last executing test programs: 4m50.683532476s ago: executing program 32 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x8, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000480)='./bus\x00') r0 = open(&(0x7f00000004c0)='./file0\x00', 0x48040, 0x84) truncate(&(0x7f0000000500)='./file0\x00', 0x1) finit_module(r0, 0x0, 0x2) 3m32.141104521s ago: executing program 5 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000540)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)="77e9230b00082b2908040a0600000055460acccdf602065b7c5547d9cd10659f885237f6ea23f345751d07f3", 0x2c}], 0x1}, 0x20008b88) 3m30.724264156s ago: executing program 2 (id=297): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f00000008c0)='bpf_lsm_audit_rule_init\x00') r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x12) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 3m25.522674466s ago: executing program 5 (id=301): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) unshare(0x22020600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(0xffffffffffffffff, &(0x7f0000000880)=""/138, 0x8a) 3m24.27118417s ago: executing program 2 (id=304): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44085}, 0x0) open(0x0, 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000006c0)='dctcp', 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$usbfs(0x0, 0x9, 0x553a01) 3m23.683432475s ago: executing program 5 (id=305): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1005004, 0x0, 0x0, 0x0, &(0x7f0000000f80)) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000fc0)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000010c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000011c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001200), 0x10106, 0x2, 0x0) clock_gettime(0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001240)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='status\x00') lseek(r3, 0x10000000005, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) open(0x0, 0x149040, 0x40) removexattr(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000013c0), 0x8) listen(r4, 0x5) 3m22.253089061s ago: executing program 2 (id=306): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r6 = memfd_create(&(0x7f0000000100)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r6, 0x2000000) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000005c0)={r6, 0x1f, 0x0, 0x1000000}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000240)=@ethtool_cmd={0x1, 0x3, 0x4, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x8, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x12, 0xffffffffffffffff, 0x108000) 3m19.480995439s ago: executing program 2 (id=309): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m17.022804794s ago: executing program 2 (id=314): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcl816\x00', [0x100, 0xa7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x3, 0x0, 0x1, 0xff, 0xfffffffa, 0xfffffffb, 0x9, 0x407f, 0x7fffffff, 0x89, 0xcaa0, 0x5, 0x20001e58, 0x6, 0x34, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff7]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) ppoll(&(0x7f00000009c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m16.726446214s ago: executing program 5 (id=316): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1000040, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0xee00, @ANYRES64, @ANYRESOCT, @ANYRES16, @ANYBLOB="2efa45d07f38b38f65c3302f160096b93e33bc2a39e75ce2bf5e7ceeda077daed08c407db98b8f9363b0808034743b787774eea61eecd30de8ebd8e6b9fbec2cd2d3771434ab686ac196100673d68102a8f2df971bfd99da8b44007a2b1d022dd8d381aff46d72eb53d169ec810ac95ba6cada7eff252fa4be6d3cbd2a0c9ee16a7d4c5af1940e8b5b207d1f227e8ef61021c7380344d113614afdf3657ab8284ccca68a2ac11d056ad98b63d8df8880253e38f31908cfe4809f8bf65e5623ff8f3f6202d2369daa1c9bbfdfd212ae354f39c2423a2c0865f74a4ce086da4d9918f2e185"], 0x1, 0x206, &(0x7f0000000480)="$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") rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wlan0\x00', 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) pipe(&(0x7f00000003c0)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) sendmmsg$alg(r4, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) 3m14.515208799s ago: executing program 2 (id=319): socket$inet6(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) preadv(r1, &(0x7f0000003980)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/201, 0xc9}, {&(0x7f0000002480)=""/203, 0xcb}, {&(0x7f0000002580)=""/144, 0x90}, {&(0x7f0000002640)=""/60, 0x3c}, {&(0x7f0000002680)=""/165, 0xa5}, {&(0x7f0000002740)=""/170, 0xaa}, {&(0x7f0000002800)=""/95, 0x5f}, {&(0x7f0000002880)=""/239, 0xef}], 0x9, 0x4, 0x9) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000380)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r7, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@generic={0x4, 0x3, 0x9, 0x9, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x991c}]}}]}, 0x3c}}, 0x0) 3m14.401697324s ago: executing program 5 (id=322): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x1214040, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8880, 0x85) getdents64(r1, 0x0, 0x4f) close_range(r0, 0xffffffffffffffff, 0x0) 3m11.938547224s ago: executing program 5 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2901, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[], 0x16) 2m59.393609937s ago: executing program 33 (id=319): socket$inet6(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) preadv(r1, &(0x7f0000003980)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/201, 0xc9}, {&(0x7f0000002480)=""/203, 0xcb}, {&(0x7f0000002580)=""/144, 0x90}, {&(0x7f0000002640)=""/60, 0x3c}, {&(0x7f0000002680)=""/165, 0xa5}, {&(0x7f0000002740)=""/170, 0xaa}, {&(0x7f0000002800)=""/95, 0x5f}, {&(0x7f0000002880)=""/239, 0xef}], 0x9, 0x4, 0x9) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000380)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r7, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@generic={0x4, 0x3, 0x9, 0x9, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x991c}]}}]}, 0x3c}}, 0x0) 2m54.184045224s ago: executing program 34 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2901, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[], 0x16) 2m49.802443019s ago: executing program 6 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) unshare(0x2040400) fcntl$setownex(r0, 0xf, &(0x7f0000000380)={0x906053ac9589dc1a}) 2m49.11385725s ago: executing program 6 (id=357): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x60, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000d86dd60"], 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) clock_getres(0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x190, 0x48001052, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) 2m42.378793751s ago: executing program 0 (id=368): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x6, @local, 0x4e20, 0x0, 'wlc\x00', 0x11, 0x12c, 0x58}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x6, @local, 0x4e20, 0x0, 'rr\x00', 0x1, 0x12c, 0xffffffff}, {@remote, 0x4e20, 0x0, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10) 2m41.944375676s ago: executing program 0 (id=369): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.474852637s ago: executing program 0 (id=371): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1df) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000180), 0xfa0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./config\x00', &(0x7f0000000580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='2\n', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2m41.305474153s ago: executing program 6 (id=372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44085}, 0x0) open(0x0, 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$usbfs(0x0, 0x9, 0x553a01) 2m39.685415401s ago: executing program 0 (id=375): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x100000b3, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x2, 0x8, 0xffffffff}]}, 0x10) 2m39.488727017s ago: executing program 6 (id=377): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m38.912995141s ago: executing program 6 (id=378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) unshare(0x2040400) fcntl$setownex(r0, 0xf, &(0x7f0000000380)={0x906053ac9589dc1a}) 2m37.811439915s ago: executing program 0 (id=381): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.622709554s ago: executing program 6 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000009b40)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xff}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2m36.894533586s ago: executing program 0 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = fanotify_init(0xef0, 0x40000) fanotify_mark(r3, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) 2m22.073812548s ago: executing program 35 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000009b40)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xff}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2m21.135401095s ago: executing program 36 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102392, 0x18ff8) r3 = fanotify_init(0xef0, 0x40000) fanotify_mark(r3, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x39d) 22.450317615s ago: executing program 7 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008b}, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2020001, &(0x7f0000019a40)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) mprotect(&(0x7f000086f000/0x4000)=nil, 0x4000, 0x8) read$msr(r3, &(0x7f0000000740)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019740)=0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 20.938924736s ago: executing program 7 (id=605): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8018, &(0x7f0000000140)={[{@uni_xlate}, {@shortname_win95}, {@rodir}, {}, {@utf8}, {@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@gid}, {@utf8}, {@rodir}]}, 0x7, 0x2a6, &(0x7f00000004c0)="$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") mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x90, 0x0) 17.758496002s ago: executing program 3 (id=610): socket(0x11, 0x1, 0x800) syz_open_dev$vim2m(&(0x7f0000000640), 0x10002, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000900)='./config\x00', &(0x7f0000000940)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000cc0)='WINNCM\n\x00', 0x8) 17.587254177s ago: executing program 3 (id=612): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0xd8}}, 0x4000040) unshare(0x22020600) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000980), 0x100000005, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000a00), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a40)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x474c, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x900) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockname$packet(r3, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8c) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 16.852431315s ago: executing program 1 (id=616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000500000014000180060001000a0000000800050001000000500002801400010000000000000006000200500000000800030000000000080004000100000008000500000000000800060000050000000100000006000e004e2100"/111], 0x78}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 16.830726791s ago: executing program 3 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008b}, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2020001, &(0x7f0000019a40)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) mprotect(&(0x7f000086f000/0x4000)=nil, 0x4000, 0x8) read$msr(r3, &(0x7f0000000740)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019740)=0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 15.963741641s ago: executing program 4 (id=618): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)="07e0", 0x2}], 0x1}}], 0x1, 0x8000) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.866203641s ago: executing program 3 (id=621): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) syz_usb_disconnect(r1) 13.795979817s ago: executing program 1 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x1d, r3}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4640}, 0x2}, 0x0) capset(&(0x7f0000000240)={0x20071026, r0}, &(0x7f0000000280)={0x7fff, 0x401, 0x38a, 0x190adc90, 0x80000000, 0x7a1a}) io_uring_enter(0xffffffffffffffff, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 13.207714942s ago: executing program 8 (id=623): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004740), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004780)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004800)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000004840), 0x2, 0x4a102) writev(r0, &(0x7f0000004880)=[{&(0x7f00000048c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000006900)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 13.066865446s ago: executing program 9 (id=624): socket(0x11, 0x1, 0x800) syz_open_dev$vim2m(0x0, 0x10002, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000900)='./config\x00', &(0x7f0000000940)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000cc0)='WINNCM\n\x00', 0x8) 12.852213928s ago: executing program 9 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x54) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='system.posix_acl_access\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) clock_adjtime(0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='sys/class/net/bridge0/bridge/multicast_querier\x00', 0x1, 0x0) write$tun(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000005c0)=[@acquire={0x40046302}]}) write$khugepaged_scan(r4, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000001b40)) 12.245157125s ago: executing program 1 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$netlink(0x10, 0x3, 0xc) socket(0x1, 0x80802, 0x0) bind$netlink(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3b, 0x28, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x2, 0x7}}}}}}, 0x3e) 11.698998729s ago: executing program 4 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @random="0242ac110002"}, @IFLA_CARRIER={0x5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 10.748128516s ago: executing program 9 (id=628): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000080)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f00000000c0)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIV', 0x4, 0xc00) pwrite64(r0, &(0x7f0000000140)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000180)='12345678-1234-1234', 0x12, 0xc30) pwrite64(r0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 10.635246517s ago: executing program 8 (id=629): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x5, 0xe0, &(0x7f0000000340)=""/224, 0x40f00, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xe}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x10}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000800)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000000840)="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"}) 10.577446722s ago: executing program 7 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0d0000000a00000004"], 0x50) close(r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r4, &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}], 0x18, 0x48000}}], 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x78) 10.28324968s ago: executing program 4 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0xb, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000700)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x414, @mcast2, 0x9}}}, 0x30) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd2a, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x28}}, 0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 10.215532741s ago: executing program 9 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) getpgid(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000019340)=0xc74, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000019200)='./proc\x00', &(0x7f0000019240)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000019280)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$P9_RWALK(r3, 0x0, 0xffffff28) 9.269718075s ago: executing program 8 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1}, 0x0) 9.231496366s ago: executing program 3 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008b}, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2020001, &(0x7f0000019a40)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) mprotect(&(0x7f000086f000/0x4000)=nil, 0x4000, 0x8) read$msr(r3, &(0x7f0000000740)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019740)=0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 8.500962958s ago: executing program 4 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) io_setup(0x2, &(0x7f0000000000)=0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_destroy(r3) 8.361856372s ago: executing program 7 (id=636): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.848563284s ago: executing program 1 (id=637): socket(0x11, 0x1, 0x800) syz_open_dev$vim2m(0x0, 0x10002, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f0000000900)='./config\x00', &(0x7f0000000940)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000cc0)='WINNCM\n\x00', 0x8) 7.146802327s ago: executing program 8 (id=638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r1 = getpid() brk(0x8000000000000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000080)=0x9, 0x4) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 'nicvf0\x00'}) 6.978618743s ago: executing program 4 (id=639): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x80002c1, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000680)='./file1/file0\x00', 0xf000010, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) copy_file_range(r3, 0x0, r3, &(0x7f0000000500)=0xffff, 0x9, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6.44322025s ago: executing program 9 (id=640): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'vlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002d80)={0x4, 0x0, r1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000002dc0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002e80)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_pool='delete 0'}}) 5.342768958s ago: executing program 8 (id=641): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004740), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004780)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004800)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000004840), 0x2, 0x4a102) writev(r0, &(0x7f0000004880)=[{&(0x7f00000048c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000006900)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 5.263586365s ago: executing program 7 (id=642): syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000340)='./file1\x00', 0x10800, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f00000003c0)="$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") 5.139398378s ago: executing program 1 (id=643): socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) io_setup(0x6, &(0x7f00000004c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_async', 0x1a1081, 0x4) syz_open_procfs(0x0, &(0x7f0000000540)='fd\x00') io_submit(r5, 0x1, &(0x7f0000000580)=[0x0]) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000006c0)=0x1111401, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20006094) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000800)=0x4000, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 4.908323111s ago: executing program 9 (id=644): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000080)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f00000000c0)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHE', 0x6, 0xc00) pwrite64(r0, &(0x7f0000000140)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000180)='12345678-1234-1234', 0x12, 0xc30) pwrite64(r0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 1.376152127s ago: executing program 7 (id=645): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x1ff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x1008840, 0x0) 1.373314206s ago: executing program 4 (id=646): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x5, 0xe0, &(0x7f0000000340)=""/224, 0x40f00, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xe}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x10}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000800)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000000840)="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"}) 994.988416ms ago: executing program 3 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='test,0x8000000000000000,0x1000', 0x1e) 107.961948ms ago: executing program 8 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000280)={0x0, 0x0}) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0d0000000a00000004"], 0x50) close(r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r4, &(0x7f00000008c0)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}], 0x18, 0x48000}}], 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x13, &(0x7f0000000bc0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000c80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001400)=""/222, 0x0, 0x8}, 0x78) 0s ago: executing program 1 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$netlink(0x10, 0x3, 0xc) socket(0x1, 0x80802, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3b, 0x28, 0x66, 0x0, 0x0, 0x1, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x2, 0x7}}}}}}, 0x3e) kernel console output (not intermixed with test programs): block 0x4de: -5 [ 183.194434][ T6748] SQUASHFS error: Failed to read block 0x4de: -5 [ 183.194555][ T6748] SQUASHFS error: Failed to read block 0x4de: -5 [ 183.194671][ T6748] SQUASHFS error: Failed to read block 0x4de: -5 [ 183.194795][ T6748] SQUASHFS error: Failed to read block 0x4de: -5 [ 183.194913][ T6748] SQUASHFS error: Failed to read block 0x4de: -5 [ 183.394006][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.426329][ T10] usb 1-1: device descriptor read/8, error -71 [ 183.499851][ T6756] netlink: 104 bytes leftover after parsing attributes in process `syz.3.219'. [ 183.666336][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.688173][ T10] usb 1-1: device descriptor read/8, error -71 [ 183.794795][ T10] usb usb1-port1: unable to enumerate USB device [ 183.912336][ T6768] loop6: detected capacity change from 0 to 1024 [ 184.299593][ T6781] netlink: 'syz.3.226': attribute type 39 has an invalid length. [ 184.606560][ T4946] Bluetooth: hci5: connection err: -111 [ 184.710790][ T6785] loop6: detected capacity change from 0 to 1024 [ 184.908380][ T6785] EXT4-fs: Ignoring removed bh option [ 184.944624][ T5796] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 185.192348][ T5796] usb 6-1: New USB device found: idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 185.246862][ T5796] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 185.246892][ T5796] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.246914][ T5796] usb 6-1: config 1 has no interface number 0 [ 185.246960][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.299284][ T6785] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 185.326141][ T5796] rndis_host 6-1:1.236: skipping garbage [ 185.326162][ T5796] rndis_host 6-1:1.236: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 185.381983][ T5796] cdc_acm 6-1:1.236: skipping garbage [ 185.406734][ T6785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.808274][ T6785] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 186.278095][ T6157] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.234530][ T5796] usb 6-1: USB disconnect, device number 6 [ 187.369046][ T6820] loop6: detected capacity change from 0 to 4096 [ 187.392750][ T6820] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 187.598653][ T6820] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 187.875380][ T6833] loop4: detected capacity change from 0 to 1024 [ 188.064654][ T5796] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.854749][ T5796] usb 3-1: device descriptor read/64, error -71 [ 190.094138][ T5796] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 190.284777][ T5796] usb 3-1: device descriptor read/64, error -71 [ 190.418443][ T5796] usb usb3-port1: attempt power cycle [ 193.677352][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.677464][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.925764][ T6867] 9pnet_fd: p9_fd_create_tcp (6867): problem connecting socket to 127.0.0.1 [ 195.902807][ T6880] loop0: detected capacity change from 0 to 1024 [ 196.826498][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 197.024110][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.183990][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 197.186807][ T29] usb 3-1: New USB device found: idVendor=04e8, idProduct=a101, bcdDevice=4.48 [ 197.186848][ T29] usb 3-1: no configurations [ 197.186863][ T29] usb 3-1: can't read configurations, error -22 [ 197.312801][ T29] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.472662][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 197.475455][ T29] usb 3-1: New USB device found: idVendor=04e8, idProduct=a101, bcdDevice=4.48 [ 197.475497][ T29] usb 3-1: no configurations [ 197.475511][ T29] usb 3-1: can't read configurations, error -22 [ 197.476046][ T29] usb usb3-port1: attempt power cycle [ 197.812681][ T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.835704][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 197.836402][ T29] usb 3-1: New USB device found: idVendor=04e8, idProduct=a101, bcdDevice=4.48 [ 197.836443][ T29] usb 3-1: no configurations [ 197.836457][ T29] usb 3-1: can't read configurations, error -22 [ 197.889113][ T6915] 9pnet_fd: p9_fd_create_tcp (6915): problem connecting socket to 127.0.0.1 [ 197.974415][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 198.004290][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 198.022133][ T29] usb 3-1: New USB device found: idVendor=04e8, idProduct=a101, bcdDevice=4.48 [ 198.022175][ T29] usb 3-1: no configurations [ 198.022190][ T29] usb 3-1: can't read configurations, error -22 [ 198.023702][ T29] usb usb3-port1: unable to enumerate USB device [ 199.445207][ T6935] loop3: detected capacity change from 0 to 1024 [ 200.616415][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.290'. [ 201.590310][ T2019] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 202.449809][ T6351] syz.3.120 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 202.449849][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: syz.3.120 Not tainted syzkaller #0 PREEMPT(full) [ 202.449879][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 202.449894][ T6351] Call Trace: [ 202.449904][ T6351] [ 202.449914][ T6351] dump_stack_lvl+0xe8/0x150 [ 202.449961][ T6351] dump_header+0xd3/0x4b0 [ 202.450002][ T6351] oom_kill_process+0x3ab/0x9e0 [ 202.450044][ T6351] out_of_memory+0xfb1/0x13b0 [ 202.450076][ T6351] ? try_charge_memcg+0xc0d/0x15e0 [ 202.450116][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.450163][ T6351] ? __pfx_out_of_memory+0x10/0x10 [ 202.450194][ T6351] ? do_raw_spin_unlock+0xf5/0x200 [ 202.450241][ T6351] try_charge_memcg+0xcc3/0x15e0 [ 202.450281][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.450334][ T6351] ? __pfx_try_charge_memcg+0x10/0x10 [ 202.450373][ T6351] ? lock_acquire+0x115/0x350 [ 202.450414][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.450453][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.450487][ T6351] ? charge_memcg+0x47/0x310 [ 202.450531][ T6351] charge_memcg+0x1dd/0x310 [ 202.450574][ T6351] __mem_cgroup_charge+0x25/0x80 [ 202.450614][ T6351] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 202.450652][ T6351] ? filemap_get_entry+0xcd/0x3f0 [ 202.450692][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.450729][ T6351] ? __pfx_filemap_get_entry+0x10/0x10 [ 202.450766][ T6351] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 202.450809][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.450852][ T6351] shmem_get_folio_gfp+0x594/0x1330 [ 202.450907][ T6351] shmem_write_begin+0x16c/0x330 [ 202.450953][ T6351] generic_perform_write+0x2d5/0x8e0 [ 202.451009][ T6351] ? __pfx_generic_perform_write+0x10/0x10 [ 202.451049][ T6351] ? down_write+0x166/0x200 [ 202.451081][ T6351] ? generic_write_checks_count+0x41a/0x520 [ 202.451131][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.451161][ T6351] ? file_update_time_flags+0x2d5/0x440 [ 202.451204][ T6351] shmem_file_write_iter+0xf8/0x120 [ 202.451252][ T6351] __kernel_write_iter+0x44a/0x8f0 [ 202.451294][ T6351] ? __pfx___kernel_write_iter+0x10/0x10 [ 202.451327][ T6351] ? get_dump_page+0x1e6/0x410 [ 202.451371][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.451401][ T6351] ? __asan_memset+0x22/0x50 [ 202.451432][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.451462][ T6351] ? iov_iter_bvec+0xb8/0x180 [ 202.451495][ T6351] dump_user_range+0x715/0xca0 [ 202.451547][ T6351] ? __pfx_dump_user_range+0x10/0x10 [ 202.451594][ T6351] ? __pfx_writenote+0x10/0x10 [ 202.451629][ T6351] ? elf_core_dump+0x28d0/0x3a70 [ 202.451670][ T6351] elf_core_dump+0x346a/0x3a70 [ 202.451726][ T6351] ? __pfx_elf_core_dump+0x10/0x10 [ 202.451755][ T6351] ? kasan_save_track+0x4f/0x80 [ 202.451791][ T6351] ? do_coredump+0x4ef0/0x6a60 [ 202.451819][ T6351] ? vfs_coredump+0xac3/0x10c0 [ 202.451846][ T6351] ? get_signal+0x11d1/0x1430 [ 202.451880][ T6351] ? arch_do_signal_or_restart+0xbb/0x860 [ 202.451905][ T6351] ? irqentry_exit+0x348/0x9b0 [ 202.451932][ T6351] ? asm_exc_page_fault+0x26/0x30 [ 202.452014][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452044][ T6351] ? lock_acquire+0x115/0x350 [ 202.452078][ T6351] ? 0xffffffffff600000 [ 202.452109][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452148][ T6351] do_coredump+0x5ed1/0x6a60 [ 202.452212][ T6351] ? __pfx_do_coredump+0x10/0x10 [ 202.452251][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452289][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452319][ T6351] ? __lock_acquire+0x747/0x2de0 [ 202.452369][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452399][ T6351] ? __lock_acquire+0x747/0x2de0 [ 202.452451][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452481][ T6351] ? lock_acquire+0x115/0x350 [ 202.452521][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452552][ T6351] ? lock_acquire+0x115/0x350 [ 202.452592][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452627][ T6351] ? is_bpf_text_address+0x26/0x2b0 [ 202.452661][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452691][ T6351] ? is_bpf_text_address+0x292/0x2b0 [ 202.452718][ T6351] ? is_bpf_text_address+0x26/0x2b0 [ 202.452749][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452779][ T6351] ? kernel_text_address+0xa5/0xe0 [ 202.452814][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452844][ T6351] ? __kernel_text_address+0xd/0x30 [ 202.452876][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.452906][ T6351] ? unwind_get_return_address+0x4d/0x90 [ 202.452944][ T6351] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 202.452978][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.453008][ T6351] ? arch_stack_walk+0xfb/0x150 [ 202.453058][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.453088][ T6351] ? stack_trace_save+0xa9/0x100 [ 202.453121][ T6351] ? __pfx_stack_trace_save+0x10/0x10 [ 202.453152][ T6351] ? __lock_acquire+0x747/0x2de0 [ 202.453188][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.453218][ T6351] ? stack_depot_save_flags+0x33/0x810 [ 202.453262][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.453292][ T6351] ? kasan_save_track+0x4f/0x80 [ 202.453324][ T6351] ? kasan_save_track+0x3e/0x80 [ 202.453356][ T6351] ? __kasan_kmalloc+0x93/0xb0 [ 202.453391][ T6351] ? __kmalloc_noprof+0x366/0x710 [ 202.453421][ T6351] ? security_prepare_creds+0x52/0x360 [ 202.453454][ T6351] ? prepare_creds+0x57d/0x820 [ 202.453486][ T6351] ? vfs_coredump+0x28a/0x10c0 [ 202.453513][ T6351] ? get_signal+0x11d1/0x1430 [ 202.453546][ T6351] ? arch_do_signal_or_restart+0xbb/0x860 [ 202.453571][ T6351] ? irqentry_exit+0x348/0x9b0 [ 202.453597][ T6351] ? asm_exc_page_fault+0x26/0x30 [ 202.453656][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.453686][ T6351] ? __lock_acquire+0x747/0x2de0 [ 202.453752][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.453782][ T6351] ? do_raw_spin_lock+0x12b/0x2f0 [ 202.453809][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.453845][ T6351] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.453879][ T6351] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.453925][ T6351] vfs_coredump+0xac3/0x10c0 [ 202.453970][ T6351] ? __pfx_vfs_coredump+0x10/0x10 [ 202.454038][ T6351] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.454084][ T6351] get_signal+0x11d1/0x1430 [ 202.454145][ T6351] arch_do_signal_or_restart+0xbb/0x860 [ 202.454176][ T6351] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 202.454236][ T6351] irqentry_exit+0x348/0x9b0 [ 202.454262][ T6351] ? trace_irq_disable+0x3b/0x140 [ 202.454308][ T6351] asm_exc_page_fault+0x26/0x30 [ 202.454334][ T6351] RIP: 0033:0x7fc1f2854cb7 [ 202.454357][ T6351] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 202.454377][ T6351] RSP: 002b:00007fc1f37f3120 EFLAGS: 00010202 [ 202.454400][ T6351] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fc1f299f559 [ 202.454417][ T6351] RDX: 00007fc1f37f3140 RSI: 00007fc1f37f3270 RDI: 000000000000000b [ 202.454434][ T6351] RBP: 00007fc1f2a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 202.454450][ T6351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.454466][ T6351] R13: 00007fc1f2c26038 R14: 00007fc1f2c25fa0 R15: 00007ffef392cec8 [ 202.454507][ T6351] [ 202.493197][ T6351] memory: usage 307200kB, limit 307200kB, failcnt 25331 [ 202.493217][ T6351] memory+swap: usage 419720kB, limit 9007199254740988kB, failcnt 0 [ 202.493240][ T6351] kmem: usage 2428kB, limit 9007199254740988kB, failcnt 0 [ 202.493256][ T6351] Memory cgroup stats for /syz3: [ 202.493579][ T6351] cache 311726080 [ 202.493590][ T6351] rss 348160 [ 202.493599][ T6351] rss_huge 0 [ 202.493608][ T6351] shmem 311726080 [ 202.493617][ T6351] mapped_file 209952768 [ 202.493627][ T6351] dirty 0 [ 202.493635][ T6351] writeback 0 [ 202.493644][ T6351] workingset_refault_anon 19 [ 202.493653][ T6351] workingset_refault_file 543 [ 202.493663][ T6351] swap 115220480 [ 202.493672][ T6351] swapcached 12288 [ 202.493708][ T6351] pgpgin 164513 [ 202.493717][ T6351] pgpgout 88320 [ 202.493726][ T6351] pgfault 85825 [ 202.493735][ T6351] pgmajfault 13 [ 202.493744][ T6351] inactive_anon 78794752 [ 202.493754][ T6351] active_anon 233291776 [ 202.493763][ T6351] inactive_file 0 [ 202.493772][ T6351] active_file 0 [ 202.493781][ T6351] unevictable 0 [ 202.493789][ T6351] hierarchical_memory_limit 314572800 [ 202.493800][ T6351] hierarchical_memsw_limit 9223372036854771712 [ 202.493811][ T6351] total_cache 311726080 [ 202.493820][ T6351] total_rss 348160 [ 202.493856][ T6351] total_rss_huge 0 [ 202.493865][ T6351] total_shmem 311726080 [ 202.493874][ T6351] total_mapped_file 209952768 [ 202.493884][ T6351] total_dirty 0 [ 202.493893][ T6351] total_writeback 0 [ 202.493902][ T6351] total_workingset_refault_anon 19 [ 202.493912][ T6351] total_workingset_refault_file 543 [ 202.493923][ T6351] total_swap 115220480 [ 202.493932][ T6351] total_swapcached 12288 [ 202.493941][ T6351] total_pgpgin 164513 [ 202.493951][ T6351] total_pgpgout 88320 [ 202.493960][ T6351] total_pgfault 85825 [ 202.493969][ T6351] total_pgmajfault 13 [ 202.494005][ T6351] total_inactive_anon 78794752 [ 202.494015][ T6351] total_active_anon 233291776 [ 202.494024][ T6351] total_inactive_file 0 [ 202.494034][ T6351] total_active_file 0 [ 202.494043][ T6351] total_unevictable 0 [ 202.494052][ T6351] anon_cost 0 [ 202.494060][ T6351] file_cost 0 [ 202.494070][ T6351] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.91,pid=6201,uid=0 [ 202.494831][ T6351] Memory cgroup out of memory: Killed process 6201 (syz.3.91) total-vm:200588kB, anon-rss:1272kB, file-rss:20676kB, shmem-rss:124284kB, UID:0 pgtables:368kB oom_score_adj:1000 [ 202.578984][ T2019] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.583689][ T2019] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 202.583729][ T2019] usb 5-1: no configurations [ 202.583743][ T2019] usb 5-1: can't read configurations, error -22 [ 202.946991][ T5640] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 202.947026][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 202.947052][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 202.947067][ T5640] Call Trace: [ 202.947077][ T5640] [ 202.947087][ T5640] dump_stack_lvl+0xe8/0x150 [ 202.947133][ T5640] dump_header+0xd3/0x4b0 [ 202.947173][ T5640] oom_kill_process+0x3ab/0x9e0 [ 202.947213][ T5640] out_of_memory+0xfb1/0x13b0 [ 202.947251][ T5640] ? try_charge_memcg+0xc0d/0x15e0 [ 202.947306][ T5640] ? __pfx_out_of_memory+0x10/0x10 [ 202.947337][ T5640] ? do_raw_spin_unlock+0xf5/0x200 [ 202.947377][ T5640] try_charge_memcg+0xcc3/0x15e0 [ 202.947439][ T5640] ? __pfx_try_charge_memcg+0x10/0x10 [ 202.947477][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.947517][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.947556][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.947589][ T5640] ? charge_memcg+0x47/0x310 [ 202.947631][ T5640] charge_memcg+0x1dd/0x310 [ 202.947674][ T5640] __mem_cgroup_charge+0x25/0x80 [ 202.947712][ T5640] filemap_add_folio+0x140/0x4e0 [ 202.947752][ T5640] __filemap_get_folio_mpol+0x4fa/0xff0 [ 202.947799][ T5640] filemap_fault+0xa8b/0x13b0 [ 202.947841][ T5640] ? filemap_map_pages+0x1d1/0x2170 [ 202.947881][ T5640] ? __pfx_filemap_fault+0x10/0x10 [ 202.947922][ T5640] ? __pfx_filemap_map_pages+0x10/0x10 [ 202.947957][ T5640] ? lock_acquire+0x115/0x350 [ 202.947997][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.948032][ T5640] __do_fault+0x138/0x2a0 [ 202.948063][ T5640] ? do_pte_missing+0x139f/0x3570 [ 202.948092][ T5640] do_pte_missing+0x21d2/0x3570 [ 202.948132][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.948168][ T5640] ? handle_mm_fault+0xf1/0x3750 [ 202.948214][ T5640] handle_mm_fault+0x1a53/0x3750 [ 202.948272][ T5640] ? handle_mm_fault+0xf1/0x3750 [ 202.948326][ T5640] ? __pfx_handle_mm_fault+0x10/0x10 [ 202.948364][ T5640] ? lock_vma_under_rcu+0x45a/0x500 [ 202.948389][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.948448][ T5640] do_user_addr_fault+0xb35/0x1480 [ 202.948494][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.948523][ T5640] ? trace_page_fault_user+0x84/0x1e0 [ 202.948558][ T5640] exc_page_fault+0x6a/0xc0 [ 202.948588][ T5640] asm_exc_page_fault+0x26/0x30 [ 202.948612][ T5640] RIP: 0033:0x7fc1f286d411 [ 202.948635][ T5640] Code: 85 65 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a3 83 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 9c 82 ee 00 48 01 d1 [ 202.948655][ T5640] RSP: 002b:00007ffef392d230 EFLAGS: 00010246 [ 202.948678][ T5640] RAX: 0000001b34624000 RBX: 000000000000009a RCX: 0000000000031128 [ 202.948694][ T5640] RDX: 0000000002650f80 RSI: 00007ffef392d2c0 RDI: 0000000000000001 [ 202.948711][ T5640] RBP: 00007ffef392d26c R08: 000000000922a3f3 R09: 3fffffffffffffff [ 202.948729][ T5640] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 202.948746][ T5640] R13: 00000000000927c0 R14: 0000000000030fa8 R15: 00007ffef392d2c0 [ 202.948785][ T5640] [ 203.003629][ T5640] memory: usage 307200kB, limit 307200kB, failcnt 25401 [ 203.003650][ T5640] memory+swap: usage 419720kB, limit 9007199254740988kB, failcnt 0 [ 203.003667][ T5640] kmem: usage 2428kB, limit 9007199254740988kB, failcnt 0 [ 203.003682][ T5640] Memory cgroup stats for /syz3: [ 203.003857][ T5640] cache 311726080 [ 203.003868][ T5640] rss 348160 [ 203.003876][ T5640] rss_huge 0 [ 203.003885][ T5640] shmem 311726080 [ 203.003894][ T5640] mapped_file 205778944 [ 203.003903][ T5640] dirty 0 [ 203.003912][ T5640] writeback 0 [ 203.003920][ T5640] workingset_refault_anon 19 [ 203.003930][ T5640] workingset_refault_file 543 [ 203.003940][ T5640] swap 115220480 [ 203.003949][ T5640] swapcached 12288 [ 203.003957][ T5640] pgpgin 164513 [ 203.003966][ T5640] pgpgout 88320 [ 203.003975][ T5640] pgfault 85825 [ 203.003983][ T5640] pgmajfault 13 [ 203.003992][ T5640] inactive_anon 78794752 [ 203.004002][ T5640] active_anon 233291776 [ 203.004011][ T5640] inactive_file 0 [ 203.004020][ T5640] active_file 0 [ 203.004028][ T5640] unevictable 0 [ 203.004037][ T5640] hierarchical_memory_limit 314572800 [ 203.004048][ T5640] hierarchical_memsw_limit 9223372036854771712 [ 203.004059][ T5640] total_cache 311726080 [ 203.004068][ T5640] total_rss 348160 [ 203.004077][ T5640] total_rss_huge 0 [ 203.004086][ T5640] total_shmem 311726080 [ 203.004096][ T5640] total_mapped_file 205778944 [ 203.004105][ T5640] total_dirty 0 [ 203.004114][ T5640] total_writeback 0 [ 203.004123][ T5640] total_workingset_refault_anon 19 [ 203.004133][ T5640] total_workingset_refault_file 543 [ 203.004143][ T5640] total_swap 115220480 [ 203.004153][ T5640] total_swapcached 12288 [ 203.004162][ T5640] total_pgpgin 164513 [ 203.004171][ T5640] total_pgpgout 88320 [ 203.004180][ T5640] total_pgfault 85825 [ 203.004189][ T5640] total_pgmajfault 13 [ 203.004199][ T5640] total_inactive_anon 78794752 [ 203.004208][ T5640] total_active_anon 233291776 [ 203.004218][ T5640] total_inactive_file 0 [ 203.004233][ T5640] total_active_file 0 [ 203.004242][ T5640] total_unevictable 0 [ 203.004252][ T5640] anon_cost 0 [ 203.004260][ T5640] file_cost 0 [ 203.004269][ T5640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.120,pid=6351,uid=0 [ 203.004453][ T5640] Memory cgroup out of memory: Killed process 6351 (syz.3.120) total-vm:200588kB, anon-rss:1408kB, file-rss:20676kB, shmem-rss:80748kB, UID:0 pgtables:272kB oom_score_adj:1000 [ 204.208266][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 205.442485][ T34] oom_reaper: reaped process 6201 (syz.3.91), now anon-rss:0kB, file-rss:20480kB, shmem-rss:107192kB [ 205.754122][ T34] oom_reaper: reaped process 6351 (syz.3.120), now anon-rss:0kB, file-rss:20480kB, shmem-rss:69636kB [ 206.240298][ T6278] syz.4.105 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 206.240338][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: syz.4.105 Not tainted syzkaller #0 PREEMPT(full) [ 206.240365][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 206.240380][ T6278] Call Trace: [ 206.240391][ T6278] [ 206.240402][ T6278] dump_stack_lvl+0xe8/0x150 [ 206.240452][ T6278] dump_header+0xd3/0x4b0 [ 206.240493][ T6278] oom_kill_process+0x3ab/0x9e0 [ 206.240535][ T6278] out_of_memory+0xfb1/0x13b0 [ 206.240568][ T6278] ? try_charge_memcg+0xc0d/0x15e0 [ 206.240609][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.240656][ T6278] ? __pfx_out_of_memory+0x10/0x10 [ 206.240688][ T6278] ? do_raw_spin_unlock+0xf5/0x200 [ 206.240729][ T6278] try_charge_memcg+0xcc3/0x15e0 [ 206.240770][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.240824][ T6278] ? __pfx_try_charge_memcg+0x10/0x10 [ 206.240862][ T6278] ? lock_acquire+0x115/0x350 [ 206.240903][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.240944][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.240978][ T6278] ? charge_memcg+0x47/0x310 [ 206.241022][ T6278] charge_memcg+0x1dd/0x310 [ 206.241065][ T6278] __mem_cgroup_charge+0x25/0x80 [ 206.241105][ T6278] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 206.241143][ T6278] ? filemap_get_entry+0xcd/0x3f0 [ 206.241183][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.241221][ T6278] ? __pfx_filemap_get_entry+0x10/0x10 [ 206.241262][ T6278] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 206.241305][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.241349][ T6278] shmem_get_folio_gfp+0x594/0x1330 [ 206.241405][ T6278] shmem_write_begin+0x16c/0x330 [ 206.241451][ T6278] generic_perform_write+0x2d5/0x8e0 [ 206.241507][ T6278] ? __pfx_generic_perform_write+0x10/0x10 [ 206.241547][ T6278] ? down_write+0x166/0x200 [ 206.241579][ T6278] ? generic_write_checks_count+0x41a/0x520 [ 206.241628][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.241659][ T6278] ? file_update_time_flags+0x2d5/0x440 [ 206.241703][ T6278] shmem_file_write_iter+0xf8/0x120 [ 206.241745][ T6278] __kernel_write_iter+0x44a/0x8f0 [ 206.241788][ T6278] ? __pfx___kernel_write_iter+0x10/0x10 [ 206.241827][ T6278] ? get_dump_page+0x1e6/0x410 [ 206.241871][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.241901][ T6278] ? __asan_memset+0x22/0x50 [ 206.241931][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.241962][ T6278] ? iov_iter_bvec+0xb8/0x180 [ 206.241995][ T6278] dump_user_range+0x715/0xca0 [ 206.242047][ T6278] ? __pfx_dump_user_range+0x10/0x10 [ 206.242095][ T6278] ? __pfx_writenote+0x10/0x10 [ 206.242129][ T6278] ? elf_core_dump+0x28d0/0x3a70 [ 206.242171][ T6278] elf_core_dump+0x346a/0x3a70 [ 206.242232][ T6278] ? __pfx_elf_core_dump+0x10/0x10 [ 206.242262][ T6278] ? kasan_save_track+0x4f/0x80 [ 206.242298][ T6278] ? do_coredump+0x4ef0/0x6a60 [ 206.242326][ T6278] ? vfs_coredump+0xac3/0x10c0 [ 206.242353][ T6278] ? get_signal+0x11d1/0x1430 [ 206.242386][ T6278] ? arch_do_signal_or_restart+0xbb/0x860 [ 206.242412][ T6278] ? irqentry_exit+0x348/0x9b0 [ 206.242438][ T6278] ? asm_exc_page_fault+0x26/0x30 [ 206.242522][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.242553][ T6278] ? lock_acquire+0x115/0x350 [ 206.242590][ T6278] ? 0xffffffffff600000 [ 206.242622][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.242662][ T6278] do_coredump+0x5ed1/0x6a60 [ 206.242728][ T6278] ? __pfx_do_coredump+0x10/0x10 [ 206.242762][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.242800][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.242830][ T6278] ? __lock_acquire+0x747/0x2de0 [ 206.242881][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.242911][ T6278] ? __lock_acquire+0x747/0x2de0 [ 206.242963][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.242993][ T6278] ? lock_acquire+0x115/0x350 [ 206.243034][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243064][ T6278] ? lock_acquire+0x115/0x350 [ 206.243104][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243138][ T6278] ? is_bpf_text_address+0x26/0x2b0 [ 206.243172][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243202][ T6278] ? is_bpf_text_address+0x292/0x2b0 [ 206.243233][ T6278] ? is_bpf_text_address+0x26/0x2b0 [ 206.243264][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243294][ T6278] ? kernel_text_address+0xa5/0xe0 [ 206.243330][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243360][ T6278] ? __kernel_text_address+0xd/0x30 [ 206.243392][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243422][ T6278] ? unwind_get_return_address+0x4d/0x90 [ 206.243459][ T6278] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.243493][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243523][ T6278] ? arch_stack_walk+0xfb/0x150 [ 206.243573][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243603][ T6278] ? stack_trace_save+0xa9/0x100 [ 206.243637][ T6278] ? __pfx_stack_trace_save+0x10/0x10 [ 206.243668][ T6278] ? __lock_acquire+0x747/0x2de0 [ 206.243705][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243735][ T6278] ? stack_depot_save_flags+0x33/0x810 [ 206.243774][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.243804][ T6278] ? kasan_save_track+0x4f/0x80 [ 206.243837][ T6278] ? kasan_save_track+0x3e/0x80 [ 206.243869][ T6278] ? __kasan_kmalloc+0x93/0xb0 [ 206.243904][ T6278] ? __kmalloc_noprof+0x366/0x710 [ 206.243934][ T6278] ? security_prepare_creds+0x52/0x360 [ 206.243967][ T6278] ? prepare_creds+0x57d/0x820 [ 206.243999][ T6278] ? vfs_coredump+0x28a/0x10c0 [ 206.244026][ T6278] ? get_signal+0x11d1/0x1430 [ 206.244059][ T6278] ? arch_do_signal_or_restart+0xbb/0x860 [ 206.244085][ T6278] ? irqentry_exit+0x348/0x9b0 [ 206.244111][ T6278] ? asm_exc_page_fault+0x26/0x30 [ 206.244171][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.244201][ T6278] ? __lock_acquire+0x747/0x2de0 [ 206.244273][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.244304][ T6278] ? do_raw_spin_lock+0x12b/0x2f0 [ 206.244332][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.244368][ T6278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 206.244402][ T6278] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.244449][ T6278] vfs_coredump+0xac3/0x10c0 [ 206.244494][ T6278] ? __pfx_vfs_coredump+0x10/0x10 [ 206.244564][ T6278] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.244610][ T6278] get_signal+0x11d1/0x1430 [ 206.244673][ T6278] arch_do_signal_or_restart+0xbb/0x860 [ 206.244706][ T6278] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 206.244761][ T6278] irqentry_exit+0x348/0x9b0 [ 206.244788][ T6278] ? trace_irq_disable+0x3b/0x140 [ 206.244835][ T6278] asm_exc_page_fault+0x26/0x30 [ 206.244860][ T6278] RIP: 0033:0x7ff6a1e54cb7 [ 206.244883][ T6278] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 4e 1b 00 48 8d 35 02 15 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 206.244903][ T6278] RSP: 002b:00007ff6a2ea6120 EFLAGS: 00010202 [ 206.244926][ T6278] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff6a1f9f559 [ 206.244943][ T6278] RDX: 00007ff6a2ea6140 RSI: 00007ff6a2ea6270 RDI: 000000000000000b [ 206.244961][ T6278] RBP: 00007ff6a2036b50 R08: 0000000000000000 R09: 0000000000000000 [ 206.244977][ T6278] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.244993][ T6278] R13: 00007ff6a2226038 R14: 00007ff6a2225fa0 R15: 00007ffd80a3ce38 [ 206.245034][ T6278] [ 206.313394][ T6979] Bluetooth: hci3: command 0x0406 tx timeout [ 206.313997][ T6979] Bluetooth: hci1: command 0x0406 tx timeout [ 206.314585][ T6979] Bluetooth: hci2: command 0x0406 tx timeout [ 206.315112][ T6979] Bluetooth: hci4: command 0x0406 tx timeout [ 206.960493][ T6278] memory: usage 307200kB, limit 307200kB, failcnt 3156 [ 206.960516][ T6278] memory+swap: usage 319824kB, limit 9007199254740988kB, failcnt 0 [ 206.960533][ T6278] kmem: usage 1848kB, limit 9007199254740988kB, failcnt 0 [ 206.960549][ T6278] Memory cgroup stats for /syz4: [ 206.960724][ T6278] cache 312406016 [ 206.960742][ T6278] rss 217088 [ 206.960751][ T6278] rss_huge 0 [ 206.960760][ T6278] shmem 312406016 [ 206.960770][ T6278] mapped_file 135168000 [ 206.960779][ T6278] dirty 0 [ 206.960788][ T6278] writeback 0 [ 206.960797][ T6278] workingset_refault_anon 65 [ 206.960807][ T6278] workingset_refault_file 2529 [ 206.960817][ T6278] swap 12926976 [ 206.960826][ T6278] swapcached 53248 [ 206.960835][ T6278] pgpgin 180248 [ 206.960844][ T6278] pgpgout 103911 [ 206.960853][ T6278] pgfault 60275 [ 206.960862][ T6278] pgmajfault 32 [ 206.960871][ T6278] inactive_anon 282767360 [ 206.960881][ T6278] active_anon 29908992 [ 206.960891][ T6278] inactive_file 0 [ 206.960900][ T6278] active_file 0 [ 206.960909][ T6278] unevictable 0 [ 206.960918][ T6278] hierarchical_memory_limit 314572800 [ 206.960928][ T6278] hierarchical_memsw_limit 9223372036854771712 [ 206.960940][ T6278] total_cache 312406016 [ 206.960949][ T6278] total_rss 217088 [ 206.960959][ T6278] total_rss_huge 0 [ 206.960968][ T6278] total_shmem 312406016 [ 206.960978][ T6278] total_mapped_file 135168000 [ 206.960988][ T6278] total_dirty 0 [ 206.960997][ T6278] total_writeback 0 [ 206.961006][ T6278] total_workingset_refault_anon 65 [ 206.961017][ T6278] total_workingset_refault_file 2529 [ 206.961027][ T6278] total_swap 12926976 [ 206.961037][ T6278] total_swapcached 53248 [ 206.961046][ T6278] total_pgpgin 180248 [ 206.961056][ T6278] total_pgpgout 103911 [ 206.961065][ T6278] total_pgfault 60275 [ 206.961074][ T6278] total_pgmajfault 32 [ 206.961084][ T6278] total_inactive_anon 282767360 [ 206.961094][ T6278] total_active_anon 29908992 [ 206.961104][ T6278] total_inactive_file 0 [ 206.961114][ T6278] total_active_file 0 [ 206.961123][ T6278] total_unevictable 0 [ 206.961132][ T6278] anon_cost 0 [ 206.961141][ T6278] file_cost 0 [ 206.961151][ T6278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.105,pid=6278,uid=0 [ 206.961338][ T6278] Memory cgroup out of memory: Killed process 6278 (syz.4.105) total-vm:200588kB, anon-rss:1272kB, file-rss:20676kB, shmem-rss:120520kB, UID:0 pgtables:352kB oom_score_adj:1000 [ 208.032203][ T5636] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 208.032242][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 208.032270][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 208.032286][ T5636] Call Trace: [ 208.032295][ T5636] [ 208.032307][ T5636] dump_stack_lvl+0xe8/0x150 [ 208.032355][ T5636] dump_header+0xd3/0x4b0 [ 208.032396][ T5636] oom_kill_process+0x3ab/0x9e0 [ 208.032441][ T5636] out_of_memory+0xfb1/0x13b0 [ 208.032474][ T5636] ? try_charge_memcg+0xc0d/0x15e0 [ 208.032515][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.032562][ T5636] ? __pfx_out_of_memory+0x10/0x10 [ 208.032595][ T5636] ? do_raw_spin_unlock+0xf5/0x200 [ 208.032636][ T5636] try_charge_memcg+0xcc3/0x15e0 [ 208.032701][ T5636] ? __pfx_try_charge_memcg+0x10/0x10 [ 208.032758][ T5636] ? percpu_ref_tryget+0x15/0x180 [ 208.032793][ T5636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.032828][ T5636] ? __obj_cgroup_charge+0x36/0x2d0 [ 208.032870][ T5636] __obj_cgroup_charge+0x20a/0x2d0 [ 208.032906][ T5636] ? __obj_cgroup_charge+0x36/0x2d0 [ 208.032945][ T5636] __memcg_slab_post_alloc_hook+0x772/0xdb0 [ 208.033003][ T5636] ? sk_prot_alloc+0x57/0x210 [ 208.033047][ T5636] kmem_cache_alloc_noprof+0x362/0x600 [ 208.033078][ T5636] ? sk_prot_alloc+0x57/0x210 [ 208.033116][ T5636] ? kmem_cache_alloc_noprof+0x151/0x600 [ 208.033146][ T5636] ? sk_prot_alloc+0x57/0x210 [ 208.033195][ T5636] sk_prot_alloc+0x57/0x210 [ 208.033235][ T5636] ? sk_alloc+0x27/0x390 [ 208.033278][ T5636] sk_alloc+0x3a/0x390 [ 208.033324][ T5636] inet_create+0x7a9/0xff0 [ 208.033353][ T5636] ? inet_create+0x9d/0xff0 [ 208.033386][ T5636] __sock_create+0x4b5/0xac0 [ 208.033433][ T5636] __sys_socket+0xd6/0x1b0 [ 208.033473][ T5636] __x64_sys_socket+0x7a/0x90 [ 208.033510][ T5636] do_syscall_64+0x166/0x520 [ 208.033539][ T5636] ? trace_irq_disable+0x3b/0x140 [ 208.033577][ T5636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.033611][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.033637][ T5636] RIP: 0033:0x7ff6a1fa0dc7 [ 208.033660][ T5636] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.033682][ T5636] RSP: 002b:00007ffd80a3cad8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 208.033709][ T5636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff6a1fa0dc7 [ 208.033727][ T5636] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 208.033746][ T5636] RBP: 00007ffd80a3d1dc R08: 0000000000000000 R09: 0000000000000000 [ 208.033762][ T5636] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000002a [ 208.033778][ T5636] R13: 000055558a32ba00 R14: 00000000000318ef R15: 00007ffd80a3d230 [ 208.033819][ T5636] [ 208.364089][ T5636] memory: usage 307200kB, limit 307200kB, failcnt 3217 [ 208.364114][ T5636] memory+swap: usage 319824kB, limit 9007199254740988kB, failcnt 0 [ 208.364131][ T5636] kmem: usage 1832kB, limit 9007199254740988kB, failcnt 0 [ 208.364148][ T5636] Memory cgroup stats for /syz4: [ 208.364339][ T5636] cache 312426496 [ 208.364351][ T5636] rss 217088 [ 208.364361][ T5636] rss_huge 0 [ 208.364370][ T5636] shmem 312426496 [ 208.364379][ T5636] mapped_file 124981248 [ 208.364389][ T5636] dirty 0 [ 208.364398][ T5636] writeback 0 [ 208.364408][ T5636] workingset_refault_anon 65 [ 208.364418][ T5636] workingset_refault_file 2529 [ 208.364452][ T5636] swap 12926976 [ 208.364461][ T5636] swapcached 53248 [ 208.364470][ T5636] pgpgin 180253 [ 208.364480][ T5636] pgpgout 103911 [ 208.364489][ T5636] pgfault 60278 [ 208.364499][ T5636] pgmajfault 32 [ 208.364508][ T5636] inactive_anon 282767360 [ 208.364518][ T5636] active_anon 29929472 [ 208.364528][ T5636] inactive_file 0 [ 208.364537][ T5636] active_file 0 [ 208.364546][ T5636] unevictable 0 [ 208.364555][ T5636] hierarchical_memory_limit 314572800 [ 208.364567][ T5636] hierarchical_memsw_limit 9223372036854771712 [ 208.364578][ T5636] total_cache 312426496 [ 208.364588][ T5636] total_rss 217088 [ 208.364597][ T5636] total_rss_huge 0 [ 208.364607][ T5636] total_shmem 312426496 [ 208.364616][ T5636] total_mapped_file 124981248 [ 208.364627][ T5636] total_dirty 0 [ 208.364636][ T5636] total_writeback 0 [ 208.364645][ T5636] total_workingset_refault_anon 65 [ 208.364656][ T5636] total_workingset_refault_file 2529 [ 208.364667][ T5636] total_swap 12926976 [ 208.364677][ T5636] total_swapcached 53248 [ 208.364687][ T5636] total_pgpgin 180253 [ 208.364697][ T5636] total_pgpgout 103911 [ 208.364706][ T5636] total_pgfault 60278 [ 208.364717][ T5636] total_pgmajfault 32 [ 208.364726][ T5636] total_inactive_anon 282767360 [ 208.364741][ T5636] total_active_anon 29929472 [ 208.364752][ T5636] total_inactive_file 0 [ 208.364762][ T5636] total_active_file 0 [ 208.364771][ T5636] total_unevictable 0 [ 208.364781][ T5636] anon_cost 0 [ 208.364790][ T5636] file_cost 0 [ 208.364800][ T5636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.204,pid=6737,uid=0 [ 208.365008][ T5636] Memory cgroup out of memory: Killed process 6737 (syz.4.204) total-vm:102412kB, anon-rss:1436kB, file-rss:53828kB, shmem-rss:11480kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 209.079669][ T34] oom_reaper: reaped process 6278 (syz.4.105), now anon-rss:0kB, file-rss:20480kB, shmem-rss:90632kB [ 209.481324][ T7005] ip_tables: iptables: counters copy to user failed while replacing table [ 210.815027][ T34] oom_reaper: reaped process 6737 (syz.4.204), now anon-rss:0kB, file-rss:22424kB, shmem-rss:11480kB [ 216.133003][ T29] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 216.446484][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 216.455283][ T29] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 216.455324][ T29] usb 4-1: no configurations [ 216.455339][ T29] usb 4-1: can't read configurations, error -22 [ 217.131887][ T7054] loop5: detected capacity change from 0 to 256 [ 218.425904][ T7051] bridge1: entered promiscuous mode [ 218.425951][ T7051] bridge1: entered allmulticast mode [ 219.324009][ T7069] ip_tables: iptables: counters copy to user failed while replacing table [ 221.352806][ T4946] Bluetooth: hci5: command 0x0406 tx timeout [ 227.282755][ T29] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 227.521895][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.527463][ T29] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 227.527503][ T29] usb 4-1: no configurations [ 227.527517][ T29] usb 4-1: can't read configurations, error -22 [ 229.065248][ T7120] loop3: detected capacity change from 0 to 4096 [ 229.065954][ T7120] overlayfs: failed lookup in lower (newroot/61, name='file0', err=-40): overlapping layers [ 229.066381][ T7120] overlayfs: failed lookup in lower (newroot/61, name='file0', err=-40): overlapping layers [ 233.633849][ T6351] syz.3.120 (6351) used greatest stack depth: 16008 bytes left [ 234.541205][ T4946] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.685178][ T4946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.695865][ T4946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.780333][ T4946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.852254][ T4946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.591375][ T4946] Bluetooth: hci6: command tx timeout [ 239.768927][ T4946] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.800001][ T4946] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.821943][ T4946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.905611][ T4946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.932645][ T4946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.642776][ T5639] Bluetooth: hci6: command tx timeout [ 240.915327][ T5776] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 241.088388][ T5776] usb 1-1: unable to get BOS descriptor or descriptor too short [ 241.089249][ T5776] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 241.089289][ T5776] usb 1-1: no configurations [ 241.089304][ T5776] usb 1-1: can't read configurations, error -22 [ 241.561550][ T7110] bridge2: entered promiscuous mode [ 241.561623][ T7110] bridge2: entered allmulticast mode [ 242.083466][ T5639] Bluetooth: hci7: command tx timeout [ 242.259633][ T7178] loop4: detected capacity change from 0 to 1024 [ 242.455113][ T7178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.746827][ T5639] Bluetooth: hci6: command tx timeout [ 244.162597][ T5639] Bluetooth: hci7: command tx timeout [ 244.514312][ T7144] rxe_eth0 speed is unknown, defaulting to 1000 [ 244.792573][ T5639] Bluetooth: hci6: command tx timeout [ 246.243129][ T4946] Bluetooth: hci7: command tx timeout [ 246.307136][ T1168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.747941][ T7227] bridge2: entered promiscuous mode [ 246.747969][ T7227] bridge2: entered allmulticast mode [ 246.766814][ T7156] rxe_eth0 speed is unknown, defaulting to 1000 [ 246.954155][ T4946] Bluetooth: hci0: command 0x0406 tx timeout [ 247.148603][ T1168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.443570][ T5765] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 247.690980][ T5765] usb 1-1: unable to get BOS descriptor or descriptor too short [ 247.701150][ T5765] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 247.701190][ T5765] usb 1-1: no configurations [ 247.701205][ T5765] usb 1-1: can't read configurations, error -22 [ 247.787442][ T1168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.128688][ T1168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.313744][ T5639] Bluetooth: hci7: command tx timeout [ 250.410318][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.629107][ T5765] libceph: connect (1)[c::]:6789 error -101 [ 250.629441][ T5765] libceph: mon0 (1)[c::]:6789 connect error [ 250.653824][ T5765] libceph: connect (1)[c::]:6789 error -101 [ 250.653980][ T5765] libceph: mon0 (1)[c::]:6789 connect error [ 250.768296][ T7258] ceph: No mds server is up or the cluster is laggy [ 250.934596][ T5765] libceph: connect (1)[c::]:6789 error -101 [ 250.934767][ T5765] libceph: mon0 (1)[c::]:6789 connect error [ 250.973648][ T6005] IPVS: starting estimator thread 0... [ 251.073588][ T7268] IPVS: using max 33 ests per chain, 79200 per kthread [ 251.176379][ T7250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.190613][ T7250] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.277337][ T7250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.297120][ T7250] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.354173][ T7250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.354493][ T1168] bridge_slave_1: left allmulticast mode [ 251.354515][ T1168] bridge_slave_1: left promiscuous mode [ 251.354725][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.365204][ T7250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 251.408997][ T1168] bridge_slave_0: left allmulticast mode [ 251.409021][ T1168] bridge_slave_0: left promiscuous mode [ 251.410526][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.447392][ T7250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 251.549967][ T7250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.575776][ T7250] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.673113][ T7250] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 251.675362][ T7250] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 251.682280][ T7250] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 251.802771][ T7250] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 251.802840][ T7250] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 251.860970][ T7250] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 252.426364][ T7284] ip_tables: iptables: counters copy to user failed while replacing table [ 252.608028][ T5776] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 253.201564][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 253.358334][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 253.446335][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 253.519323][ T5776] usb 4-1: unable to get BOS descriptor or descriptor too short [ 253.523609][ T5776] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 253.523647][ T5776] usb 4-1: no configurations [ 253.523661][ T5776] usb 4-1: can't read configurations, error -22 [ 253.594902][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 253.663380][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.705539][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.717812][ T1168] bond0 (unregistering): Released all slaves [ 253.752647][ T5639] Bluetooth: hci6: command 0x0c1a tx timeout [ 253.912648][ T5639] Bluetooth: hci7: command 0x0c1a tx timeout [ 255.357856][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 255.363939][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.364065][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.452858][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 255.534608][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 255.672757][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 255.842919][ T5639] Bluetooth: hci6: command 0x0c1a tx timeout [ 256.002709][ T5639] Bluetooth: hci7: command 0x0c1a tx timeout [ 256.701761][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.713508][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.713654][ T7144] bridge_slave_0: entered allmulticast mode [ 256.940297][ T7144] bridge_slave_0: entered promiscuous mode [ 257.422092][ T7341] CIFS mount error: No usable UNC path provided in device string! [ 257.422092][ T7341] [ 257.422279][ T7341] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 257.655197][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 257.715291][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.716144][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.716697][ T7156] bridge_slave_0: entered allmulticast mode [ 257.749450][ T7156] bridge_slave_0: entered promiscuous mode [ 257.761265][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.761382][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.761528][ T7144] bridge_slave_1: entered allmulticast mode [ 257.800592][ T7144] bridge_slave_1: entered promiscuous mode [ 257.827821][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.827934][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.828103][ T7156] bridge_slave_1: entered allmulticast mode [ 257.864603][ T7156] bridge_slave_1: entered promiscuous mode [ 257.922695][ T5639] Bluetooth: hci6: command 0x0c1a tx timeout [ 258.942804][ T5639] Bluetooth: hci7: command 0x0c1a tx timeout [ 261.896607][ T7349] ip_tables: iptables: counters copy to user failed while replacing table [ 262.518039][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.563779][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.595304][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.629572][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.598271][ T1168] hsr_slave_0: left promiscuous mode [ 264.629805][ T1168] hsr_slave_1: left promiscuous mode [ 264.630813][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.637878][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.659927][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.659949][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.777764][ T1168] veth1_macvtap: left promiscuous mode [ 264.777805][ T1168] veth0_macvtap: left promiscuous mode [ 264.911419][ T1168] veth1_vlan: left promiscuous mode [ 264.911501][ T1168] veth0_vlan: left promiscuous mode [ 265.953533][ T5776] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 266.127358][ T5776] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.128184][ T5776] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 266.128224][ T5776] usb 4-1: no configurations [ 266.128239][ T5776] usb 4-1: can't read configurations, error -22 [ 268.148618][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 268.219408][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 269.106701][ T7144] team0: Port device team_slave_0 added [ 269.475720][ T7156] team0: Port device team_slave_0 added [ 269.500542][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 269.608230][ T7395] CIFS mount error: No usable UNC path provided in device string! [ 269.608230][ T7395] [ 269.608315][ T7395] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 271.006946][ T7144] team0: Port device team_slave_1 added [ 271.013879][ T7156] team0: Port device team_slave_1 added [ 271.132796][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.132817][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.132849][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.137422][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.137438][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.137469][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.142175][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.142191][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.142222][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.148096][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.148111][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.148143][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.664819][ T7156] hsr_slave_0: entered promiscuous mode [ 271.670488][ T7156] hsr_slave_1: entered promiscuous mode [ 271.686167][ T7156] debugfs: 'hsr0' already exists in 'hsr' [ 271.686186][ T7156] Cannot create hsr debugfs directory [ 271.727677][ T7144] hsr_slave_0: entered promiscuous mode [ 271.738818][ T7144] hsr_slave_1: entered promiscuous mode [ 271.757077][ T7144] debugfs: 'hsr0' already exists in 'hsr' [ 271.757096][ T7144] Cannot create hsr debugfs directory [ 271.801906][ T7383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.832703][ T7383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.848999][ T7383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.852014][ T7383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.879878][ T7383] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 271.966755][ T7383] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 272.008673][ T7383] hwrng_fill thread creation failed [ 272.416964][ T4946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.419772][ T4946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.421947][ T4946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.458270][ T4946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.459495][ T4946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.697674][ T7412] ip_tables: iptables: counters copy to user failed while replacing table [ 273.875279][ T4946] Bluetooth: hci3: command 0x0406 tx timeout [ 273.875372][ T4946] Bluetooth: hci2: command 0x0406 tx timeout [ 273.958962][ T5639] Bluetooth: hci6: command 0x0c1a tx timeout [ 273.959004][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 273.959064][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 273.993484][ T4946] Bluetooth: hci7: command 0x0c1a tx timeout [ 274.724694][ T4946] Bluetooth: hci1: command tx timeout [ 276.566015][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.585083][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.589263][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.615584][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.630342][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.792967][ T4946] Bluetooth: hci1: command tx timeout [ 277.554012][ T5776] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 277.635082][ T7436] loop3: detected capacity change from 0 to 2048 [ 277.741759][ T5776] usb 5-1: unable to get BOS descriptor or descriptor too short [ 277.753557][ T5776] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 277.753598][ T5776] usb 5-1: no configurations [ 277.753613][ T5776] usb 5-1: can't read configurations, error -22 [ 277.921383][ T7436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.776170][ T6977] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.949549][ T7144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 278.963212][ T5639] Bluetooth: hci1: command tx timeout [ 278.963319][ T4946] Bluetooth: hci5: command tx timeout [ 279.007555][ T7144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.020578][ T7144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 279.070775][ T7144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.093248][ T7144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 279.128113][ T7144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.219813][ T6977] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.271550][ T7144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 279.306781][ T7144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.380594][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 279.675777][ T6977] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.827565][ T7156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 279.876552][ T7156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.898306][ T7156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 279.931566][ T7156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.953673][ T7156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 280.018187][ T7156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.110241][ T6977] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.175441][ T7156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 280.211835][ T7156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.382013][ T7424] rxe_eth0 speed is unknown, defaulting to 1000 [ 281.626647][ T4946] Bluetooth: hci5: command tx timeout [ 281.627220][ T4946] Bluetooth: hci1: command tx timeout [ 281.739470][ T7442] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 282.289782][ T6977] bridge_slave_1: left allmulticast mode [ 282.289812][ T6977] bridge_slave_1: left promiscuous mode [ 282.290383][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.356950][ T6977] bridge_slave_0: left allmulticast mode [ 282.356977][ T6977] bridge_slave_0: left promiscuous mode [ 282.357184][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.408177][ T7442] EXT4-fs (loop3): Remounting filesystem read-only [ 283.717338][ T5639] Bluetooth: hci5: command tx timeout [ 284.035568][ T6977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.060417][ T6977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.062150][ T6977] bond0 (unregistering): Released all slaves [ 284.159049][ T7401] rxe_eth0 speed is unknown, defaulting to 1000 [ 284.161463][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 284.206981][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.922576][ T7502] CIFS mount error: No usable UNC path provided in device string! [ 284.922576][ T7502] [ 284.922602][ T7502] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 285.702167][ T5640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.755926][ T5639] Bluetooth: hci5: command tx timeout [ 285.784309][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.895918][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.896028][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.817325][ T7513] ip_tables: iptables: counters copy to user failed while replacing table [ 287.893739][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.893851][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.225514][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.872800][ T5776] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 288.910961][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.042409][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.042582][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.100966][ T5776] usb 5-1: unable to get BOS descriptor or descriptor too short [ 289.106564][ T5776] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 289.106604][ T5776] usb 5-1: no configurations [ 289.106619][ T5776] usb 5-1: can't read configurations, error -22 [ 289.276021][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.276130][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.390029][ T6977] hsr_slave_0: left promiscuous mode [ 289.392439][ T6977] hsr_slave_1: left promiscuous mode [ 289.395336][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.395359][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.400358][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.400378][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.438619][ T6977] veth1_macvtap: left promiscuous mode [ 289.438659][ T6977] veth0_macvtap: left promiscuous mode [ 289.438775][ T6977] veth1_vlan: left promiscuous mode [ 289.438848][ T6977] veth0_vlan: left promiscuous mode [ 290.520240][ T6977] team0 (unregistering): Port device team_slave_1 removed [ 290.577905][ T6977] team0 (unregistering): Port device team_slave_0 removed [ 291.138125][ T7550] CIFS mount error: No usable UNC path provided in device string! [ 291.138125][ T7550] [ 291.138200][ T7550] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 292.292709][ T5639] Bluetooth: hci2: connection err: -111 [ 293.173942][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.174060][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.174201][ T7424] bridge_slave_0: entered allmulticast mode [ 293.180005][ T7424] bridge_slave_0: entered promiscuous mode [ 293.277069][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.277188][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.277382][ T7424] bridge_slave_1: entered allmulticast mode [ 293.301395][ T7424] bridge_slave_1: entered promiscuous mode [ 293.405522][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 293.769934][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.807961][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.106023][ T7424] team0: Port device team_slave_0 added [ 294.107137][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.107248][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.107387][ T7401] bridge_slave_0: entered allmulticast mode [ 294.111091][ T7401] bridge_slave_0: entered promiscuous mode [ 294.157087][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.157200][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.157353][ T7401] bridge_slave_1: entered allmulticast mode [ 294.159412][ T7401] bridge_slave_1: entered promiscuous mode [ 294.197532][ T7424] team0: Port device team_slave_1 added [ 294.634615][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.781496][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.947753][ T7586] ip_tables: iptables: counters copy to user failed while replacing table [ 295.075994][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.076015][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.076048][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.313127][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.313147][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.313179][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.403073][ T7401] team0: Port device team_slave_0 added [ 295.578841][ T7401] team0: Port device team_slave_1 added [ 295.697650][ T4946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.752867][ T4946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.801130][ T4946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.037641][ T4946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.041643][ T4946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.384925][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.384946][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.384978][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.487321][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.487342][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.487375][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.550547][ T7424] hsr_slave_0: entered promiscuous mode [ 296.551712][ T7424] hsr_slave_1: entered promiscuous mode [ 296.569784][ T7424] debugfs: 'hsr0' already exists in 'hsr' [ 296.569802][ T7424] Cannot create hsr debugfs directory [ 296.830726][ T6977] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.433106][ T5776] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 297.635351][ T6977] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.653366][ T5776] usb 5-1: unable to get BOS descriptor or descriptor too short [ 297.662916][ T5776] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 297.662956][ T5776] usb 5-1: no configurations [ 297.662972][ T5776] usb 5-1: can't read configurations, error -22 [ 297.937415][ T7401] hsr_slave_0: entered promiscuous mode [ 297.940599][ T7401] hsr_slave_1: entered promiscuous mode [ 297.941364][ T7401] debugfs: 'hsr0' already exists in 'hsr' [ 297.941382][ T7401] Cannot create hsr debugfs directory [ 297.974082][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 298.163816][ T4946] Bluetooth: hci0: command tx timeout [ 298.210053][ T6977] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.057622][ T6977] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.453082][ T4946] Bluetooth: hci0: command tx timeout [ 300.465357][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.479872][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.493705][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.495067][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.495847][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.647813][ T7589] rxe_eth0 speed is unknown, defaulting to 1000 [ 301.275315][ T6977] bridge_slave_1: left allmulticast mode [ 301.275346][ T6977] bridge_slave_1: left promiscuous mode [ 301.275559][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.330769][ T6977] bridge_slave_0: left allmulticast mode [ 301.330794][ T6977] bridge_slave_0: left promiscuous mode [ 301.330995][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.169482][ T6977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.185218][ T6977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.186949][ T6977] bond0 (unregistering): Released all slaves [ 302.724314][ T5643] Bluetooth: hci0: command tx timeout [ 302.724379][ T5643] Bluetooth: hci4: command tx timeout [ 302.735144][ T7662] input: syz0 as /devices/virtual/input/input8 [ 305.230075][ T4946] Bluetooth: hci0: command tx timeout [ 305.230162][ T5643] Bluetooth: hci4: command tx timeout [ 306.076587][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 307.273673][ T5643] Bluetooth: hci4: command tx timeout [ 307.486711][ T7644] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.017069][ T7401] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 308.342875][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.349801][ T7401] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 308.378510][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.420423][ T6977] hsr_slave_0: left promiscuous mode [ 308.431041][ T6977] hsr_slave_1: left promiscuous mode [ 308.431939][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.431961][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.464585][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.464607][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.513760][ T6977] veth1_macvtap: left promiscuous mode [ 308.513798][ T6977] veth0_macvtap: left promiscuous mode [ 308.513923][ T6977] veth1_vlan: left promiscuous mode [ 308.513997][ T6977] veth0_vlan: left promiscuous mode [ 309.132825][ T5776] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 309.223669][ T6977] team0 (unregistering): Port device team_slave_1 removed [ 309.272268][ T6977] team0 (unregistering): Port device team_slave_0 removed [ 309.337806][ T5776] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.342652][ T5776] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 309.342694][ T5776] usb 4-1: no configurations [ 309.342709][ T5776] usb 4-1: can't read configurations, error -22 [ 309.360395][ T5643] Bluetooth: hci4: command tx timeout [ 309.749064][ T7401] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 309.778058][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.778985][ T7401] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 309.818346][ T7401] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.201552][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 310.312243][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.312433][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.319903][ T7589] bridge_slave_0: entered allmulticast mode [ 310.339704][ T7589] bridge_slave_0: entered promiscuous mode [ 310.348715][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.348827][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.348963][ T7589] bridge_slave_1: entered allmulticast mode [ 310.350919][ T7589] bridge_slave_1: entered promiscuous mode [ 310.474718][ T7589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.480959][ T7424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.509583][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.510546][ T7424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.541292][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.574301][ T7589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.636309][ T7424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.640685][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.694914][ T7424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.778095][ T7424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.798677][ T7589] team0: Port device team_slave_0 added [ 310.910364][ T7589] team0: Port device team_slave_1 added [ 311.163143][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.163164][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.163197][ T7589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.248079][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.248097][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.248129][ T7589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.683132][ T7589] hsr_slave_0: entered promiscuous mode [ 312.685885][ T7589] hsr_slave_1: entered promiscuous mode [ 312.688145][ T7589] debugfs: 'hsr0' already exists in 'hsr' [ 312.688164][ T7589] Cannot create hsr debugfs directory [ 313.165497][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.187555][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.234136][ T7401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.234163][ T7401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.283482][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.283671][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.284171][ T7644] bridge_slave_0: entered allmulticast mode [ 313.286610][ T7644] bridge_slave_0: entered promiscuous mode [ 313.345969][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.346076][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.373976][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.374080][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.469601][ T5643] Bluetooth: hci2: connection err: -111 [ 314.212480][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.213693][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.213840][ T7644] bridge_slave_1: entered allmulticast mode [ 314.243400][ T7644] bridge_slave_1: entered promiscuous mode [ 314.662810][ T7644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.685257][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 314.729301][ T7644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.556287][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.556349][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.561442][ T7644] team0: Port device team_slave_0 added [ 316.565946][ T7644] team0: Port device team_slave_1 added [ 317.834474][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 317.994110][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.994131][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.994192][ T7644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.017842][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.017858][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.017889][ T7644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.034697][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.036787][ T9] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 318.036826][ T9] usb 4-1: no configurations [ 318.036841][ T9] usb 4-1: can't read configurations, error -22 [ 318.277992][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.401077][ T7644] hsr_slave_0: entered promiscuous mode [ 318.409551][ T7644] hsr_slave_1: entered promiscuous mode [ 318.410489][ T7644] debugfs: 'hsr0' already exists in 'hsr' [ 318.410507][ T7644] Cannot create hsr debugfs directory [ 318.601811][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.856502][ T7424] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.958317][ T7805] FAULT_INJECTION: forcing a failure. [ 318.958317][ T7805] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 318.958352][ T7805] CPU: 1 UID: 0 PID: 7805 Comm: syz.3.447 Not tainted syzkaller #0 PREEMPT(full) [ 318.958380][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 318.958396][ T7805] Call Trace: [ 318.958406][ T7805] [ 318.958416][ T7805] dump_stack_lvl+0xe8/0x150 [ 318.958465][ T7805] should_fail_ex+0x3eb/0x540 [ 318.958501][ T7805] _copy_from_user+0x2d/0xb0 [ 318.958534][ T7805] memdup_user+0x5e/0xd0 [ 318.958566][ T7805] strndup_user+0x68/0xd0 [ 318.958596][ T7805] keyctl_restrict_keyring+0x19e/0x220 [ 318.958631][ T7805] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 318.958680][ T7805] __se_sys_keyctl+0x337/0xbc0 [ 318.958716][ T7805] ? __pfx___se_sys_keyctl+0x10/0x10 [ 318.958753][ T7805] ? __pfx_do_futex+0x10/0x10 [ 318.958781][ T7805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.958813][ T7805] ? rcu_is_watching+0x16/0xb0 [ 318.958860][ T7805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.958891][ T7805] ? __se_sys_futex+0x3a8/0x450 [ 318.958928][ T7805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.958958][ T7805] ? rcu_is_watching+0x16/0xb0 [ 318.958999][ T7805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.959037][ T7805] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.959067][ T7805] ? __x64_sys_keyctl+0x20/0xc0 [ 318.959102][ T7805] do_syscall_64+0x166/0x520 [ 318.959131][ T7805] ? trace_irq_disable+0x3b/0x140 [ 318.959169][ T7805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.959202][ T7805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.959228][ T7805] RIP: 0033:0x7fc1f299f559 [ 318.959257][ T7805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.959279][ T7805] RSP: 002b:00007fc1f3812028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 318.959306][ T7805] RAX: ffffffffffffffda RBX: 00007fc1f2c25fa0 RCX: 00007fc1f299f559 [ 318.959326][ T7805] RDX: 0000200000000b00 RSI: 0000000014d08579 RDI: 000000000000001d [ 318.959344][ T7805] RBP: 00007fc1f2a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 318.959360][ T7805] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 318.959378][ T7805] R13: 00007fc1f2c26038 R14: 00007fc1f2c25fa0 R15: 00007ffef392cec8 [ 318.959419][ T7805] [ 318.990690][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.990804][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.230221][ T6977] bridge_slave_1: left allmulticast mode [ 319.230256][ T6977] bridge_slave_1: left promiscuous mode [ 319.230497][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.260258][ T6977] bridge_slave_0: left allmulticast mode [ 319.260281][ T6977] bridge_slave_0: left promiscuous mode [ 319.260489][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.328119][ T6977] bridge_slave_1: left allmulticast mode [ 319.328145][ T6977] bridge_slave_1: left promiscuous mode [ 319.328360][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.353636][ T6977] bridge_slave_0: left allmulticast mode [ 319.353661][ T6977] bridge_slave_0: left promiscuous mode [ 319.353846][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.501613][ T7825] loop4: detected capacity change from 0 to 512 [ 320.541505][ T7825] EXT4-fs (loop4): invalid inodes per group: 0 [ 320.796898][ T6977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.813680][ T6977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.818084][ T6977] bond0 (unregistering): Released all slaves [ 321.037577][ T6977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.041704][ T6977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.048284][ T6977] bond0 (unregistering): Released all slaves [ 321.122482][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.122622][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.360213][ T7849] loop3: detected capacity change from 0 to 256 [ 322.524011][ T985] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 322.540368][ T7589] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.562727][ T7589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.591262][ T7860] syzkaller0: entered promiscuous mode [ 322.591284][ T7860] syzkaller0: entered allmulticast mode [ 322.593452][ T7589] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 322.611196][ T7589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.616223][ T7589] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.634682][ T7589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.678823][ T985] usb 5-1: unable to get BOS descriptor or descriptor too short [ 322.681083][ T985] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 322.681122][ T985] usb 5-1: no configurations [ 322.681137][ T985] usb 5-1: can't read configurations, error -22 [ 322.761563][ T7589] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.777495][ T7589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.925543][ T6977] hsr_slave_0: left promiscuous mode [ 322.927128][ T6977] hsr_slave_1: left promiscuous mode [ 322.929692][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.943363][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.981979][ T6977] hsr_slave_0: left promiscuous mode [ 322.996690][ T6977] hsr_slave_1: left promiscuous mode [ 322.997605][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.998452][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.348024][ T6977] team0 (unregistering): Port device team_slave_1 removed [ 323.514467][ T7886] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 323.514514][ T7886] device-mapper: ioctl: error adding target to table [ 323.739154][ T6977] team0 (unregistering): Port device team_slave_0 removed [ 324.634531][ T6977] team0 (unregistering): Port device team_slave_1 removed [ 324.654413][ T6977] team0 (unregistering): Port device team_slave_0 removed [ 324.829484][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 324.982494][ T7401] veth0_vlan: entered promiscuous mode [ 325.048213][ T7401] veth1_vlan: entered promiscuous mode [ 325.263664][ T7401] veth0_macvtap: entered promiscuous mode [ 325.297292][ T7401] veth1_macvtap: entered promiscuous mode [ 325.554809][ T7919] loop4: detected capacity change from 0 to 256 [ 325.699180][ T7644] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 326.188302][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.350916][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.362682][ T7644] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 326.365951][ T7921] loop1: detected capacity change from 0 to 7 [ 326.378063][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.380623][ T7644] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 326.406603][ T7921] Dev loop1: unable to read RDB block 7 [ 326.406637][ T7921] loop1: unable to read partition table [ 326.406864][ T7921] loop1: partition table beyond EOD, truncated [ 326.424748][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.445490][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.481276][ T7589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.483206][ T7921] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 326.483278][ T7644] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 326.526986][ T7644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.684821][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.684877][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.684940][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.684983][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.767242][ T7589] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.903647][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.903770][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.961404][ T7942] loop4: detected capacity change from 0 to 256 [ 327.000463][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.000595][ T6975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.050148][ T7942] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04f, utbl_chksum : 0xe619d30d) [ 327.130904][ T6329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.130928][ T6329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.147222][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.243635][ T5877] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 327.391208][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.391233][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.460900][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.472074][ T5877] usb 4-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 327.472116][ T5877] usb 4-1: no configurations [ 327.472131][ T5877] usb 4-1: can't read configurations, error -22 [ 328.530583][ T7424] veth0_vlan: entered promiscuous mode [ 328.550552][ T7644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.574880][ T5290] 8021q: adding VLAN 0 to HW filter on device eth13 [ 328.595924][ T7424] veth1_vlan: entered promiscuous mode [ 328.664101][ T7644] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.752547][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.752656][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.771047][ T7424] veth0_macvtap: entered promiscuous mode [ 328.786673][ T7424] veth1_macvtap: entered promiscuous mode [ 328.812414][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.812580][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.851257][ T7970] loop3: detected capacity change from 0 to 1024 [ 328.879127][ T7970] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 329.261017][ T7977] rxe_eth0 speed is unknown, defaulting to 1000 [ 329.849811][ T7970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.905422][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.780675][ T5640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.876888][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.243296][ T5797] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 331.244502][ T5919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.246008][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.246399][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.246697][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.392658][ T5797] usb 5-1: Using ep0 maxpacket: 8 [ 331.396834][ T5797] usb 5-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.420595][ T5797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.420647][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.451082][ T5797] usb 5-1: config 0 descriptor?? [ 331.596099][ T1432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.596124][ T1432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.742114][ T5797] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 333.443578][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 333.443603][ T30] audit: type=1326 audit(1793485137.718:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.443657][ T30] audit: type=1326 audit(1793485137.718:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.443706][ T30] audit: type=1326 audit(1793485137.718:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.443755][ T30] audit: type=1326 audit(1793485137.718:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.443804][ T30] audit: type=1326 audit(1793485137.718:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.443853][ T30] audit: type=1326 audit(1793485137.748:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.443902][ T30] audit: type=1326 audit(1793485137.748:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.443951][ T30] audit: type=1326 audit(1793485137.768:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.443999][ T30] audit: type=1326 audit(1793485137.768:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.444047][ T30] audit: type=1326 audit(1793485137.768:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8008 comm="syz.3.475" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 333.561903][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.561929][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.843789][ T5765] usb 5-1: USB disconnect, device number 14 [ 333.890475][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.891256][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.909851][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.911502][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.912175][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.085185][ T7589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.560572][ T5290] 8021q: adding VLAN 0 to HW filter on device eth14 [ 334.841917][ T7589] veth0_vlan: entered promiscuous mode [ 334.896901][ T7589] veth1_vlan: entered promiscuous mode [ 334.969566][ T7589] veth0_macvtap: entered promiscuous mode [ 335.000452][ T7589] veth1_macvtap: entered promiscuous mode [ 335.045062][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.109432][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.342749][ T5919] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.368327][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.368399][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.368443][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.667932][ T6005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.858549][ T6005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.968217][ T7644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.992859][ T5643] Bluetooth: hci6: command tx timeout [ 336.057717][ T6005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.087144][ T6975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.087166][ T6975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.204592][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.205215][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.353192][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.359249][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.502228][ T8019] rxe_eth0 speed is unknown, defaulting to 1000 [ 336.547353][ T8080] bridge_slave_0: left allmulticast mode [ 336.547380][ T8080] bridge_slave_0: left promiscuous mode [ 336.549921][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.595020][ T8080] bridge_slave_1: left allmulticast mode [ 336.595046][ T8080] bridge_slave_1: left promiscuous mode [ 336.595256][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.645159][ T8080] bond0: (slave bond_slave_0): Releasing backup interface [ 336.669181][ T8080] bond0: (slave bond_slave_1): Releasing backup interface [ 336.710451][ T8080] team0: Port device team_slave_0 removed [ 336.729864][ T8080] team0: Port device team_slave_1 removed [ 336.732058][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.732080][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.737084][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.737105][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.747674][ T8080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.814592][ T1432] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.814644][ T1432] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.814686][ T1432] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.814728][ T1432] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.871853][ T8083] team0: Port device xfrm0 added [ 337.091371][ T6005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.128326][ T8086] tipc: Started in network mode [ 337.128360][ T8086] tipc: Node identity 361d851f8c93, cluster identity 4711 [ 337.128951][ T8086] tipc: Enabled bearer , priority 0 [ 337.171359][ T6990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.171380][ T6990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.284525][ T5877] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 337.432697][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 337.924427][ T5877] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.015481][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.015536][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.046748][ T5877] usb 4-1: config 0 descriptor?? [ 338.072588][ T5643] Bluetooth: hci6: command tx timeout [ 338.286702][ T29] tipc: Node number set to 3129902367 [ 338.314371][ T8122] loop9: detected capacity change from 0 to 256 [ 338.390926][ T8122] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 339.307910][ T6005] bridge_slave_1: left allmulticast mode [ 339.307939][ T6005] bridge_slave_1: left promiscuous mode [ 339.308188][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.357662][ T6005] bridge_slave_0: left allmulticast mode [ 339.357691][ T6005] bridge_slave_0: left promiscuous mode [ 339.374383][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.021965][ T6005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.047812][ T5877] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 340.067906][ T6005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.086415][ T5877] usb 4-1: USB disconnect, device number 19 [ 340.091483][ T6005] bond0 (unregistering): Released all slaves [ 340.153340][ T5643] Bluetooth: hci6: command tx timeout [ 340.315524][ T8159] netlink: 'syz.9.495': attribute type 21 has an invalid length. [ 340.315550][ T8159] netlink: 14548 bytes leftover after parsing attributes in process `syz.9.495'. [ 342.233033][ T5643] Bluetooth: hci6: command tx timeout [ 343.051323][ T8178] loop9: detected capacity change from 0 to 1024 [ 343.217501][ T7644] veth0_vlan: entered promiscuous mode [ 344.250058][ T7644] veth1_vlan: entered promiscuous mode [ 344.546043][ T7644] veth0_macvtap: entered promiscuous mode [ 344.579225][ T7644] veth1_macvtap: entered promiscuous mode [ 344.624774][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.656532][ T8206] loop4: detected capacity change from 0 to 512 [ 344.680022][ T8206] EXT4-fs (loop4): Test dummy encryption mode enabled [ 344.696041][ T8206] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.505: inode has both inline data and extents flags [ 344.696075][ T8206] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.696390][ T8206] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.505: couldn't read orphan inode 15 (err -117) [ 344.696423][ T8206] loop4: lost filesystem error report for type 5 error -117 [ 344.790759][ T8206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.836350][ T7644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.048854][ T8219] loop9: detected capacity change from 0 to 128 [ 345.412641][ T6977] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.570745][ T8206] fscrypt: AES-256-XTS using blk-crypto-fallback [ 345.755968][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.837071][ T6977] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.837127][ T6977] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.858245][ T6005] hsr_slave_0: left promiscuous mode [ 345.859479][ T6005] hsr_slave_1: left promiscuous mode [ 345.860374][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.860395][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.861525][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.861544][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.872711][ T6005] veth1_macvtap: left promiscuous mode [ 345.872749][ T6005] veth0_macvtap: left promiscuous mode [ 345.872858][ T6005] veth1_vlan: left promiscuous mode [ 345.872929][ T6005] veth0_vlan: left promiscuous mode [ 346.370104][ T6005] team0 (unregistering): Port device team_slave_1 removed [ 346.409745][ T6005] team0 (unregistering): Port device team_slave_0 removed [ 347.142630][ T3374] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.144814][ T8019] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.144925][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.145065][ T8019] bridge_slave_0: entered allmulticast mode [ 347.157690][ T8019] bridge_slave_0: entered promiscuous mode [ 347.391713][ T8019] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.392616][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.393010][ T8019] bridge_slave_1: entered allmulticast mode [ 347.686035][ T8243] loop7: detected capacity change from 0 to 1024 [ 347.695023][ T8019] bridge_slave_1: entered promiscuous mode [ 348.281261][ T8019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.731341][ T8019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.071693][ T8261] 9pnet_virtio: no channels available for device 127.0.0.1 [ 349.106585][ T8019] team0: Port device team_slave_0 added [ 349.149914][ T8019] team0: Port device team_slave_1 added [ 349.266120][ T8264] ip_tables: iptables: counters copy to user failed while replacing table [ 349.843677][ T8260] FAULT_INJECTION: forcing a failure. [ 349.843677][ T8260] name fail_futex, interval 1, probability 0, space 0, times 1 [ 349.843769][ T8260] CPU: 1 UID: 0 PID: 8260 Comm: syz.4.517 Not tainted syzkaller #0 PREEMPT(full) [ 349.843803][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 349.843819][ T8260] Call Trace: [ 349.843829][ T8260] [ 349.843840][ T8260] dump_stack_lvl+0xe8/0x150 [ 349.843888][ T8260] should_fail_ex+0x3eb/0x540 [ 349.843924][ T8260] get_futex_key+0x893/0x1410 [ 349.843981][ T8260] ? __pfx_get_futex_key+0x10/0x10 [ 349.844032][ T8260] futex_wake+0x119/0x5f0 [ 349.844072][ T8260] ? __pfx_futex_wake+0x10/0x10 [ 349.844115][ T8260] ? mm_exit_exec_release+0x20/0x290 [ 349.844158][ T8260] do_futex+0x458/0x4e0 [ 349.844191][ T8260] ? __pfx_do_futex+0x10/0x10 [ 349.844224][ T8260] ? __might_fault+0xaf/0x130 [ 349.844254][ T8260] mm_exit_exec_release+0x10d/0x290 [ 349.844296][ T8260] exit_mm+0x50/0x240 [ 349.844327][ T8260] do_exit+0x6a8/0x2360 [ 349.844356][ T8260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.844395][ T8260] ? __pfx_do_exit+0x10/0x10 [ 349.844427][ T8260] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.844458][ T8260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.844497][ T8260] do_group_exit+0x22d/0x2f0 [ 349.844524][ T8260] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.844571][ T8260] get_signal+0x136a/0x1430 [ 349.844632][ T8260] arch_do_signal_or_restart+0xbb/0x860 [ 349.844663][ T8260] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 349.844713][ T8260] exit_to_user_mode_loop+0x10e/0x770 [ 349.844754][ T8260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.844785][ T8260] ? rcu_is_watching+0x16/0xb0 [ 349.844831][ T8260] do_syscall_64+0x328/0x520 [ 349.844859][ T8260] ? trace_irq_disable+0x3b/0x140 [ 349.844897][ T8260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.844930][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.844957][ T8260] RIP: 0033:0x7ff6a1f9f559 [ 349.844980][ T8260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.845002][ T8260] RSP: 002b:00007ff6a2ea40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 349.845029][ T8260] RAX: fffffffffffffe00 RBX: 00007ff6a2226098 RCX: 00007ff6a1f9f559 [ 349.845049][ T8260] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff6a2226098 [ 349.845066][ T8260] RBP: 00007ff6a2226090 R08: 0000000000000000 R09: 0000000000000000 [ 349.845083][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.845099][ T8260] R13: 00007ff6a2226128 R14: 00007ffd80a3cd50 R15: 00007ffd80a3ce38 [ 349.845140][ T8260] [ 350.282842][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.282866][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.457330][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.457351][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.457385][ T8019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.519554][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.519576][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.520852][ T8019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.520869][ T8019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.520902][ T8019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.582845][ T5877] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 352.332889][ T5877] usb 10-1: Using ep0 maxpacket: 8 [ 352.334763][ T5877] usb 10-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.340905][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.340962][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.350344][ T5877] usb 10-1: config 0 descriptor?? [ 352.379738][ T8019] hsr_slave_0: entered promiscuous mode [ 352.393902][ T8019] hsr_slave_1: entered promiscuous mode [ 352.394809][ T8019] debugfs: 'hsr0' already exists in 'hsr' [ 352.394826][ T8019] Cannot create hsr debugfs directory [ 353.632591][ T5775] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 353.802634][ T5775] usb 9-1: device descriptor read/64, error -71 [ 354.252589][ T5775] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 354.415481][ T5877] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 354.422615][ T5775] usb 9-1: device descriptor read/64, error -71 [ 354.435713][ T5877] usb 10-1: USB disconnect, device number 2 [ 354.533994][ T5775] usb usb9-port1: attempt power cycle [ 354.707253][ T8292] loop4: detected capacity change from 0 to 1024 [ 354.876784][ T5775] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 354.897310][ T5775] usb 9-1: device descriptor read/8, error -71 [ 355.157037][ T5775] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 355.178433][ T5775] usb 9-1: device descriptor read/8, error -71 [ 355.301726][ T5775] usb usb9-port1: unable to enumerate USB device [ 356.117450][ T8306] loop3: detected capacity change from 0 to 256 [ 358.507974][ T8307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.508171][ T8307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.802917][ T8309] loop4: detected capacity change from 0 to 16 [ 359.991470][ T8309] erofs (device loop4): invalid ishare xattr prefix id 0 [ 359.994922][ T8307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 359.995105][ T8307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 360.085055][ T8307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 360.124124][ T8307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.125309][ T8307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 361.245147][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 361.245197][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 362.095269][ T5643] Bluetooth: hci1: command 0x0c1a tx timeout [ 362.131292][ T8307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 362.153372][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.174358][ T8307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.179305][ T8307] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.246764][ T8307] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.274979][ T8307] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 362.277089][ T8307] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 362.281470][ T8307] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 362.340466][ T8307] hwrng_fill thread creation failed [ 362.548665][ T8019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.568870][ T8019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.570331][ T8019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.609570][ T8019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.610577][ T8019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.644082][ T8019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.646911][ T8019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.693300][ T8019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.887392][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.950749][ T8019] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.984772][ T545] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.984903][ T545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.016578][ T5776] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 364.027799][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.027940][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.142617][ T5776] usb 10-1: device descriptor read/64, error -71 [ 364.152950][ T5643] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.241043][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.243352][ T5643] Bluetooth: hci4: command 0x0c1a tx timeout [ 364.316487][ T5643] Bluetooth: hci6: command 0x0c1a tx timeout [ 364.400028][ T8360] loop8: detected capacity change from 0 to 256 [ 364.433080][ T5776] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 364.572786][ T5776] usb 10-1: device descriptor read/64, error -71 [ 364.683785][ T5776] usb usb10-port1: attempt power cycle [ 365.397106][ T5776] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 365.464476][ T5776] usb 10-1: device descriptor read/8, error -71 [ 365.734089][ T5776] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 365.757947][ T5776] usb 10-1: device descriptor read/8, error -71 [ 365.862834][ T5776] usb usb10-port1: unable to enumerate USB device [ 366.006650][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 366.006673][ T30] audit: type=1326 audit(1793485171.368:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 366.009910][ T30] audit: type=1326 audit(1793485171.368:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 366.010178][ T30] audit: type=1326 audit(1793485171.368:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 366.122802][ T30] audit: type=1326 audit(1793485171.368:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.4.545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 366.221620][ T8380] loop7: detected capacity change from 0 to 256 [ 366.243108][ T5643] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.312842][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 366.313248][ T5643] Bluetooth: hci4: command 0x0c1a tx timeout [ 366.402881][ T5643] Bluetooth: hci6: command 0x0c1a tx timeout [ 369.097489][ T5643] Bluetooth: hci4: command 0x0c1a tx timeout [ 369.097535][ T5643] Bluetooth: hci6: command 0x0c1a tx timeout [ 369.582464][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 371.240939][ T8413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.282116][ T8413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.282501][ T8413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.295766][ T8413] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 371.302008][ T8413] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.316945][ T8413] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 371.317122][ T8413] hwrng_fill thread creation failed [ 371.778450][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 371.854519][ T8435] loop0: detected capacity change from 0 to 4096 [ 371.887757][ T8019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.925885][ T8435] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 371.925908][ T8435] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 371.925970][ T8435] loop0: [ 372.156716][ T8019] veth0_vlan: entered promiscuous mode [ 372.188054][ T8019] veth1_vlan: entered promiscuous mode [ 372.294237][ T30] audit: type=1326 audit(1793485177.648:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.3.561" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 372.294304][ T30] audit: type=1326 audit(1793485177.658:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.3.561" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 372.296879][ T30] audit: type=1326 audit(1793485177.658:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.3.561" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 372.316045][ T8019] veth0_macvtap: entered promiscuous mode [ 372.321688][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 372.337820][ T30] audit: type=1326 audit(1793485177.658:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.3.561" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc1f299f559 code=0x7ffc0000 [ 372.338918][ T8019] veth1_macvtap: entered promiscuous mode [ 372.661964][ T8445] loop8: detected capacity change from 0 to 2048 [ 373.189069][ T8445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.352632][ T5639] Bluetooth: hci6: command 0x0c1a tx timeout [ 373.352672][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.352701][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 373.352730][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.352759][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 373.386806][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.395840][ T8019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.198106][ T8456] loop3: detected capacity change from 0 to 256 [ 374.393440][ T8448] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 375.373080][ T7644] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.456017][ T6975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.546007][ T6005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.547096][ T6005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.547140][ T6005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.659586][ T8465] netlink: 32 bytes leftover after parsing attributes in process `syz.7.567'. [ 375.904959][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.904984][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.086235][ T1432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.086267][ T1432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.125633][ T8478] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 376.125655][ T8478] block device autoloading is deprecated and will be removed. [ 377.164910][ T8486] md: md3 stopped. [ 377.540406][ T8492] loop8: detected capacity change from 0 to 4096 [ 378.003485][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.003576][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.091707][ T8492] overlayfs: failed lookup in lower (newroot/10, name='file0', err=-40): overlapping layers [ 378.092136][ T8492] overlayfs: failed lookup in lower (newroot/10, name='file0', err=-40): overlapping layers [ 378.185042][ T8495] loop4: detected capacity change from 0 to 256 [ 378.202405][ T8495] exfat: Deprecated parameter 'utf8' [ 378.206072][ T8495] exfat: Deprecated parameter 'utf8' [ 378.344934][ T8495] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 379.034235][ T30] audit: type=1326 audit(1793485184.378:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 379.034538][ T30] audit: type=1326 audit(1793485184.388:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 379.034809][ T30] audit: type=1326 audit(1793485184.388:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 379.036407][ T30] audit: type=1326 audit(1793485184.388:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 379.036670][ T30] audit: type=1326 audit(1793485184.388:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 379.036904][ T30] audit: type=1326 audit(1793485184.388:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 379.037139][ T30] audit: type=1326 audit(1793485184.388:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a1f9f559 code=0x7ffc0000 [ 379.041910][ T30] audit: type=1326 audit(1793485184.398:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6a1f5fd8e code=0x7ffc0000 [ 379.077651][ T30] audit: type=1326 audit(1793485184.398:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6a1f5fd8e code=0x7ffc0000 [ 379.079202][ T30] audit: type=1326 audit(1793485184.398:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8493 comm="syz.4.572" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff6a1f5fd8e code=0x7ffc0000 [ 379.316984][ T2019] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 379.509160][ T2019] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.082649][ T5765] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 380.116691][ T8512] fido_id[8512]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 380.237948][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 380.240596][ T5765] usb 2-1: New USB device found: idVendor=04e8, idProduct=a101, bcdDevice=4.48 [ 380.240638][ T5765] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 380.278331][ T5765] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 380.278362][ T5765] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 380.320781][ T5765] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 380.320812][ T5765] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 380.353839][ T5765] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 380.353870][ T5765] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 380.360319][ T5765] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 380.360345][ T5765] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 380.375576][ T5765] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 380.375605][ T5765] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 380.450913][ T5765] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 380.450946][ T5765] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 380.476330][ T5765] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 380.476358][ T5765] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 380.510937][ T5765] usb 2-1: config 28 has an invalid descriptor of length 0, skipping remainder of the config [ 380.510968][ T5765] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 380.583902][ T5765] usb 2-1: string descriptor 0 read error: -71 [ 380.584052][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.640306][ T5765] r8152-cfgselector 2-1: Unknown version 0x0000 [ 380.654522][ T5765] r8152-cfgselector 2-1: can't set config #28, error -71 [ 380.659891][ T5765] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 380.813410][ T5776] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 380.946404][ T5776] usb 10-1: device descriptor read/64, error -71 [ 381.076754][ T8528] bridge3: entered promiscuous mode [ 381.076783][ T8528] bridge3: entered allmulticast mode [ 381.184177][ T5776] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 381.323122][ T5776] usb 10-1: device descriptor read/64, error -71 [ 381.382961][ T4995] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 381.382987][ T4995] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 381.383055][ T4995] loop0: [ 381.433323][ T5776] usb usb10-port1: attempt power cycle [ 382.553202][ T5776] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 382.582415][ T5776] usb 10-1: device descriptor read/8, error -71 [ 382.891352][ T8552] loop1: detected capacity change from 0 to 4096 [ 382.895113][ T8552] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 382.898755][ T8552] overlayfs: failed lookup in lower (newroot/1, name='file0', err=-40): overlapping layers [ 383.193974][ T5776] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 383.420777][ T5776] usb 10-1: device descriptor read/8, error -71 [ 383.523146][ T5776] usb usb10-port1: unable to enumerate USB device [ 384.875750][ T8572] loop9: detected capacity change from 0 to 1024 [ 385.100130][ T8572] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.169577][ T8582] loop3: detected capacity change from 0 to 256 [ 385.180415][ T8582] exfat: Deprecated parameter 'utf8' [ 385.180520][ T8582] exfat: Deprecated parameter 'utf8' [ 385.301656][ T8582] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 385.735756][ T7401] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.629818][ T8601] bridge1: entered promiscuous mode [ 388.629853][ T8601] bridge1: entered allmulticast mode [ 389.047577][ T8602] loop1: detected capacity change from 0 to 4096 [ 389.049621][ T8602] overlayfs: failed lookup in lower (newroot/3, name='file0', err=-40): overlapping layers [ 389.051562][ T8602] overlayfs: failed lookup in lower (newroot/3, name='file0', err=-40): overlapping layers [ 389.216352][ T8604] futex_wake_op: syz.7.596 tries to shift op by 144; fix this program [ 389.910575][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 394.163709][ T8637] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.383074][ T985] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 394.743803][ T985] usb 9-1: device descriptor read/64, error -71 [ 395.152715][ T985] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 395.282644][ T985] usb 9-1: device descriptor read/64, error -71 [ 395.420855][ T985] usb usb9-port1: attempt power cycle [ 395.929694][ T8655] loop1: detected capacity change from 0 to 7 [ 395.930546][ T8655] Dev loop1: unable to read RDB block 7 [ 395.930579][ T8655] loop1: unable to read partition table [ 395.930782][ T8655] loop1: partition table beyond EOD, truncated [ 395.930802][ T8655] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 396.001298][ T4995] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 396.001321][ T4995] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 396.001386][ T4995] loop0: [ 396.107299][ T8660] loop9: detected capacity change from 0 to 128 [ 396.187428][ T8660] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.211003][ T8660] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 396.389032][ T8660] syz.9.614 (pid 8660) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 397.997612][ T7401] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.419033][ T8700] loop7: detected capacity change from 0 to 256 [ 402.667671][ T8713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.690172][ T8713] bridge0: port 3(batadv_slave_0) entered blocking state [ 402.690296][ T8713] bridge0: port 3(batadv_slave_0) entered disabled state [ 402.690448][ T8713] batadv_slave_0: entered allmulticast mode [ 402.724135][ T8713] batadv_slave_0: entered promiscuous mode [ 402.744025][ T8713] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 403.040061][ T4995] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 403.040087][ T4995] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 403.040150][ T4995] loop0: [ 408.043759][ T8756] device-mapper: table: 248:2: thin-pool: Error opening metadata block device (-ENOENT) [ 408.043782][ T8756] device-mapper: ioctl: error adding target to table [ 408.111358][ T8756] device-mapper: ioctl: The device has no table. [ 408.469289][ T8766] loop4: detected capacity change from 0 to 512 [ 409.337196][ T8764] loop7: detected capacity change from 0 to 8 [ 411.746689][ T8764] squashfs image failed sanity check [ 413.413308][ T8781] ioremap: invalid physical address 8000000000000000 [ 413.413411][ T8781] ------------[ cut here ]------------ [ 413.413421][ T8781] 1 [ 413.413429][ T8781] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller+0x51e/0x620, CPU#1: syz.3.647/8781 [ 413.438460][ T8781] Modules linked in: [ 413.442410][ T8781] CPU: 1 UID: 0 PID: 8781 Comm: syz.3.647 Not tainted syzkaller #0 PREEMPT(full) [ 413.451686][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 413.461849][ T8781] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 413.467748][ T8781] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 35 6e 96 ff cc e8 54 3d 4f 00 48 8b 74 24 60 48 c7 c7 20 0c 2a 8c e8 33 ef ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 413.488507][ T8781] RSP: 0018:ffffc90006d5f880 EFLAGS: 00010246 [ 413.494649][ T8781] RAX: 0000000000000032 RBX: 1ffff92000dabf00 RCX: 3570dad96f070500 [ 413.502682][ T8781] RDX: ffffc90006132000 RSI: 000000000000026a RDI: 000000000000026b [ 413.510655][ T8781] RBP: ffffc90006d5f990 R08: ffffc90006d5f607 R09: 1ffff92000dabec0 [ 413.519742][ T8781] R10: dffffc0000000000 R11: fffff52000dabec1 R12: 0000000000008000 [ 413.528502][ T8781] R13: 0000000000000030 R14: 8000000000000fff R15: dffffc0000000000 [ 413.536743][ T8781] FS: 00007fc1f38126c0(0000) GS:ffff888123511000(0000) knlGS:0000000000000000 [ 413.545785][ T8781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.552375][ T8781] CR2: 00007ffea1c9ef08 CR3: 0000000055df6000 CR4: 0000000000350ef0 [ 413.560399][ T8781] Call Trace: [ 413.563734][ T8781] [ 413.566671][ T8781] ? register_device+0x12c/0x570 [ 413.571611][ T8781] ? __pfx___ioremap_caller+0x10/0x10 [ 413.577033][ T8781] ? __kasan_kmalloc+0x93/0xb0 [ 413.581798][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.587456][ T8781] ? __kmalloc_cache_noprof+0x31c/0x600 [ 413.593061][ T8781] ? __kmalloc_cache_noprof+0x148/0x600 [ 413.598601][ T8781] ? register_device+0xc6/0x570 [ 413.603515][ T8781] ? register_device+0xc6/0x570 [ 413.608390][ T8781] register_device+0x12c/0x570 [ 413.613355][ T8781] phram_setup+0x412/0x620 [ 413.618579][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.624869][ T8781] ? __pfx_phram_setup+0x10/0x10 [ 413.629855][ T8781] ? __pfx___mutex_lock+0x10/0x10 [ 413.635067][ T8781] ? sysfs_file_kobj+0x1a/0x230 [ 413.639975][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.645721][ T8781] param_attr_store+0x214/0x310 [ 413.650600][ T8781] ? __pfx_param_attr_store+0x10/0x10 [ 413.656072][ T8781] ? __pfx_sysfs_kf_write+0x10/0x10 [ 413.661326][ T8781] module_attr_store+0x65/0x90 [ 413.666189][ T8781] kernfs_fop_write_iter+0x3a4/0x540 [ 413.671504][ T8781] vfs_write+0x612/0xba0 [ 413.675822][ T8781] ? __pfx_vfs_write+0x10/0x10 [ 413.680593][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.686278][ T8781] ? __fget_files+0x3a2/0x420 [ 413.690947][ T8781] ? __fget_files+0x2a/0x420 [ 413.695592][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.701215][ T8781] ? fdget+0x1ac/0x250 [ 413.705325][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.710955][ T8781] ksys_write+0x150/0x270 [ 413.715345][ T8781] ? __pfx_ksys_write+0x10/0x10 [ 413.721132][ T8781] do_syscall_64+0x166/0x520 [ 413.726465][ T8781] ? trace_irq_disable+0x3b/0x140 [ 413.731516][ T8781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.733014][ T4995] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 413.733040][ T4995] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 413.733109][ T4995] loop0: [ 413.757284][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.763301][ T8781] RIP: 0033:0x7fc1f299f559 [ 413.767733][ T8781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.787438][ T8781] RSP: 002b:00007fc1f3812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 413.795930][ T8781] RAX: ffffffffffffffda RBX: 00007fc1f2c25fa0 RCX: 00007fc1f299f559 [ 413.804012][ T8781] RDX: 000000000000001e RSI: 0000200000000880 RDI: 0000000000000003 [ 413.812019][ T8781] RBP: 00007fc1f2a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 413.820088][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.829201][ T8781] R13: 00007fc1f2c26038 R14: 00007fc1f2c25fa0 R15: 00007ffef392cec8 [ 413.838727][ T8781] [ 413.841760][ T8781] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 413.849036][ T8781] CPU: 1 UID: 0 PID: 8781 Comm: syz.3.647 Not tainted syzkaller #0 PREEMPT(full) [ 413.858236][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 413.868299][ T8781] Call Trace: [ 413.871577][ T8781] [ 413.874505][ T8781] vpanic+0x26f/0x710 [ 413.878500][ T8781] panic+0xc5/0xd0 [ 413.882231][ T8781] ? __pfx_panic+0x10/0x10 [ 413.886692][ T8781] __warn+0x315/0x4c0 [ 413.890679][ T8781] ? __ioremap_caller+0x51e/0x620 [ 413.895710][ T8781] ? __ioremap_caller+0x51e/0x620 [ 413.900731][ T8781] __report_bug+0x276/0x570 [ 413.905231][ T8781] ? __ioremap_caller+0x51e/0x620 [ 413.910257][ T8781] ? __pfx___report_bug+0x10/0x10 [ 413.915268][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.920889][ T8781] ? irq_work_queue+0xbf/0x150 [ 413.925651][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.931279][ T8781] ? vprintk_emit+0x55c/0x5f0 [ 413.935948][ T8781] ? __kmalloc_cache_noprof+0x31c/0x600 [ 413.941504][ T8781] ? register_device+0xc6/0x570 [ 413.946357][ T8781] ? __pfx_vprintk_emit+0x10/0x10 [ 413.951382][ T8781] ? ksys_write+0x150/0x270 [ 413.955910][ T8781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.961986][ T8781] ? __ioremap_caller+0x51e/0x620 [ 413.967007][ T8781] report_bug+0x16b/0x220 [ 413.971335][ T8781] ? __ioremap_caller+0x51e/0x620 [ 413.976352][ T8781] ? __ioremap_caller+0x520/0x620 [ 413.981364][ T8781] handle_bug+0x9c/0x200 [ 413.985600][ T8781] exc_invalid_op+0x1a/0x50 [ 413.990093][ T8781] asm_exc_invalid_op+0x1a/0x20 [ 413.994927][ T8781] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 414.000570][ T8781] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 35 6e 96 ff cc e8 54 3d 4f 00 48 8b 74 24 60 48 c7 c7 20 0c 2a 8c e8 33 ef ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 414.020166][ T8781] RSP: 0018:ffffc90006d5f880 EFLAGS: 00010246 [ 414.026224][ T8781] RAX: 0000000000000032 RBX: 1ffff92000dabf00 RCX: 3570dad96f070500 [ 414.034230][ T8781] RDX: ffffc90006132000 RSI: 000000000000026a RDI: 000000000000026b [ 414.042196][ T8781] RBP: ffffc90006d5f990 R08: ffffc90006d5f607 R09: 1ffff92000dabec0 [ 414.050236][ T8781] R10: dffffc0000000000 R11: fffff52000dabec1 R12: 0000000000008000 [ 414.058196][ T8781] R13: 0000000000000030 R14: 8000000000000fff R15: dffffc0000000000 [ 414.066171][ T8781] ? register_device+0x12c/0x570 [ 414.071106][ T8781] ? __pfx___ioremap_caller+0x10/0x10 [ 414.076502][ T8781] ? __kasan_kmalloc+0x93/0xb0 [ 414.081261][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.086882][ T8781] ? __kmalloc_cache_noprof+0x31c/0x600 [ 414.092438][ T8781] ? __kmalloc_cache_noprof+0x148/0x600 [ 414.097978][ T8781] ? register_device+0xc6/0x570 [ 414.102822][ T8781] ? register_device+0xc6/0x570 [ 414.107676][ T8781] register_device+0x12c/0x570 [ 414.112466][ T8781] phram_setup+0x412/0x620 [ 414.116888][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.122525][ T8781] ? __pfx_phram_setup+0x10/0x10 [ 414.127519][ T8781] ? __pfx___mutex_lock+0x10/0x10 [ 414.132546][ T8781] ? sysfs_file_kobj+0x1a/0x230 [ 414.137401][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.143026][ T8781] param_attr_store+0x214/0x310 [ 414.147877][ T8781] ? __pfx_param_attr_store+0x10/0x10 [ 414.153257][ T8781] ? __pfx_sysfs_kf_write+0x10/0x10 [ 414.158451][ T8781] module_attr_store+0x65/0x90 [ 414.163246][ T8781] kernfs_fop_write_iter+0x3a4/0x540 [ 414.168530][ T8781] vfs_write+0x612/0xba0 [ 414.172770][ T8781] ? __pfx_vfs_write+0x10/0x10 [ 414.177541][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.183159][ T8781] ? __fget_files+0x3a2/0x420 [ 414.187911][ T8781] ? __fget_files+0x2a/0x420 [ 414.192492][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.198125][ T8781] ? fdget+0x1ac/0x250 [ 414.202198][ T8781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 414.207850][ T8781] ksys_write+0x150/0x270 [ 414.212171][ T8781] ? __pfx_ksys_write+0x10/0x10 [ 414.217019][ T8781] do_syscall_64+0x166/0x520 [ 414.221593][ T8781] ? trace_irq_disable+0x3b/0x140 [ 414.226628][ T8781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.232685][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.238563][ T8781] RIP: 0033:0x7fc1f299f559 [ 414.242983][ T8781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.262571][ T8781] RSP: 002b:00007fc1f3812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 414.270969][ T8781] RAX: ffffffffffffffda RBX: 00007fc1f2c25fa0 RCX: 00007fc1f299f559 [ 414.278922][ T8781] RDX: 000000000000001e RSI: 0000200000000880 RDI: 0000000000000003 [ 414.286891][ T8781] RBP: 00007fc1f2a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 414.294844][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.302794][ T8781] R13: 00007fc1f2c26038 R14: 00007fc1f2c25fa0 R15: 00007ffef392cec8 [ 414.310776][ T8781] [ 414.314007][ T8781] Kernel Offset: disabled [ 414.318317][ T8781] Rebooting in 86400 seconds..