last executing test programs: 10m10.090725144s ago: executing program 3 (id=4): syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff000000070501024000000705020240000007050402400000"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mount$nfs4(&(0x7f00000000c0)='\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000640), 0x2080400, &(0x7f00000006c0)={[{}, {'*\\'}, {'}})&):'}], [{@uid_gt={'uid>', 0xee01}}, {@audit}]}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) 10m6.80509989s ago: executing program 3 (id=11): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x4000011, 0xffff2d35, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x13, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x31, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x401, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x5, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8005, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x1005, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0xeb4b, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x3, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd6, 0x200, 0xb, 0xfff]}, 0x45c) unshare(0x2a020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10m5.60645934s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40140921, 0x0) 10m4.361689559s ago: executing program 3 (id=15): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 9m53.755709939s ago: executing program 32 (id=2): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) read$rfkill(r1, &(0x7f0000000280), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000180)=0x7f, 0x4) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=0x0, @ANYBLOB="3f58b6b9ad908ec83a55dcfdb31f6c62eac00ec65434f05bf0ecaf7c09dac2172f29a9df83cbabfdedd9f15543899e"], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r3 = syz_io_uring_setup(0x141c, &(0x7f0000000040)={0x0, 0x327a, 0x800, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000001480)=@ublk_ctrl_cmd_sqes={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207511, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', @start_user_recovery_cmd}) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0xa75, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4d}}}, 0x0) io_uring_enter(r3, 0x317d, 0x5, 0x2, 0x0, 0x0) 9m49.261044042s ago: executing program 33 (id=15): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5m9.171193578s ago: executing program 2 (id=626): r0 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$eJzs3U9sHNd9B/DfG5HiUmkrJnYUu42LTVukMmO5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLppYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUsZvatuKRIixFFibI+H5v67s6+N/PevPWMLOjNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdfu3T6THrUrQAAHqYrY185fdb9HwCeKFf9/z8AAAAAAAAAAAAAABx2KYp4KlLMX1lPE9X7ttrlVu+t2+PDIztX609VzSNV+fKndubsufNffGnoQicvt2Y/ov6D9my8MXb1Uv3VuZvzC9OLi9NT9fHZ1uTc1PSe97Df+tsNViegfvPNW1PXry/Wz754bsvHtwc+7PvEiYGLQ8+feq5Tdnx4ZGRss0jtvo+9g91meByNIk5Fihe++5PUjIgi9n8uag937LfrrzoxWHVifHik6shMqzm7VH442jkRRUS9q1Kjc452Hovo6X2ofdhdI2K5bH7Z4MGye2PzzYXmtZnp+mhzYam11JqbHU3t1pb9qUcRF1LESkSs9d29u94ooidSfPv4eroWEUc65+EL1cTg3dtRHGAf96BsZ703YqV4DMbsEOuLIl6PFD9972RMlucs/8TnI14v8/sR75T5SkQqvxjnIz7Y4XvE46kniviLcvwvrqep6nrQua5c/mr9y7PX57rKdq4rv+D94a4rxSO6P/Rvy4fjkF+balFEs7rir6f7/80OAAAAAAAAAAAAAAAAAA9afxTxbKR47d//uJpXHNW89OMXh/5g4Je754w/c4/9lGVfjIjlYm9zco/miYGjaTSlRzyX+ElWiyL+JM//++ajbgwAAAAAAAAAAAAAAAAAAMATrYgfR4qX3z+ZVqJ7TfHW7I361ea1mfaqsJ21fztrpm9sbGzUUzsbOSdyLudcybmacy1nFLl+zkbOiZzLOVdyruZcyxlHcv2cjZwTOZdzruRczbmWM3py/ZyNnBM5l3Ou5FzNuZYzDsnavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPGtr6+nSBHRiJiIdq72PerWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClvlTE9yJF/Q8bd7b1RESq/m07Wf5yPhpHy/xUNIbKfCUal3I2q+xpfPMRtJ/96U1F/ChS9NXevTPgefx72+/ufA3inW9svvvVnnYe6Xw48GHfJ04cvzg08uvP7PY67dSAwcut2Vu36+PDIyNjXZt78tE/1bVtIB+3eDBdJyIW33r7zebMzPTC/b8ovwL7qO6FF4f1RfQcimY8mr7zBCjv/x9Eit95/z86N/zO/f+X2u/u3OHjZ3+6ef9/efuO9nj/79le7x73/6e6tr2cfzfS2xNRW7o533siorb41tunWjebN6ZvTM+eP336S0NDXzp3uvdoRO16a2a669UDOV0AAAAAAAAAAAAAAAAAD08q4vciRfNH66keEber+VoDF4eeP/XckThSzbfaMm/7jbGrl+qvzt2cX5heXJyeqo/Ptibnpqb3erhaNd1rfHjkQDpzT/0H3P7+2qtz828ttG780dKOnx+rXbq2uLTQnNz54+iPIqLRvWWwavD48EjV6JlWc7aqOrrjZPpfXG8q4j8jxeT5evpc3pbn/22f4b9l/v/y9h0d0Pz/T3ZtK4+ZUhE/ixS//ZfPxOeqdh6Lu85ZLve3kWLwwmdzuThaluu0of1cgfbMwLLs/0aKf/z51rKd+ZBPbZY9s+cT+5gox/94pPjen38nfiNv2/r8h53H/9j2HR3Q+D/dte3YlucV7Lvr5PE/FSleeerd+M287aOe/9F59sbJXPjO8zkOaPw/3bVtIB/3tx5M1wEAAAAAAAAAAB5rvamIv4sUPxjpSS/lbXv5+39T23d0QH//6zNd26YezHpF93yx75MKAAAAAIdEbyrix5HixtK7d+ZQb53/3TX/83c3538Op22fVn/O9yvVcwMe5J//dRvIx53Yf7cBAAAAAAAAAAAAAAAAAADgUEmpiJfyeuoT1Xz+qV3XU1+NFK/99wu5XDpRluusAz9Q/Vq7Mjd76tLMzNxkc6l5bWa6PjbfnJwu6z4dKdb/5rO5blGtr95Zb769xvvmWuwLkWLk7ztl22uxd9Ymf3qz7Jmy7CcjxX/9w9aynXWsP71Z9mxZ9q8jxdf+eeeyJzbLnivLfidS/PBr9U7ZY2XZzvNRP7NZ9sXJueIARgUAAAAAAAAAAAAAAAAAAIAnTW8q4s8ixf/cXLkzlz+v/9/b9bbyzje61vvf5na1zv9Atf7/bq/vZ/3/6rkCy7sdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPF2pJi/sp5W+8r3bbXLrdlbt8eHR3au1p+qmkeq8uVP7czZc+e/+NLQhU5+dP0H7dl4Y+zqpfqrczfnF6YXF6en6uOzrcm5qek972G/9bcbrE5A/eabt6auX1+sn33x3JaPbw982PeJEwMXh54/9Vyn7PjwyMhYV5me3vs++l3SLtuPRhF/FSle+O5P0g/6IorY/7m4x3fnoPVXnRisOjE+PFJ1ZKbVnF0qPxztnIgiot5VqdE5Rw9hLPalEbFcNr9s8GDZvbH55kLz2sx0fbS5sNRaas3NjqZ2a8v+1KOICyliJSLW+u7eXW8U8Wak+Pbx9fQvfRFHOufhC1fGvnL67O7tKA6wj3tQtrPeG7FSPAZjdoj1RRH/FCl++t7J+Ne+iJ5o/8TnI14v8/sR70R7vFP5xTgf8cEO3yMeTz1RxP+V439xPb3XV14POteVy1+tf3n2+lxX2c515bG/PzxMh/zaVIsiflhd8dfTv/nvGgAAAAAAAAAAAAAAAOAQKeLXIsXL759M1fzgO3OKW7M36leb12ba0/o6c/86c6Y3NjY26qmdjZwTOZdzruRczbmWM4pcP2ejzNrGxkR+v5xzJedqzrWccSTXz9nIOZFzOedKztWcazmjJ9fP2cg5kXM550rO1ZxrOeOQzN0DAAAAAAAAAAAAAAAAAAA+XorqnxTf+vp62uhrry89Ee1ctR7ox97/BwAA///bhfta") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$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") r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x400000) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000900)=""/146) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) shutdown(r1, 0x1) unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) shmctl$SHM_LOCK(0x0, 0xb) chdir(&(0x7f0000000400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(r0, 0x0, 0x42, 0x1ff) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c0000000f0601080000000000000000030000030500010007000000051301000700000005000100070000000500010007000000050001000700000006000b000000000006000b0004000000050001000700000006000b00030000002f8089b0e7dc8412266bcce3589cfa6dd19b220ec80582e23970f82c450b4a433822d61f5c34149cba1c2a2c5b2ce5537cf8ad414c051ff0403ecb3e6db2b029d3f973669e66c70b9c2d84a6dda632fad40ddb1bfa803f9978e2181f9a3f2a5a82f4b92195a6a50d46ab408ce8597be8ea4363510b6e"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5m4.149608569s ago: executing program 2 (id=633): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m58.607549299s ago: executing program 2 (id=647): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xd7, 0x7, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x8000, 0x2}}) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') fanotify_init(0x4, 0x1) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f0404010d20"], 0x7) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x90) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x1ff) 4m54.83932295s ago: executing program 2 (id=655): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 4m54.102240689s ago: executing program 2 (id=658): socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m52.216768308s ago: executing program 2 (id=659): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m36.630273679s ago: executing program 34 (id=659): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m4.941202134s ago: executing program 6 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r2, 0x15c8f000) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 4m4.654347301s ago: executing program 6 (id=770): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1f7) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1', 0xfdef) 4m3.783378872s ago: executing program 6 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 4m3.140804495s ago: executing program 6 (id=775): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, r6, 0x721, 0x70bd2c, 0x25dfdbf6}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044090) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_getattr(r7, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000000, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 3m58.912328727s ago: executing program 6 (id=779): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000000, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) 3m52.611754644s ago: executing program 6 (id=789): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3m37.349435936s ago: executing program 35 (id=789): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3m21.839427744s ago: executing program 4 (id=859): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) 3m14.475221378s ago: executing program 4 (id=875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f0000001f00)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xf}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 3m14.042431321s ago: executing program 4 (id=877): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x68902, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') epoll_create1(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m13.525396393s ago: executing program 4 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 3m12.977607948s ago: executing program 4 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r0, 0x20, 0x0, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r1, 0x100000000000010, 0x203f, 0x2f97) 3m12.792245179s ago: executing program 4 (id=880): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001f701"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 2m57.315755827s ago: executing program 36 (id=880): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001f701"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 16.762364202s ago: executing program 0 (id=1432): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x77, 0xbd6, 0x1, {0x2, @raw_data="ad31fd3e8dd5644bb1fb36286a5753c1da20865e0eb89bcd72c31ddb8dfeeb656a22406e58c6dc043e233b95763608d21e69095c2028c810167ff854cb7b1f9706c1078e745cf10ac4e77f4e1d23662d9bc39c1317ce3bf569812d0105e22506ba9e970b832a81b8d6f391e25b1540c99ff139aba143fcf27be1d897af2d0e6f2d3fa84c5fbcc880c8333934724f00aeff7f0000000000006313269e5f28f01a4f298e3c4250033f83e8b729d169ad509fa3865789ee00"}, 0x400}) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff0000000705"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0xf000, 0x0) 15.292790489s ago: executing program 9 (id=1438): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xd00, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x80000001, 0x9, 0x9, 0x3, 0x2, "28a5b57232820067a9d641114d4539e87fb6af"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xffffffff) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 12.333913442s ago: executing program 0 (id=1441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 12.1231985s ago: executing program 9 (id=1442): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2dd, &(0x7f0000001400)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 12.088040875s ago: executing program 1 (id=1443): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x140c, 0x95e9d37b56298e73, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x20080000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in6=@local, @in=@empty, 0x0, 0xdb, 0x0, 0x0, 0x2, 0x20, 0x0, 0x62}, {0x101, 0x10, 0x100000002, 0x100, 0x1001, 0xffffffffffffb472, 0xffffffffffffffff, 0x81}, {0x1, 0x2000000000000003, 0x10000002, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) socket$key(0xf, 0x3, 0x2) timer_create(0x2, &(0x7f0000000500)={0x0, 0x26, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000580)=0x0) timer_settime(r5, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000640)) 11.520061218s ago: executing program 0 (id=1446): r0 = syz_open_dev$cec(0x0, 0x0, 0x200) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x12) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0x2) 11.129225389s ago: executing program 0 (id=1450): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x8d) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000440)={0x0, 0x6, 0x9, 0x8000, 0xc7b7, 0x4, 0x4, 0x8, 0x7ff, 0x100, 0x3}) syz_emit_ethernet(0x16, &(0x7f0000000500)={@random="e6aa3d26a07a", @random="ed17b3662259", @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x80, 0x7e, '#X'}}}}}}, &(0x7f00000005c0)={0x0, 0x1, [0x848, 0x1d1, 0x4f, 0x637]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300), 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x2a442, 0x1) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x8) 9.737740206s ago: executing program 8 (id=1454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xd00, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x80000001, 0x9, 0x9, 0x3, 0x2, "28a5b57232820067a9d641114d4539e87fb6af"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xffffffff) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 9.63594807s ago: executing program 9 (id=1455): socket$inet6(0xa, 0x80002, 0x0) socket(0x40000000015, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000800), 0x1, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 9.411932445s ago: executing program 1 (id=1457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x6, &(0x7f0000001480)={0x0, 0x1000000, 0x20000000, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) 9.115156685s ago: executing program 8 (id=1458): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x123084, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) 8.919331683s ago: executing program 7 (id=1459): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x1004000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 8.624734864s ago: executing program 8 (id=1460): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="038eee4500e4b7f71143aa7e6b988d00b81499e2dc4e81c08c21942c2a881267d5ca5394f7ea0cc88605dc67c28e7390a50e3687403eed170cb326331f188be172257e90f7d7612f02e882775a3339b6cf9b0cd41c1c941cef2e2bcbfba9dc26262d99b7a1b1d2a7b8f676c05f4e3b026c9a830cf8a70e0ab033e4ba658604fb0dfe50783fedf91380153436d2669f2c8daffbcb50e42b52d8bba8ff081b07fdbada8a24182e65aecb93b5767200cc1d55a352c8873dc48c5e64f13b"], 0x9) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = open(0x0, 0x109042, 0x0) fcntl$addseals(r3, 0x409, 0x8e3652a1e0b94d91) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) sync() r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x9) fcntl$notify(r6, 0x402, 0xd) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r7, 0x402, 0x44) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) 8.304762427s ago: executing program 5 (id=1461): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = open_tree(r0, &(0x7f00000001c0)='./cgroup\x00', 0x901) move_mount(r0, 0x0, r1, 0x0, 0x164) 8.29407377s ago: executing program 9 (id=1462): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000100)={{}, "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"}) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000002000)="04000000320000000e0000006c01") 8.029590071s ago: executing program 7 (id=1463): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.677630009s ago: executing program 5 (id=1464): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 7.666510421s ago: executing program 9 (id=1465): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) 7.572520436s ago: executing program 7 (id=1466): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x80000000000003) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, r4, 0x721, 0x70bd2c, 0x25dfdbf6}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044090) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_getattr(r5, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000000, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 7.497526915s ago: executing program 0 (id=1467): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)={0xc0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.551093015s ago: executing program 8 (id=1468): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2dd, &(0x7f0000001400)="$eJzs3U9rE08YwPGnadMmKW1y+PEDBemDXvSytPEVBGlBDCi1KepB2NqNhqxJycZIRKyevHrzPRSP3gTrG+jFm3fxUgTBgz1IV5LNmj+utalNN7XfD5RMZ+bJTHaW8uzSnWzfeHG/mHeMvFmVSEwlJiKyI5KSiHjist4qNWpGZFw6PZULk99c171560omm51fVF3ILF1Mq+r0zNuHj1+dfVedXH49/WZCtlK3t7+kP279v3Vqe3fJf/dy9ZnoSrlcNVdsS1cLTtFQvWZbpmNpoeRYlaqa7fa8XV5bq6tZWp1KrFUsx1GzVNeiVddqWauVupp3zUJJDcPQqYScNKN7NcaDKnMbi4tmpq9BIn1OCkcpcJUrlYw5GtiY2ziKSQEAgOHSm/9HGil9V/7fyPk9v8v/v344c73f/P9ewdGCo6VyV37/a/4fEfL/wWnm/7tBSWM0hNlgABoLWcmYicBLN/J/AAAAAAAAAAAAAAAAAAAAAACOgx3XTbqum/Rf/Z8JEYnJbszr5SbDnicGY+/1F/F/7wgZCXG6OGQdD+7FROzntVwt57167Zm8FMQWS2ajIt+b50OLV164nJ2f1aaUbNrrrfjmQ4ITfrwvFRw/58VrR/x6LReVROf4aUnKf8Hx6Z74qIjUcuNy/lxHvCFJeX9HymLLavO8bsc/mVO9dDXbM3682Q8AAAAAgH+BoT+luq9/vd0kDUP9bUN62r3K9v0BSf7h/oDK5ri048fk9Fh4nxsAAAAAgJPEqT8qmrZtVQ5emFn+q/AhKMSl/6hDOXTHrGC0/h1sz86u6za/MGaf7/wyLtJdI34hIr1NR1b4LCJDcMAP+xz79MBbwP10DvOvEgAAAIBBaCf9Yc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICTa7+bh/n9D7L3WMdwo+F8SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA4/AgAAP//iQYV8g==") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.43124235s ago: executing program 9 (id=1469): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x140c, 0x95e9d37b56298e73, 0x70bd29, 0x25dfdbff}, 0x10}}, 0x20080000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in6=@local, @in=@empty, 0x0, 0xdb, 0x0, 0x0, 0x2, 0x20, 0x0, 0x62}, {0x101, 0x10, 0x100000002, 0x100, 0x1001, 0xffffffffffffb472, 0xffffffffffffffff, 0x81}, {0x1, 0x2000000000000003, 0x10000002, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) socket$key(0xf, 0x3, 0x2) timer_create(0x2, &(0x7f0000000500)={0x0, 0x26, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000580)=0x0) timer_settime(r5, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000640)) 6.07277027s ago: executing program 1 (id=1470): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) 5.684408189s ago: executing program 5 (id=1471): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) 5.56596548s ago: executing program 1 (id=1472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdafb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2000000}]}, 0x1c}}, 0x2000c800) 5.160130523s ago: executing program 5 (id=1473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4.804600116s ago: executing program 1 (id=1474): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x77, 0xbd6, 0x1, {0x2, @raw_data="ad31fd3e8dd5644bb1fb36286a5753c1da20865e0eb89bcd72c31ddb8dfeeb656a22406e58c6dc043e233b95763608d21e69095c2028c810167ff854cb7b1f9706c1078e745cf10ac4e77f4e1d23662d9bc39c1317ce3bf569812d0105e22506ba9e970b832a81b8d6f391e25b1540c99ff139aba143fcf27be1d897af2d0e6f2d3fa84c5fbcc880c8333934724f00aeff7f0000000000006313269e5f28f01a4f298e3c4250033f83e8b729d169ad509fa3865789ee00"}, 0x400}) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff000000070581"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0xf000, 0x0) 3.694534623s ago: executing program 5 (id=1475): io_uring_setup(0x6d1a, &(0x7f0000000000)={0x0, 0x31cd, 0x10000, 0x2, 0x12c}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7000002, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000100)) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 2.800495799s ago: executing program 7 (id=1476): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = open_tree(r0, &(0x7f00000001c0)='./cgroup\x00', 0x901) move_mount(r0, 0x0, r1, 0x0, 0x164) 2.4016998s ago: executing program 7 (id=1477): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000100)={{}, "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"}) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000002000)="04000000320000000e0000006c01") 2.355990048s ago: executing program 8 (id=1478): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.131249533s ago: executing program 1 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 2.048203316s ago: executing program 0 (id=1480): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x8d) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000440)={0x0, 0x6, 0x9, 0x8000, 0xc7b7, 0x4, 0x4, 0x8, 0x7ff, 0x100, 0x3}) syz_emit_ethernet(0x16, &(0x7f0000000500)={@random="e6aa3d26a07a", @random="ed17b3662259", @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0x80, 0x7e, '#X'}}}}}}, &(0x7f00000005c0)={0x0, 0x1, [0x848, 0x1d1, 0x4f, 0x637]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300), 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x2a442, 0x1) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x8) 1.912466281s ago: executing program 7 (id=1481): socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_setup(0x3ff, &(0x7f0000000500)) 1.859408375s ago: executing program 8 (id=1482): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x6, &(0x7f0000001480)={0x0, 0x1000000, 0x20000000, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) 0s ago: executing program 5 (id=1483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): hsr_slave_1: left promiscuous mode [ 457.620714][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.620750][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.665091][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.665123][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.676097][ T1221] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 457.721454][ T50] veth1_macvtap: left promiscuous mode [ 457.721506][ T50] veth0_macvtap: left promiscuous mode [ 457.722214][ T50] veth1_vlan: left promiscuous mode [ 457.722296][ T50] veth0_vlan: left promiscuous mode [ 458.200132][ T1221] as10x_usb: error during firmware upload part1 [ 458.206953][ T1221] Registered device Abilis Systems DVB-Titan [ 459.630012][ T1221] usb 1-1: USB disconnect, device number 19 [ 459.678713][ T50] team0 (unregistering): Port device team_slave_1 removed [ 459.880391][ T50] team0 (unregistering): Port device team_slave_0 removed [ 459.938993][ T1221] Unregistered device Abilis Systems DVB-Titan [ 459.959069][ T1221] as10x_usb: device has been disconnected [ 460.968012][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 461.077137][ T8459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.099333][ T8459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.411798][ T8459] team0: Port device team_slave_0 added [ 461.439648][ T8459] team0: Port device team_slave_1 added [ 461.572150][ T8243] Bluetooth: hci3: unexpected event for opcode 0x200d [ 461.588561][ T8623] netlink: 'syz.7.746': attribute type 1 has an invalid length. [ 461.642681][ T8629] netlink: 'syz.7.746': attribute type 1 has an invalid length. [ 461.691183][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.691210][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.691259][ T8459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.759466][ T8630] loop6: detected capacity change from 0 to 2048 [ 461.762325][ T8630] udf: Bad value for 'anchor' [ 461.921329][ T8459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.921355][ T8459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.921404][ T8459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.029194][ T8632] __vm_enough_memory: pid: 8632, comm: syz.6.748, bytes: 4503599627366400 not enough memory for the allocation [ 462.342831][ T8459] hsr_slave_0: entered promiscuous mode [ 462.358189][ T8459] hsr_slave_1: entered promiscuous mode [ 463.236150][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'. [ 465.268161][ T8650] input: syz1 as /devices/virtual/input/input10 [ 465.436747][ T5865] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 465.604137][ T5865] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 465.606877][ T5865] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.606914][ T5865] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 465.606951][ T5865] usb 7-1: config 0 interface 0 has no altsetting 0 [ 465.611007][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 465.611037][ T5865] usb 7-1: Product: syz [ 465.611057][ T5865] usb 7-1: Manufacturer: syz [ 465.611077][ T5865] usb 7-1: SerialNumber: syz [ 465.619221][ T5865] usb 7-1: config 0 descriptor?? [ 465.637681][ T8647] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 466.181003][ T5865] usb 7-1: selecting invalid altsetting 0 [ 467.055014][ T5865] usb 7-1: USB disconnect, device number 10 [ 467.184294][ T1221] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 467.350044][ T1221] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 467.355903][ T1221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 467.355953][ T1221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 467.384463][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.384503][ T1221] usb 6-1: Product: syz [ 467.384529][ T1221] usb 6-1: Manufacturer: syz [ 467.384555][ T1221] usb 6-1: SerialNumber: syz [ 467.565671][ T1221] symbolserial 6-1:1.0: symbol converter detected [ 467.583886][ T1221] usb 6-1: symbol converter now attached to ttyUSB0 [ 467.683607][ T8671] loop4: detected capacity change from 0 to 2048 [ 467.832681][ T8671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.838807][ T1221] usb 6-1: USB disconnect, device number 18 [ 467.907412][ T1221] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 467.908091][ T1221] symbolserial 6-1:1.0: device disconnected [ 468.071398][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.359341][ T8682] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 468.359623][ T8682] EXT4-fs error (device loop4) in ext4_setattr:6247: error 28 [ 468.385292][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.7.763'. [ 468.385369][ T8683] IPv6: Can't replace route, no match found [ 468.679013][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 468.777477][ T8243] Bluetooth: hci2: unexpected event for opcode 0x200d [ 468.992414][ T8459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 469.020966][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.037320][ T8459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 469.068753][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.076705][ T8459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 469.112654][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.124690][ T8459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 469.164707][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.215122][ T8689] loop7: detected capacity change from 0 to 2048 [ 469.238061][ T8689] udf: Bad value for 'anchor' [ 469.462962][ T8689] __vm_enough_memory: pid: 8689, comm: syz.7.765, bytes: 4503599627366400 not enough memory for the allocation [ 470.562638][ T8701] input: syz1 as /devices/virtual/input/input11 [ 471.769188][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.907389][ T8459] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.968880][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.969006][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.067635][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.067761][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.217801][ T5865] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 472.372245][ T5865] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 472.386814][ T5865] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 472.386854][ T5865] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 472.436301][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.436333][ T5865] usb 8-1: Product: syz [ 472.436354][ T5865] usb 8-1: Manufacturer: syz [ 472.436374][ T5865] usb 8-1: SerialNumber: syz [ 472.499286][ T5865] symbolserial 8-1:1.0: symbol converter detected [ 472.538369][ T5865] usb 8-1: symbol converter now attached to ttyUSB0 [ 472.773407][ T187] usb 8-1: USB disconnect, device number 21 [ 472.835883][ T187] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 472.836554][ T187] symbolserial 8-1:1.0: device disconnected [ 478.071024][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.142785][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 478.756253][ T5844] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 478.934611][ T5844] usb 5-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=91.6c [ 478.935951][ T5844] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 478.935990][ T5844] usb 5-1: config 0 has no interface number 0 [ 478.936046][ T5844] usb 5-1: config 0 interface 117 has no altsetting 0 [ 478.938706][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.938744][ T5844] usb 5-1: Product: syz [ 478.938770][ T5844] usb 5-1: Manufacturer: syz [ 478.938796][ T5844] usb 5-1: SerialNumber: syz [ 479.000569][ T5844] usb 5-1: config 0 descriptor?? [ 479.261336][ T8459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.282527][ T5844] sierra 5-1:0.117: Sierra USB modem converter detected [ 479.321984][ T5844] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 479.341778][ T5844] usb 5-1: USB disconnect, device number 10 [ 479.371551][ T5844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 479.382632][ T5844] sierra 5-1:0.117: device disconnected [ 481.683528][ T1221] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 481.850407][ T1221] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 481.855929][ T1221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 481.855979][ T1221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 481.874122][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.874154][ T1221] usb 6-1: Product: syz [ 481.874174][ T1221] usb 6-1: Manufacturer: syz [ 481.874194][ T1221] usb 6-1: SerialNumber: syz [ 481.920474][ T1221] symbolserial 6-1:1.0: symbol converter detected [ 481.968697][ T1221] usb 6-1: symbol converter now attached to ttyUSB0 [ 481.984276][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 482.023390][ T5844] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 482.174207][ T5844] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 482.175556][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 482.175640][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 482.179586][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.179625][ T5844] usb 1-1: Product: syz [ 482.179651][ T5844] usb 1-1: Manufacturer: syz [ 482.179671][ T5844] usb 1-1: SerialNumber: syz [ 482.232346][ T8459] veth0_vlan: entered promiscuous mode [ 482.281815][ T1221] usb 6-1: USB disconnect, device number 19 [ 482.289472][ T5844] symbolserial 1-1:1.0: symbol converter detected [ 482.308157][ T5844] usb 1-1: symbol converter now attached to ttyUSB1 [ 482.309189][ T8459] veth1_vlan: entered promiscuous mode [ 482.394327][ T1221] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 482.417426][ T1221] symbolserial 6-1:1.0: device disconnected [ 482.479427][ T5844] usb 1-1: USB disconnect, device number 20 [ 482.534809][ T5844] symbol ttyUSB1: symbol converter now disconnected from ttyUSB1 [ 482.535483][ T5844] symbolserial 1-1:1.0: device disconnected [ 483.293908][ T8802] input: syz1 as /devices/virtual/input/input12 [ 484.247183][ T8459] veth0_macvtap: entered promiscuous mode [ 484.421556][ T8459] veth1_macvtap: entered promiscuous mode [ 484.592187][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.635201][ T8459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.675767][ T6516] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.675861][ T6516] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.675938][ T6516] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.675997][ T6516] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.006579][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.006611][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.168340][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.168373][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.622166][ T8812] loop7: detected capacity change from 0 to 1024 [ 485.694678][ T8812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.018732][ T8830] overlayfs: overlapping lowerdir path [ 487.046754][ T8828] team0: No ports can be present during mode change [ 487.183371][ T8243] Bluetooth: hci2: command 0x0c1a tx timeout [ 488.935541][ T1147] nvmet: connect request for invalid subsystem t! [ 489.066993][ T8824] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 489.118011][ T6017] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.213864][ T4929] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.336291][ T8850] input: syz1 as /devices/virtual/input/input13 [ 491.507957][ T8847] syzkaller0: entered promiscuous mode [ 491.507991][ T8847] syzkaller0: entered allmulticast mode [ 491.714808][ T8855] binder: 8854:8855 ioctl c0306201 0 returned -14 [ 492.483635][ T34] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.526793][ T1221] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 492.639471][ T8867] loop8: detected capacity change from 0 to 1024 [ 492.685378][ T1221] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 492.686414][ T1221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 492.686465][ T1221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 492.688787][ T8867] hfsplus: failed to load extents file [ 492.689226][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.689263][ T1221] usb 6-1: Product: syz [ 492.689289][ T1221] usb 6-1: Manufacturer: syz [ 492.689322][ T1221] usb 6-1: SerialNumber: syz [ 492.789450][ T1221] symbolserial 6-1:1.0: symbol converter detected [ 492.806919][ T1221] usb 6-1: symbol converter now attached to ttyUSB0 [ 493.122290][ T8869] loop8: detected capacity change from 0 to 128 [ 493.125655][ T8869] FAT-fs (loop8): Directory bread(block 1048) failed [ 493.125697][ T8869] FAT-fs (loop8): Directory bread(block 1049) failed [ 493.125735][ T8869] FAT-fs (loop8): Directory bread(block 1050) failed [ 493.125772][ T8869] FAT-fs (loop8): Directory bread(block 1051) failed [ 493.125808][ T8869] FAT-fs (loop8): Directory bread(block 1052) failed [ 493.125846][ T8869] FAT-fs (loop8): Directory bread(block 1053) failed [ 493.125883][ T8869] FAT-fs (loop8): Directory bread(block 1054) failed [ 493.125920][ T8869] FAT-fs (loop8): Directory bread(block 1055) failed [ 493.137586][ T8869] FAT-fs (loop8): Directory bread(block 1048) failed [ 493.137631][ T8869] FAT-fs (loop8): Directory bread(block 1049) failed [ 493.196074][ T983] usb 6-1: USB disconnect, device number 20 [ 493.259183][ T983] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 493.277178][ T983] symbolserial 6-1:1.0: device disconnected [ 493.714523][ T8872] loop6: detected capacity change from 0 to 2048 [ 493.831036][ T8872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.283186][ T8881] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 494.345375][ T8881] EXT4-fs error (device loop6) in ext4_setattr:6247: error 28 [ 494.827598][ T8892] netlink: 'syz.5.809': attribute type 4 has an invalid length. [ 494.883194][ T8895] netlink: 'syz.5.809': attribute type 4 has an invalid length. [ 495.102894][ T8889] loop8: detected capacity change from 0 to 1024 [ 495.211342][ T8889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.529635][ T8459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.087807][ T8909] netlink: 'syz.8.812': attribute type 2 has an invalid length. [ 496.087842][ T8909] netlink: 'syz.8.812': attribute type 2 has an invalid length. [ 497.377597][ T8922] input: syz1 as /devices/virtual/input/input14 [ 498.806652][ T8929] loop0: detected capacity change from 0 to 1024 [ 498.822900][ T8929] hfsplus: failed to load extents file [ 499.225034][ T8929] loop0: detected capacity change from 0 to 128 [ 499.251961][ T5757] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 499.277887][ T8929] FAT-fs (loop0): Directory bread(block 1048) failed [ 499.277934][ T8929] FAT-fs (loop0): Directory bread(block 1049) failed [ 499.277972][ T8929] FAT-fs (loop0): Directory bread(block 1050) failed [ 499.278010][ T8929] FAT-fs (loop0): Directory bread(block 1051) failed [ 499.278048][ T8929] FAT-fs (loop0): Directory bread(block 1052) failed [ 499.278085][ T8929] FAT-fs (loop0): Directory bread(block 1053) failed [ 499.278123][ T8929] FAT-fs (loop0): Directory bread(block 1054) failed [ 499.278161][ T8929] FAT-fs (loop0): Directory bread(block 1055) failed [ 499.280537][ T8929] FAT-fs (loop0): Directory bread(block 1048) failed [ 499.280579][ T8929] FAT-fs (loop0): Directory bread(block 1049) failed [ 499.522565][ T5757] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 499.538760][ T5757] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11 [ 499.538815][ T5757] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 499.565689][ T5757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.565730][ T5757] usb 9-1: Product: syz [ 499.565756][ T5757] usb 9-1: Manufacturer: syz [ 499.565782][ T5757] usb 9-1: SerialNumber: syz [ 499.714141][ T5757] symbolserial 9-1:1.0: symbol converter detected [ 499.964960][ T5757] usb 9-1: symbol converter now attached to ttyUSB0 [ 500.098204][ T187] usb 9-1: USB disconnect, device number 2 [ 500.148831][ T8943] loop4: detected capacity change from 0 to 1024 [ 500.177480][ T187] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 500.178169][ T187] symbolserial 9-1:1.0: device disconnected [ 500.322186][ T6801] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.373921][ T8943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.779247][ T8243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.790908][ T8243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.796863][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.799195][ T8243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.800647][ T8243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.801395][ T8243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.826572][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.826650][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.950007][ T2993] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.410334][ T2993] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.699876][ T2993] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.456418][ T8243] Bluetooth: hci1: command tx timeout [ 503.479130][ T8973] input: syz1 as /devices/virtual/input/input15 [ 503.487618][ T5757] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 503.703335][ T5757] usb 5-1: Using ep0 maxpacket: 32 [ 503.929193][ T2993] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.422671][ T5757] usb 5-1: unable to get BOS descriptor or descriptor too short [ 504.422719][ T5757] usb 5-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=d2.e5 [ 504.423772][ T5757] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 504.423820][ T5757] usb 5-1: can't read configurations, error -71 [ 505.271766][ T2993] bridge_slave_1: left allmulticast mode [ 505.271802][ T2993] bridge_slave_1: left promiscuous mode [ 505.272048][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.310037][ T2993] bridge_slave_0: left allmulticast mode [ 505.310070][ T2993] bridge_slave_0: left promiscuous mode [ 505.316447][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.533602][ T8243] Bluetooth: hci1: command tx timeout [ 506.285306][ T9008] loop7: detected capacity change from 0 to 1024 [ 506.330527][ T9008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.567378][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.605863][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.317638][ T8243] Bluetooth: hci1: command tx timeout [ 508.320105][ T2993] bond0 (unregistering): Released all slaves [ 508.375473][ T6017] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.853866][ T9016] loop4: detected capacity change from 0 to 1024 [ 508.885669][ T9025] loop7: detected capacity change from 0 to 1024 [ 508.909042][ T9016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.929406][ T9025] hfsplus: failed to load extents file [ 509.440142][ T5633] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.767699][ T9039] Bluetooth: MGMT ver 1.23 [ 511.911947][ T8243] Bluetooth: hci1: command tx timeout [ 512.586676][ T2993] hsr_slave_0: left promiscuous mode [ 512.613435][ T2993] hsr_slave_1: left promiscuous mode [ 512.614453][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.614482][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.659905][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.659937][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.796504][ T2993] veth1_macvtap: left promiscuous mode [ 512.796557][ T2993] veth0_macvtap: left promiscuous mode [ 512.796679][ T2993] veth1_vlan: left promiscuous mode [ 512.796764][ T2993] veth0_vlan: left promiscuous mode [ 513.023794][ T5844] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 515.343654][ T5844] usb 1-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=91.6c [ 515.347338][ T5844] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 515.347378][ T5844] usb 1-1: config 0 has no interface number 0 [ 515.347433][ T5844] usb 1-1: config 0 interface 117 has no altsetting 0 [ 515.386511][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.386553][ T5844] usb 1-1: Product: syz [ 515.386580][ T5844] usb 1-1: Manufacturer: syz [ 515.386606][ T5844] usb 1-1: SerialNumber: syz [ 515.423836][ T5844] usb 1-1: config 0 descriptor?? [ 515.626487][ T9057] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 515.795359][ T9057] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 515.797111][ T9057] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.868642][ T5844] sierra 1-1:0.117: Sierra USB modem converter detected [ 515.901953][ T5844] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 515.922315][ T5844] usb 1-1: USB disconnect, device number 21 [ 515.949989][ T9076] openvswitch: netlink: Key type 30 is not supported [ 515.996046][ T5844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 516.029485][ T5844] sierra 1-1:0.117: device disconnected [ 516.469726][ T9057] usb 9-1: Firmware version (0.0) predates our first public release. [ 516.469768][ T9057] usb 9-1: Please update to version 0.2 or newer [ 516.630029][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 516.681002][ T9057] usb 9-1: Firmware: build  [ 516.698743][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 517.199335][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 517.529320][ T9057] usb 9-1: USB disconnect, device number 3 [ 517.989110][ T9097] FAULT_INJECTION: forcing a failure. [ 517.989110][ T9097] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 517.989166][ T9097] CPU: 1 UID: 0 PID: 9097 Comm: syz.8.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.989222][ T9097] Tainted: [L]=SOFTLOCKUP [ 517.989235][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 517.989259][ T9097] Call Trace: [ 517.989272][ T9097] [ 517.989287][ T9097] dump_stack_lvl+0x100/0x190 [ 517.989346][ T9097] should_fail_ex.cold+0x5/0xa [ 517.989398][ T9097] _copy_to_iter+0x1f3/0x1720 [ 517.989457][ T9097] ? __pfx__copy_to_iter+0x10/0x10 [ 517.989503][ T9097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.989551][ T9097] ? __lock_acquire+0x5c0/0x1f40 [ 517.989591][ T9097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.989637][ T9097] ? folio_mark_accessed+0xf3/0x1040 [ 517.989682][ T9097] ? __pfx_filemap_get_pages+0x10/0x10 [ 517.989727][ T9097] ? __pfx_folio_mark_accessed+0x10/0x10 [ 517.989784][ T9097] copy_page_to_iter+0x285/0x370 [ 517.989845][ T9097] filemap_read+0x7a9/0x10a0 [ 517.989910][ T9097] ? __pfx_filemap_read+0x10/0x10 [ 517.989990][ T9097] ? __pfx_down_read+0x10/0x10 [ 517.990037][ T9097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.990084][ T9097] ? common_file_perm+0x266/0x500 [ 517.990152][ T9097] blkdev_read_iter+0x2c4/0x4f0 [ 517.990209][ T9097] ? __pfx_blkdev_read_iter+0x10/0x10 [ 517.990265][ T9097] vfs_read+0x82e/0xb40 [ 517.990327][ T9097] ? __pfx_vfs_read+0x10/0x10 [ 517.990376][ T9097] ? find_held_lock+0x2b/0x80 [ 517.990458][ T9097] ksys_read+0x12a/0x250 [ 517.990512][ T9097] ? __pfx_ksys_read+0x10/0x10 [ 517.990571][ T9097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 517.990627][ T9097] do_syscall_64+0x123/0x790 [ 517.990669][ T9097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.990710][ T9097] RIP: 0033:0x7f772119e159 [ 517.990740][ T9097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.990778][ T9097] RSP: 002b:00007f7721fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 517.990815][ T9097] RAX: ffffffffffffffda RBX: 00007f7721425fa0 RCX: 00007f772119e159 [ 517.990848][ T9097] RDX: 0000000000002020 RSI: 0000200000000480 RDI: 0000000000000005 [ 517.990873][ T9097] RBP: 00007f772123506b R08: 0000000000000000 R09: 0000000000000000 [ 517.990898][ T9097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.990921][ T9097] R13: 00007f7721426038 R14: 00007f7721425fa0 R15: 00007ffefdf003e8 [ 517.990972][ T9097] [ 518.055100][ T8243] Bluetooth: hci3: unexpected event for opcode 0x200d [ 518.214937][ T983] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 518.331907][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.7.866'. [ 518.377861][ T983] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 518.378877][ T983] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 518.378913][ T983] usb 5-1: config 0 has no interface number 0 [ 518.378964][ T983] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.381262][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.381298][ T983] usb 5-1: Product: syz [ 518.381324][ T983] usb 5-1: Manufacturer: syz [ 518.381349][ T983] usb 5-1: SerialNumber: syz [ 518.467811][ T983] usb 5-1: config 0 descriptor?? [ 518.487694][ T983] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 520.415452][ T5865] usb 5-1: USB disconnect, device number 13 [ 522.245557][ T5865] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 522.903400][ T9057] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 523.054035][ T9057] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 523.055392][ T9057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.177567][ T8956] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.177737][ T8956] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.177936][ T8956] bridge_slave_0: entered allmulticast mode [ 523.191632][ T8956] bridge_slave_0: entered promiscuous mode [ 523.215647][ T8956] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.217561][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.217778][ T8956] bridge_slave_1: entered allmulticast mode [ 523.232803][ T8956] bridge_slave_1: entered promiscuous mode [ 523.494942][ T8956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.514290][ T8956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.694157][ T9144] FAULT_INJECTION: forcing a failure. [ 523.694157][ T9144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.694214][ T9144] CPU: 1 UID: 0 PID: 9144 Comm: syz.4.878 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.694272][ T9144] Tainted: [L]=SOFTLOCKUP [ 523.694287][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 523.694311][ T9144] Call Trace: [ 523.694323][ T9144] [ 523.694338][ T9144] dump_stack_lvl+0x100/0x190 [ 523.694403][ T9144] should_fail_ex.cold+0x5/0xa [ 523.694462][ T9144] _copy_to_iter+0x1f3/0x1720 [ 523.694523][ T9144] ? __pfx__copy_to_iter+0x10/0x10 [ 523.694571][ T9144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.694622][ T9144] ? __lock_acquire+0x5c0/0x1f40 [ 523.694662][ T9144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.694710][ T9144] ? folio_mark_accessed+0xf3/0x1040 [ 523.694757][ T9144] ? __pfx_filemap_get_pages+0x10/0x10 [ 523.694802][ T9144] ? __pfx_folio_mark_accessed+0x10/0x10 [ 523.694866][ T9144] copy_page_to_iter+0x285/0x370 [ 523.694922][ T9144] filemap_read+0x7a9/0x10a0 [ 523.694988][ T9144] ? __pfx_filemap_read+0x10/0x10 [ 523.695028][ T9144] ? __pfx_try_to_wake_up+0x10/0x10 [ 523.695108][ T9144] ? __pfx_down_read+0x10/0x10 [ 523.695153][ T9144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.695199][ T9144] ? common_file_perm+0x266/0x500 [ 523.695267][ T9144] blkdev_read_iter+0x2c4/0x4f0 [ 523.695324][ T9144] ? __pfx_blkdev_read_iter+0x10/0x10 [ 523.695376][ T9144] vfs_read+0x82e/0xb40 [ 523.695437][ T9144] ? __pfx_vfs_read+0x10/0x10 [ 523.695489][ T9144] ? find_held_lock+0x2b/0x80 [ 523.695571][ T9144] ksys_read+0x12a/0x250 [ 523.695627][ T9144] ? __pfx_ksys_read+0x10/0x10 [ 523.695688][ T9144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.695745][ T9144] do_syscall_64+0x123/0x790 [ 523.695790][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.695831][ T9144] RIP: 0033:0x7fd5fc79e159 [ 523.695868][ T9144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.695907][ T9144] RSP: 002b:00007fd5fd605028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.695946][ T9144] RAX: ffffffffffffffda RBX: 00007fd5fca25fa0 RCX: 00007fd5fc79e159 [ 523.695973][ T9144] RDX: 0000000000002020 RSI: 0000200000000480 RDI: 0000000000000005 [ 523.695998][ T9144] RBP: 00007fd5fc83506b R08: 0000000000000000 R09: 0000000000000000 [ 523.696023][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.696049][ T9144] R13: 00007fd5fca26038 R14: 00007fd5fca25fa0 R15: 00007ffdd5b60948 [ 523.696101][ T9144] [ 523.718829][ T9057] usb 8-1: Firmware version (0.0) predates our first public release. [ 523.718864][ T9057] usb 8-1: Please update to version 0.2 or newer [ 523.732370][ T8956] team0: Port device team_slave_0 added [ 523.747613][ T8956] team0: Port device team_slave_1 added [ 523.958116][ T9057] usb 8-1: Firmware: build  [ 524.184266][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.184292][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.184341][ T8956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.201725][ T8956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.201749][ T8956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.201797][ T8956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.289921][ T9057] usb 8-1: USB disconnect, device number 22 [ 524.584446][ T9133] loop0: detected capacity change from 0 to 32768 [ 524.589544][ T9133] btrfs: Unknown parameter 'fragment' [ 524.943504][ T983] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 525.043763][ T9155] syzkaller0: entered promiscuous mode [ 525.043799][ T9155] syzkaller0: entered allmulticast mode [ 525.079454][ T8956] hsr_slave_0: entered promiscuous mode [ 525.084800][ T8956] hsr_slave_1: entered promiscuous mode [ 525.092736][ T8956] debugfs: 'hsr0' already exists in 'hsr' [ 525.092765][ T8956] Cannot create hsr debugfs directory [ 525.110288][ T983] usb 9-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=91.6c [ 525.112915][ T983] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 525.112954][ T983] usb 9-1: config 0 has no interface number 0 [ 525.113007][ T983] usb 9-1: config 0 interface 117 has no altsetting 0 [ 525.151097][ T983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.151140][ T983] usb 9-1: Product: syz [ 525.151167][ T983] usb 9-1: Manufacturer: syz [ 525.151193][ T983] usb 9-1: SerialNumber: syz [ 525.188329][ T983] usb 9-1: config 0 descriptor?? [ 527.515244][ T983] sierra 9-1:0.117: Sierra USB modem converter detected [ 527.576920][ T983] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 527.596713][ T983] usb 9-1: USB disconnect, device number 4 [ 527.618676][ T983] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 527.619325][ T983] sierra 9-1:0.117: device disconnected [ 528.524443][ T5844] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 528.674194][ T5844] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 528.675548][ T5844] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 528.675589][ T5844] usb 8-1: config 0 has no interface number 0 [ 528.675641][ T5844] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.732745][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.732788][ T5844] usb 8-1: Product: syz [ 528.732815][ T5844] usb 8-1: Manufacturer: syz [ 528.732841][ T5844] usb 8-1: SerialNumber: syz [ 528.779495][ T5844] usb 8-1: config 0 descriptor?? [ 528.832590][ T5844] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 529.493587][ T9202] process 'syz.8.890' launched './file0' with NULL argv: empty string added [ 529.925386][ T8243] Bluetooth: hci3: unexpected event for opcode 0x200d [ 530.520958][ T9217] loop8: detected capacity change from 0 to 32768 [ 530.522032][ T9217] btrfs: Unknown parameter 'fragment' [ 531.977367][ C1] usb 8-1: yurex_control_callback - control failed: -2 [ 533.131760][ T5844] usb 8-1: USB disconnect, device number 23 [ 533.143008][ T5844] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 535.637882][ T8243] Bluetooth: hci7: unexpected event for opcode 0x200d [ 538.114717][ T983] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 538.274814][ T983] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 538.276188][ T983] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 538.276227][ T983] usb 9-1: config 0 has no interface number 0 [ 538.276281][ T983] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.278969][ T983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.279009][ T983] usb 9-1: Product: syz [ 538.279037][ T983] usb 9-1: Manufacturer: syz [ 538.279064][ T983] usb 9-1: SerialNumber: syz [ 538.362812][ T983] usb 9-1: config 0 descriptor?? [ 538.380207][ T983] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 538.541177][ T9262] loop7: detected capacity change from 0 to 32768 [ 538.542499][ T9262] btrfs: Unknown parameter 'fragment' [ 540.653497][ C1] usb 9-1: yurex_control_callback - control failed: -2 [ 540.958615][ T5743] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 540.971306][ T983] usb 9-1: USB disconnect, device number 5 [ 542.229770][ T983] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 542.983318][ T5743] usb 1-1: Using ep0 maxpacket: 8 [ 542.985532][ T5743] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 542.987314][ T5743] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 542.987379][ T5743] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.987421][ T5743] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.987465][ T5743] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.987510][ T5743] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.987575][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.241715][ T8243] Bluetooth: hci7: unexpected event for opcode 0x200d [ 543.310416][ T4929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.321226][ T4929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.332081][ T4929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.339367][ T4929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.340651][ T4929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.405955][ T5743] usb 1-1: usb_control_msg returned -71 [ 543.406018][ T5743] usbtmc 1-1:16.0: can't read capabilities [ 543.467736][ T5743] usb 1-1: USB disconnect, device number 22 [ 544.000640][ T8956] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 544.034144][ T8956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.039180][ T8956] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 544.139053][ T8956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.140168][ T8956] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 544.195538][ T8956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.196603][ T8956] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 544.233676][ T8956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.141867][ T1147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.376105][ T4929] Bluetooth: hci4: command tx timeout [ 545.483659][ T5743] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 545.640470][ T1147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.645964][ T5743] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 545.650684][ T5743] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 545.650722][ T5743] usb 6-1: config 0 has no interface number 0 [ 545.650776][ T5743] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.657374][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.657412][ T5743] usb 6-1: Product: syz [ 545.657438][ T5743] usb 6-1: Manufacturer: syz [ 545.657464][ T5743] usb 6-1: SerialNumber: syz [ 545.681524][ T5743] usb 6-1: config 0 descriptor?? [ 545.800006][ T5743] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 545.908967][ T5757] usb 6-1: USB disconnect, device number 21 [ 545.921498][ T5757] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 546.021839][ T1147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.042852][ T9317] loop8: detected capacity change from 0 to 32768 [ 546.049684][ T9317] btrfs: Unknown parameter 'fragment' [ 546.115000][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 546.291677][ T1147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.427163][ T8956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.728300][ T8956] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.823390][ T4929] Bluetooth: hci3: unexpected event for opcode 0x200d [ 548.048146][ T8243] Bluetooth: hci4: command tx timeout [ 548.213394][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.213535][ T8028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.548925][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.549060][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.094257][ T4929] Bluetooth: hci4: command tx timeout [ 550.098970][ T1147] bridge_slave_1: left allmulticast mode [ 550.099004][ T1147] bridge_slave_1: left promiscuous mode [ 550.099246][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.138468][ T1147] bridge_slave_0: left allmulticast mode [ 550.138504][ T1147] bridge_slave_0: left promiscuous mode [ 550.141376][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.012808][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.030724][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.060491][ T1147] bond0 (unregistering): Released all slaves [ 551.069490][ T5757] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 551.216818][ T5757] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 551.221918][ T5757] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 551.221959][ T5757] usb 9-1: config 0 has no interface number 0 [ 551.222014][ T5757] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.261883][ T5757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.261925][ T5757] usb 9-1: Product: syz [ 551.261951][ T5757] usb 9-1: Manufacturer: syz [ 551.261978][ T5757] usb 9-1: SerialNumber: syz [ 551.291317][ T5757] usb 9-1: config 0 descriptor?? [ 551.308219][ T5757] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 551.478609][ T8956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.542291][ T5844] usb 9-1: USB disconnect, device number 6 [ 551.552591][ T5844] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 552.173829][ T4929] Bluetooth: hci4: command tx timeout [ 553.065125][ T4929] Bluetooth: hci2: unexpected event for opcode 0x200d [ 553.151780][ T9429] loop7: detected capacity change from 0 to 1024 [ 553.195116][ T1147] hsr_slave_0: left promiscuous mode [ 553.207402][ T9429] hfsplus: failed to load extents file [ 553.218142][ T1147] hsr_slave_1: left promiscuous mode [ 553.219365][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.219394][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.259745][ T1147] veth1_macvtap: left promiscuous mode [ 553.259796][ T1147] veth0_macvtap: left promiscuous mode [ 553.259921][ T1147] veth1_vlan: left promiscuous mode [ 553.261708][ T1147] veth0_vlan: left promiscuous mode [ 555.074047][ T9429] loop7: detected capacity change from 0 to 128 [ 555.077051][ T9429] FAT-fs (loop7): Directory bread(block 1048) failed [ 555.077085][ T9429] FAT-fs (loop7): Directory bread(block 1049) failed [ 555.077114][ T9429] FAT-fs (loop7): Directory bread(block 1050) failed [ 555.077142][ T9429] FAT-fs (loop7): Directory bread(block 1051) failed [ 555.077173][ T9429] FAT-fs (loop7): Directory bread(block 1052) failed [ 555.077201][ T9429] FAT-fs (loop7): Directory bread(block 1053) failed [ 555.077230][ T9429] FAT-fs (loop7): Directory bread(block 1054) failed [ 555.077258][ T9429] FAT-fs (loop7): Directory bread(block 1055) failed [ 555.137610][ T9429] FAT-fs (loop7): Directory bread(block 1048) failed [ 555.137660][ T9429] FAT-fs (loop7): Directory bread(block 1049) failed [ 555.611689][ T5865] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 555.788110][ T5865] usb 8-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=91.6c [ 555.789486][ T5865] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 555.789577][ T5865] usb 8-1: config 0 has no interface number 0 [ 555.789633][ T5865] usb 8-1: config 0 interface 117 has no altsetting 0 [ 555.792293][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.792331][ T5865] usb 8-1: Product: syz [ 555.792357][ T5865] usb 8-1: Manufacturer: syz [ 555.792383][ T5865] usb 8-1: SerialNumber: syz [ 555.806025][ T5865] usb 8-1: config 0 descriptor?? [ 555.956203][ T9057] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 555.996083][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 556.028758][ T5865] sierra 8-1:0.117: Sierra USB modem converter detected [ 556.033190][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 556.055715][ T5865] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 556.081277][ T5865] usb 8-1: USB disconnect, device number 24 [ 556.104019][ T5865] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 556.104735][ T5865] sierra 8-1:0.117: device disconnected [ 556.131227][ T9057] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 556.132588][ T9057] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 556.132627][ T9057] usb 9-1: config 0 has no interface number 0 [ 556.132683][ T9057] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.172524][ T9057] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.172567][ T9057] usb 9-1: Product: syz [ 556.172594][ T9057] usb 9-1: Manufacturer: syz [ 556.172621][ T9057] usb 9-1: SerialNumber: syz [ 556.211633][ T9057] usb 9-1: config 0 descriptor?? [ 556.231395][ T9057] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 556.463445][ T5757] usb 9-1: USB disconnect, device number 7 [ 556.488518][ T5757] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 556.774886][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.776658][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.776816][ T9292] bridge_slave_0: entered allmulticast mode [ 556.803804][ T9292] bridge_slave_0: entered promiscuous mode [ 556.842199][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.842320][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.849250][ T9292] bridge_slave_1: entered allmulticast mode [ 556.859975][ T9292] bridge_slave_1: entered promiscuous mode [ 557.327515][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.388759][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.612444][ T9292] team0: Port device team_slave_0 added [ 557.629344][ T9292] team0: Port device team_slave_1 added [ 558.224873][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.224901][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.224948][ T9292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.244700][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.244724][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.244770][ T9292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.491677][ T9494] overlayfs: overlapping lowerdir path [ 558.708237][ T9292] hsr_slave_0: entered promiscuous mode [ 558.711186][ T9292] hsr_slave_1: entered promiscuous mode [ 558.713812][ T9292] debugfs: 'hsr0' already exists in 'hsr' [ 558.713840][ T9292] Cannot create hsr debugfs directory [ 558.866563][ T9502] binder: 9501:9502 ioctl c0306201 0 returned -14 [ 558.974000][ T9511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 559.050821][ T9508] loop7: detected capacity change from 0 to 1024 [ 559.164755][ T9508] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.204005][ T8956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.478308][ T6017] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.169893][ T9539] overlayfs: overlapping lowerdir path [ 560.397640][ T9523] syz.0.980 (9523): drop_caches: 2 [ 560.486206][ T8243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 560.490292][ T8243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 560.494503][ T8243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 560.524651][ T8243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 560.525704][ T8243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 561.655746][ T9563] loop8: detected capacity change from 0 to 1024 [ 561.771704][ T9563] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.090400][ T8459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.248056][ T9587] overlayfs: overlapping lowerdir path [ 562.258339][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.258506][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.308099][ T9292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.371396][ T9292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.665248][ T4929] Bluetooth: hci5: command tx timeout [ 562.728517][ T9292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.764171][ T9292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.772569][ T9292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 562.835332][ T9292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.839573][ T9292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 562.898088][ T9292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 564.147980][ T9632] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 564.169773][ T31] audit: type=1800 audit(1789757570.179:66): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1007" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 564.376191][ T9641] overlayfs: overlapping lowerdir path [ 564.733408][ T4929] Bluetooth: hci5: command tx timeout [ 566.422086][ T1147] bridge_slave_1: left allmulticast mode [ 566.422123][ T1147] bridge_slave_1: left promiscuous mode [ 566.422365][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.477937][ T1147] bridge_slave_0: left allmulticast mode [ 566.477968][ T1147] bridge_slave_0: left promiscuous mode [ 566.478152][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.813427][ T4929] Bluetooth: hci5: command tx timeout [ 567.108815][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.158708][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.164497][ T1147] bond0 (unregistering): Released all slaves [ 567.249244][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 567.521610][ T1147] hsr_slave_0: left promiscuous mode [ 567.528759][ T1147] hsr_slave_1: left promiscuous mode [ 567.529729][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.536661][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.548727][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 568.637397][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 568.893496][ T4929] Bluetooth: hci5: command tx timeout [ 569.238127][ T5844] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 569.604087][ T5844] usb 1-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=91.6c [ 569.605846][ T5844] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 569.605886][ T5844] usb 1-1: config 0 has no interface number 0 [ 569.605942][ T5844] usb 1-1: config 0 interface 117 has no altsetting 0 [ 569.609459][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.609496][ T5844] usb 1-1: Product: syz [ 569.609523][ T5844] usb 1-1: Manufacturer: syz [ 569.609549][ T5844] usb 1-1: SerialNumber: syz [ 569.627817][ T5844] usb 1-1: config 0 descriptor?? [ 569.668610][ T9292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.867863][ T5844] sierra 1-1:0.117: Sierra USB modem converter detected [ 569.897390][ T5844] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 569.936622][ T5844] usb 1-1: USB disconnect, device number 23 [ 569.980047][ T5844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 569.982183][ T5844] sierra 1-1:0.117: device disconnected [ 570.034424][ T9543] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.034552][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.034750][ T9543] bridge_slave_0: entered allmulticast mode [ 570.070228][ T9543] bridge_slave_0: entered promiscuous mode [ 570.085866][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.085997][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.086193][ T9543] bridge_slave_1: entered allmulticast mode [ 570.106824][ T9543] bridge_slave_1: entered promiscuous mode [ 570.340181][ T9292] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.021730][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.021846][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.025256][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.025376][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.029292][ T9543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.062460][ T9292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 571.062496][ T9292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 571.222997][ T9543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.380139][ T9686] loop7: detected capacity change from 0 to 1024 [ 571.418854][ T9686] hfsplus: failed to load extents file [ 571.492096][ T9543] team0: Port device team_slave_0 added [ 571.534548][ T9543] team0: Port device team_slave_1 added [ 572.825935][ T5865] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 572.841879][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.841904][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.841950][ T9543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.905189][ T9543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.905217][ T9543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.905264][ T9543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.125698][ T5865] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 573.129284][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.566618][ T9543] hsr_slave_0: entered promiscuous mode [ 573.567689][ T9543] hsr_slave_1: entered promiscuous mode [ 573.599926][ T9543] debugfs: 'hsr0' already exists in 'hsr' [ 573.599965][ T9543] Cannot create hsr debugfs directory [ 573.742191][ T9715] FAULT_INJECTION: forcing a failure. [ 573.742191][ T9715] name failslab, interval 1, probability 0, space 0, times 0 [ 573.742246][ T9715] CPU: 1 UID: 0 PID: 9715 Comm: syz.8.1024 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.742296][ T9715] Tainted: [L]=SOFTLOCKUP [ 573.742310][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 573.742334][ T9715] Call Trace: [ 573.742346][ T9715] [ 573.742361][ T9715] dump_stack_lvl+0x100/0x190 [ 573.742421][ T9715] should_fail_ex.cold+0x5/0xa [ 573.742465][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.742520][ T9715] should_failslab+0xc2/0x120 [ 573.742560][ T9715] __kmalloc_cache_noprof+0x91/0x6d0 [ 573.742609][ T9715] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.742656][ T9715] ? assoc_array_insert+0x10b/0x32c0 [ 573.742716][ T9715] assoc_array_insert+0x10b/0x32c0 [ 573.742771][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.742819][ T9715] ? __key_instantiate_and_link+0x139/0x500 [ 573.742897][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.742959][ T9715] ? __pfx_assoc_array_insert+0x10/0x10 [ 573.743011][ T9715] ? __pfx___might_resched+0x10/0x10 [ 573.743073][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.743130][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.743176][ T9715] ? down_write+0x146/0x1f0 [ 573.743228][ T9715] __key_link_begin+0xf5/0x260 [ 573.743274][ T9715] key_link+0x103/0x390 [ 573.743320][ T9715] ? __pfx_key_link+0x10/0x10 [ 573.743366][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.743413][ T9715] ? keyring_alloc+0x8e/0xc0 [ 573.743457][ T9715] call_sbin_request_key+0x3dd/0xd90 [ 573.743526][ T9715] ? __pfx_call_sbin_request_key+0x10/0x10 [ 573.743585][ T9715] ? key_instantiate_and_link+0x39d/0x4b0 [ 573.743650][ T9715] ? key_alloc+0xbb4/0x1310 [ 573.743712][ T9715] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 573.743809][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.743856][ T9715] ? request_key_auth_new+0x732/0xb50 [ 573.743924][ T9715] ? __pfx_request_key_auth_new+0x10/0x10 [ 573.743996][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.744049][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.744100][ T9715] ? __pfx_call_sbin_request_key+0x10/0x10 [ 573.744162][ T9715] request_key_and_link+0x1115/0x1330 [ 573.744230][ T9715] ? __pfx_request_key_and_link+0x10/0x10 [ 573.744293][ T9715] ? __pfx___might_resched+0x10/0x10 [ 573.744355][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.744411][ T9715] ? __pfx_key_default_cmp+0x10/0x10 [ 573.744456][ T9715] ? __pfx_keyring_search_iterator+0x10/0x10 [ 573.744503][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.744549][ T9715] ? _copy_from_user+0x59/0xd0 [ 573.744608][ T9715] __do_sys_request_key+0x2a2/0x3c0 [ 573.744658][ T9715] ? __pfx___do_sys_request_key+0x10/0x10 [ 573.744704][ T9715] ? find_held_lock+0x2b/0x80 [ 573.744760][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.744812][ T9715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.744867][ T9715] do_syscall_64+0x123/0x790 [ 573.744910][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.744958][ T9715] RIP: 0033:0x7f772119e159 [ 573.744989][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.745027][ T9715] RSP: 002b:00007f7721fcf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 573.745064][ T9715] RAX: ffffffffffffffda RBX: 00007f7721425fa0 RCX: 00007f772119e159 [ 573.745091][ T9715] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 573.745117][ T9715] RBP: 00007f772123506b R08: 0000000000000000 R09: 0000000000000000 [ 573.745141][ T9715] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 573.745167][ T9715] R13: 00007f7721426038 R14: 00007f7721425fa0 R15: 00007ffefdf003e8 [ 573.745218][ T9715] [ 574.013692][ T5865] usb 1-1: Firmware version (0.0) predates our first public release. [ 574.013732][ T5865] usb 1-1: Please update to version 0.2 or newer [ 574.218568][ T5865] usb 1-1: Firmware: build  [ 574.469834][ T5865] usb 1-1: USB disconnect, device number 24 [ 574.558220][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16 [ 575.706630][ T9732] netlink: 'syz.7.1028': attribute type 12 has an invalid length. [ 576.733615][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.756795][ T9292] veth0_vlan: entered promiscuous mode [ 577.765431][ T5757] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 577.819624][ T9292] veth1_vlan: entered promiscuous mode [ 577.915828][ T5757] usb 9-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=91.6c [ 577.934511][ T5757] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 577.934545][ T5757] usb 9-1: config 0 has no interface number 0 [ 577.934588][ T5757] usb 9-1: config 0 interface 117 has no altsetting 0 [ 577.990870][ T5757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.990905][ T5757] usb 9-1: Product: syz [ 577.990925][ T5757] usb 9-1: Manufacturer: syz [ 577.990945][ T5757] usb 9-1: SerialNumber: syz [ 578.012770][ T5757] usb 9-1: config 0 descriptor?? [ 578.303545][ T5757] sierra 9-1:0.117: Sierra USB modem converter detected [ 578.328428][ T5757] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 578.369948][ T5757] usb 9-1: USB disconnect, device number 8 [ 578.396701][ T5757] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 578.399537][ T5757] sierra 9-1:0.117: device disconnected [ 578.612562][ T9292] veth0_macvtap: entered promiscuous mode [ 578.724942][ T9292] veth1_macvtap: entered promiscuous mode [ 578.977420][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.018038][ T9543] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 579.058021][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.092209][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.108315][ T9543] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 579.148062][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.156013][ T9543] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 579.210840][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 579.264678][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.264752][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.264814][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.264875][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.280073][ T9543] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 579.324318][ T9543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 579.647178][ T9777] loop8: detected capacity change from 0 to 1024 [ 579.732963][ T9777] hfsplus: failed to load extents file [ 579.965083][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.965115][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.275483][ T9777] loop8: detected capacity change from 0 to 128 [ 580.287318][ T9777] FAT-fs (loop8): Directory bread(block 1048) failed [ 580.287363][ T9777] FAT-fs (loop8): Directory bread(block 1049) failed [ 580.287401][ T9777] FAT-fs (loop8): Directory bread(block 1050) failed [ 580.287439][ T9777] FAT-fs (loop8): Directory bread(block 1051) failed [ 580.287477][ T9777] FAT-fs (loop8): Directory bread(block 1052) failed [ 580.287513][ T9777] FAT-fs (loop8): Directory bread(block 1053) failed [ 580.287548][ T9777] FAT-fs (loop8): Directory bread(block 1054) failed [ 580.287586][ T9777] FAT-fs (loop8): Directory bread(block 1055) failed [ 580.339728][ T9777] FAT-fs (loop8): Directory bread(block 1048) failed [ 580.341112][ T9777] FAT-fs (loop8): Directory bread(block 1049) failed [ 580.648948][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1036'. [ 580.903356][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.903389][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.946293][ T5274] 8021q: adding VLAN 0 to HW filter on device eth17 [ 580.986729][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.310267][ T9543] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.750240][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.750369][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.844234][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.844364][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.948054][ T9543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.948094][ T9543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.935901][ T5757] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 583.086190][ T5757] usb 6-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=91.6c [ 583.089221][ T5757] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 583.089262][ T5757] usb 6-1: config 0 has no interface number 0 [ 583.089318][ T5757] usb 6-1: config 0 interface 117 has no altsetting 0 [ 583.132617][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.132660][ T5757] usb 6-1: Product: syz [ 583.132687][ T5757] usb 6-1: Manufacturer: syz [ 583.132714][ T5757] usb 6-1: SerialNumber: syz [ 583.181374][ T5757] usb 6-1: config 0 descriptor?? [ 583.226264][ T9814] syzkaller1: entered allmulticast mode [ 583.410399][ T5757] sierra 6-1:0.117: Sierra USB modem converter detected [ 583.431760][ T5757] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 583.508212][ T5757] usb 6-1: USB disconnect, device number 22 [ 583.586894][ T5757] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 583.589242][ T5757] sierra 6-1:0.117: device disconnected [ 586.876328][ T9847] overlayfs: overlapping lowerdir path [ 587.492098][ T9543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.706453][ T9856] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1055'. [ 588.033403][ T9088] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 588.111317][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18 [ 588.193460][ T9088] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 588.199537][ T9088] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.100636][ T9088] usb 8-1: Firmware version (0.0) predates our first public release. [ 589.100679][ T9088] usb 8-1: Please update to version 0.2 or newer [ 589.470813][ T9088] usb 8-1: USB disconnect, device number 25 [ 589.868914][ T9543] veth0_vlan: entered promiscuous mode [ 589.921150][ T9543] veth1_vlan: entered promiscuous mode [ 590.031381][ T9543] veth0_macvtap: entered promiscuous mode [ 590.079662][ T9543] veth1_macvtap: entered promiscuous mode [ 590.134973][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.222341][ T9543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.264777][ T6575] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.323459][ T1030] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.323537][ T1030] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.323597][ T1030] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.744351][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.744384][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.951156][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.951190][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.501358][ T5274] 8021q: adding VLAN 0 to HW filter on device eth19 [ 594.958327][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 595.577497][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 595.607274][ T9944] syzkaller0: entered promiscuous mode [ 595.607306][ T9944] syzkaller0: entered allmulticast mode [ 595.742597][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 595.747012][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.888031][ T9403] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 596.034594][ T9403] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 596.037300][ T9403] usb 6-1: config 0 has no interfaces? [ 596.038843][ T9403] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 596.038883][ T9403] usb 6-1: Manufacturer: syz [ 596.090697][ T9403] usb 6-1: config 0 descriptor?? [ 596.350935][ T5772] usb 6-1: USB disconnect, device number 23 [ 596.538468][ T9959] loop9: detected capacity change from 0 to 1024 [ 596.630708][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 596.630749][ T9] usb 1-1: Please update to version 0.2 or newer [ 596.640349][ T9959] hfsplus: failed to load extents file [ 596.769418][ T5274] 8021q: adding VLAN 0 to HW filter on device eth20 [ 597.155412][ T9057] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 597.455820][ T9] usb 1-1: USB disconnect, device number 25 [ 597.804614][ T9057] usb 9-1: Using ep0 maxpacket: 32 [ 597.809978][ T9057] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 597.866567][ T9057] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 597.866615][ T9057] usb 9-1: config 0 has no interface number 0 [ 597.866671][ T9057] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 597.866716][ T9057] usb 9-1: config 0 interface 196 has no altsetting 0 [ 597.920294][ T9057] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.920337][ T9057] usb 9-1: Product: syz [ 597.920364][ T9057] usb 9-1: Manufacturer: syz [ 597.920391][ T9057] usb 9-1: SerialNumber: syz [ 597.961091][ T9057] usb 9-1: config 0 descriptor?? [ 597.970877][ T9964] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 598.370533][ T9981] syzkaller0: entered promiscuous mode [ 598.370567][ T9981] syzkaller0: entered allmulticast mode [ 600.121697][ T9992] input: syz1 as /devices/virtual/input/input16 [ 600.560475][ T9057] ipheth 9-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 600.561607][ T9057] ipheth 9-1:0.196: probe with driver ipheth failed with error -71 [ 600.625776][ T9057] usb 9-1: USB disconnect, device number 9 [ 600.627259][ T9997] FAULT_INJECTION: forcing a failure. [ 600.627259][ T9997] name failslab, interval 1, probability 0, space 0, times 0 [ 600.627309][ T9997] CPU: 0 UID: 0 PID: 9997 Comm: syz.7.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.627363][ T9997] Tainted: [L]=SOFTLOCKUP [ 600.627378][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 600.627401][ T9997] Call Trace: [ 600.627413][ T9997] [ 600.627427][ T9997] dump_stack_lvl+0x100/0x190 [ 600.627487][ T9997] should_fail_ex.cold+0x5/0xa [ 600.627538][ T9997] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.627593][ T9997] should_failslab+0xc2/0x120 [ 600.627633][ T9997] kmem_cache_alloc_noprof+0x92/0x6a0 [ 600.627693][ T9997] ? do_getname+0x35/0x390 [ 600.627750][ T9997] do_getname+0x35/0x390 [ 600.627801][ T9997] do_sys_openat2+0xc7/0x1e0 [ 600.627845][ T9997] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.627907][ T9997] __x64_sys_openat+0x12d/0x210 [ 600.627954][ T9997] ? __pfx___x64_sys_openat+0x10/0x10 [ 600.627997][ T9997] ? find_held_lock+0x2b/0x80 [ 600.628052][ T9997] ? trace_syscall_enter+0xcc/0x120 [ 600.628096][ T9997] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.628153][ T9997] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.628207][ T9997] do_syscall_64+0x123/0x790 [ 600.628251][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.628292][ T9997] RIP: 0033:0x7f4c1f19e159 [ 600.628322][ T9997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.628360][ T9997] RSP: 002b:00007f4c20027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 600.628398][ T9997] RAX: ffffffffffffffda RBX: 00007f4c1f425fa0 RCX: 00007f4c1f19e159 [ 600.628425][ T9997] RDX: 000400000000a882 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 600.628451][ T9997] RBP: 00007f4c1f23506b R08: 0000000000000000 R09: 0000000000000000 [ 600.628476][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.628507][ T9997] R13: 00007f4c1f426038 R14: 00007f4c1f425fa0 R15: 00007ffe1522da48 [ 600.628558][ T9997] [ 606.088314][T10033] input: syz1 as /devices/virtual/input/input17 [ 606.304721][ T9057] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 606.480986][ T9057] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 606.501292][ T9057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.122933][T10045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.415645][ T9057] usb 6-1: Firmware version (0.0) predates our first public release. [ 607.415686][ T9057] usb 6-1: Please update to version 0.2 or newer [ 607.791755][ T9057] usb 6-1: USB disconnect, device number 24 [ 607.925666][T10067] binder: 10065:10067 ioctl 4018620d 0 returned -22 [ 609.855407][T10081] loop8: detected capacity change from 0 to 1024 [ 609.879996][T10081] hfsplus: failed to load extents file [ 610.089692][T10050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.895430][T10091] FAULT_INJECTION: forcing a failure. [ 610.895430][T10091] name failslab, interval 1, probability 0, space 0, times 0 [ 610.895486][T10091] CPU: 1 UID: 0 PID: 10091 Comm: syz.7.1116 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.895548][T10091] Tainted: [L]=SOFTLOCKUP [ 610.895562][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 610.895586][T10091] Call Trace: [ 610.895598][T10091] [ 610.895613][T10091] dump_stack_lvl+0x100/0x190 [ 610.895672][T10091] should_fail_ex.cold+0x5/0xa [ 610.895715][T10091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.895769][T10091] should_failslab+0xc2/0x120 [ 610.895809][T10091] kmem_cache_alloc_noprof+0x92/0x6a0 [ 610.895871][T10091] ? do_getname+0x35/0x390 [ 610.895927][T10091] do_getname+0x35/0x390 [ 610.895979][T10091] do_sys_openat2+0xc7/0x1e0 [ 610.896023][T10091] ? __pfx_do_sys_openat2+0x10/0x10 [ 610.896085][T10091] __x64_sys_openat+0x12d/0x210 [ 610.896131][T10091] ? __pfx___x64_sys_openat+0x10/0x10 [ 610.896174][T10091] ? find_held_lock+0x2b/0x80 [ 610.896229][T10091] ? trace_syscall_enter+0xcc/0x120 [ 610.896274][T10091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.896326][T10091] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.896380][T10091] do_syscall_64+0x123/0x790 [ 610.896424][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.896463][T10091] RIP: 0033:0x7f4c1f19e159 [ 610.896496][T10091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.896539][T10091] RSP: 002b:00007f4c20027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 610.896575][T10091] RAX: ffffffffffffffda RBX: 00007f4c1f425fa0 RCX: 00007f4c1f19e159 [ 610.896602][T10091] RDX: 000400000000a882 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 610.896628][T10091] RBP: 00007f4c1f23506b R08: 0000000000000000 R09: 0000000000000000 [ 610.896652][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.896676][T10091] R13: 00007f4c1f426038 R14: 00007f4c1f425fa0 R15: 00007ffe1522da48 [ 610.896727][T10091] [ 611.871021][T10113] comedi comedi2: dt2801: I/O base address or length out of range [ 612.036795][T10112] binder: 10110:10112 ioctl 4018620d 0 returned -22 [ 613.511160][T10127] loop7: detected capacity change from 0 to 1024 [ 613.538130][T10127] hfsplus: failed to load extents file [ 613.674006][ T5865] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 613.926309][T10127] loop7: detected capacity change from 0 to 128 [ 613.946132][ T5865] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 613.946437][T10127] FAT-fs (loop7): Directory bread(block 1048) failed [ 613.946470][T10127] FAT-fs (loop7): Directory bread(block 1049) failed [ 613.946499][T10127] FAT-fs (loop7): Directory bread(block 1050) failed [ 613.946534][T10127] FAT-fs (loop7): Directory bread(block 1051) failed [ 613.946563][T10127] FAT-fs (loop7): Directory bread(block 1052) failed [ 613.946591][T10127] FAT-fs (loop7): Directory bread(block 1053) failed [ 613.946619][T10127] FAT-fs (loop7): Directory bread(block 1054) failed [ 613.946648][T10127] FAT-fs (loop7): Directory bread(block 1055) failed [ 613.951005][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.964240][T10127] FAT-fs (loop7): Directory bread(block 1048) failed [ 613.964284][T10127] FAT-fs (loop7): Directory bread(block 1049) failed [ 614.902665][ T5865] usb 9-1: Firmware version (0.0) predates our first public release. [ 614.902706][ T5865] usb 9-1: Please update to version 0.2 or newer [ 615.202006][ T5865] usb 9-1: USB disconnect, device number 10 [ 615.552207][ T4929] Bluetooth: hci0: command 0x0406 tx timeout [ 616.672550][T10167] binder: 10164:10167 ioctl 4018620d 0 returned -22 [ 617.828714][T10178] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1141'. [ 618.402806][T10191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.953377][ T5865] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 620.385921][ T5865] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 620.411102][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.797991][T10220] binder: 10219:10220 ioctl c0306201 0 returned -14 [ 621.338234][ T5865] usb 1-1: Firmware version (0.0) predates our first public release. [ 621.338276][ T5865] usb 1-1: Please update to version 0.2 or newer [ 621.658941][ T5865] usb 1-1: USB disconnect, device number 26 [ 623.697527][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.697607][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.830834][T10275] binder: 10273:10275 ioctl c0306201 0 returned -14 [ 624.845902][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 625.249171][T10293] ovs-system: entered promiscuous mode [ 625.261400][ T9403] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 625.435652][ T9403] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 625.460727][ T9403] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.120628][T10316] binder: 10314:10316 ioctl c0306201 0 returned -14 [ 626.235248][ T5772] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 626.405951][ T5772] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 626.413906][ T5772] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.413942][ T5772] usb 10-1: config 0 has no interfaces? [ 626.438783][ T5772] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.438853][ T5772] usb 10-1: Product: syz [ 626.438878][ T5772] usb 10-1: Manufacturer: syz [ 626.438905][ T5772] usb 10-1: SerialNumber: syz [ 626.465094][ T5772] usb 10-1: config 0 descriptor?? [ 626.536152][ T9403] usb 9-1: Firmware version (0.0) predates our first public release. [ 626.536183][ T9403] usb 9-1: Please update to version 0.2 or newer [ 626.799119][ T5757] usb 10-1: USB disconnect, device number 2 [ 626.821137][ T31] audit: type=1326 audit(1789757632.829:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.1.1190" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5833d9e159 code=0x0 [ 626.943064][ T9403] usb 9-1: USB disconnect, device number 11 [ 627.114473][ T8243] Bluetooth: hci3: Invalid handle: 0xed88 > 0x0eff [ 627.220897][T10335] batman_adv: batadv0: Adding interface: syzkaller0 [ 627.220926][T10335] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.220978][T10335] batman_adv: batadv0: Interface activated: syzkaller0 [ 627.557470][T10334] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 627.708436][T10334] batman_adv: batadv0: Removing interface: syzkaller0 [ 628.264203][T10359] smc: net device team0 applied user defined pnetid SYZ2 [ 628.283033][T10359] smc: net device team0 erased user defined pnetid SYZ2 [ 628.325621][T10361] loop9: detected capacity change from 0 to 1024 [ 628.357698][T10361] hfsplus: failed to load extents file [ 629.743495][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 629.913581][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 629.916479][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.916517][ T9] usb 9-1: config 0 has no interfaces? [ 629.918781][T10378] null_blk: disk nullb1 created [ 629.923945][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.923983][ T9] usb 9-1: Product: syz [ 629.924009][ T9] usb 9-1: Manufacturer: syz [ 629.924042][ T9] usb 9-1: SerialNumber: syz [ 629.936622][ T9] usb 9-1: config 0 descriptor?? [ 630.212606][ T5757] usb 9-1: USB disconnect, device number 12 [ 630.528269][ T4929] Bluetooth: hci7: unexpected event for opcode 0x000d [ 631.580030][T10415] evm: overlay not supported [ 631.719030][T10423] trusted_key: encrypted_key: insufficient parameters specified [ 633.036596][ T4929] Bluetooth: hci2: unexpected event for opcode 0x000d [ 633.163711][ T9403] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 633.326642][ T9403] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 633.328592][ T9403] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.328629][ T9403] usb 10-1: config 0 has no interfaces? [ 633.340001][ T9403] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.340041][ T9403] usb 10-1: Product: syz [ 633.340074][ T9403] usb 10-1: Manufacturer: syz [ 633.340100][ T9403] usb 10-1: SerialNumber: syz [ 633.351820][ T9403] usb 10-1: config 0 descriptor?? [ 633.504599][ T5757] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 633.658857][ T9057] usb 10-1: USB disconnect, device number 3 [ 633.659495][ T5757] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 633.664253][ T5757] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 633.664292][ T5757] usb 2-1: config 1 has no interface number 0 [ 633.674297][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.674337][ T5757] usb 2-1: Product: syz [ 633.674363][ T5757] usb 2-1: Manufacturer: syz [ 633.674389][ T5757] usb 2-1: SerialNumber: syz [ 633.720529][ T5757] usb 2-1: 3:1 : does not exist [ 633.720565][ T5757] usb 2-1: 3:2 : does not exist [ 634.000678][T10469] trusted_key: encrypted_key: insufficient parameters specified [ 635.011589][ T9057] usb 2-1: USB disconnect, device number 2 [ 635.350909][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.947192][ T9057] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 636.099180][ T9057] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 636.113172][ T9057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 636.113231][ T9057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 636.124801][ T9057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 636.124850][ T9057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 636.177432][ T9057] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.177474][ T9057] usb 1-1: Product: syz [ 636.177501][ T9057] usb 1-1: Manufacturer: syz [ 636.177528][ T9057] usb 1-1: SerialNumber: syz [ 636.229472][ T9057] usb 1-1: config 0 descriptor?? [ 636.497286][ T9057] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 636.707338][ T9057] usb 1-1: USB disconnect, device number 27 [ 638.135297][ T5971] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.239154][T10579] input: syz1 as /devices/virtual/input/input18 [ 644.578385][T10584] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 649.760759][T10616] loop8: detected capacity change from 0 to 1024 [ 649.796772][T10616] hfsplus: failed to load extents file [ 650.100101][T10621] input: syz1 as /devices/virtual/input/input19 [ 651.442442][ T4929] Bluetooth: hci3: unexpected event for opcode 0x200d [ 651.750733][T10635] loop8: detected capacity change from 0 to 128 [ 651.785181][T10635] FAT-fs (loop8): Directory bread(block 1048) failed [ 651.785226][T10635] FAT-fs (loop8): Directory bread(block 1049) failed [ 651.785264][T10635] FAT-fs (loop8): Directory bread(block 1050) failed [ 651.785302][T10635] FAT-fs (loop8): Directory bread(block 1051) failed [ 651.785341][T10635] FAT-fs (loop8): Directory bread(block 1052) failed [ 651.785379][T10635] FAT-fs (loop8): Directory bread(block 1053) failed [ 651.785417][T10635] FAT-fs (loop8): Directory bread(block 1054) failed [ 651.785454][T10635] FAT-fs (loop8): Directory bread(block 1055) failed [ 651.899852][T10616] FAT-fs (loop8): Directory bread(block 1048) failed [ 651.899904][T10616] FAT-fs (loop8): Directory bread(block 1049) failed [ 652.335288][T10640] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1270'. [ 652.820697][T10656] overlayfs: overlapping lowerdir path [ 656.751092][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 657.269394][T10682] input: syz1 as /devices/virtual/input/input20 [ 658.039338][ T4929] Bluetooth: hci2: unexpected event for opcode 0x200d [ 658.990455][T10704] overlayfs: upper fs does not support file handles, falling back to index=off. [ 661.954318][T10741] input: syz1 as /devices/virtual/input/input21 [ 662.519848][T10744] overlayfs: overlapping lowerdir path [ 662.760750][T10749] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 662.857375][ T5772] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 663.050723][ T5772] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 663.090729][ T5772] usb 1-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 663.090784][ T5772] usb 1-1: too many endpoints for config 1 interface 0 altsetting 100: 75, using maximum allowed: 30 [ 663.090841][ T5772] usb 1-1: config 1 interface 0 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 663.090887][ T5772] usb 1-1: config 1 interface 0 has no altsetting 0 [ 663.103335][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.103373][ T5772] usb 1-1: Product: syz [ 663.103398][ T5772] usb 1-1: Manufacturer: syz [ 663.103424][ T5772] usb 1-1: SerialNumber: syz [ 663.332274][T10759] random: crng reseeded on system resumption [ 663.343422][ T5865] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 663.494140][ T5865] usb 9-1: Using ep0 maxpacket: 8 [ 663.496300][ T5865] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 663.497696][ T5865] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 663.497745][ T5865] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 663.497799][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.512805][ T5772] symbolserial 1-1:1.0: required endpoints missing [ 663.638050][ T5865] kobil_sct 9-1:1.0: KOBIL USB smart card terminal converter detected [ 663.658583][ T5865] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 663.661786][ T5772] usb 1-1: USB disconnect, device number 28 [ 663.756062][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1315'. [ 663.758975][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1315'. [ 664.075442][T10770] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1317'. [ 664.075512][T10770] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1317'. [ 664.469962][ T5772] usb 9-1: USB disconnect, device number 13 [ 664.522570][ T5772] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 664.538110][ T5772] kobil_sct 9-1:1.0: device disconnected [ 664.658476][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1318'. [ 664.710016][T10775] l2tp_ppp: sess 2/0: no socket in recv [ 666.771909][ T8243] Bluetooth: hci4: command 0x0406 tx timeout [ 666.845287][T10801] input: syz1 as /devices/virtual/input/input22 [ 669.323417][ T9088] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 669.485871][ T9088] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 669.491977][ T9088] usb 9-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 669.492040][ T9088] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.540333][ T9088] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.540377][ T9088] usb 9-1: Product: syz [ 669.540405][ T9088] usb 9-1: Manufacturer: syz [ 669.540432][ T9088] usb 9-1: SerialNumber: syz [ 669.825399][ T9088] symbolserial 9-1:1.0: required endpoints missing [ 669.869882][ T9088] usb 9-1: USB disconnect, device number 14 [ 672.311410][T10854] input: syz1 as /devices/virtual/input/input23 [ 673.470963][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1345'. [ 674.875031][T10881] jffs2: notice: (10881) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 675.443414][ T5865] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 675.597053][ T5865] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 675.600263][ T5865] usb 8-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 675.600330][ T5865] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.654594][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.654637][ T5865] usb 8-1: Product: syz [ 675.654664][ T5865] usb 8-1: Manufacturer: syz [ 675.654691][ T5865] usb 8-1: SerialNumber: syz [ 675.894037][T10896] loop0: detected capacity change from 0 to 128 [ 675.927966][T10896] FAT-fs (loop0): Directory bread(block 1048) failed [ 675.928043][T10896] FAT-fs (loop0): Directory bread(block 1049) failed [ 675.928083][T10896] FAT-fs (loop0): Directory bread(block 1050) failed [ 675.928121][T10896] FAT-fs (loop0): Directory bread(block 1051) failed [ 675.928190][T10896] FAT-fs (loop0): Directory bread(block 1052) failed [ 675.928229][T10896] FAT-fs (loop0): Directory bread(block 1053) failed [ 675.928267][T10896] FAT-fs (loop0): Directory bread(block 1054) failed [ 675.928336][T10896] FAT-fs (loop0): Directory bread(block 1055) failed [ 676.002755][ T5865] symbolserial 8-1:1.0: required endpoints missing [ 676.027659][ T5865] usb 8-1: USB disconnect, device number 26 [ 676.034814][ T31] audit: type=1800 audit(1789757682.039:68): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1353" name="file1" dev="tmpfs" ino=324 res=0 errno=0 [ 676.092420][T10877] FAT-fs (loop0): Directory bread(block 1048) failed [ 676.092468][T10877] FAT-fs (loop0): Directory bread(block 1049) failed [ 676.612180][T10905] o2cb: This node has not been configured. [ 676.612201][T10905] o2cb: Cluster check failed. Fix errors before retrying. [ 676.612248][T10905] (syz.8.1356,10905,0):user_dlm_register:674 ERROR: status = -22 [ 676.612292][T10905] (syz.8.1356,10905,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "config" [ 679.337576][T10942] binder_alloc: 10939: pid 10939 spamming oneway? 1 buffers allocated for a total size of 4096 [ 679.367407][T10942] binder_alloc: 10939: pid 10939 spamming oneway? 2 buffers allocated for a total size of 5120 [ 679.393490][T10946] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1369'. [ 679.564683][ T5844] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 679.717171][ T5844] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 679.720225][ T5844] usb 6-1: config 1 has an invalid descriptor of length 106, skipping remainder of the config [ 679.720303][ T5844] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.738474][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.738513][ T5844] usb 6-1: Product: syz [ 679.738539][ T5844] usb 6-1: Manufacturer: syz [ 679.738565][ T5844] usb 6-1: SerialNumber: syz [ 680.067226][ T5844] symbolserial 6-1:1.0: required endpoints missing [ 680.095823][ T5844] usb 6-1: USB disconnect, device number 25 [ 684.075211][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1387'. [ 684.083004][T11004] l2tp_ppp: sess 2/0: no socket in recv [ 685.669255][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.669336][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.816416][ T9403] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 685.984278][ T9403] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 685.986973][ T9403] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x53, changing to 0x3 [ 685.987011][ T9403] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 134, changing to 7 [ 685.987047][ T9403] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 8410, setting to 1024 [ 685.995826][ T9403] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.995870][ T9403] usb 9-1: Product: syz [ 685.995897][ T9403] usb 9-1: Manufacturer: syz [ 685.995924][ T9403] usb 9-1: SerialNumber: syz [ 686.028714][ T9403] symbolserial 9-1:1.0: required endpoints missing [ 686.314078][ T5865] usb 9-1: USB disconnect, device number 15 [ 687.054013][T11029] netlink: 'syz.7.1392': attribute type 2 has an invalid length. [ 687.054066][T11029] netlink: 'syz.7.1392': attribute type 2 has an invalid length. [ 688.338122][T11035] ªªªªªª: renamed from vlan0 (while UP) [ 692.863566][T11080] trusted_key: encrypted_key: insufficient parameters specified [ 692.902479][T11080] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 693.352115][T11082] loop9: detected capacity change from 0 to 128 [ 693.405339][T11082] FAT-fs (loop9): Directory bread(block 1048) failed [ 693.405387][T11082] FAT-fs (loop9): Directory bread(block 1049) failed [ 693.405426][T11082] FAT-fs (loop9): Directory bread(block 1050) failed [ 693.405465][T11082] FAT-fs (loop9): Directory bread(block 1051) failed [ 693.405504][T11082] FAT-fs (loop9): Directory bread(block 1052) failed [ 693.405543][T11082] FAT-fs (loop9): Directory bread(block 1053) failed [ 693.405582][T11082] FAT-fs (loop9): Directory bread(block 1054) failed [ 693.405619][T11082] FAT-fs (loop9): Directory bread(block 1055) failed [ 693.586448][T11065] FAT-fs (loop9): Directory bread(block 1048) failed [ 693.586496][T11065] FAT-fs (loop9): Directory bread(block 1049) failed [ 693.619258][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 694.583436][ T983] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 694.740020][ T983] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 694.741496][ T983] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x53, changing to 0x3 [ 694.741545][ T983] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 134, changing to 7 [ 694.741592][ T983] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 8410, setting to 1024 [ 694.816930][ T983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.816975][ T983] usb 9-1: Product: syz [ 694.817002][ T983] usb 9-1: Manufacturer: syz [ 694.817029][ T983] usb 9-1: SerialNumber: syz [ 694.855197][ T983] symbolserial 9-1:1.0: required endpoints missing [ 695.707579][ T5844] usb 9-1: USB disconnect, device number 16 [ 696.793488][ T9057] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 696.936734][T11140] trusted_key: encrypted_key: insufficient parameters specified [ 696.951157][T11140] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 696.954099][ T9057] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 696.957932][ T9057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.193602][ T9057] usb 8-1: Firmware version (0.0) predates our first public release. [ 698.193644][ T9057] usb 8-1: Please update to version 0.2 or newer [ 698.288716][ T4929] Bluetooth: hci3: unexpected event for opcode 0x200d [ 698.415668][ T9057] usb 8-1: USB disconnect, device number 27 [ 699.259499][T11163] loop0: detected capacity change from 0 to 1024 [ 699.270416][T11163] hfsplus: failed to load extents file [ 699.493560][ T1221] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 699.658974][ T1221] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 699.661730][ T1221] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 699.661772][ T1221] usb 8-1: config 0 has no interface number 0 [ 699.661828][ T1221] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.661877][ T1221] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 699.672644][ T1221] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.672684][ T1221] usb 8-1: Product: syz [ 699.672711][ T1221] usb 8-1: Manufacturer: syz [ 699.672738][ T1221] usb 8-1: SerialNumber: syz [ 699.701244][ T1221] usb 8-1: config 0 descriptor?? [ 699.737361][ T1221] yurex 8-1:0.50: Could not submitting URB [ 699.737573][ T1221] yurex 8-1:0.50: probe with driver yurex failed with error -5 [ 700.035969][ T5772] usb 8-1: USB disconnect, device number 28 [ 700.785503][ T1221] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 700.945701][ T1221] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 700.951336][ T1221] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x53, changing to 0x3 [ 700.951392][ T1221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 134, changing to 7 [ 700.951441][ T1221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 8410, setting to 1024 [ 700.967939][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.967981][ T1221] usb 1-1: Product: syz [ 700.968007][ T1221] usb 1-1: Manufacturer: syz [ 700.968034][ T1221] usb 1-1: SerialNumber: syz [ 701.039134][ T1221] symbolserial 1-1:1.0: required endpoints missing [ 701.173433][ T5772] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 701.323497][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 701.342643][ T5772] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 701.364524][ T5772] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 701.364646][ T5772] usb 2-1: config 0 has no interface number 0 [ 701.365138][ T5772] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 701.365269][ T5772] usb 2-1: config 0 interface 196 has no altsetting 0 [ 701.398488][ T1221] usb 1-1: USB disconnect, device number 29 [ 701.430313][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.430436][ T5772] usb 2-1: Product: syz [ 701.430541][ T5772] usb 2-1: Manufacturer: syz [ 701.430597][ T5772] usb 2-1: SerialNumber: syz [ 701.523577][ T5772] usb 2-1: config 0 descriptor?? [ 701.530404][T11189] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 704.790509][ T5971] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.905471][ T5772] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 704.905724][ T5772] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 704.918996][ T5772] usb 2-1: USB disconnect, device number 3 [ 705.326370][T11224] overlayfs: overlapping lowerdir path [ 705.915687][T11240] loop9: detected capacity change from 0 to 128 [ 705.943019][T11240] FAT-fs (loop9): Directory bread(block 1048) failed [ 705.943066][T11240] FAT-fs (loop9): Directory bread(block 1049) failed [ 705.943104][T11240] FAT-fs (loop9): Directory bread(block 1050) failed [ 705.943141][T11240] FAT-fs (loop9): Directory bread(block 1051) failed [ 705.943180][T11240] FAT-fs (loop9): Directory bread(block 1052) failed [ 705.943219][T11240] FAT-fs (loop9): Directory bread(block 1053) failed [ 705.943543][T11240] FAT-fs (loop9): Directory bread(block 1054) failed [ 705.943585][T11240] FAT-fs (loop9): Directory bread(block 1055) failed [ 706.006765][T11239] Failed to get privilege flags for destination (handle=0x2:0x2) [ 706.083505][ T9057] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 706.238526][ T9057] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 706.254733][ T9057] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 706.254790][ T9057] usb 8-1: config 0 has no interface number 0 [ 706.254845][ T9057] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.254893][ T9057] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 706.315911][ T9057] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.315955][ T9057] usb 8-1: Product: syz [ 706.315981][ T9057] usb 8-1: Manufacturer: syz [ 706.316007][ T9057] usb 8-1: SerialNumber: syz [ 706.347168][ T9057] usb 8-1: config 0 descriptor?? [ 706.364455][ T9057] yurex 8-1:0.50: Could not submitting URB [ 706.364647][ T9057] yurex 8-1:0.50: probe with driver yurex failed with error -5 [ 706.766915][ T9057] usb 8-1: USB disconnect, device number 29 [ 707.546177][ T5844] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 707.699281][ T5844] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 707.702745][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 7 [ 707.702795][ T5844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 707.751522][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.751566][ T5844] usb 6-1: Product: syz [ 707.751592][ T5844] usb 6-1: Manufacturer: syz [ 707.751618][ T5844] usb 6-1: SerialNumber: syz [ 707.839694][ T5844] symbolserial 6-1:1.0: required endpoints missing [ 708.039142][ T5844] usb 6-1: USB disconnect, device number 26 [ 708.338220][T11270] FAULT_INJECTION: forcing a failure. [ 708.338220][T11270] name failslab, interval 1, probability 0, space 0, times 0 [ 708.338274][T11270] CPU: 0 UID: 0 PID: 11270 Comm: syz.7.1459 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.338330][T11270] Tainted: [L]=SOFTLOCKUP [ 708.338345][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 708.338367][T11270] Call Trace: [ 708.338379][T11270] [ 708.338394][T11270] dump_stack_lvl+0x100/0x190 [ 708.338455][T11270] should_fail_ex.cold+0x5/0xa [ 708.338499][T11270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.338555][T11270] should_failslab+0xc2/0x120 [ 708.338597][T11270] kmem_cache_alloc_noprof+0x92/0x6a0 [ 708.338655][T11270] ? __pfx_map_id_range_down+0x10/0x10 [ 708.338697][T11270] ? security_inode_alloc+0x3b/0x2c0 [ 708.338762][T11270] security_inode_alloc+0x3b/0x2c0 [ 708.338821][T11270] inode_init_always_gfp+0xc6f/0xfb0 [ 708.338876][T11270] alloc_inode+0x8e/0x250 [ 708.338930][T11270] new_inode+0x22/0x1c0 [ 708.338987][T11270] __debugfs_create_file+0xd8/0x4d0 [ 708.339045][T11270] debugfs_create_file_full+0x41/0x60 [ 708.339101][T11270] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 708.339165][T11270] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 708.339270][T11270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.339318][T11270] ? lock_acquire+0x1d1/0x380 [ 708.339355][T11270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.339402][T11270] ? lockdep_init_map_type+0x5c/0x250 [ 708.339442][T11270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.339494][T11270] ? __pfx_tun_setup+0x10/0x10 [ 708.339539][T11270] alloc_netdev_mqs+0x314/0x15c0 [ 708.339596][T11270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.339654][T11270] __tun_chr_ioctl+0x197b/0x4880 [ 708.339709][T11270] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 708.339774][T11270] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 708.339825][T11270] ? __fget_files+0x34/0x3d0 [ 708.339868][T11270] ? find_held_lock+0x2b/0x80 [ 708.339919][T11270] ? hook_file_ioctl_common+0x140/0x440 [ 708.339993][T11270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.340041][T11270] ? __fget_files+0x21f/0x3d0 [ 708.340085][T11270] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 708.340142][T11270] __x64_sys_ioctl+0x18e/0x210 [ 708.340201][T11270] do_syscall_64+0x123/0x790 [ 708.340246][T11270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.340286][T11270] RIP: 0033:0x7f4c1f19e159 [ 708.340317][T11270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.340355][T11270] RSP: 002b:00007f4c20027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.340393][T11270] RAX: ffffffffffffffda RBX: 00007f4c1f425fa0 RCX: 00007f4c1f19e159 [ 708.340420][T11270] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 708.340445][T11270] RBP: 00007f4c1f23506b R08: 0000000000000000 R09: 0000000000000000 [ 708.340470][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.340494][T11270] R13: 00007f4c1f426038 R14: 00007f4c1f425fa0 R15: 00007ffe1522da48 [ 708.340546][T11270] [ 708.472204][T11270] debugfs: out of free dentries, can not create file 'netdev@ffff88807271c700' [ 708.734447][T11246] loop0: detected capacity change from 0 to 1024 [ 708.870504][T11246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.538607][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.810798][T11300] binder: 11290:11300 ioctl c0306201 0 returned -14 [ 711.125474][T11310] overlayfs: overlapping lowerdir path [ 711.166522][T11291] syz.5.1464 (11291): drop_caches: 2 [ 711.863360][ T5743] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 712.234408][ T5743] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 712.235777][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.603484][T11332] loop8: detected capacity change from 0 to 128 [ 713.644040][T11332] FAT-fs (loop8): Directory bread(block 1048) failed [ 713.644081][T11332] FAT-fs (loop8): Directory bread(block 1049) failed [ 713.644137][T11332] FAT-fs (loop8): Directory bread(block 1050) failed [ 713.644168][T11332] FAT-fs (loop8): Directory bread(block 1051) failed [ 713.644200][T11332] FAT-fs (loop8): Directory bread(block 1052) failed [ 713.644232][T11332] FAT-fs (loop8): Directory bread(block 1053) failed [ 713.649196][T11332] FAT-fs (loop8): Directory bread(block 1054) failed [ 713.649240][T11332] FAT-fs (loop8): Directory bread(block 1055) failed [ 713.683496][ T5844] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 713.749300][T11333] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 713.834768][ T5844] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 713.847265][ T5844] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 7 [ 713.847317][ T5844] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8410, setting to 1024 [ 713.871158][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.871201][ T5844] usb 2-1: Product: syz [ 713.871227][ T5844] usb 2-1: Manufacturer: syz [ 713.871254][ T5844] usb 2-1: SerialNumber: syz [ 713.988845][ T5844] symbolserial 2-1:1.0: required endpoints missing [ 714.188625][ T5743] usb 1-1: Firmware version (0.0) predates our first public release. [ 714.188665][ T5743] usb 1-1: Please update to version 0.2 or newer [ 714.215379][ T1221] usb 2-1: USB disconnect, device number 4 [ 714.391645][ T5743] usb 1-1: USB disconnect, device number 30 [ 821.793282][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 821.800274][ C0] rcu: 1-...!: (1 GPs behind) idle=01dc/1/0x4000000000000000 softirq=66148/66150 fqs=5 [ 821.810020][ C0] rcu: (detected by 0, t=10506 jiffies, g=72009, q=988 ncpus=2) [ 821.817753][ C0] Sending NMI from CPU 0 to CPUs 1: [ 821.822964][ C1] NMI backtrace for cpu 1 [ 821.822989][ C1] CPU: 1 UID: 0 PID: 11309 Comm: syz.9.1469 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.823036][ C1] Tainted: [L]=SOFTLOCKUP [ 821.823048][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 821.823069][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20 [ 821.823112][ C1] Code: bf 06 00 00 00 e9 a8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 76 fe ff ff 66 0f 1f 44 [ 821.823145][ C1] RSP: 0018:ffffc90000a18e40 EFLAGS: 00000046 [ 821.823172][ C1] RAX: 0000000000000000 RBX: ffff888036b36300 RCX: ffffffff81f75f71 [ 821.823194][ C1] RDX: 1ffff11006d66c67 RSI: 0000000000000001 RDI: 0000000000000000 [ 821.823215][ C1] RBP: ffff8880b85286c0 R08: 0000000000000005 R09: 0000000000000000 [ 821.823236][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 821.823256][ C1] R13: ffff8880b8528500 R14: 0000000000000001 R15: 0000000000000000 [ 821.823281][ C1] FS: 0000000000000000(0000) GS:ffff888123c56000(0000) knlGS:0000000000000000 [ 821.823310][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.823332][ C1] CR2: 0000200000404030 CR3: 000000000eb96000 CR4: 0000000000350ef0 [ 821.823355][ C1] Call Trace: [ 821.823366][ C1] [ 821.823378][ C1] __remove_hrtimer+0xc1/0x650 [ 821.823427][ C1] __hrtimer_run_queues+0x352/0x9c0 [ 821.823482][ C1] hrtimer_interrupt+0x441/0xaa0 [ 821.823543][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 821.823590][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 821.823647][ C1] [ 821.823657][ C1] [ 821.823670][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 821.823708][ C1] RIP: 0010:unwind_next_frame+0x1565/0x2090 [ 821.823754][ C1] Code: 08 00 00 00 4c 89 ef 4d 8d 7d 34 4c 01 f5 48 89 ee e8 cf e8 ff ff 84 c0 0f 84 f3 ed ff ff 48 89 ef e8 9f e2 ff ff 49 8d 7d 40 <48> 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c [ 821.823787][ C1] RSP: 0018:ffffc9000dd17418 EFLAGS: 00000202 [ 821.823812][ C1] RAX: ffff888026bc7201 RBX: 0000000000000001 RCX: ffffffff91e8b93e [ 821.823834][ C1] RDX: ffffc9000dd17b01 RSI: ffffc9000dd17b50 RDI: ffffc9000dd174c8 [ 821.823857][ C1] RBP: ffffc9000dd17b50 R08: 0000000000000001 R09: 0000000000000007 [ 821.823878][ C1] R10: 0000000000000200 R11: 000000000000c75f R12: ffffc9000dd174d8 [ 821.823899][ C1] R13: ffffc9000dd17488 R14: ffffc9000dd17b78 R15: ffffc9000dd174bc [ 821.823934][ C1] ? unwind_next_frame+0x1561/0x2090 [ 821.823978][ C1] ? __mmput+0x12a/0x410 [ 821.824011][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 821.824066][ C1] arch_stack_walk+0x94/0xf0 [ 821.824115][ C1] ? mmput+0x67/0x80 [ 821.824144][ C1] ? tear_down_vmas+0x2a5/0x610 [ 821.824196][ C1] stack_trace_save+0x8e/0xc0 [ 821.824247][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 821.824301][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.824340][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 821.824374][ C1] kasan_save_stack+0x30/0x50 [ 821.824425][ C1] ? kasan_save_stack+0x30/0x50 [ 821.824478][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 821.824519][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 821.824559][ C1] ? kmem_cache_free+0x43b/0x6c0 [ 821.824601][ C1] ? tear_down_vmas+0x2a5/0x610 [ 821.824649][ C1] ? exit_mmap+0x469/0xa00 [ 821.824678][ C1] ? __mmput+0x12a/0x410 [ 821.824741][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 821.824782][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 821.824830][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 821.824870][ C1] ? tear_down_vmas+0x2a5/0x610 [ 821.824920][ C1] kmem_cache_free+0x43b/0x6c0 [ 821.824967][ C1] tear_down_vmas+0x2a5/0x610 [ 821.825024][ C1] exit_mmap+0x469/0xa00 [ 821.825057][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 821.825087][ C1] ? rcu_is_watching+0x13/0xc0 [ 821.825128][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.825174][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.825213][ C1] ? find_held_lock+0x2b/0x80 [ 821.825257][ C1] ? uprobe_clear_state+0x5f/0x250 [ 821.825298][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.825338][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 821.825391][ C1] __mmput+0x12a/0x410 [ 821.825422][ C1] mmput+0x67/0x80 [ 821.825450][ C1] do_exit+0x8b1/0x2ae0 [ 821.825487][ C1] ? __pfx___might_resched+0x10/0x10 [ 821.825545][ C1] ? __pfx_do_exit+0x10/0x10 [ 821.825589][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.825630][ C1] ? do_raw_spin_lock+0x128/0x260 [ 821.825667][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.825708][ C1] ? find_held_lock+0x2b/0x80 [ 821.825752][ C1] ? get_signal+0x7e0/0x21e0 [ 821.825786][ C1] do_group_exit+0xd5/0x2a0 [ 821.825829][ C1] get_signal+0x1ec7/0x21e0 [ 821.825861][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.825903][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.825951][ C1] ? __pfx_get_signal+0x10/0x10 [ 821.825985][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.826025][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 821.826060][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 821.826111][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 821.826166][ C1] ? find_held_lock+0x2b/0x80 [ 821.826210][ C1] ? __might_fault+0xc5/0x140 [ 821.826250][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.826295][ C1] exit_to_user_mode_loop+0x139/0x700 [ 821.826332][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 821.826372][ C1] ? rcu_is_watching+0x13/0xc0 [ 821.826416][ C1] do_syscall_64+0x661/0x790 [ 821.826451][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.826485][ C1] RIP: 0033:0x7fe96059e159 [ 821.826514][ C1] Code: Unable to access opcode bytes at 0x7fe96059e12f. [ 821.826530][ C1] RSP: 002b:00007fe96142e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 821.826565][ C1] RAX: 0000000000010106 RBX: 00007fe960826090 RCX: 00007fe96059e159 [ 821.826587][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 821.826609][ C1] RBP: 00007fe96063506b R08: 0000000000000000 R09: 0000000000000000 [ 821.826630][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 821.826651][ C1] R13: 00007fe960826128 R14: 00007fe960826090 R15: 00007ffe91e431c8 [ 821.826687][ C1] [ 822.432035][ C0] rcu: rcu_preempt kthread starved for 10477 jiffies! g72009 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 822.443078][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 822.453054][ C0] rcu: RCU grace-period kthread stack dump: [ 822.458946][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 822.472513][ C0] Call Trace: [ 822.475788][ C0] [ 822.478724][ C0] __schedule+0x1259/0x6920 [ 822.483262][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.488917][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 822.493888][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.499547][ C0] ? lock_acquire+0x1d1/0x380 [ 822.504242][ C0] ? __pfx___schedule+0x10/0x10 [ 822.509126][ C0] ? find_held_lock+0x2b/0x80 [ 822.513829][ C0] ? schedule+0x225/0x2c0 [ 822.518186][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.523934][ C0] schedule+0xdd/0x2c0 [ 822.528039][ C0] schedule_timeout+0x127/0x280 [ 822.532919][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 822.538320][ C0] ? __pfx_process_timeout+0x10/0x10 [ 822.543655][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.549309][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 822.555156][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.560812][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 822.566312][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 822.571094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.576774][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 822.582156][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 822.587168][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 822.592422][ C0] rcu_gp_kthread+0x17a/0x220 [ 822.597127][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 822.602344][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 822.608193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.613855][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.619511][ C0] ? __kthread_parkme+0x18f/0x230 [ 822.624560][ C0] ? kthread+0x13a/0x450 [ 822.628825][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 822.634033][ C0] kthread+0x373/0x450 [ 822.638135][ C0] ? __pfx_kthread+0x10/0x10 [ 822.642760][ C0] ret_from_fork+0x730/0xd60 [ 822.647367][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 822.652756][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.658435][ C0] ? __switch_to+0x800/0x10f0 [ 822.663185][ C0] ? __switch_to_asm+0x39/0x70 [ 822.667967][ C0] ? __pfx_kthread+0x10/0x10 [ 822.672676][ C0] ret_from_fork_asm+0x1a/0x30 [ 822.677478][ C0] [ 822.680495][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 822.686911][ C0] CPU: 0 UID: 0 PID: 11351 Comm: syz.1.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.697868][ C0] Tainted: [L]=SOFTLOCKUP [ 822.702198][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 822.712260][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 822.718348][ C0] Code: 00 be 03 00 00 00 5b e9 a2 df 1d 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 8c 91 80 12 <48> 8b 34 24 65 48 8b 15 70 91 80 12 48 63 c8 a9 00 01 00 ff 74 1e [ 822.737972][ C0] RSP: 0018:ffffc9000dee7230 EFLAGS: 00000202 [ 822.744093][ C0] RAX: 0000000000000002 RBX: ffff8880b8541a40 RCX: ffffffff81ff49ab [ 822.752075][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff88802e9f0000 [ 822.760050][ C0] RBP: ffff8880b8541a48 R08: 0000000000000005 R09: 0000000000000000 [ 822.768037][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 822.776020][ C0] R13: ffffed10170a8349 R14: 0000000000000001 R15: 0000000000000001 [ 822.784038][ C0] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 822.792988][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.799580][ C0] CR2: 00007f1be77cfa10 CR3: 000000004b422000 CR4: 0000000000350ef0 [ 822.807559][ C0] Call Trace: [ 822.810838][ C0] [ 822.813779][ C0] smp_call_function_many_cond+0x575/0x18c0 [ 822.819719][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 822.825131][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 822.830354][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 822.836702][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.842355][ C0] ? rcu_is_watching+0x13/0xc0 [ 822.847143][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.852802][ C0] ? trace_tlb_flush+0x14b/0x1a0 [ 822.857785][ C0] flush_tlb_mm_range+0x3c9/0x1360 [ 822.862919][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.868573][ C0] ? lock_acquire+0x1d1/0x380 [ 822.873261][ C0] ? page_table_check_clear+0x119/0x540 [ 822.878823][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 822.884387][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.890041][ C0] ? lock_acquire+0x1d1/0x380 [ 822.894732][ C0] ? do_raw_spin_lock+0x128/0x260 [ 822.899770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.905432][ C0] ? find_held_lock+0x2b/0x80 [ 822.910164][ C0] ? __pfx_folio_mark_accessed+0x10/0x10 [ 822.915823][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 822.921049][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.926707][ C0] ? arch_check_zapped_pte+0x9d/0x140 [ 822.932114][ C0] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 822.937959][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.943614][ C0] ? rcu_is_watching+0x13/0xc0 [ 822.948413][ C0] __zap_vma_range+0x22eb/0x48e0 [ 822.953431][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.959094][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 822.964418][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 822.970080][ C0] ? mas_next_slot+0xc05/0x13a0 [ 822.974983][ C0] ? srso_alias_safe_ret+0x1/0x7 [ 822.979960][ C0] unmap_vmas+0x299/0x5f0 [ 822.984336][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 822.989227][ C0] ? mas_next_slot+0xc05/0x13a0 [ 822.994118][ C0] exit_mmap+0x1ef/0xa00 [ 822.998370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.004036][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 823.008896][ C0] ? rcu_is_watching+0x13/0xc0 [ 823.013680][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.019341][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.024991][ C0] ? find_held_lock+0x2b/0x80 [ 823.029691][ C0] ? uprobe_clear_state+0x5f/0x250 [ 823.034826][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.040483][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 823.046169][ C0] __mmput+0x12a/0x410 [ 823.050427][ C0] mmput+0x67/0x80 [ 823.054156][ C0] do_exit+0x8b1/0x2ae0 [ 823.058329][ C0] ? __pfx___might_resched+0x10/0x10 [ 823.063658][ C0] ? __pfx_do_exit+0x10/0x10 [ 823.068266][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.073916][ C0] ? do_raw_spin_lock+0x128/0x260 [ 823.078959][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.084612][ C0] ? find_held_lock+0x2b/0x80 [ 823.089314][ C0] ? get_signal+0x7e0/0x21e0 [ 823.093926][ C0] do_group_exit+0xd5/0x2a0 [ 823.098461][ C0] get_signal+0x1ec7/0x21e0 [ 823.102977][ C0] ? __pfx_task_work_add+0x10/0x10 [ 823.108138][ C0] ? __pfx_get_signal+0x10/0x10 [ 823.113003][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.118655][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 823.123609][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 823.129190][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 823.135391][ C0] ? find_held_lock+0x2b/0x80 [ 823.140090][ C0] ? __might_fault+0xc5/0x140 [ 823.144787][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.150445][ C0] exit_to_user_mode_loop+0x139/0x700 [ 823.155836][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.161488][ C0] ? rcu_is_watching+0x13/0xc0 [ 823.166286][ C0] do_syscall_64+0x661/0x790 [ 823.170897][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.176806][ C0] RIP: 0033:0x7f5833d9e159 [ 823.181227][ C0] Code: Unable to access opcode bytes at 0x7f5833d9e12f. [ 823.188242][ C0] RSP: 002b:00007f5834b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.196667][ C0] RAX: 00000000000000a4 RBX: 00007f5834025fa0 RCX: 00007f5833d9e159 [ 823.204644][ C0] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 823.212620][ C0] RBP: 00007f5833e3506b R08: 0000000000000000 R09: 0000000000000000 [ 823.220600][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.228580][ C0] R13: 00007f5834026038 R14: 00007f5834025fa0 R15: 00007ffcc1339d08 [ 823.236587][ C0] [ 969.908246][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz.1.1479:11351] [ 969.908283][ C0] Modules linked in: [ 969.908303][ C0] irq event stamp: 1393658 [ 969.924924][ C0] hardirqs last enabled at (1393657): [] irqentry_exit+0x24d/0xa10 [ 969.934528][ C0] hardirqs last disabled at (1393658): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 969.945076][ C0] softirqs last enabled at (1393650): [] __irq_exit_rcu+0x16a/0x210 [ 969.954728][ C0] softirqs last disabled at (1393403): [] __irq_exit_rcu+0x16a/0x210 [ 969.964390][ C0] CPU: 0 UID: 0 PID: 11351 Comm: syz.1.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.964442][ C0] Tainted: [L]=SOFTLOCKUP [ 969.964460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 969.964482][ C0] RIP: 0010:write_comp_data+0x47/0xa0 [ 969.964546][ C0] Code: 00 01 00 ff 74 1e f6 c4 01 74 68 a9 00 00 00 0f 75 61 f7 c2 00 00 00 f0 75 59 8b 87 3c 17 00 00 85 c0 74 4f 8b 87 10 17 00 00 <83> f8 03 75 44 48 8b 87 18 17 00 00 8b bf 14 17 00 00 48 8b 30 48 [ 969.964582][ C0] RSP: 0018:ffffc9000dee7230 EFLAGS: 00000246 [ 969.964616][ C0] RAX: 0000000000000000 RBX: ffff8880b8541a40 RCX: ffffffff81ff49ab [ 969.964642][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff88802e9f0000 [ 969.964666][ C0] RBP: ffff8880b8541a48 R08: 0000000000000005 R09: 0000000000000000 [ 969.964690][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 969.964713][ C0] R13: ffffed10170a8349 R14: 0000000000000001 R15: 0000000000000001 [ 969.964740][ C0] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 969.964773][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.964799][ C0] CR2: 00007f1be77cfa10 CR3: 000000004b422000 CR4: 0000000000350ef0 [ 969.964824][ C0] Call Trace: [ 969.964837][ C0] [ 969.964850][ C0] smp_call_function_many_cond+0x59b/0x18c0 [ 969.964899][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 969.964960][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 969.965009][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 969.965054][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.965099][ C0] ? rcu_is_watching+0x13/0xc0 [ 969.965145][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.965189][ C0] ? trace_tlb_flush+0x14b/0x1a0 [ 969.965256][ C0] flush_tlb_mm_range+0x3c9/0x1360 [ 969.965301][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.965346][ C0] ? lock_acquire+0x1d1/0x380 [ 969.965380][ C0] ? page_table_check_clear+0x119/0x540 [ 969.965423][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 969.965464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.965509][ C0] ? lock_acquire+0x1d1/0x380 [ 969.965544][ C0] ? do_raw_spin_lock+0x128/0x260 [ 969.965586][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.965636][ C0] ? find_held_lock+0x2b/0x80 [ 969.965692][ C0] ? __pfx_folio_mark_accessed+0x10/0x10 [ 969.965736][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 969.965780][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.965825][ C0] ? arch_check_zapped_pte+0x9d/0x140 [ 969.965885][ C0] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 969.965947][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.965992][ C0] ? rcu_is_watching+0x13/0xc0 [ 969.966044][ C0] __zap_vma_range+0x22eb/0x48e0 [ 969.966140][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.966189][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 969.966247][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.966291][ C0] ? mas_next_slot+0xc05/0x13a0 [ 969.966340][ C0] ? srso_alias_safe_ret+0x1/0x7 [ 969.966399][ C0] unmap_vmas+0x299/0x5f0 [ 969.966463][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 969.966526][ C0] ? mas_next_slot+0xc05/0x13a0 [ 969.966591][ C0] exit_mmap+0x1ef/0xa00 [ 969.966628][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.966679][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 969.966712][ C0] ? rcu_is_watching+0x13/0xc0 [ 969.966758][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.966813][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.966858][ C0] ? find_held_lock+0x2b/0x80 [ 969.966906][ C0] ? uprobe_clear_state+0x5f/0x250 [ 969.966955][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.966999][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 969.967070][ C0] __mmput+0x12a/0x410 [ 969.967107][ C0] mmput+0x67/0x80 [ 969.967139][ C0] do_exit+0x8b1/0x2ae0 [ 969.967181][ C0] ? __pfx___might_resched+0x10/0x10 [ 969.967248][ C0] ? __pfx_do_exit+0x10/0x10 [ 969.967292][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.967337][ C0] ? do_raw_spin_lock+0x128/0x260 [ 969.967378][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.967423][ C0] ? find_held_lock+0x2b/0x80 [ 969.967471][ C0] ? get_signal+0x7e0/0x21e0 [ 969.967513][ C0] do_group_exit+0xd5/0x2a0 [ 969.967563][ C0] get_signal+0x1ec7/0x21e0 [ 969.967602][ C0] ? __pfx_task_work_add+0x10/0x10 [ 969.967672][ C0] ? __pfx_get_signal+0x10/0x10 [ 969.967712][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.967757][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 969.967798][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 969.967856][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 969.967922][ C0] ? find_held_lock+0x2b/0x80 [ 969.967970][ C0] ? __might_fault+0xc5/0x140 [ 969.968016][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.968069][ C0] exit_to_user_mode_loop+0x139/0x700 [ 969.968110][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.968154][ C0] ? rcu_is_watching+0x13/0xc0 [ 969.968204][ C0] do_syscall_64+0x661/0x790 [ 969.968247][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.968285][ C0] RIP: 0033:0x7f5833d9e159 [ 969.968313][ C0] Code: Unable to access opcode bytes at 0x7f5833d9e12f. [ 969.968331][ C0] RSP: 002b:00007f5834b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.968365][ C0] RAX: 00000000000000a4 RBX: 00007f5834025fa0 RCX: 00007f5833d9e159 [ 969.968390][ C0] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 969.968413][ C0] RBP: 00007f5833e3506b R08: 0000000000000000 R09: 0000000000000000 [ 969.968436][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.968459][ C0] R13: 00007f5834026038 R14: 00007f5834025fa0 R15: 00007ffcc1339d08 [ 969.968508][ C0] [ 969.968521][ C0] Sending NMI from CPU 0 to CPUs 1: [ 969.968558][ C1] NMI backtrace for cpu 1 [ 969.968580][ C1] CPU: 1 UID: 0 PID: 11309 Comm: syz.9.1469 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.968626][ C1] Tainted: [L]=SOFTLOCKUP [ 969.968637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 969.968656][ C1] RIP: 0010:taprio_set_budgets+0x18d/0x310 [ 969.968708][ C1] Code: 89 e8 48 c1 e8 03 42 80 3c 38 00 0f 85 54 01 00 00 49 69 45 00 e8 03 00 00 31 d2 49 f7 f6 49 89 c6 e8 c7 b9 33 f8 49 83 fc 11 <0f> 83 e8 00 00 00 be 04 00 00 00 48 89 df e8 a0 0a a6 f8 48 89 d8 [ 969.968739][ C1] RSP: 0018:ffffc90000a18d70 EFLAGS: 00000093 [ 969.968764][ C1] RAX: 0000000001000001 RBX: ffff88807f9d6c80 RCX: 0000000001000001 [ 969.968786][ C1] RDX: ffff8880784d0000 RSI: ffffffff89d854c9 RDI: ffff888036b362a0 [ 969.968808][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1006d66c54 [ 969.968828][ C1] R10: ffff888036b362a7 R11: 0000000000000000 R12: 0000000000000000 [ 969.968848][ C1] R13: ffff88807f9d6c00 R14: 0000000000000000 R15: dffffc0000000000 [ 969.968872][ C1] FS: 0000000000000000(0000) GS:ffff888123c56000(0000) knlGS:0000000000000000 [ 969.968901][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 969.968923][ C1] CR2: 0000200000404030 CR3: 000000000eb96000 CR4: 0000000000350ef0 [ 969.968945][ C1] Call Trace: [ 969.968955][ C1] [ 969.968974][ C1] advance_sched+0x66e/0xd20 [ 969.969033][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 969.969073][ C1] ? __pfx_advance_sched+0x10/0x10 [ 969.969130][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 969.969185][ C1] hrtimer_interrupt+0x441/0xaa0 [ 969.969245][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 969.969288][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 969.969343][ C1] [ 969.969353][ C1] [ 969.969365][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 969.969402][ C1] RIP: 0010:unwind_next_frame+0x1565/0x2090 [ 969.969448][ C1] Code: 08 00 00 00 4c 89 ef 4d 8d 7d 34 4c 01 f5 48 89 ee e8 cf e8 ff ff 84 c0 0f 84 f3 ed ff ff 48 89 ef e8 9f e2 ff ff 49 8d 7d 40 <48> 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c [ 969.969480][ C1] RSP: 0018:ffffc9000dd17418 EFLAGS: 00000202 [ 969.969506][ C1] RAX: ffff888026bc7201 RBX: 0000000000000001 RCX: ffffffff91e8b93e [ 969.969527][ C1] RDX: ffffc9000dd17b01 RSI: ffffc9000dd17b50 RDI: ffffc9000dd174c8 [ 969.969550][ C1] RBP: ffffc9000dd17b50 R08: 0000000000000001 R09: 0000000000000007 [ 969.969571][ C1] R10: 0000000000000200 R11: 000000000000c75f R12: ffffc9000dd174d8 [ 969.969592][ C1] R13: ffffc9000dd17488 R14: ffffc9000dd17b78 R15: ffffc9000dd174bc [ 969.969628][ C1] ? unwind_next_frame+0x1561/0x2090 [ 969.969672][ C1] ? __mmput+0x12a/0x410 [ 969.969704][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 969.969758][ C1] arch_stack_walk+0x94/0xf0 [ 969.969802][ C1] ? mmput+0x67/0x80 [ 969.969832][ C1] ? tear_down_vmas+0x2a5/0x610 [ 969.969882][ C1] stack_trace_save+0x8e/0xc0 [ 969.969932][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 969.969986][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.970025][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 969.970058][ C1] kasan_save_stack+0x30/0x50 [ 969.970109][ C1] ? kasan_save_stack+0x30/0x50 [ 969.970165][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 969.970206][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 969.970242][ C1] ? kmem_cache_free+0x43b/0x6c0 [ 969.970282][ C1] ? tear_down_vmas+0x2a5/0x610 [ 969.970331][ C1] ? exit_mmap+0x469/0xa00 [ 969.970360][ C1] ? __mmput+0x12a/0x410 [ 969.970423][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 969.970464][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 969.970512][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 969.970552][ C1] ? tear_down_vmas+0x2a5/0x610 [ 969.970601][ C1] kmem_cache_free+0x43b/0x6c0 [ 969.970649][ C1] tear_down_vmas+0x2a5/0x610 [ 969.970705][ C1] exit_mmap+0x469/0xa00 [ 969.970739][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 969.970768][ C1] ? rcu_is_watching+0x13/0xc0 [ 969.970809][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.970855][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.970895][ C1] ? find_held_lock+0x2b/0x80 [ 969.970939][ C1] ? uprobe_clear_state+0x5f/0x250 [ 969.970977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.971017][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 969.971069][ C1] __mmput+0x12a/0x410 [ 969.971099][ C1] mmput+0x67/0x80 [ 969.971132][ C1] do_exit+0x8b1/0x2ae0 [ 969.971169][ C1] ? __pfx___might_resched+0x10/0x10 [ 969.971226][ C1] ? __pfx_do_exit+0x10/0x10 [ 969.971265][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.971305][ C1] ? do_raw_spin_lock+0x128/0x260 [ 969.971342][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.971382][ C1] ? find_held_lock+0x2b/0x80 [ 969.971425][ C1] ? get_signal+0x7e0/0x21e0 [ 969.971459][ C1] do_group_exit+0xd5/0x2a0 [ 969.971502][ C1] get_signal+0x1ec7/0x21e0 [ 969.971533][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.971575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.971623][ C1] ? __pfx_get_signal+0x10/0x10 [ 969.971657][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.971697][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 969.971732][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 969.971780][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 969.971835][ C1] ? find_held_lock+0x2b/0x80 [ 969.971879][ C1] ? __might_fault+0xc5/0x140 [ 969.971919][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.971963][ C1] exit_to_user_mode_loop+0x139/0x700 [ 969.971999][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 969.972039][ C1] ? rcu_is_watching+0x13/0xc0 [ 969.972082][ C1] do_syscall_64+0x661/0x790 [ 969.972120][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.972153][ C1] RIP: 0033:0x7fe96059e159 [ 969.972176][ C1] Code: Unable to access opcode bytes at 0x7fe96059e12f. [ 969.972191][ C1] RSP: 002b:00007fe96142e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 969.972222][ C1] RAX: 0000000000010106 RBX: 00007fe960826090 RCX: 00007fe96059e159 [ 969.972243][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 969.972264][ C1] RBP: 00007fe96063506b R08: 0000000000000000 R09: 0000000000000000 [ 969.972284][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 969.972304][ C1] R13: 00007fe960826128 R14: 00007fe960826090 R15: 00007ffe91e431c8 [ 969.972339][ C1] [ 969.972552][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 971.147797][ C0] CPU: 0 UID: 0 PID: 11351 Comm: syz.1.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 971.158758][ C0] Tainted: [L]=SOFTLOCKUP [ 971.163079][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 971.173144][ C0] Call Trace: [ 971.176424][ C0] [ 971.179267][ C0] dump_stack_lvl+0x100/0x190 [ 971.183978][ C0] vpanic+0x553/0x970 [ 971.187972][ C0] ? __pfx_vpanic+0x10/0x10 [ 971.192483][ C0] ? console_srcu_read_unlock+0x41/0x60 [ 971.198049][ C0] ? console_srcu_read_unlock+0x41/0x60 [ 971.203617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.209281][ C0] panic+0xd1/0xe0 [ 971.213011][ C0] ? __pfx_panic+0x10/0x10 [ 971.217435][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.223092][ C0] ? __pfx_printk_trigger_flush+0x10/0x10 [ 971.228845][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.234525][ C0] ? wq_watchdog_touch+0xec/0x1a0 [ 971.239577][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 971.244886][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 971.250106][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 971.255595][ C0] __hrtimer_run_queues+0x13f/0x9c0 [ 971.260839][ C0] hrtimer_interrupt+0x441/0xaa0 [ 971.265829][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 971.271835][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 971.277505][ C0] [ 971.280435][ C0] [ 971.283367][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 971.289364][ C0] RIP: 0010:write_comp_data+0x47/0xa0 [ 971.294901][ C0] Code: 00 01 00 ff 74 1e f6 c4 01 74 68 a9 00 00 00 0f 75 61 f7 c2 00 00 00 f0 75 59 8b 87 3c 17 00 00 85 c0 74 4f 8b 87 10 17 00 00 <83> f8 03 75 44 48 8b 87 18 17 00 00 8b bf 14 17 00 00 48 8b 30 48 [ 971.314523][ C0] RSP: 0018:ffffc9000dee7230 EFLAGS: 00000246 [ 971.320608][ C0] RAX: 0000000000000000 RBX: ffff8880b8541a40 RCX: ffffffff81ff49ab [ 971.328582][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff88802e9f0000 [ 971.336558][ C0] RBP: ffff8880b8541a48 R08: 0000000000000005 R09: 0000000000000000 [ 971.344532][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 971.352678][ C0] R13: ffffed10170a8349 R14: 0000000000000001 R15: 0000000000000001 [ 971.360667][ C0] ? smp_call_function_many_cond+0x59b/0x18c0 [ 971.366763][ C0] smp_call_function_many_cond+0x59b/0x18c0 [ 971.372679][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 971.378087][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 971.383315][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 971.389663][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.395317][ C0] ? rcu_is_watching+0x13/0xc0 [ 971.400105][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.405762][ C0] ? trace_tlb_flush+0x14b/0x1a0 [ 971.410744][ C0] flush_tlb_mm_range+0x3c9/0x1360 [ 971.415878][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.421532][ C0] ? lock_acquire+0x1d1/0x380 [ 971.426219][ C0] ? page_table_check_clear+0x119/0x540 [ 971.431780][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 971.437340][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.442992][ C0] ? lock_acquire+0x1d1/0x380 [ 971.447682][ C0] ? do_raw_spin_lock+0x128/0x260 [ 971.452728][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.458384][ C0] ? find_held_lock+0x2b/0x80 [ 971.463878][ C0] ? __pfx_folio_mark_accessed+0x10/0x10 [ 971.469532][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 971.474748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.480401][ C0] ? arch_check_zapped_pte+0x9d/0x140 [ 971.485809][ C0] ? __pfx_arch_check_zapped_pte+0x10/0x10 [ 971.491656][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.497314][ C0] ? rcu_is_watching+0x13/0xc0 [ 971.502111][ C0] __zap_vma_range+0x22eb/0x48e0 [ 971.507134][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.512791][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 971.518109][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.523766][ C0] ? mas_next_slot+0xc05/0x13a0 [ 971.528640][ C0] ? srso_alias_safe_ret+0x1/0x7 [ 971.533697][ C0] unmap_vmas+0x299/0x5f0 [ 971.538068][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 971.542965][ C0] ? mas_next_slot+0xc05/0x13a0 [ 971.547858][ C0] exit_mmap+0x1ef/0xa00 [ 971.552112][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.557776][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 971.562549][ C0] ? rcu_is_watching+0x13/0xc0 [ 971.567338][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.573004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.578658][ C0] ? find_held_lock+0x2b/0x80 [ 971.583362][ C0] ? uprobe_clear_state+0x5f/0x250 [ 971.588498][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.594237][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 971.599918][ C0] __mmput+0x12a/0x410 [ 971.604003][ C0] mmput+0x67/0x80 [ 971.607732][ C0] do_exit+0x8b1/0x2ae0 [ 971.611906][ C0] ? __pfx___might_resched+0x10/0x10 [ 971.617234][ C0] ? __pfx_do_exit+0x10/0x10 [ 971.621844][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.627498][ C0] ? do_raw_spin_lock+0x128/0x260 [ 971.632543][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.638198][ C0] ? find_held_lock+0x2b/0x80 [ 971.642903][ C0] ? get_signal+0x7e0/0x21e0 [ 971.647516][ C0] do_group_exit+0xd5/0x2a0 [ 971.652058][ C0] get_signal+0x1ec7/0x21e0 [ 971.656592][ C0] ? __pfx_task_work_add+0x10/0x10 [ 971.661747][ C0] ? __pfx_get_signal+0x10/0x10 [ 971.666614][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.672268][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 971.677225][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 971.682813][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 971.689039][ C0] ? find_held_lock+0x2b/0x80 [ 971.693758][ C0] ? __might_fault+0xc5/0x140 [ 971.698456][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.704120][ C0] exit_to_user_mode_loop+0x139/0x700 [ 971.709517][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.715176][ C0] ? rcu_is_watching+0x13/0xc0 [ 971.719992][ C0] do_syscall_64+0x661/0x790 [ 971.724604][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.730524][ C0] RIP: 0033:0x7f5833d9e159 [ 971.734956][ C0] Code: Unable to access opcode bytes at 0x7f5833d9e12f. [ 971.741982][ C0] RSP: 002b:00007f5834b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.750413][ C0] RAX: 00000000000000a4 RBX: 00007f5834025fa0 RCX: 00007f5833d9e159 [ 971.758393][ C0] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 971.766370][ C0] RBP: 00007f5833e3506b R08: 0000000000000000 R09: 0000000000000000 [ 971.774346][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.782323][ C0] R13: 00007f5834026038 R14: 00007f5834025fa0 R15: 00007ffcc1339d08 [ 971.790328][ C0] [ 972.972527][ C0] Shutting down cpus with NMI [ 972.977345][ C0] Kernel Offset: disabled [ 972.981674][ C0] Rebooting in 86400 seconds..