1822.664485][T21898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4645'. [ 1822.723137][ T5703] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1822.738751][T21900] program syz.7.4646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1822.807376][T21128] veth0_vlan: entered promiscuous mode [ 1822.877510][T21128] veth1_vlan: entered promiscuous mode [ 1822.889792][ T5703] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1822.891755][ T5703] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.891786][ T5703] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.891808][ T5703] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1822.891834][ T5703] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1822.891872][ T5703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.967129][ T5703] usb 7-1: config 0 descriptor?? [ 1823.106464][T21128] veth0_macvtap: entered promiscuous mode [ 1823.176050][T21128] veth1_macvtap: entered promiscuous mode [ 1823.352685][T21128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1823.436029][T21128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1823.552534][ T5703] hid-multitouch 0003:0EEF:72D0.0004: hidraw0: USB HID v0.00 Joystick [HID 0eef:72d0] on usb-dummy_hcd.6-1/input0 [ 1823.657028][T15018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.730103][ T1238] usb 7-1: USB disconnect, device number 11 [ 1823.904278][T15044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.904745][T15044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.991936][T21916] fido_id[21916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1824.375814][ T1167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.584825][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4657'. [ 1825.654939][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 1825.654958][ T37] audit: type=1326 audit(1791078974.632:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21940 comm="syz.1.4663" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x0 [ 1825.797294][T15008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.797314][T15008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.898346][ T5703] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1826.059293][ T5703] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1826.060820][ T5703] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.060849][ T5703] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1826.060877][ T5703] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1826.060907][ T5703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.147142][ T5703] usb 8-1: config 0 descriptor?? [ 1826.387377][T15017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1826.387402][T15017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1826.683866][ T5703] hid (null): usage index exceeded [ 1826.757339][ T5703] hid-multitouch 0003:0EEF:72C4.0005: ignoring exceeding usage max [ 1826.760150][ T5703] hid-multitouch 0003:0EEF:72C4.0005: ignoring exceeding usage max [ 1826.760173][ T5703] hid-multitouch 0003:0EEF:72C4.0005: usage index exceeded [ 1826.760186][ T5703] hid-multitouch 0003:0EEF:72C4.0005: item 0 0 2 2 parsing failed [ 1826.760986][ T5703] hid-multitouch 0003:0EEF:72C4.0005: probe with driver hid-multitouch failed with error -22 [ 1826.899226][ T5703] usb 8-1: USB disconnect, device number 9 [ 1831.456552][T22020] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4695'. [ 1831.928240][T22024] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4695'. [ 1833.287128][T22049] netlink: 'syz.6.4707': attribute type 2 has an invalid length. [ 1833.325194][T22049] ´: entered promiscuous mode [ 1833.394935][T22054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4710'. [ 1834.843711][T22072] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4716'. [ 1834.999399][T22078] netlink: Conntrack attr has 12 unknown bytes [ 1834.999437][T22078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1835.005204][T22078] netlink: Conntrack attr has 12 unknown bytes [ 1835.005238][T22078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1835.875100][T22100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4727'. [ 1838.675250][T22133] netlink: NAT attribute has 8 unknown bytes [ 1838.675285][T22133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1839.224699][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4750'. [ 1841.315666][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1841.569097][T22186] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4762'. [ 1841.579171][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4761'. [ 1843.741306][T22233] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1845.536787][T13949] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1846.819665][T13949] usb 6-1: Using ep0 maxpacket: 16 [ 1846.821239][T13949] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1846.822505][T13949] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1846.822543][T13949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1846.841039][T13949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.841066][T13949] usb 6-1: Product: syz [ 1846.841079][T13949] usb 6-1: Manufacturer: syz [ 1846.841093][T13949] usb 6-1: SerialNumber: syz [ 1847.578282][T13949] usb 6-1: config 0 descriptor?? [ 1847.791887][T13949] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1847.791984][T13949] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1848.442661][T13949] em28xx 6-1:0.0: unknown em28xx chip ID (150) [ 1848.562282][ T5734] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1848.667112][T13949] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1848.672724][T13949] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1848.672747][T13949] em28xx 6-1:0.0: No AC97 audio processor [ 1848.745070][ T5734] usb 8-1: Using ep0 maxpacket: 32 [ 1848.802771][T13949] usb 6-1: USB disconnect, device number 2 [ 1848.811346][T13949] em28xx 6-1:0.0: Disconnecting em28xx [ 1848.850867][ T5734] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 1848.854105][ T5734] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.908736][ T5734] usb 8-1: config 0 descriptor?? [ 1848.941202][T22310] netlink: 'syz.0.4812': attribute type 2 has an invalid length. [ 1848.941222][T22310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4812'. [ 1849.370462][ T5734] hid (null): report_id 0 is invalid [ 1849.370528][ T5734] hid (null): nested delimiters [ 1849.370552][ T5734] hid (null): bogus close delimiter [ 1849.417459][ T5734] hid_parser_main: 14 callbacks suppressed [ 1849.417483][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417511][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417532][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417557][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417582][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417609][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417635][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417660][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417684][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.417707][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 1849.420194][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: report_id 0 is invalid [ 1849.420214][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: item 0 0 1 8 parsing failed [ 1849.420862][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: parse failed (reason: -22) [ 1849.420964][ T5734] hid-corsair-void 0003:1B1C:1B27.0006: probe with driver hid-corsair-void failed with error -22 [ 1849.681001][ T5734] usb 8-1: USB disconnect, device number 10 [ 1850.315530][ T37] audit: type=1326 audit(1791078997.699:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.315584][ T37] audit: type=1326 audit(1791078997.699:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.321051][ T37] audit: type=1326 audit(1791078997.709:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.321104][ T37] audit: type=1326 audit(1791078997.709:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.321144][ T37] audit: type=1326 audit(1791078997.709:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.321184][ T37] audit: type=1326 audit(1791078997.709:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.321227][ T37] audit: type=1326 audit(1791078997.709:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.321382][ T37] audit: type=1326 audit(1791078997.709:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.321615][ T37] audit: type=1326 audit(1791078997.709:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.321868][ T37] audit: type=1326 audit(1791078997.709:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22324 comm="syz.1.4819" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1850.323213][T13949] em28xx: Freeing device [ 1850.391885][T22222] udevd[22222]: setting owner of /dev/bus/usb/006/002 to uid=0, gid=0 failed: No such file or directory [ 1851.554891][T22377] syzkaller1: tun_chr_ioctl cmd 35108 [ 1851.981403][T22399] FAULT_INJECTION: forcing a failure. [ 1851.981403][T22399] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1851.981441][T22399] CPU: 0 UID: 0 PID: 22399 Comm: syz.5.4849 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1851.981466][T22399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1851.981479][T22399] Call Trace: [ 1851.981487][T22399] [ 1851.981496][T22399] dump_stack_lvl+0xe8/0x150 [ 1851.981534][T22399] should_fail_ex+0x46b/0x600 [ 1851.981613][T22399] get_futex_key+0x1b4/0x1580 [ 1851.981667][T22399] ? __pfx_get_futex_key+0x10/0x10 [ 1851.981693][T22399] ? kasan_save_free_info+0x40/0x50 [ 1851.981728][T22399] ? __kasan_slab_free+0x5c/0x80 [ 1851.981755][T22399] ? kfree+0x1c5/0x6d0 [ 1851.981778][T22399] ? __se_sys_add_key+0x3a3/0x420 [ 1851.981816][T22399] ? do_syscall_64+0x166/0x520 [ 1851.981843][T22399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.981874][T22399] futex_wake+0x119/0x600 [ 1851.981904][T22399] ? __pfx_futex_wake+0x10/0x10 [ 1851.981944][T22399] do_futex+0x458/0x4e0 [ 1851.981970][T22399] ? __pfx_do_futex+0x10/0x10 [ 1851.981989][T22399] ? rcu_is_watching+0x16/0xb0 [ 1851.982034][T22399] __se_sys_futex+0x3a8/0x450 [ 1851.982061][T22399] ? __pfx___se_sys_futex+0x10/0x10 [ 1851.982087][T22399] ? __x64_sys_futex+0x21/0xf0 [ 1851.982109][T22399] do_syscall_64+0x166/0x520 [ 1851.982131][T22399] ? trace_irq_disable+0x3b/0x140 [ 1851.982163][T22399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.982185][T22399] ? clear_bhb_loop+0x70/0xc0 [ 1851.982210][T22399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.982231][T22399] RIP: 0033:0x7f80eb62e159 [ 1851.982251][T22399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.982268][T22399] RSP: 002b:00007f80e98860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1851.982293][T22399] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa8 RCX: 00007f80eb62e159 [ 1851.982310][T22399] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80eb8b5fac [ 1851.982323][T22399] RBP: 00007f80eb8b5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1851.982336][T22399] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1851.982349][T22399] R13: 00007f80eb8b6038 R14: 00007ffc50377640 R15: 00007ffc50377728 [ 1851.982380][T22399] [ 1852.139951][T22405] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 1852.139951][T22405] program syz.6.4852 not setting count and/or reply_len properly [ 1852.637570][T22423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4861'. [ 1852.838552][ T5732] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1852.999586][ T5732] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1853.005007][ T5732] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1853.005039][ T5732] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1853.005080][ T5732] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.646103][ T5732] usb 8-1: USB disconnect, device number 11 [ 1854.072615][T22449] netlink: Unknown conntrack attr (0) [ 1854.072650][T22449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1854.074127][T22449] netlink: Unknown conntrack attr (0) [ 1854.074155][T22449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1854.685985][T22468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4879'. [ 1855.011530][T22478] input: syz0 as /devices/virtual/input/input9 [ 1855.503713][T22481] netlink: 'syz.0.4884': attribute type 1 has an invalid length. [ 1855.503837][T22481] netlink: 'syz.0.4884': attribute type 2 has an invalid length. [ 1855.503852][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4884'. [ 1855.758345][T22490] input: syz1 as /devices/virtual/input/input10 [ 1857.232353][ T37] kauditd_printk_skb: 80 callbacks suppressed [ 1857.232373][ T37] audit: type=1400 audit(1791079004.172:1665): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22526 comm="syz.1.4903" src=20002 dest=20000 [ 1857.414101][ T5732] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1857.575170][ T5732] usb 8-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1857.578555][ T5732] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1857.578606][ T5732] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.618896][ T5732] usb 8-1: config 0 descriptor?? [ 1857.719082][T22535] xt_hashlimit: size too large, truncated to 1048576 [ 1857.719104][T22535] xt_hashlimit: max too large, truncated to 1048576 [ 1858.104019][ T5732] logitech 0003:046D:C24F.0007: unbalanced delimiter at end of report description [ 1858.104873][ T5732] logitech 0003:046D:C24F.0007: parse failed [ 1858.104975][ T5732] logitech 0003:046D:C24F.0007: probe with driver logitech failed with error -22 [ 1858.310453][T13949] usb 8-1: USB disconnect, device number 12 [ 1860.439536][T18718] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1860.643364][T22586] netlink: 83 bytes leftover after parsing attributes in process `syz.5.4929'. [ 1860.655974][T18718] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1860.677582][T18718] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1860.677609][T18718] usb 7-1: config 0 has no interface number 0 [ 1860.677746][T18718] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1860.677774][T18718] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1860.677796][T18718] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1860.677875][T18718] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1860.677909][T18718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.800541][T18718] usb 7-1: config 0 descriptor?? [ 1861.096985][T22591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'. [ 1861.503803][T18718] uclogic 0003:145F:0212.0008: pen parameters not found [ 1861.503937][T18718] uclogic 0003:145F:0212.0008: interface is invalid, ignoring [ 1861.770286][ T1238] usb 7-1: USB disconnect, device number 12 [ 1862.145019][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1862.271195][T22625] overlayfs: failed to clone upperpath [ 1862.412907][T22631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4948'. [ 1862.472609][T22631] batadv0: entered promiscuous mode [ 1862.472869][T22631] macvtap1: entered promiscuous mode [ 1862.474885][T22631] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1862.527645][T22631] batadv0: left promiscuous mode [ 1864.213825][T18718] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1864.376052][T18718] usb 7-1: Using ep0 maxpacket: 32 [ 1864.394378][T18718] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1864.394438][T18718] usb 7-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=32.dc [ 1864.412574][T18718] usb 7-1: config 4 has an invalid interface number: 209 but max is 0 [ 1864.412603][T18718] usb 7-1: config 4 has no interface number 0 [ 1864.412622][T18718] usb 7-1: config 4 interface 209 has no altsetting 0 [ 1864.414966][T18718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.414990][T18718] usb 7-1: Product: syz [ 1864.415003][T18718] usb 7-1: Manufacturer: syz [ 1864.415016][T18718] usb 7-1: SerialNumber: syz [ 1865.176351][ T1238] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1865.336779][ T1238] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1865.338678][ T1238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.363662][ T1238] usb 6-1: config 0 descriptor?? [ 1865.374917][ T1238] cp210x 6-1:0.0: cp210x converter detected [ 1865.421042][T18718] rndis_host 7-1:4.209: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1865.654173][T18718] usb 7-1: USB disconnect, device number 13 [ 1865.819770][ T1238] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1865.978150][T13949] kernel read not supported for file /video9 (pid: 13949 comm: kworker/1:0) [ 1866.088498][ T1238] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1866.131615][ T1238] usb 6-1: USB disconnect, device number 3 [ 1866.398737][ T1238] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1866.399514][ T1238] cp210x 6-1:0.0: device disconnected [ 1867.251308][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5005'. [ 1867.251350][T22762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5005'. [ 1867.264079][T22762] geneve4: entered promiscuous mode [ 1867.264104][T22762] geneve4: entered allmulticast mode [ 1867.496144][T22768] FAULT_INJECTION: forcing a failure. [ 1867.496144][T22768] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.496182][T22768] CPU: 1 UID: 0 PID: 22768 Comm: syz.6.5004 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1867.496204][T22768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1867.496219][T22768] Call Trace: [ 1867.496227][T22768] [ 1867.496237][T22768] dump_stack_lvl+0xe8/0x150 [ 1867.496273][T22768] should_fail_ex+0x46b/0x600 [ 1867.496309][T22768] should_failslab+0xa8/0x100 [ 1867.496330][T22768] ? alloc_vfsmnt+0x23/0x410 [ 1867.496360][T22768] kmem_cache_alloc_noprof+0x9e/0x690 [ 1867.496390][T22768] ? alloc_vfsmnt+0x23/0x410 [ 1867.496419][T22768] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1867.496484][T22768] alloc_vfsmnt+0x23/0x410 [ 1867.496524][T22768] clone_mnt+0x4b/0x9b0 [ 1867.496561][T22768] open_detached_copy+0x229/0x540 [ 1867.496590][T22768] ? do_getname+0x151/0x250 [ 1867.496613][T22768] vfs_open_tree+0x35d/0x3d0 [ 1867.496643][T22768] ? __pfx_vfs_open_tree+0x10/0x10 [ 1867.496682][T22768] __x64_sys_open_tree+0x96/0x110 [ 1867.496706][T22768] do_syscall_64+0x166/0x520 [ 1867.496728][T22768] ? trace_irq_disable+0x3b/0x140 [ 1867.496755][T22768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.496776][T22768] ? clear_bhb_loop+0x70/0xc0 [ 1867.496800][T22768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.496820][T22768] RIP: 0033:0x7f8e8ad6e159 [ 1867.496839][T22768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.496856][T22768] RSP: 002b:00007f8e88fc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1867.496878][T22768] RAX: ffffffffffffffda RBX: 00007f8e8aff5fa0 RCX: 00007f8e8ad6e159 [ 1867.496894][T22768] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1867.496909][T22768] RBP: 00007f8e8ae0506b R08: 0000000000000000 R09: 0000000000000000 [ 1867.496922][T22768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1867.496934][T22768] R13: 00007f8e8aff6038 R14: 00007f8e8aff5fa0 R15: 00007ffdabc8b798 [ 1867.496968][T22768] [ 1867.743483][T22777] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5009'. [ 1867.853526][T22782] FAULT_INJECTION: forcing a failure. [ 1867.853526][T22782] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.853564][T22782] CPU: 0 UID: 0 PID: 22782 Comm: syz.6.5011 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1867.853589][T22782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1867.853602][T22782] Call Trace: [ 1867.853609][T22782] [ 1867.853619][T22782] dump_stack_lvl+0xe8/0x150 [ 1867.853656][T22782] should_fail_ex+0x46b/0x600 [ 1867.853690][T22782] should_failslab+0xa8/0x100 [ 1867.853713][T22782] __kmalloc_noprof+0xfb/0x790 [ 1867.853742][T22782] ? security_inode_alloc+0x39/0x310 [ 1867.853763][T22782] ? sk_prot_alloc+0xe7/0x210 [ 1867.853788][T22782] ? sk_prot_alloc+0xe7/0x210 [ 1867.853815][T22782] sk_prot_alloc+0xe7/0x210 [ 1867.853834][T22782] ? sk_alloc+0x27/0x390 [ 1867.853857][T22782] sk_alloc+0x3a/0x390 [ 1867.853882][T22782] alg_create+0xcf/0x160 [ 1867.853960][T22782] __sock_create+0x4b3/0x9d0 [ 1867.854115][T22782] __sys_socket+0xd6/0x1b0 [ 1867.854152][T22782] __x64_sys_socket+0x7a/0x90 [ 1867.854184][T22782] do_syscall_64+0x166/0x520 [ 1867.854207][T22782] ? trace_irq_disable+0x3b/0x140 [ 1867.854234][T22782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.854254][T22782] ? clear_bhb_loop+0x70/0xc0 [ 1867.854279][T22782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.854299][T22782] RIP: 0033:0x7f8e8ad6e159 [ 1867.854317][T22782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.854333][T22782] RSP: 002b:00007f8e88fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1867.854354][T22782] RAX: ffffffffffffffda RBX: 00007f8e8aff5fa0 RCX: 00007f8e8ad6e159 [ 1867.854370][T22782] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 1867.854383][T22782] RBP: 00007f8e8ae0506b R08: 0000000000000000 R09: 0000000000000000 [ 1867.854396][T22782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1867.854409][T22782] R13: 00007f8e8aff6038 R14: 00007f8e8aff5fa0 R15: 00007ffdabc8b798 [ 1867.854442][T22782] [ 1867.922148][T22784] 9p: Bad value for 'wfdno' [ 1867.955415][T22786] FAULT_INJECTION: forcing a failure. [ 1867.955415][T22786] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1867.955450][T22786] CPU: 1 UID: 0 PID: 22786 Comm: syz.5.5016 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1867.955482][T22786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1867.955495][T22786] Call Trace: [ 1867.955502][T22786] [ 1867.955510][T22786] dump_stack_lvl+0xe8/0x150 [ 1867.955546][T22786] should_fail_ex+0x46b/0x600 [ 1867.955580][T22786] _copy_from_user+0x2d/0xb0 [ 1867.955648][T22786] __x64_sys_utimes+0x120/0x250 [ 1867.955679][T22786] ? __se_sys_futex+0x3a8/0x450 [ 1867.955701][T22786] ? __pfx___x64_sys_utimes+0x10/0x10 [ 1867.955750][T22786] do_syscall_64+0x166/0x520 [ 1867.955773][T22786] ? trace_irq_disable+0x3b/0x140 [ 1867.955799][T22786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.955818][T22786] ? clear_bhb_loop+0x70/0xc0 [ 1867.955842][T22786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.955863][T22786] RIP: 0033:0x7f80eb62e159 [ 1867.955882][T22786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.955899][T22786] RSP: 002b:00007f80e9886028 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 1867.955919][T22786] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa0 RCX: 00007f80eb62e159 [ 1867.955934][T22786] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1867.955946][T22786] RBP: 00007f80eb6c506b R08: 0000000000000000 R09: 0000000000000000 [ 1867.955958][T22786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1867.955970][T22786] R13: 00007f80eb8b6038 R14: 00007f80eb8b5fa0 R15: 00007ffc50377728 [ 1867.956000][T22786] [ 1868.158187][T18718] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1868.437120][T18718] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1868.438684][T18718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1868.438714][T18718] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.438735][T18718] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1868.438776][T18718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.518876][T18718] usb 8-1: config 0 descriptor?? [ 1869.013642][T18718] hid-multitouch 0003:0457:07DA.0009: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.7-1/input0 [ 1869.577972][T18718] usb 8-1: USB disconnect, device number 13 [ 1869.733812][T22848] 9p: Bad value for 'rfdno' [ 1870.603204][ T37] audit: type=1326 audit(1791079016.678:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.603687][ T37] audit: type=1326 audit(1791079016.678:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.605009][ T37] audit: type=1326 audit(1791079016.678:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.605118][ T37] audit: type=1326 audit(1791079016.678:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.605428][ T37] audit: type=1326 audit(1791079016.678:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.605787][ T37] audit: type=1326 audit(1791079016.678:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.605834][ T37] audit: type=1326 audit(1791079016.678:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.605877][ T37] audit: type=1326 audit(1791079016.678:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.649189][ T37] audit: type=1326 audit(1791079016.678:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1870.649253][ T37] audit: type=1326 audit(1791079016.688:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.7.5053" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1872.826011][T22914] FAULT_INJECTION: forcing a failure. [ 1872.826011][T22914] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.826058][T22914] CPU: 0 UID: 0 PID: 22914 Comm: syz.5.5071 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1872.826082][T22914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1872.826096][T22914] Call Trace: [ 1872.826104][T22914] [ 1872.826114][T22914] dump_stack_lvl+0xe8/0x150 [ 1872.826152][T22914] should_fail_ex+0x46b/0x600 [ 1872.826189][T22914] should_failslab+0xa8/0x100 [ 1872.826211][T22914] ? vm_area_alloc+0x24/0x140 [ 1872.826266][T22914] kmem_cache_alloc_noprof+0x9e/0x690 [ 1872.826296][T22914] ? vm_area_alloc+0x24/0x140 [ 1872.826333][T22914] vm_area_alloc+0x24/0x140 [ 1872.826366][T22914] mmap_region+0x1400/0x25c0 [ 1872.826400][T22914] ? ktime_get+0x45/0x220 [ 1872.826430][T22914] ? __pfx_mmap_region+0x10/0x10 [ 1872.826451][T22914] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1872.826479][T22914] ? ktime_get+0x1f5/0x220 [ 1872.826507][T22914] ? lapic_next_event+0x11/0x20 [ 1872.826529][T22914] ? clockevents_program_event+0x491/0x630 [ 1872.826571][T22914] ? lockdep_hardirqs_on+0x7b/0x110 [ 1872.826651][T22914] ? futex_unqueue+0x22/0x240 [ 1872.826719][T22914] ? cap_mmap_addr+0xaf/0x100 [ 1872.826749][T22914] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1872.826773][T22914] ? security_mmap_addr+0x71/0x240 [ 1872.826811][T22914] do_mmap+0xe0e/0x1310 [ 1872.826846][T22914] ? __pfx_do_mmap+0x10/0x10 [ 1872.826880][T22914] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1872.826908][T22914] ? rwbase_write_lock+0x550/0x720 [ 1872.826946][T22914] vm_mmap_pgoff+0x275/0x4e0 [ 1872.826987][T22914] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1872.827014][T22914] ? rcu_is_watching+0x16/0xb0 [ 1872.827060][T22914] ? __x64_sys_mmap+0x7f/0x140 [ 1872.827087][T22914] do_syscall_64+0x166/0x520 [ 1872.827109][T22914] ? trace_irq_disable+0x3b/0x140 [ 1872.827136][T22914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.827157][T22914] ? clear_bhb_loop+0x70/0xc0 [ 1872.827183][T22914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1872.827203][T22914] RIP: 0033:0x7f80eb62e159 [ 1872.827223][T22914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1872.827242][T22914] RSP: 002b:00007f80e9886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1872.827265][T22914] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa0 RCX: 00007f80eb62e159 [ 1872.827281][T22914] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1872.827295][T22914] RBP: 00007f80eb6c506b R08: ffffffffffffffff R09: 0000000000000000 [ 1872.827310][T22914] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1872.827322][T22914] R13: 00007f80eb8b6038 R14: 00007f80eb8b5fa0 R15: 00007ffc50377728 [ 1872.827357][T22914] [ 1873.354585][T22922] fuse: fd is not a fuse device [ 1875.486461][T22956] fuse: fd is not a fuse device [ 1875.538309][ T1238] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1875.667078][T22962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5092'. [ 1875.667099][T22962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5092'. [ 1875.740484][ T1238] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1875.741592][ T1238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.810786][ T1238] usb 7-1: config 0 descriptor?? [ 1876.012524][T22974] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1876.079038][ T1238] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1877.142548][ T1238] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 1877.142576][ T1238] [drm] Initialized udl on minor 1 [ 1878.356275][ T1238] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1878.374487][ T1238] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1878.451402][ T1238] usb 7-1: USB disconnect, device number 14 [ 1878.577458][T23018] FAULT_INJECTION: forcing a failure. [ 1878.577458][T23018] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.577495][T23018] CPU: 1 UID: 0 PID: 23018 Comm: syz.7.5109 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1878.577519][T23018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1878.577532][T23018] Call Trace: [ 1878.577547][T23018] [ 1878.577557][T23018] dump_stack_lvl+0xe8/0x150 [ 1878.577593][T23018] should_fail_ex+0x46b/0x600 [ 1878.577629][T23018] should_failslab+0xa8/0x100 [ 1878.577650][T23018] ? prepare_creds+0x30/0x820 [ 1878.577673][T23018] kmem_cache_alloc_noprof+0x9e/0x690 [ 1878.577703][T23018] ? prepare_creds+0x30/0x820 [ 1878.577732][T23018] prepare_creds+0x30/0x820 [ 1878.577760][T23018] cap_task_prctl+0x87d/0xaa0 [ 1878.577793][T23018] security_task_prctl+0xf6/0x190 [ 1878.577851][T23018] __se_sys_prctl+0xbf/0x1910 [ 1878.577881][T23018] ? __pfx___se_sys_prctl+0x10/0x10 [ 1878.577910][T23018] ? __x64_sys_prctl+0x20/0xc0 [ 1878.577936][T23018] do_syscall_64+0x166/0x520 [ 1878.577959][T23018] ? trace_irq_disable+0x3b/0x140 [ 1878.577986][T23018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.578008][T23018] ? clear_bhb_loop+0x70/0xc0 [ 1878.578034][T23018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.578053][T23018] RIP: 0033:0x7fb0da96e159 [ 1878.578072][T23018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1878.578089][T23018] RSP: 002b:00007fb0d8bc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1878.578111][T23018] RAX: ffffffffffffffda RBX: 00007fb0dabf5fa0 RCX: 00007fb0da96e159 [ 1878.578126][T23018] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001c [ 1878.578138][T23018] RBP: 00007fb0daa0506b R08: 0000000000000000 R09: 0000000000000000 [ 1878.578151][T23018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1878.578163][T23018] R13: 00007fb0dabf6038 R14: 00007fb0dabf5fa0 R15: 00007fffaf135048 [ 1878.578195][T23018] [ 1879.592974][T23035] netlink: 67 bytes leftover after parsing attributes in process `syz.7.5119'. [ 1879.787813][T23043] netlink: 'syz.7.5126': attribute type 1 has an invalid length. [ 1879.787837][T23043] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5126'. [ 1879.844112][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 1879.844132][ T37] audit: type=1326 audit(1791079025.322:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23044 comm="syz.6.5124" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e8ad6e159 code=0x0 [ 1881.608825][ T1238] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1881.768763][ T1238] usb 6-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1881.771838][ T1238] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.771907][ T1238] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1881.771936][ T1238] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1881.777025][ T1238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.777051][ T1238] usb 6-1: Product: syz [ 1881.777065][ T1238] usb 6-1: Manufacturer: syz [ 1881.777078][ T1238] usb 6-1: SerialNumber: syz [ 1881.878108][T23111] FAULT_INJECTION: forcing a failure. [ 1881.878108][T23111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1881.878139][T23111] CPU: 0 UID: 0 PID: 23111 Comm: syz.6.5149 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1881.878156][T23111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1881.878167][T23111] Call Trace: [ 1881.878172][T23111] [ 1881.878189][T23111] dump_stack_lvl+0xe8/0x150 [ 1881.878221][T23111] should_fail_ex+0x46b/0x600 [ 1881.878251][T23111] _copy_to_user+0x31/0xb0 [ 1881.878271][T23111] bpf_vlog_reverse_ubuf+0x2e2/0x3e0 [ 1881.878336][T23111] bpf_vlog_finalize+0x154/0x3f0 [ 1881.878363][T23111] bpf_log_attr_finalize+0x80/0x1e0 [ 1881.878387][T23111] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1881.878414][T23111] ? btf_parse_str_sec+0x244/0x2f0 [ 1881.878443][T23111] btf_new_fd+0x36c/0xc70 [ 1881.878476][T23111] __sys_bpf+0xd2e/0xd90 [ 1881.878510][T23111] ? __pfx___sys_bpf+0x10/0x10 [ 1881.878540][T23111] ? do_futex+0x458/0x4e0 [ 1881.878591][T23111] ? rcu_is_watching+0x16/0xb0 [ 1881.878628][T23111] __x64_sys_bpf+0xba/0xd0 [ 1881.878656][T23111] do_syscall_64+0x166/0x520 [ 1881.878678][T23111] ? trace_irq_disable+0x3b/0x140 [ 1881.878704][T23111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.878725][T23111] ? clear_bhb_loop+0x70/0xc0 [ 1881.878748][T23111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.878767][T23111] RIP: 0033:0x7f8e8ad6e159 [ 1881.878785][T23111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1881.878799][T23111] RSP: 002b:00007f8e88fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1881.878818][T23111] RAX: ffffffffffffffda RBX: 00007f8e8aff5fa0 RCX: 00007f8e8ad6e159 [ 1881.878831][T23111] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1881.878841][T23111] RBP: 00007f8e8ae0506b R08: 0000000000000000 R09: 0000000000000000 [ 1881.878852][T23111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1881.878863][T23111] R13: 00007f8e8aff6038 R14: 00007f8e8aff5fa0 R15: 00007ffdabc8b798 [ 1881.878891][T23111] [ 1882.073156][ T1238] dvbdev: DVB: registering new adapter (DEC3000-s) [ 1882.169913][T23113] netlink: 876 bytes leftover after parsing attributes in process `syz.0.5150'. [ 1882.333334][T23115] gadgetfs: bound to dummy_udc driver [ 1882.645255][T23114] gadgetfs: suspended from state 2 [ 1882.693583][ T1238] usb 6-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 1882.718816][ T5619] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1883.463764][ T1238] usb 6-1: USB disconnect, device number 4 [ 1883.727100][ T37] audit: type=1326 audit(1791079028.960:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1883.727164][ T37] audit: type=1326 audit(1791079028.960:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1883.731427][ T37] audit: type=1326 audit(1791079028.960:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1883.731469][ T37] audit: type=1326 audit(1791079028.960:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1883.731503][ T37] audit: type=1326 audit(1791079028.960:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1883.733383][ T37] audit: type=1326 audit(1791079028.960:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1883.733622][ T37] audit: type=1326 audit(1791079028.960:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1883.733855][ T37] audit: type=1326 audit(1791079028.960:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1883.744587][ T37] audit: type=1326 audit(1791079028.960:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.096436][T23164] FAULT_INJECTION: forcing a failure. [ 1885.096436][T23164] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.096468][T23164] CPU: 0 UID: 0 PID: 23164 Comm: syz.6.5166 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1885.096484][T23164] Tainted: [L]=SOFTLOCKUP [ 1885.096488][T23164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1885.096495][T23164] Call Trace: [ 1885.096500][T23164] [ 1885.096505][T23164] dump_stack_lvl+0xe8/0x150 [ 1885.096526][T23164] should_fail_ex+0x46b/0x600 [ 1885.096545][T23164] should_failslab+0xa8/0x100 [ 1885.096558][T23164] __kmalloc_cache_noprof+0xa1/0x680 [ 1885.096574][T23164] ? keyring_restrict+0x122/0x540 [ 1885.096586][T23164] ? keyring_restrict+0x122/0x540 [ 1885.096602][T23164] keyring_restrict+0x122/0x540 [ 1885.096615][T23164] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1885.096627][T23164] ? __pfx_keyring_restrict+0x10/0x10 [ 1885.096644][T23164] keyctl_restrict_keyring+0x155/0x220 [ 1885.096659][T23164] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 1885.096677][T23164] ? __pfx_vfs_writev+0x10/0x10 [ 1885.096689][T23164] __se_sys_keyctl+0x337/0x9d0 [ 1885.096706][T23164] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1885.096722][T23164] ? __pfx_do_futex+0x10/0x10 [ 1885.096738][T23164] ? __se_sys_futex+0x3a8/0x450 [ 1885.096751][T23164] ? __x64_sys_pwritev+0x28e/0x2c0 [ 1885.096767][T23164] ? __pfx___se_sys_futex+0x10/0x10 [ 1885.096779][T23164] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1885.096797][T23164] ? __x64_sys_keyctl+0x20/0xc0 [ 1885.096812][T23164] do_syscall_64+0x166/0x520 [ 1885.096825][T23164] ? trace_irq_disable+0x3b/0x140 [ 1885.096839][T23164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.096850][T23164] ? clear_bhb_loop+0x70/0xc0 [ 1885.096862][T23164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1885.096874][T23164] RIP: 0033:0x7f8e8ad6e159 [ 1885.096885][T23164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1885.096894][T23164] RSP: 002b:00007f8e88fc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1885.096906][T23164] RAX: ffffffffffffffda RBX: 00007f8e8aff5fa0 RCX: 00007f8e8ad6e159 [ 1885.096914][T23164] RDX: 0000000000000000 RSI: 000000003cd2cce3 RDI: 000000000000001d [ 1885.096921][T23164] RBP: 00007f8e8ae0506b R08: 0000000000000000 R09: 0000000000000000 [ 1885.096927][T23164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1885.096933][T23164] R13: 00007f8e8aff6038 R14: 00007f8e8aff5fa0 R15: 00007ffdabc8b798 [ 1885.096949][T23164] [ 1885.374339][T23165] 9p: Bad value for 'rfdno' [ 1885.403394][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1885.403411][ T37] audit: type=1326 audit(1791079030.532:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.403458][ T37] audit: type=1326 audit(1791079030.532:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.438371][ T37] audit: type=1326 audit(1791079030.550:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.438420][ T37] audit: type=1326 audit(1791079030.550:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.438459][ T37] audit: type=1326 audit(1791079030.550:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.514186][ T37] audit: type=1326 audit(1791079030.625:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.514253][ T37] audit: type=1326 audit(1791079030.625:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.514294][ T37] audit: type=1326 audit(1791079030.625:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.519425][ T37] audit: type=1326 audit(1791079030.625:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1885.523169][ T37] audit: type=1326 audit(1791079030.635:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23148 comm="syz.0.5164" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d250ee159 code=0x7ffc0000 [ 1887.394311][T23197] FAULT_INJECTION: forcing a failure. [ 1887.394311][T23197] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1887.394350][T23197] CPU: 0 UID: 0 PID: 23197 Comm: syz.7.5179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1887.394379][T23197] Tainted: [L]=SOFTLOCKUP [ 1887.394386][T23197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1887.394399][T23197] Call Trace: [ 1887.394407][T23197] [ 1887.394416][T23197] dump_stack_lvl+0xe8/0x150 [ 1887.394460][T23197] should_fail_ex+0x46b/0x600 [ 1887.394495][T23197] get_futex_key+0x1b4/0x1580 [ 1887.394537][T23197] ? __pfx_get_futex_key+0x10/0x10 [ 1887.394567][T23197] ? set_fd_set+0x4a/0xa0 [ 1887.394587][T23197] ? core_sys_select+0x6c9/0xb40 [ 1887.394614][T23197] futex_wake+0x119/0x600 [ 1887.394646][T23197] ? __pfx_futex_wake+0x10/0x10 [ 1887.394679][T23197] ? __asan_memset+0x22/0x50 [ 1887.394707][T23197] ? poll_select_finish+0x525/0x5e0 [ 1887.394735][T23197] do_futex+0x458/0x4e0 [ 1887.394761][T23197] ? __pfx_do_futex+0x10/0x10 [ 1887.394782][T23197] ? put_timespec64+0xd8/0x130 [ 1887.394816][T23197] __se_sys_futex+0x3a8/0x450 [ 1887.394846][T23197] ? __pfx___se_sys_futex+0x10/0x10 [ 1887.394876][T23197] ? __x64_sys_futex+0x21/0xf0 [ 1887.394898][T23197] do_syscall_64+0x166/0x520 [ 1887.394922][T23197] ? trace_irq_disable+0x3b/0x140 [ 1887.394947][T23197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.394968][T23197] ? clear_bhb_loop+0x70/0xc0 [ 1887.395000][T23197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.395021][T23197] RIP: 0033:0x7fb0da96e159 [ 1887.395040][T23197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.395057][T23197] RSP: 002b:00007fb0d8bc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1887.395079][T23197] RAX: ffffffffffffffda RBX: 00007fb0dabf5fa8 RCX: 00007fb0da96e159 [ 1887.395093][T23197] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb0dabf5fac [ 1887.395104][T23197] RBP: 00007fb0dabf5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1887.395117][T23197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1887.395127][T23197] R13: 00007fb0dabf6038 R14: 00007fffaf134f60 R15: 00007fffaf135048 [ 1887.395156][T23197] [ 1887.412691][T23196] loop9: detected capacity change from 0 to 7 [ 1887.599177][T23196] Dev loop9: unable to read RDB block 7 [ 1887.599319][T23196] loop9: unable to read partition table [ 1887.599541][T23196] loop9: partition table beyond EOD, truncated [ 1887.599578][T23196] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1887.868653][T23205] device-mapper: table: 248:0: mirror: Invalid number of mirrors (-EINVAL) [ 1887.868702][T23205] device-mapper: ioctl: error adding target to table [ 1888.149788][T23211] FAULT_INJECTION: forcing a failure. [ 1888.149788][T23211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1888.149815][T23211] CPU: 0 UID: 0 PID: 23211 Comm: syz.6.5186 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1888.149830][T23211] Tainted: [L]=SOFTLOCKUP [ 1888.149834][T23211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1888.149841][T23211] Call Trace: [ 1888.149846][T23211] [ 1888.149852][T23211] dump_stack_lvl+0xe8/0x150 [ 1888.149874][T23211] should_fail_ex+0x46b/0x600 [ 1888.149893][T23211] _copy_from_user+0x2d/0xb0 [ 1888.149911][T23211] __x64_sys_signalfd4+0x117/0x1a0 [ 1888.149962][T23211] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 1888.149985][T23211] do_syscall_64+0x166/0x520 [ 1888.150008][T23211] ? trace_irq_disable+0x3b/0x140 [ 1888.150026][T23211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.150038][T23211] ? clear_bhb_loop+0x70/0xc0 [ 1888.150051][T23211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.150062][T23211] RIP: 0033:0x7f8e8ad6e159 [ 1888.150073][T23211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.150082][T23211] RSP: 002b:00007f8e88fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 1888.150095][T23211] RAX: ffffffffffffffda RBX: 00007f8e8aff5fa0 RCX: 00007f8e8ad6e159 [ 1888.150103][T23211] RDX: 0000000000000008 RSI: 0000200000000000 RDI: ffffffffffffffff [ 1888.150110][T23211] RBP: 00007f8e8ae0506b R08: 0000000000000000 R09: 0000000000000000 [ 1888.150117][T23211] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 1888.150123][T23211] R13: 00007f8e8aff6038 R14: 00007f8e8aff5fa0 R15: 00007ffdabc8b798 [ 1888.150139][T23211] [ 1888.340129][T23216] fuse: fd is not a fuse device [ 1888.502496][T15008] wlan1: Trigger new scan to find an IBSS to join [ 1890.661484][T23243] loop3: detected capacity change from 0 to 7 [ 1890.760368][ T37] kauditd_printk_skb: 106 callbacks suppressed [ 1890.760390][ T37] audit: type=1326 audit(1791079035.527:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23245 comm="syz.6.5200" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1890.985053][T23243] Dev loop3: unable to read RDB block 7 [ 1890.985088][T23243] loop3: unable to read partition table [ 1890.985208][T23243] loop3: partition table beyond EOD, truncated [ 1890.985231][T23243] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1893.078488][ T37] audit: type=1326 audit(1791079037.706:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1893.078813][ T37] audit: type=1326 audit(1791079037.706:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1893.078839][ T37] audit: type=1326 audit(1791079037.706:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1893.079026][ T37] audit: type=1326 audit(1791079037.706:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3d5947e159 code=0x7ffc0000 [ 1893.135176][ T37] audit: type=1326 audit(1791079037.762:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d5943e98e code=0x7ffc0000 [ 1893.136508][ T37] audit: type=1326 audit(1791079037.762:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d5943e98e code=0x7ffc0000 [ 1893.139801][ T37] audit: type=1326 audit(1791079037.762:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d5943e98e code=0x7ffc0000 [ 1893.143774][ T37] audit: type=1326 audit(1791079037.772:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d5943e98e code=0x7ffc0000 [ 1893.145330][ T37] audit: type=1326 audit(1791079037.772:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23277 comm="syz.1.5213" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3d5943e98e code=0x7ffc0000 [ 1893.806043][T20138] wlan1: Trigger new scan to find an IBSS to join [ 1894.095577][T23292] overlayfs: failed to clone upperpath [ 1894.903949][ T1167] wlan1: Creating new IBSS network, BSSID c6:01:4f:77:c4:67 [ 1895.394134][T23337] kernel profiling enabled (shift: 9) [ 1895.549881][ T998] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1895.612970][T23343] block nbd5: NBD_DISCONNECT [ 1895.640408][T23343] block nbd5: Send disconnect failed -32 [ 1895.656751][T23343] block nbd5: Disconnected due to user request. [ 1895.656777][T23343] block nbd5: shutting down sockets [ 1895.721478][ T998] usb 7-1: Using ep0 maxpacket: 32 [ 1895.724751][ T998] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1895.730836][ T998] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1895.730867][ T998] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1895.730885][ T998] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1895.730933][ T998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1895.730953][ T998] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1895.730974][ T998] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1895.731013][ T998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.917998][ T998] usb 7-1: config 0 descriptor?? [ 1896.619473][ T998] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1896.671110][ T998] usb 7-1: USB disconnect, device number 15 [ 1896.773473][ T998] usblp0: removed [ 1897.751471][T23393] FAULT_INJECTION: forcing a failure. [ 1897.751471][T23393] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.751513][T23393] CPU: 0 UID: 0 PID: 23393 Comm: syz.5.5259 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1897.751542][T23393] Tainted: [L]=SOFTLOCKUP [ 1897.751549][T23393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1897.751561][T23393] Call Trace: [ 1897.751569][T23393] [ 1897.751579][T23393] dump_stack_lvl+0xe8/0x150 [ 1897.751622][T23393] should_fail_ex+0x46b/0x600 [ 1897.751658][T23393] should_failslab+0xa8/0x100 [ 1897.751684][T23393] __kvmalloc_node_noprof+0x176/0x890 [ 1897.751722][T23393] ? listxattr+0xb9/0x380 [ 1897.751751][T23393] ? listxattr+0xb9/0x380 [ 1897.751786][T23393] listxattr+0xb9/0x380 [ 1897.751818][T23393] ? __pfx_listxattr+0x10/0x10 [ 1897.751848][T23393] ? __fget_files+0x2a/0x420 [ 1897.751871][T23393] ? __fget_files+0x3a8/0x420 [ 1897.751892][T23393] ? __fget_files+0x2a/0x420 [ 1897.751924][T23393] __x64_sys_flistxattr+0x135/0x1b0 [ 1897.751955][T23393] do_syscall_64+0x166/0x520 [ 1897.751980][T23393] ? trace_irq_disable+0x3b/0x140 [ 1897.752009][T23393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.752030][T23393] ? clear_bhb_loop+0x70/0xc0 [ 1897.752055][T23393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.752074][T23393] RIP: 0033:0x7f80eb62e159 [ 1897.752093][T23393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1897.752111][T23393] RSP: 002b:00007f80e9886028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 1897.752133][T23393] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa0 RCX: 00007f80eb62e159 [ 1897.752157][T23393] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000003 [ 1897.752170][T23393] RBP: 00007f80eb6c506b R08: 0000000000000000 R09: 0000000000000000 [ 1897.752183][T23393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1897.752196][T23393] R13: 00007f80eb8b6038 R14: 00007f80eb8b5fa0 R15: 00007ffc50377728 [ 1897.752230][T23393] [ 1899.314490][T19967] Bluetooth: hci1: link tx timeout [ 1899.314513][T19967] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1899.331455][T19967] Bluetooth: hci1: link tx timeout [ 1899.331475][T19967] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1899.828466][T23455] batman_adv: batadv0: Adding interface: syzkaller0 [ 1899.828487][T23455] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.828531][T23455] batman_adv: batadv0: Interface activated: syzkaller0 [ 1900.148719][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 1901.166743][T23455] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1901.415336][T23455] batman_adv: batadv0: Removing interface: syzkaller0 [ 1901.502160][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1901.544885][ T998] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1901.706094][ T998] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1901.707664][ T998] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1901.707692][ T998] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1901.707731][ T998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.190135][ T60] Bluetooth: hci2: command 0x1003 tx timeout [ 1902.196640][T19967] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1903.328633][ T998] usb 6-1: usb_control_msg returned -32 [ 1903.328821][ T998] usbtmc 6-1:16.0: can't read capabilities [ 1903.909615][T19967] Bluetooth: hci1: command 0x0406 tx timeout [ 1905.104294][ T998] usb 6-1: USB disconnect, device number 5 [ 1905.629842][T18718] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1905.951591][T18718] usb 7-1: Using ep0 maxpacket: 32 [ 1905.955683][T18718] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1905.957075][T18718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.055711][T18718] usb 7-1: config 0 descriptor?? [ 1906.111674][T18718] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1906.413637][T23508] geneve5: entered promiscuous mode [ 1906.459397][T15017] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36426 - 0 [ 1906.459890][T20138] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36426 - 0 [ 1906.459933][T20138] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36426 - 0 [ 1906.459968][T20138] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36426 - 0 [ 1906.644995][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1907.829996][T18718] gspca_sunplus: reg_w_riv err -110 [ 1907.830116][T18718] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1907.955537][T18718] usb 7-1: USB disconnect, device number 16 [ 1908.012727][ T1238] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1908.249563][ T1238] usb 6-1: Using ep0 maxpacket: 32 [ 1908.250510][ T1238] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1908.254692][ T1238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.254774][ T1238] usb 6-1: Product: syz [ 1908.254795][ T1238] usb 6-1: Manufacturer: syz [ 1908.254809][ T1238] usb 6-1: SerialNumber: syz [ 1908.265863][ T1238] usb 6-1: config 0 descriptor?? [ 1908.778571][ T1238] airspy 6-1:0.0: Board ID: 00 [ 1908.778669][ T1238] airspy 6-1:0.0: Firmware version: [ 1909.879884][ T1238] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 1910.037019][ T1238] airspy 6-1:0.0: Registered as swradio24 [ 1910.037034][ T1238] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1910.071722][ T1238] usb 6-1: USB disconnect, device number 6 [ 1910.387703][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5331'. [ 1910.482288][ T5732] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1910.653450][ T5732] usb 7-1: Using ep0 maxpacket: 8 [ 1910.654630][ T5732] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1910.656145][ T5732] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1910.656169][ T5732] usb 7-1: config 0 has no interface number 0 [ 1910.656212][ T5732] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1910.656235][ T5732] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1910.656259][ T5732] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1910.656284][ T5732] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1910.656325][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.750827][ T5732] usb 7-1: config 0 descriptor?? [ 1910.779059][ T5732] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1910.951793][T23587] FAULT_INJECTION: forcing a failure. [ 1910.951793][T23587] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.951833][T23587] CPU: 1 UID: 0 PID: 23587 Comm: syz.7.5337 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1910.951863][T23587] Tainted: [L]=SOFTLOCKUP [ 1910.951870][T23587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1910.951882][T23587] Call Trace: [ 1910.951890][T23587] [ 1910.951900][T23587] dump_stack_lvl+0xe8/0x150 [ 1910.951938][T23587] should_fail_ex+0x46b/0x600 [ 1910.951973][T23587] should_failslab+0xa8/0x100 [ 1910.951997][T23587] __kmalloc_cache_noprof+0xa1/0x680 [ 1910.952026][T23587] ? assoc_array_insert+0x417/0x2f60 [ 1910.952056][T23587] ? assoc_array_insert+0x417/0x2f60 [ 1910.952094][T23587] assoc_array_insert+0x417/0x2f60 [ 1910.952137][T23587] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1910.952174][T23587] __key_link_begin+0xd6/0x1f0 [ 1910.952203][T23587] key_link+0xdd/0x360 [ 1910.952232][T23587] call_sbin_request_key+0x41a/0xbf0 [ 1910.952253][T23587] ? request_key_auth_free_preparse+0x9/0x10 [ 1910.952282][T23587] ? __pfx_call_sbin_request_key+0x10/0x10 [ 1910.952339][T23587] ? __pfx_request_key_auth_new+0x10/0x10 [ 1910.952386][T23587] request_key_and_link+0xf13/0x15a0 [ 1910.952411][T23587] ? lock_acquire+0x115/0x350 [ 1910.952438][T23587] ? __pfx_request_key_and_link+0x10/0x10 [ 1910.952468][T23587] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 1910.952488][T23587] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1910.952519][T23587] ? _copy_from_user+0x94/0xb0 [ 1910.952556][T23587] __se_sys_request_key+0x29a/0x350 [ 1910.952588][T23587] ? __pfx___se_sys_request_key+0x10/0x10 [ 1910.952631][T23587] do_syscall_64+0x166/0x520 [ 1910.952654][T23587] ? trace_irq_disable+0x3b/0x140 [ 1910.952679][T23587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.952700][T23587] ? clear_bhb_loop+0x70/0xc0 [ 1910.952725][T23587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.952744][T23587] RIP: 0033:0x7fb0da96e159 [ 1910.952764][T23587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.952782][T23587] RSP: 002b:00007fb0d8bc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1910.952804][T23587] RAX: ffffffffffffffda RBX: 00007fb0dabf5fa0 RCX: 00007fb0da96e159 [ 1910.952819][T23587] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1910.952834][T23587] RBP: 00007fb0daa0506b R08: 0000000000000000 R09: 0000000000000000 [ 1910.952848][T23587] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1910.952862][T23587] R13: 00007fb0dabf6038 R14: 00007fb0dabf5fa0 R15: 00007fffaf135048 [ 1910.952895][T23587] [ 1912.260655][T13949] usb 7-1: USB disconnect, device number 17 [ 1912.311748][T13949] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1912.893471][T23620] FAULT_INJECTION: forcing a failure. [ 1912.893471][T23620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1912.893510][T23620] CPU: 0 UID: 0 PID: 23620 Comm: syz.5.5350 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1912.893539][T23620] Tainted: [L]=SOFTLOCKUP [ 1912.893546][T23620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1912.893558][T23620] Call Trace: [ 1912.893566][T23620] [ 1912.893574][T23620] dump_stack_lvl+0xe8/0x150 [ 1912.893611][T23620] should_fail_ex+0x46b/0x600 [ 1912.893647][T23620] copy_folio_from_iter_atomic+0x45a/0x1a30 [ 1912.893702][T23620] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1912.893735][T23620] ? fault_in_readable+0x8e/0x130 [ 1912.893768][T23620] ? shmem_write_begin+0x1ce/0x320 [ 1912.893799][T23620] generic_perform_write+0x5a8/0x8b0 [ 1912.893839][T23620] ? __pfx_generic_perform_write+0x10/0x10 [ 1912.893864][T23620] ? generic_write_checks_count+0x426/0x530 [ 1912.893902][T23620] ? file_update_time_flags+0x2db/0x450 [ 1912.893935][T23620] shmem_file_write_iter+0xfb/0x120 [ 1912.893959][T23620] vfs_write+0x61e/0xbb0 [ 1912.893994][T23620] ? __pfx_vfs_write+0x10/0x10 [ 1912.894021][T23620] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1912.894049][T23620] ? mutex_lock_nested+0x152/0x1d0 [ 1912.894077][T23620] ? fdget_pos+0x252/0x320 [ 1912.894110][T23620] ksys_write+0x156/0x270 [ 1912.894138][T23620] ? __pfx_ksys_write+0x10/0x10 [ 1912.894176][T23620] do_syscall_64+0x166/0x520 [ 1912.894208][T23620] ? trace_irq_disable+0x3b/0x140 [ 1912.894235][T23620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.894256][T23620] ? clear_bhb_loop+0x70/0xc0 [ 1912.894281][T23620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.894301][T23620] RIP: 0033:0x7f80eb62e159 [ 1912.894321][T23620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.894338][T23620] RSP: 002b:00007f80e9886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1912.894360][T23620] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa0 RCX: 00007f80eb62e159 [ 1912.894376][T23620] RDX: 0000000000032600 RSI: 0000200000000100 RDI: 0000000000000004 [ 1912.894389][T23620] RBP: 00007f80eb6c506b R08: 0000000000000000 R09: 0000000000000000 [ 1912.894402][T23620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1912.894414][T23620] R13: 00007f80eb8b6038 R14: 00007f80eb8b5fa0 R15: 00007ffc50377728 [ 1912.894447][T23620] [ 1914.307368][T23642] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5357'. [ 1914.360287][T23643] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5357'. [ 1914.436538][T23642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.436931][T23642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.067663][T13949] kernel write not supported for file /tomoyo/domain_policy (pid: 13949 comm: kworker/1:0) [ 1918.933035][T23710] FAULT_INJECTION: forcing a failure. [ 1918.933035][T23710] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.933074][T23710] CPU: 1 UID: 0 PID: 23710 Comm: syz.7.5381 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1918.933106][T23710] Tainted: [L]=SOFTLOCKUP [ 1918.933112][T23710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1918.933124][T23710] Call Trace: [ 1918.933132][T23710] [ 1918.933141][T23710] dump_stack_lvl+0xe8/0x150 [ 1918.933179][T23710] should_fail_ex+0x46b/0x600 [ 1918.933211][T23710] ? alloc_inode+0xb8/0x1b0 [ 1918.933233][T23710] should_failslab+0xa8/0x100 [ 1918.933256][T23710] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1918.933288][T23710] ? alloc_inode+0xb8/0x1b0 [ 1918.933312][T23710] alloc_inode+0xb8/0x1b0 [ 1918.933333][T23710] new_inode+0x1f/0x170 [ 1918.933352][T23710] ? configfs_new_inode+0x1f/0x410 [ 1918.933392][T23710] configfs_new_inode+0x27/0x410 [ 1918.933426][T23710] configfs_create+0xb5/0x270 [ 1918.933457][T23710] configfs_attach_item+0x25f/0xd60 [ 1918.933485][T23710] configfs_attach_group+0x2a/0x370 [ 1918.933507][T23710] ? rt_spin_unlock+0x165/0x200 [ 1918.933540][T23710] configfs_mkdir+0x6f0/0x9e0 [ 1918.933581][T23710] ? __pfx_configfs_mkdir+0x10/0x10 [ 1918.933610][T23710] ? generic_permission+0x2bf/0x670 [ 1918.933644][T23710] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 1918.933668][T23710] vfs_mkdir+0x408/0x620 [ 1918.933704][T23710] filename_mkdirat+0x289/0x520 [ 1918.933739][T23710] ? __pfx_filename_mkdirat+0x10/0x10 [ 1918.933771][T23710] ? do_getname+0x151/0x250 [ 1918.933794][T23710] __se_sys_mkdirat+0x35/0x150 [ 1918.933827][T23710] do_syscall_64+0x166/0x520 [ 1918.933849][T23710] ? trace_irq_disable+0x3b/0x140 [ 1918.933876][T23710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.933895][T23710] ? clear_bhb_loop+0x70/0xc0 [ 1918.933920][T23710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.933940][T23710] RIP: 0033:0x7fb0da96e159 [ 1918.933958][T23710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.933976][T23710] RSP: 002b:00007fb0d8bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1918.933998][T23710] RAX: ffffffffffffffda RBX: 00007fb0dabf5fa0 RCX: 00007fb0da96e159 [ 1918.934013][T23710] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1918.934027][T23710] RBP: 00007fb0daa0506b R08: 0000000000000000 R09: 0000000000000000 [ 1918.934040][T23710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1918.934052][T23710] R13: 00007fb0dabf6038 R14: 00007fb0dabf5fa0 R15: 00007fffaf135048 [ 1918.934083][T23710] [ 1920.692964][T23727] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5386'. [ 1924.926916][ T37] kauditd_printk_skb: 78 callbacks suppressed [ 1924.926935][ T37] audit: type=1326 audit(1791079067.499:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.5409" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d250ee159 code=0x0 [ 1925.195768][T23820] FAULT_INJECTION: forcing a failure. [ 1925.195768][T23820] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.195808][T23820] CPU: 0 UID: 0 PID: 23820 Comm: syz.7.5413 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1925.195838][T23820] Tainted: [L]=SOFTLOCKUP [ 1925.195845][T23820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1925.195858][T23820] Call Trace: [ 1925.195865][T23820] [ 1925.195874][T23820] dump_stack_lvl+0xe8/0x150 [ 1925.195912][T23820] should_fail_ex+0x46b/0x600 [ 1925.195947][T23820] should_failslab+0xa8/0x100 [ 1925.195970][T23820] __kmalloc_cache_noprof+0xa1/0x680 [ 1925.196002][T23820] ? __io_uring_add_tctx_node+0x186/0x630 [ 1925.196033][T23820] ? __io_uring_add_tctx_node+0x186/0x630 [ 1925.196072][T23820] __io_uring_add_tctx_node+0x186/0x630 [ 1925.196110][T23820] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1925.196144][T23820] ? __anon_inode_getfile+0x16c/0x210 [ 1925.196170][T23820] io_uring_create+0x596/0x990 [ 1925.196228][T23820] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1925.196262][T23820] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1925.196301][T23820] ? rcu_is_watching+0x16/0xb0 [ 1925.196344][T23820] do_syscall_64+0x166/0x520 [ 1925.196371][T23820] ? trace_irq_disable+0x3b/0x140 [ 1925.196399][T23820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.196420][T23820] ? clear_bhb_loop+0x70/0xc0 [ 1925.196446][T23820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.196467][T23820] RIP: 0033:0x7fb0da96e159 [ 1925.196487][T23820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1925.196505][T23820] RSP: 002b:00007fb0d8bc5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1925.196528][T23820] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007fb0da96e159 [ 1925.196543][T23820] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000f03 [ 1925.196557][T23820] RBP: 00007fb0daa0506b R08: 0000000000000000 R09: 0000000000000000 [ 1925.196570][T23820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1925.196582][T23820] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffaf135048 [ 1925.196612][T23820] [ 1925.549940][T23824] FAULT_INJECTION: forcing a failure. [ 1925.549940][T23824] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.549983][T23824] CPU: 0 UID: 0 PID: 23824 Comm: syz.7.5414 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1925.550015][T23824] Tainted: [L]=SOFTLOCKUP [ 1925.550023][T23824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1925.550034][T23824] Call Trace: [ 1925.550043][T23824] [ 1925.550052][T23824] dump_stack_lvl+0xe8/0x150 [ 1925.550089][T23824] should_fail_ex+0x46b/0x600 [ 1925.550126][T23824] should_failslab+0xa8/0x100 [ 1925.550151][T23824] __kmalloc_noprof+0xfb/0x790 [ 1925.550182][T23824] ? security_key_alloc+0x51/0x390 [ 1925.550213][T23824] ? security_key_alloc+0x51/0x390 [ 1925.550250][T23824] security_key_alloc+0x51/0x390 [ 1925.550291][T23824] key_alloc+0x7fd/0xfe0 [ 1925.550323][T23824] request_key_auth_new+0x7c6/0xa00 [ 1925.550356][T23824] ? __pfx_request_key_auth_new+0x10/0x10 [ 1925.550391][T23824] request_key_and_link+0xe84/0x15a0 [ 1925.550416][T23824] ? lock_acquire+0x115/0x350 [ 1925.550443][T23824] ? __pfx_request_key_and_link+0x10/0x10 [ 1925.550472][T23824] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 1925.550495][T23824] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1925.550524][T23824] ? _copy_from_user+0x94/0xb0 [ 1925.550557][T23824] __se_sys_request_key+0x29a/0x350 [ 1925.550588][T23824] ? __pfx___se_sys_request_key+0x10/0x10 [ 1925.550627][T23824] do_syscall_64+0x166/0x520 [ 1925.550651][T23824] ? trace_irq_disable+0x3b/0x140 [ 1925.550679][T23824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.550699][T23824] ? clear_bhb_loop+0x70/0xc0 [ 1925.550723][T23824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.550742][T23824] RIP: 0033:0x7fb0da96e159 [ 1925.550760][T23824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1925.550777][T23824] RSP: 002b:00007fb0d8bc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1925.550800][T23824] RAX: ffffffffffffffda RBX: 00007fb0dabf5fa0 RCX: 00007fb0da96e159 [ 1925.550814][T23824] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1925.550829][T23824] RBP: 00007fb0daa0506b R08: 0000000000000000 R09: 0000000000000000 [ 1925.550840][T23824] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1925.550852][T23824] R13: 00007fb0dabf6038 R14: 00007fb0dabf5fa0 R15: 00007fffaf135048 [ 1925.550885][T23824] [ 1926.165021][T23835] sg_read: process 604 (syz.6.5418) changed security contexts after opening file descriptor, this is not allowed. [ 1927.086673][T15008] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1927.747666][ T998] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1927.783484][ T37] audit: type=1326 audit(1791079070.165:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23863 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1927.785457][ T37] audit: type=1326 audit(1791079070.165:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23863 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1927.789733][ T37] audit: type=1326 audit(1791079070.165:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23863 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1927.789781][ T37] audit: type=1326 audit(1791079070.165:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23863 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1927.789819][ T37] audit: type=1326 audit(1791079070.165:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23863 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1927.795168][ T37] audit: type=1326 audit(1791079070.174:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23863 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1927.814693][ T37] audit: type=1326 audit(1791079070.202:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23865 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e8ad2e98e code=0x7ffc0000 [ 1927.814742][ T37] audit: type=1326 audit(1791079070.202:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23863 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1927.814981][ T37] audit: type=1326 audit(1791079070.202:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23863 comm="syz.6.5429" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1928.903823][ T998] usb 6-1: Using ep0 maxpacket: 8 [ 1929.151165][ T998] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1929.160920][ T998] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1929.160980][ T998] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1929.161003][ T998] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1929.161027][ T998] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1929.161049][ T998] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1929.161089][ T998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.628165][ T998] usb 6-1: usb_control_msg returned -32 [ 1929.628211][ T998] usbtmc 6-1:16.0: can't read capabilities [ 1929.901907][T23881] loop5: detected capacity change from 0 to 7 [ 1930.320356][T23881] Dev loop5: unable to read RDB block 7 [ 1930.320395][T23881] loop5: AHDI p1 p2 p3 [ 1930.320417][T23881] loop5: partition table partially beyond EOD, truncated [ 1930.349495][T23881] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1930.349526][T23881] loop5: p3 start 335544320 is beyond EOD, truncated [ 1931.995684][T20072] usb 6-1: USB disconnect, device number 7 [ 1933.456424][T20072] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1933.628321][T20072] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1933.630335][T20072] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.630386][T20072] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1933.630408][T20072] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1933.630429][T20072] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1933.630458][T20072] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.112262][ T5795] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1934.409848][ T5795] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1934.409980][ T5795] usb 7-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 1934.411158][ T5795] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1934.411191][ T5795] usb 7-1: can't read configurations, error -71 [ 1935.095944][T20072] [drm] Initialized gud 1.0.0 for 8-1:1.0 on minor 1 [ 1935.227019][T23951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1935.821809][T20072] gud 8-1:1.0: USB-1: Invalid EDID size (ret=79) [ 1936.138969][T20072] gud 8-1:1.0: [drm] Cannot find any crtc or sizes [ 1936.172077][T20072] usb 8-1: USB disconnect, device number 14 [ 1937.035396][T23985] FAULT_INJECTION: forcing a failure. [ 1937.035396][T23985] name failslab, interval 1, probability 0, space 0, times 0 [ 1937.035435][T23985] CPU: 1 UID: 0 PID: 23985 Comm: syz.5.5466 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1937.035465][T23985] Tainted: [L]=SOFTLOCKUP [ 1937.035472][T23985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1937.035484][T23985] Call Trace: [ 1937.035491][T23985] [ 1937.035500][T23985] dump_stack_lvl+0xe8/0x150 [ 1937.035536][T23985] should_fail_ex+0x46b/0x600 [ 1937.035570][T23985] should_failslab+0xa8/0x100 [ 1937.035594][T23985] __kmalloc_cache_noprof+0xa1/0x680 [ 1937.035623][T23985] ? fuse_get_tree+0x83/0x3b0 [ 1937.035679][T23985] ? fuse_get_tree+0x83/0x3b0 [ 1937.035709][T23985] fuse_get_tree+0x83/0x3b0 [ 1937.035734][T23985] vfs_get_tree+0x92/0x2a0 [ 1937.035765][T23985] do_new_mount+0x319/0xdc0 [ 1937.035793][T23985] ? cap_capable+0x123/0x460 [ 1937.035825][T23985] ? __pfx_do_new_mount+0x10/0x10 [ 1937.035849][T23985] ? ns_capable+0x89/0xe0 [ 1937.035880][T23985] ? path_mount+0x647/0x1050 [ 1937.035905][T23985] ? user_path_at+0xd4/0x160 [ 1937.035932][T23985] __se_sys_mount+0x31d/0x420 [ 1937.035961][T23985] ? __pfx___se_sys_mount+0x10/0x10 [ 1937.035991][T23985] ? __x64_sys_mount+0x20/0xc0 [ 1937.036015][T23985] do_syscall_64+0x166/0x520 [ 1937.036037][T23985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.036057][T23985] ? clear_bhb_loop+0x70/0xc0 [ 1937.036081][T23985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.036101][T23985] RIP: 0033:0x7f80eb62e159 [ 1937.036120][T23985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1937.036137][T23985] RSP: 002b:00007f80e9886028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1937.036169][T23985] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa0 RCX: 00007f80eb62e159 [ 1937.036184][T23985] RDX: 0000200000002100 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1937.036197][T23985] RBP: 00007f80eb6c506b R08: 00002000000002c0 R09: 0000000000000000 [ 1937.036211][T23985] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1937.036223][T23985] R13: 00007f80eb8b6038 R14: 00007f80eb8b5fa0 R15: 00007ffc50377728 [ 1937.036255][T23985] [ 1937.770501][T20072] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1937.978492][T20072] usb 8-1: Using ep0 maxpacket: 8 [ 1937.980871][T20072] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1937.987881][T20072] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1937.987908][T20072] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1938.077500][T20072] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.077528][T20072] usb 8-1: Product: syz [ 1938.077542][T20072] usb 8-1: Manufacturer: syz [ 1938.077556][T20072] usb 8-1: SerialNumber: syz [ 1939.952370][T24013] loop2: detected capacity change from 0 to 7 [ 1940.072381][T24019] netlink: 'syz.7.5476': attribute type 4 has an invalid length. [ 1940.106491][T24019] netlink: 'syz.7.5476': attribute type 4 has an invalid length. [ 1940.236942][T24013] Dev loop2: unable to read RDB block 7 [ 1940.236998][T24013] loop2: unable to read partition table [ 1940.237203][T24013] loop2: partition table beyond EOD, truncated [ 1940.237222][T24013] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1940.740952][T24022] FAULT_INJECTION: forcing a failure. [ 1940.740952][T24022] name failslab, interval 1, probability 0, space 0, times 0 [ 1940.740990][T24022] CPU: 1 UID: 0 PID: 24022 Comm: syz.7.5477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1940.741019][T24022] Tainted: [L]=SOFTLOCKUP [ 1940.741026][T24022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1940.741038][T24022] Call Trace: [ 1940.741046][T24022] [ 1940.741055][T24022] dump_stack_lvl+0xe8/0x150 [ 1940.741091][T24022] should_fail_ex+0x46b/0x600 [ 1940.741128][T24022] should_failslab+0xa8/0x100 [ 1940.741149][T24022] ? security_inode_alloc+0x39/0x310 [ 1940.741172][T24022] kmem_cache_alloc_noprof+0x9e/0x690 [ 1940.741202][T24022] ? security_inode_alloc+0x39/0x310 [ 1940.741238][T24022] security_inode_alloc+0x39/0x310 [ 1940.741263][T24022] inode_init_always_gfp+0x983/0xd40 [ 1940.741294][T24022] alloc_inode+0x82/0x1b0 [ 1940.741318][T24022] path_from_stashed+0x205/0x580 [ 1940.741346][T24022] ? userns_get+0x1f7/0x250 [ 1940.741380][T24022] proc_ns_get_link+0x16b/0x2a0 [ 1940.741407][T24022] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1940.741438][T24022] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 1940.741461][T24022] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1940.741488][T24022] pick_link+0x72f/0xfe0 [ 1940.741519][T24022] step_into_slowpath+0x58a/0x820 [ 1940.741546][T24022] ? __pfx_step_into_slowpath+0x10/0x10 [ 1940.741579][T24022] path_openat+0x993/0x1d60 [ 1940.741627][T24022] do_file_open+0x23e/0x4a0 [ 1940.741660][T24022] ? __pfx_do_file_open+0x10/0x10 [ 1940.741709][T24022] ? alloc_fd+0x654/0x6d0 [ 1940.741740][T24022] do_sys_openat2+0x115/0x200 [ 1940.741761][T24022] ? __se_sys_futex+0x3a8/0x450 [ 1940.741783][T24022] ? __pfx_do_sys_openat2+0x10/0x10 [ 1940.741810][T24022] ? rcu_is_watching+0x16/0xb0 [ 1940.741846][T24022] __x64_sys_openat+0x138/0x170 [ 1940.741872][T24022] do_syscall_64+0x166/0x520 [ 1940.741894][T24022] ? trace_irq_disable+0x3b/0x140 [ 1940.741920][T24022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.741941][T24022] ? clear_bhb_loop+0x70/0xc0 [ 1940.741966][T24022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.741988][T24022] RIP: 0033:0x7fb0da92e98e [ 1940.742007][T24022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1940.742024][T24022] RSP: 002b:00007fb0d8bc5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1940.742046][T24022] RAX: ffffffffffffffda RBX: 00007fb0d8bc66c0 RCX: 00007fb0da92e98e [ 1940.742061][T24022] RDX: 0000000000000002 RSI: 00007fb0d8bc5f90 RDI: ffffffffffffff9c [ 1940.742076][T24022] RBP: 00007fb0daa0506b R08: 0000000000000000 R09: 0000000000000000 [ 1940.742089][T24022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.742102][T24022] R13: 00007fb0dabf6038 R14: 00007fb0dabf5fa0 R15: 00007fffaf135048 [ 1940.742137][T24022] [ 1943.201456][T20072] usb 8-1: USB disconnect, device number 15 [ 1943.387166][T24052] bond2: entered allmulticast mode [ 1945.094210][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1945.094230][ T37] audit: type=1326 audit(1791079086.356:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.094277][ T37] audit: type=1326 audit(1791079086.356:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.097897][ T37] audit: type=1326 audit(1791079086.356:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.097946][ T37] audit: type=1326 audit(1791079086.356:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.097987][ T37] audit: type=1326 audit(1791079086.356:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.098841][ T37] audit: type=1326 audit(1791079086.356:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.098890][ T37] audit: type=1326 audit(1791079086.366:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.098930][ T37] audit: type=1326 audit(1791079086.366:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.100573][ T37] audit: type=1326 audit(1791079086.366:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1945.397455][ T37] audit: type=1326 audit(1791079086.637:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24069 comm="syz.7.5497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0da96e159 code=0x7ffc0000 [ 1946.531735][ T998] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1946.692885][ T998] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1946.694635][ T998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1946.694657][ T998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1946.696969][ T998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1946.696983][ T998] usb 7-1: Product: syz [ 1946.696991][ T998] usb 7-1: Manufacturer: syz [ 1946.743798][ T998] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1946.902086][T24090] sch_tbf: burst 21990 is lower than device lo mtu (32783) ! [ 1947.350718][T24095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1947.435374][ T998] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1947.664980][ T998] usb 7-1: USB disconnect, device number 20 [ 1947.847930][ T998] mos7840 7-1:1.0: device disconnected [ 1950.112368][T20072] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1950.274640][T20072] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1950.276086][T20072] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1950.276114][T20072] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1950.281157][T20072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.281172][T20072] usb 6-1: Product: syz [ 1950.281180][T20072] usb 6-1: Manufacturer: syz [ 1950.281188][T20072] usb 6-1: SerialNumber: syz [ 1950.360375][T20072] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1950.571216][T20072] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1950.571216][T20072] Please send a copy of this message to and [ 1951.170656][ T37] kauditd_printk_skb: 78 callbacks suppressed [ 1951.170675][ T37] audit: type=1800 audit(1791079092.034:2057): pid=24165 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.5530" name="file2" dev="tmpfs" ino=1243 res=0 errno=0 [ 1951.345660][T24159] FAULT_INJECTION: forcing a failure. [ 1951.345660][T24159] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.345702][T24159] CPU: 0 UID: 0 PID: 24159 Comm: syz.6.5530 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1951.345732][T24159] Tainted: [L]=SOFTLOCKUP [ 1951.345739][T24159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1951.345752][T24159] Call Trace: [ 1951.345761][T24159] [ 1951.345770][T24159] dump_stack_lvl+0xe8/0x150 [ 1951.345808][T24159] should_fail_ex+0x46b/0x600 [ 1951.345843][T24159] should_failslab+0xa8/0x100 [ 1951.345865][T24159] ? ptlock_alloc+0x20/0x70 [ 1951.345906][T24159] kmem_cache_alloc_noprof+0x9e/0x690 [ 1951.345936][T24159] ? ptlock_alloc+0x20/0x70 [ 1951.345970][T24159] ptlock_alloc+0x20/0x70 [ 1951.345998][T24159] pte_alloc_one+0x7e/0x380 [ 1951.346027][T24159] do_pte_missing+0x128d/0x28f0 [ 1951.346063][T24159] ? mt_find+0x186/0x630 [ 1951.346095][T24159] handle_mm_fault+0xf64/0x28c0 [ 1951.346127][T24159] ? handle_mm_fault+0xeb/0x28c0 [ 1951.346164][T24159] ? __pfx_handle_mm_fault+0x10/0x10 [ 1951.346204][T24159] ? __lock_acquire+0x747/0x2de0 [ 1951.346236][T24159] ? lock_mm_and_find_vma+0xa7/0x340 [ 1951.346270][T24159] do_user_addr_fault+0x746/0x1340 [ 1951.346307][T24159] exc_page_fault+0x6a/0xc0 [ 1951.346331][T24159] asm_exc_page_fault+0x26/0x30 [ 1951.346351][T24159] RIP: 0010:__get_user_8+0x14/0x40 [ 1951.346471][T24159] Code: ca e9 d0 2d 05 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1951.346489][T24159] RSP: 0018:ffffc90004627dd8 EFLAGS: 00050283 [ 1951.346508][T24159] RAX: 00002000000011c8 RBX: 0000000000000001 RCX: 0000000000000046 [ 1951.346523][T24159] RDX: 00007ffffffff000 RSI: ffffffff8dae0f54 RDI: ffffffff8bcc4c80 [ 1951.346539][T24159] RBP: ffffc90004627ee0 R08: ffffffff821ac88f R09: 0000000000000000 [ 1951.346553][T24159] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000001 [ 1951.346567][T24159] R13: 00000000ffffffff R14: 0000000000000001 R15: 0000000000000000 [ 1951.346587][T24159] ? __might_fault+0xaf/0x130 [ 1951.346625][T24159] __se_sys_io_submit+0x16a/0x340 [ 1951.346655][T24159] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1951.346701][T24159] do_syscall_64+0x166/0x520 [ 1951.346723][T24159] ? trace_irq_disable+0x3b/0x140 [ 1951.346749][T24159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.346769][T24159] ? clear_bhb_loop+0x70/0xc0 [ 1951.346793][T24159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.346812][T24159] RIP: 0033:0x7f8e8ad6e159 [ 1951.346830][T24159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.346847][T24159] RSP: 002b:00007f8e88fc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1951.346868][T24159] RAX: ffffffffffffffda RBX: 00007f8e8aff5fa0 RCX: 00007f8e8ad6e159 [ 1951.346882][T24159] RDX: 00002000000011c0 RSI: 0000000000000002 RDI: 00007f8e8bb34000 [ 1951.346904][T24159] RBP: 00007f8e8ae0506b R08: 0000000000000000 R09: 0000000000000000 [ 1951.346917][T24159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1951.346929][T24159] R13: 00007f8e8aff6038 R14: 00007f8e8aff5fa0 R15: 00007ffdabc8b798 [ 1951.346963][T24159] [ 1951.544398][T20072] scsi host1: usb-storage 6-1:1.0 [ 1951.736038][T20072] usb 6-1: USB disconnect, device number 8 [ 1952.430871][T24181] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5537'. [ 1952.480682][T24181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.481933][T24181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.502270][ T37] audit: type=1326 audit(1791079093.288:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1952.502535][ T37] audit: type=1326 audit(1791079093.288:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1952.509281][ T37] audit: type=1326 audit(1791079093.297:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1952.509326][ T37] audit: type=1326 audit(1791079093.297:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1952.509366][ T37] audit: type=1326 audit(1791079093.297:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1952.510948][ T37] audit: type=1326 audit(1791079093.297:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1952.511196][ T37] audit: type=1326 audit(1791079093.297:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1952.511942][ T37] audit: type=1326 audit(1791079093.297:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1952.513738][ T37] audit: type=1326 audit(1791079093.297:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24195 comm="syz.6.5542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e8ad6e159 code=0x7ffc0000 [ 1953.132864][T24209] FAULT_INJECTION: forcing a failure. [ 1953.132864][T24209] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1953.132901][T24209] CPU: 1 UID: 0 PID: 24209 Comm: syz.5.5547 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1953.132928][T24209] Tainted: [L]=SOFTLOCKUP [ 1953.132935][T24209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1953.132947][T24209] Call Trace: [ 1953.132954][T24209] [ 1953.132964][T24209] dump_stack_lvl+0xe8/0x150 [ 1953.133001][T24209] should_fail_ex+0x46b/0x600 [ 1953.133045][T24209] get_futex_key+0x1b4/0x1580 [ 1953.133074][T24209] ? __lock_acquire+0x747/0x2de0 [ 1953.133106][T24209] ? kasan_save_track+0x3e/0x80 [ 1953.133133][T24209] ? __kasan_slab_free+0x5c/0x80 [ 1953.133159][T24209] ? kmem_cache_free+0x187/0x6d0 [ 1953.133187][T24209] ? __pfx_get_futex_key+0x10/0x10 [ 1953.133225][T24209] futex_wake+0x119/0x600 [ 1953.133254][T24209] ? __pfx_futex_wake+0x10/0x10 [ 1953.133294][T24209] do_futex+0x458/0x4e0 [ 1953.133319][T24209] ? __pfx_do_futex+0x10/0x10 [ 1953.133335][T24209] ? kmem_cache_free+0x187/0x6d0 [ 1953.133362][T24209] ? do_sys_openat2+0x14e/0x200 [ 1953.133388][T24209] __se_sys_futex+0x3a8/0x450 [ 1953.133417][T24209] ? __pfx___se_sys_futex+0x10/0x10 [ 1953.133437][T24209] ? rcu_is_watching+0x16/0xb0 [ 1953.133473][T24209] ? __x64_sys_futex+0x21/0xf0 [ 1953.133497][T24209] do_syscall_64+0x166/0x520 [ 1953.133520][T24209] ? trace_irq_disable+0x3b/0x140 [ 1953.133546][T24209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.133568][T24209] ? clear_bhb_loop+0x70/0xc0 [ 1953.133594][T24209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.133613][T24209] RIP: 0033:0x7f80eb62e159 [ 1953.133632][T24209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.133647][T24209] RSP: 002b:00007f80e98860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1953.133668][T24209] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa8 RCX: 00007f80eb62e159 [ 1953.133682][T24209] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80eb8b5fac [ 1953.133695][T24209] RBP: 00007f80eb8b5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1953.133708][T24209] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1953.133719][T24209] R13: 00007f80eb8b6038 R14: 00007ffc50377640 R15: 00007ffc50377728 [ 1953.133746][T24209] [ 1959.183715][T24255] netlink: 'syz.0.5561': attribute type 9 has an invalid length. [ 1959.183976][T24255] netlink: 'syz.0.5561': attribute type 6 has an invalid length. [ 1961.637033][T20138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1961.826713][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 1961.826732][ T37] audit: type=1400 audit(1791079102.006:2103): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1961.972696][ T37] audit: type=1400 audit(1791079102.146:2104): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1961.973248][ T37] audit: type=1400 audit(1791079102.146:2105): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1961.973619][ T37] audit: type=1400 audit(1791079102.146:2106): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1962.053908][ T37] audit: type=1400 audit(1791079102.230:2107): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1962.054293][ T37] audit: type=1400 audit(1791079102.230:2108): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1962.054633][ T37] audit: type=1400 audit(1791079102.230:2109): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1962.055029][ T37] audit: type=1400 audit(1791079102.230:2110): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1962.058859][ T37] audit: type=1400 audit(1791079102.230:2111): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1962.059241][ T37] audit: type=1400 audit(1791079102.230:2112): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24296 comm="syz.1.5573" dest=20000 netif=lo [ 1962.481398][ T5619] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1962.691946][ T5619] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1962.720113][ T5619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.720142][ T5619] usb 8-1: Product: syz [ 1962.720156][ T5619] usb 8-1: Manufacturer: syz [ 1962.720170][ T5619] usb 8-1: SerialNumber: syz [ 1962.870976][T24318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5581'. [ 1962.967813][T24318] FAULT_INJECTION: forcing a failure. [ 1962.967813][T24318] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.967842][T24318] CPU: 1 UID: 0 PID: 24318 Comm: syz.6.5581 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1962.967858][T24318] Tainted: [L]=SOFTLOCKUP [ 1962.967863][T24318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1962.967875][T24318] Call Trace: [ 1962.967883][T24318] [ 1962.967893][T24318] dump_stack_lvl+0xe8/0x150 [ 1962.967930][T24318] should_fail_ex+0x46b/0x600 [ 1962.967967][T24318] should_failslab+0xa8/0x100 [ 1962.967992][T24318] __kmalloc_noprof+0xfb/0x790 [ 1962.968020][T24318] ? rcu_is_watching+0x16/0xb0 [ 1962.968040][T24318] ? hash_netportnet6_add+0x10d2/0x32e0 [ 1962.968162][T24318] ? hash_netportnet6_add+0x10d2/0x32e0 [ 1962.968193][T24318] hash_netportnet6_add+0x10d2/0x32e0 [ 1962.968235][T24318] ? hash_netportnet6_add+0x7f/0x32e0 [ 1962.968281][T24318] hash_netportnet6_uadt+0xbc8/0xf70 [ 1962.968310][T24318] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 1962.968330][T24318] ? __pfx_hash_netportnet6_uadt+0x10/0x10 [ 1962.968341][T24318] ? __nla_validate_parse+0x2429/0x2d50 [ 1962.968362][T24318] ? lock_acquire+0x115/0x350 [ 1962.968395][T24318] call_ad+0x2f1/0xa30 [ 1962.968467][T24318] ? __pfx_call_ad+0x10/0x10 [ 1962.968499][T24318] ? __nla_parse+0x40/0x60 [ 1962.968511][T24318] ip_set_ad+0x82a/0x9d0 [ 1962.968530][T24318] ? __pfx_ip_set_ad+0x10/0x10 [ 1962.968588][T24318] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1962.968616][T24318] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1962.968648][T24318] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 1962.968696][T24318] ? arch_stack_walk+0xfb/0x150 [ 1962.968713][T24318] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 1962.968759][T24318] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1962.968835][T24318] netlink_rcv_skb+0x226/0x4a0 [ 1962.968918][T24318] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1962.968946][T24318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1962.968988][T24318] ? bpf_lsm_capable+0x9/0x20 [ 1962.969007][T24318] ? security_capable+0x7e/0x2c0 [ 1962.969023][T24318] nfnetlink_rcv+0x2b9/0x28d0 [ 1962.969040][T24318] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1962.969063][T24318] ? lockdep_hardirqs_on+0x7b/0x110 [ 1962.969090][T24318] ? __dev_queue_xmit+0x2a0/0x3a70 [ 1962.969158][T24318] ? __dev_queue_xmit+0x1f26/0x3a70 [ 1962.969183][T24318] ? netlink_unicast+0x7b8/0x990 [ 1962.969203][T24318] ? netlink_sendmsg+0x813/0xb40 [ 1962.969222][T24318] ? __dev_queue_xmit+0x2a0/0x3a70 [ 1962.969262][T24318] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1962.969293][T24318] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1962.969328][T24318] ? ref_tracker_free+0x668/0x820 [ 1962.969361][T24318] ? __pfx_ref_tracker_free+0x10/0x10 [ 1962.969401][T24318] ? __skb_clone+0x449/0x6c0 [ 1962.969434][T24318] ? skb_clone+0x246/0x3a0 [ 1962.969464][T24318] ? __netlink_deliver_tap+0x811/0x860 [ 1962.969489][T24318] ? netlink_deliver_tap+0x2e/0x1b0 [ 1962.969513][T24318] ? netlink_deliver_tap+0x2e/0x1b0 [ 1962.969526][T24318] ? netlink_deliver_tap+0x2e/0x1b0 [ 1962.969552][T24318] netlink_unicast+0x7f5/0x990 [ 1962.969588][T24318] netlink_sendmsg+0x813/0xb40 [ 1962.969615][T24318] ? lockdep_hardirqs_on+0x7b/0x110 [ 1962.969648][T24318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1962.969675][T24318] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1962.969692][T24318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1962.969705][T24318] sock_sendmsg_nosec+0x13a/0x180 [ 1962.969726][T24318] ____sys_sendmsg+0x565/0x870 [ 1962.969761][T24318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1962.969799][T24318] ? import_iovec+0x73/0xa0 [ 1962.969834][T24318] ___sys_sendmsg+0x2a5/0x360 [ 1962.969847][T24318] ? __lock_acquire+0x747/0x2de0 [ 1962.969863][T24318] ? __pfx____sys_sendmsg+0x10/0x10 [ 1962.969880][T24318] ? __pfx_futex_wake_mark+0x10/0x10 [ 1962.969932][T24318] ? __fget_files+0x2a/0x420 [ 1962.969955][T24318] ? __fget_files+0x3a8/0x420 [ 1962.969991][T24318] __sys_sendmmsg+0x279/0x4d0 [ 1962.970013][T24318] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1962.970024][T24318] ? do_futex+0x3e7/0x4e0 [ 1962.970042][T24318] ? lock_acquire+0x115/0x350 [ 1962.970080][T24318] ? rcu_is_watching+0x16/0xb0 [ 1962.970121][T24318] __x64_sys_sendmmsg+0xa0/0xc0 [ 1962.970150][T24318] do_syscall_64+0x166/0x520 [ 1962.970170][T24318] ? trace_irq_disable+0x3b/0x140 [ 1962.970184][T24318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.970195][T24318] ? clear_bhb_loop+0x70/0xc0 [ 1962.970208][T24318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.970220][T24318] RIP: 0033:0x7f8e8ad6e159 [ 1962.970240][T24318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1962.970256][T24318] RSP: 002b:00007f8e88fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1962.970278][T24318] RAX: ffffffffffffffda RBX: 00007f8e8aff5fa0 RCX: 00007f8e8ad6e159 [ 1962.970293][T24318] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 1962.970306][T24318] RBP: 00007f8e8ae0506b R08: 0000000000000000 R09: 0000000000000000 [ 1962.970319][T24318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1962.970330][T24318] R13: 00007f8e8aff6038 R14: 00007f8e8aff5fa0 R15: 00007ffdabc8b798 [ 1962.970361][T24318] [ 1963.549355][ T5619] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1963.549503][ T5619] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1963.618846][T24324] overlayfs: failed to clone upperpath [ 1966.255159][ T5619] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1966.255706][ T5619] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1966.259662][ T5619] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1966.259719][ T5619] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1966.355837][ T5619] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1967.154371][ T5619] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1967.315919][ T5619] usb 8-1: USB disconnect, device number 16 [ 1967.429654][ T37] kauditd_printk_skb: 131 callbacks suppressed [ 1967.429673][ T37] audit: type=1800 audit(1791079107.244:2244): pid=24332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.5586" name="nullb0" dev="tmpfs" ino=7360 res=0 errno=0 [ 1967.829015][T24360] ------------[ cut here ]------------ [ 1967.829042][T24360] failed to allocate ring buffer on CPU 1 [ 1967.829058][T24360] WARNING: kernel/trace/ring_buffer.c:8110 at trace_rb_cpu_prepare+0x330/0x3c0, CPU#1: syz.5.5595/24360 [ 1967.853409][T24360] Modules linked in: [ 1967.857298][T24360] CPU: 1 UID: 0 PID: 24360 Comm: syz.5.5595 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1967.868788][T24360] Tainted: [L]=SOFTLOCKUP [ 1967.873165][T24360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1967.883263][T24360] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 1967.889242][T24360] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7d 3e 92 09 cc e8 87 2c fc ff 48 8d 3d e0 2f eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff [ 1967.908897][T24360] RSP: 0018:ffffc9000ee077d0 EFLAGS: 00010283 [ 1967.915004][T24360] RAX: ffffffff81caaba9 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1967.923013][T24360] RDX: ffffc9000f0c9000 RSI: 0000000000000001 RDI: ffffffff8fb5db90 [ 1967.930981][T24360] RBP: 0000000000000001 R08: ffffffff8fb22c7f R09: 1ffffffff1f6458f [ 1967.938991][T24360] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000000 [ 1967.946993][T24360] R13: ffff88805e2d4808 R14: ffff888039f108a0 R15: 0000000000000000 [ 1967.955031][T24360] FS: 00007f80e98866c0(0000) GS:ffff888125cc2000(0000) knlGS:0000000000000000 [ 1967.963971][T24360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1967.970601][T24360] CR2: 0000200000003000 CR3: 000000005f0b6000 CR4: 00000000003526f0 [ 1967.978604][T24360] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1967.986580][T24360] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1967.994603][T24360] Call Trace: [ 1967.997898][T24360] [ 1968.000819][T24360] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1968.006532][T24360] cpuhp_invoke_callback+0x498/0x810 [ 1968.011860][T24360] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1968.017582][T24360] cpuhp_issue_call+0x3f0/0x750 [ 1968.022467][T24360] ? mutex_lock_nested+0x152/0x1d0 [ 1968.027593][T24360] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 1968.034460][T24360] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 1968.041187][T24360] __cpuhp_state_add_instance+0x25/0x40 [ 1968.046734][T24360] alloc_buffer+0x188f/0x1d70 [ 1968.051441][T24360] ? __pfx___schedule+0x10/0x10 [ 1968.056292][T24360] __ring_buffer_alloc+0x2c/0x40 [ 1968.061234][T24360] allocate_trace_buffer+0x1d2/0x950 [ 1968.066546][T24360] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 1968.072354][T24360] trace_array_create_systems+0x590/0xe60 [ 1968.078125][T24360] ? instance_mkdir+0xbd/0x140 [ 1968.082894][T24360] instance_mkdir+0xd5/0x140 [ 1968.087507][T24360] tracefs_syscall_mkdir+0x11a/0x190 [ 1968.092826][T24360] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 1968.098671][T24360] ? generic_permission+0x2bf/0x670 [ 1968.103862][T24360] ? __pfx_tracefs_permission+0x10/0x10 [ 1968.109427][T24360] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 1968.114441][T24360] vfs_mkdir+0x408/0x620 [ 1968.118772][T24360] filename_mkdirat+0x289/0x520 [ 1968.123627][T24360] ? __pfx_filename_mkdirat+0x10/0x10 [ 1968.129029][T24360] ? do_getname+0x151/0x250 [ 1968.133544][T24360] __se_sys_mkdirat+0x35/0x150 [ 1968.138332][T24360] do_syscall_64+0x166/0x520 [ 1968.142909][T24360] ? trace_irq_disable+0x3b/0x140 [ 1968.147950][T24360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.154005][T24360] ? clear_bhb_loop+0x70/0xc0 [ 1968.158704][T24360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.164605][T24360] RIP: 0033:0x7f80eb62e159 [ 1968.169051][T24360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1968.188699][T24360] RSP: 002b:00007f80e9886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1968.197162][T24360] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa0 RCX: 00007f80eb62e159 [ 1968.205165][T24360] RDX: 00000000000001ff RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1968.213173][T24360] RBP: 00007f80eb6c506b R08: 0000000000000000 R09: 0000000000000000 [ 1968.221146][T24360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1968.229150][T24360] R13: 00007f80eb8b6038 R14: 00007f80eb8b5fa0 R15: 00007ffc50377728 [ 1968.237175][T24360] [ 1968.240195][T24360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1968.247457][T24360] CPU: 1 UID: 0 PID: 24360 Comm: syz.5.5595 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1968.258895][T24360] Tainted: [L]=SOFTLOCKUP [ 1968.263198][T24360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1968.273232][T24360] Call Trace: [ 1968.276496][T24360] [ 1968.279407][T24360] vpanic+0x56d/0xa60 [ 1968.283386][T24360] ? __pfx__printk+0x10/0x10 [ 1968.287993][T24360] ? __pfx_vpanic+0x10/0x10 [ 1968.292485][T24360] ? is_bpf_text_address+0x292/0x2b0 [ 1968.297761][T24360] ? is_bpf_text_address+0x26/0x2b0 [ 1968.302951][T24360] panic+0xc5/0xd0 [ 1968.306657][T24360] ? __pfx_panic+0x10/0x10 [ 1968.311071][T24360] __warn+0x315/0x4c0 [ 1968.315039][T24360] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1968.320398][T24360] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1968.325755][T24360] __report_bug+0x276/0x570 [ 1968.330314][T24360] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1968.335778][T24360] ? __pfx___report_bug+0x10/0x10 [ 1968.340789][T24360] ? rb_allocate_cpu_buffer+0x5cf/0x3070 [ 1968.346418][T24360] report_bug_entry+0x19b/0x290 [ 1968.351253][T24360] ? trace_rb_cpu_prepare+0x332/0x3c0 [ 1968.356611][T24360] ? trace_rb_cpu_prepare+0x337/0x3c0 [ 1968.361966][T24360] handle_bug+0xce/0x200 [ 1968.366212][T24360] exc_invalid_op+0x1a/0x50 [ 1968.370698][T24360] asm_exc_invalid_op+0x1a/0x20 [ 1968.375807][T24360] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 1968.381769][T24360] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7d 3e 92 09 cc e8 87 2c fc ff 48 8d 3d e0 2f eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff [ 1968.401353][T24360] RSP: 0018:ffffc9000ee077d0 EFLAGS: 00010283 [ 1968.407406][T24360] RAX: ffffffff81caaba9 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1968.415362][T24360] RDX: ffffc9000f0c9000 RSI: 0000000000000001 RDI: ffffffff8fb5db90 [ 1968.423316][T24360] RBP: 0000000000000001 R08: ffffffff8fb22c7f R09: 1ffffffff1f6458f [ 1968.431276][T24360] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000000 [ 1968.439235][T24360] R13: ffff88805e2d4808 R14: ffff888039f108a0 R15: 0000000000000000 [ 1968.447204][T24360] ? trace_rb_cpu_prepare+0x329/0x3c0 [ 1968.452589][T24360] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1968.458296][T24360] cpuhp_invoke_callback+0x498/0x810 [ 1968.463575][T24360] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1968.469290][T24360] cpuhp_issue_call+0x3f0/0x750 [ 1968.474129][T24360] ? mutex_lock_nested+0x152/0x1d0 [ 1968.479222][T24360] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 1968.486055][T24360] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 1968.492803][T24360] __cpuhp_state_add_instance+0x25/0x40 [ 1968.498333][T24360] alloc_buffer+0x188f/0x1d70 [ 1968.503001][T24360] ? __pfx___schedule+0x10/0x10 [ 1968.507845][T24360] __ring_buffer_alloc+0x2c/0x40 [ 1968.512770][T24360] allocate_trace_buffer+0x1d2/0x950 [ 1968.518067][T24360] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 1968.523862][T24360] trace_array_create_systems+0x590/0xe60 [ 1968.529566][T24360] ? instance_mkdir+0xbd/0x140 [ 1968.534317][T24360] instance_mkdir+0xd5/0x140 [ 1968.538893][T24360] tracefs_syscall_mkdir+0x11a/0x190 [ 1968.544164][T24360] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 1968.550126][T24360] ? generic_permission+0x2bf/0x670 [ 1968.555305][T24360] ? __pfx_tracefs_permission+0x10/0x10 [ 1968.560833][T24360] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 1968.565838][T24360] vfs_mkdir+0x408/0x620 [ 1968.570097][T24360] filename_mkdirat+0x289/0x520 [ 1968.574950][T24360] ? __pfx_filename_mkdirat+0x10/0x10 [ 1968.580306][T24360] ? do_getname+0x151/0x250 [ 1968.584786][T24360] __se_sys_mkdirat+0x35/0x150 [ 1968.589535][T24360] do_syscall_64+0x166/0x520 [ 1968.594127][T24360] ? trace_irq_disable+0x3b/0x140 [ 1968.599132][T24360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.605177][T24360] ? clear_bhb_loop+0x70/0xc0 [ 1968.609918][T24360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1968.615812][T24360] RIP: 0033:0x7f80eb62e159 [ 1968.620212][T24360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1968.639823][T24360] RSP: 002b:00007f80e9886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1968.648226][T24360] RAX: ffffffffffffffda RBX: 00007f80eb8b5fa0 RCX: 00007f80eb62e159 [ 1968.656182][T24360] RDX: 00000000000001ff RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1968.664138][T24360] RBP: 00007f80eb6c506b R08: 0000000000000000 R09: 0000000000000000 [ 1968.672097][T24360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1968.680087][T24360] R13: 00007f80eb8b6038 R14: 00007f80eb8b5fa0 R15: 00007ffc50377728 [ 1968.688060][T24360] [ 1968.691340][T24360] Kernel Offset: disabled [ 1968.695659][T24360] Rebooting in 86400 seconds..