last executing test programs: 17m48.750331651s ago: executing program 1 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0) write(r0, &(0x7f00000030c0)="6164642073797a30205be3", 0xb) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x84, 0x3, 0x0, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x2}, 0x2a45}], 0x1, 0x40000041, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) sendto(r4, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000280)="0f4f0ef539593cd19df70304c1de43fbe027a3e750147cac46c01995b7372385e066a2250a0f730f772a415e0a90a30a926bb049790230fccdf19deebdac4d67e142b3d177051840d8dc991b6da4862b08ca10ca2a2e702ba9d1fb1ce1f6d6746d25f5126ab8ff44505c63cac38f912c8cd11a1970f0ea52f11e82b7f10bb446864c7ffd163c7a3b2f54520fda5752a11650454c711747e14045ee2b48fa80fc5c89bab2bcd587cfe8df1136", 0xac) recvmmsg(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000480)={{r2, &(0x7f00000001c0)='p\a\x00\x00\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0xc, 0x8001]}, {0xfff7, 0x8, 0x8000, 0x1}}, 0xf, &(0x7f0000000380), &(0x7f00000003c0)=0x8}, {[0x7ff]}, 0x80000000, 0x70, &(0x7f0000000400)=""/112}) 17m45.559335259s ago: executing program 1 (id=221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x1b4, &(0x7f0000001040)='debugfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000006800010003001000f9ffff7f00000000000000002400020002000000030000000000008c8100000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0100020084960c4c"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) 17m43.678928659s ago: executing program 1 (id=226): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x181141, 0x9c37611dc13d0d2b) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x5, 0x0) pipe2$9p(&(0x7f0000005500), 0x800) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0xffffffffffffff1c, 0x0, 0x8, {r4, @local, @remote}}}], 0x20}}], 0x1, 0x8000) bind$packet(r2, &(0x7f0000000280)={0x11, 0x6, r4, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) 17m38.836866221s ago: executing program 1 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = socket(0x40000000015, 0x5, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x40000020, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000640)='#', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x4, 0x20}, 0xc) 17m36.588005064s ago: executing program 1 (id=238): fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x1a0050, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x3, 0x4, 0xaa8, 0x7f}, 0x22, [0x40, 0x9, 0x6, 0x0, 0x2, 0x361, 0x2, 0x9, 0x9, 0x3, 0x6, 0x10, 0x69, 0x10, 0x6, 0x4, 0x463976fa, 0x8, 0x8, 0x3, 0x100, 0xda70, 0x3ff, 0x7fff, 0x7f, 0x7, 0xaf8, 0x40, 0x2, 0x0, 0x8, 0x1000, 0x92, 0x5, 0xff2, 0x8, 0x10, 0x7ff, 0x0, 0x8, 0x3, 0xbc, 0x0, 0xeb, 0x51, 0x8, 0x1, 0x10, 0x3, 0x10000, 0x4, 0xfffffffe, 0x5, 0x6, 0x5, 0x5ae, 0x10001, 0x0, 0x4, 0x6ad6, 0x8, 0x4, 0x3, 0xc21], [0x7ff, 0xa, 0x6, 0xffffffff, 0x3, 0xfffffffb, 0x3ff, 0x9, 0x10000, 0xc1, 0x34, 0x3, 0xc, 0x4ff2, 0xffffffff, 0x8fbe, 0x9f92, 0x3, 0x2, 0xffff, 0x8, 0x3, 0x40, 0x7fff, 0x8, 0xe, 0x800, 0x6, 0x1, 0x8001, 0xffffffb7, 0x7, 0x1, 0x7, 0xf8f, 0x5, 0x7fff, 0x8, 0x33, 0x7, 0x6, 0x6, 0x8, 0x3, 0x8000, 0x3, 0x10000000, 0x9, 0x7, 0x0, 0x6a9a, 0x7, 0x5, 0x7, 0x9, 0x10, 0x3, 0xff, 0x29e0, 0x1a346e15, 0xfffffa50, 0xa9, 0x7, 0x3], [0x2, 0x60000, 0x4, 0xe9, 0xf, 0x8037, 0x4, 0x6, 0x3, 0x6, 0x5, 0x5, 0x626, 0x8, 0x0, 0x1, 0x5, 0x9, 0x2, 0x7, 0x3, 0x7fff, 0xc, 0x8000, 0xfffffffa, 0x7, 0x1, 0x3, 0x3, 0xa, 0x3, 0x3, 0x3, 0x0, 0xfff, 0x9, 0x6ae, 0x600a, 0x400, 0x1000, 0x1, 0x954, 0x4, 0x800, 0xa8, 0x8, 0x9, 0x30000, 0x2000000, 0x18, 0xfffffffe, 0xf, 0xf77, 0xe4, 0x0, 0x3, 0x400, 0x5, 0x9, 0x10001, 0x2, 0x0, 0x1, 0x2], [0x0, 0x292, 0xc852, 0x7fff, 0x1, 0x401, 0x6, 0x26df, 0x2, 0x9, 0x4, 0x7a, 0x81, 0x6, 0x80000000, 0x8, 0x7, 0x6, 0x41, 0x400, 0x6, 0x80000000, 0x200, 0xffffffff, 0x40, 0x2, 0x1000, 0x2, 0x6, 0x8001, 0x80000000, 0x7fffffff, 0x3, 0x43, 0x3d81, 0x2, 0x5e, 0x2, 0xffff, 0x401, 0xffffffff, 0x9, 0x9, 0x1, 0x5, 0x8, 0x5, 0x519, 0x81, 0xab, 0x8, 0x1ff, 0xc, 0x0, 0x7ff, 0x6, 0x1, 0x8, 0x5, 0x7, 0x9, 0x3ee0, 0x2, 0x6]}, 0x45c) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000240)="040000000000000000000000380100"/38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x22, 0x0, 0x0, 0x8, 0xfffffff8, 0x5f4, 0x81, 0x6, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, 0x0, 0x0) readv(r4, 0x0, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) 17m34.936451947s ago: executing program 1 (id=243): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="793f8bffc23da4521e4d24cbc0801900"], 0x28}}, 0xb240f6de09b96132) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r3, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) syz_clone(0x40200200, &(0x7f00000007c0)="947418f7052bcaa695a2502e23ff681262d3305941114e623bee36e76043873aa40c0f96e076c6f08eda26936a386ca44f3ec232486e278808ce5eb7866ca3b303e6dce273bb55cefc3f0be44413a53ba2fa9b06cb53c576332ac9e92af9dccbeadd0ae2465a62de0e22812350f4ccc6cfddf6a75e971466beb13d7fc8694027272507d5855c2ca817744403ae1b6a0fa8eb5b1f3d42d2f22950863ab99dd4f69badf855a9b51fc841d1a0c70a4a2898040fc3b8a64981986026f6ceac3dc481389af6c4153a1257255ebb26e795f8d7d075d2c26a19f62f2cf047ec32b118b88d2946a8c155b3a8d2c791b11e2445a4380c38e0142315a8919650d685ccd82bcb7f4e063e5247cc388b433a9cfdf8db1adc4129efc3350c0feaf1fd34906da771858a8f9cff59c5857ffd05e30568f042721f65a7a2234b10903c92a423a5f1dad96b694977199f3fd9228874b5c48f3d7c8fcd653db9b86656921a5270ac48cd3b44d670d18f178283398f80bb34a36ebee578a950c09b84ed04b32e651c0d52e6ba33151e43ba7472f6e79de0ccc8411438bb1ded00853da219b37fcdc045006c53d0c630958cc695125d18babe60161f8f5c1b61ea3332757fa2ab41258f6bdcef067431d994282f52788dbfe17769c592bf5accbbe1919ef42fc65992d5b54e4ec4a0cefcb3f53af2a2e37e37f74ba85f8840d76d7e4c042a00cdcb3d0e2816f1d64c0aab403bb5d801acc0e2547834142e3a39b0d73c0b7c3afae916918f7f51b83d9ac7521c9d6bc6fe6404f6da10eaea39def3e13245410be9b32de6bb9fb5fe0534ddfcd467815b559c97fcf53a36ee37ed1547bd0dc24e77c0035904567495f92fe34f5ab684b61abb830e1cfe9486e7be34ca06b86b99d208f5d9af7e54c6ef6f414f75aa806eeb9a0a6c4c151802a13da74b88d32a7d544194cfae1df7ab7773bbfcc548875dc62508633f9c731e248ca7c8b6907f3d57f586a93d2002d6b77d40f956b398d0967808f46d62834d9e8897974666ae1be2cee6089c709a171b8675d356d5a2a34a30693bc1106e8b0772c126037c75ab40b774d2a543fd093d5fa0af50eccb344bf664411eeccf9720cda30c673184853f70411bef6ef92a684c90d635f73163cff2c1e6066142bcd234caf44263899e77161d912021b8ab40ed87c6a8c4f65f2f2e5865f2f480c9221add6f92243e06272ec8637b434074407eb94dd300485f4c709c1d35468063592e3cf2394cb3b9478762f493a68d31864083b94904be4f9e3af8384bcfe4fb6812bb52e0b13d2492908ce445b77e6179bbdde724ab5b9e3219d0d24c3eeb5ce8312b21525763dace726dd69e8472e4f0b3a4294cef1ffff88c98f4672398ab277819c4e65a67c735b3855adb2795996ce1430b0a3d4e4cfbae96281cd42cb8051c0bb3756f8922700b7569a714e135bb9dff88bc16d98e66ff188af234a0196b2893d224d08e76767085d01e0df343c9fa62cc3bb9a9114420e7abe0812e53f7232e21752a27f7bd62c876355526e28bcee8bf2f34056c1cae0e683a80aaf982ad6cd3cbd3c4c42a6d3d807be4caccd4ce5a18246b26ebc60a8240988f727badf155f6594f3a434862012c9d87febefe21815890a412b11d4b7e3d057e90c70f7a21b6fe8a0fa802cb21b4d701cde930460e8fba610d92c1298d811f7ba5b54f8f039af4e7fad35f3572d529c0d3e48ccc8086d8d70d7e9551818ad4330a5aa3247eaae2b889f207ee654773bbe9871b69c88e6f67c952613f1fd270f32937d6142dcbde35baa28d8f7e44451480a32bc118d0fcfdcd4f47786eb5061b3306c16366b6183b533183eca855aaf40a5897ac22e986bca025ef7f65f332a25b91cc6091a833ead48ce02b29841b7a994ad96cf784f718cd7127269d8987a3e02d554cf5eb3ba4e046249081b3ac3889e859225cbcbf96080fba8eaf5b6d4b7cea9978dac149a9f0655b082571af91badac73ec78bee8ab30a360a49088edf43d0f3c816c3bb1a428ac83bdd9e5ebe29d0b59640ca7af5e93fd65b3113a857caf0030db5a0b4f96735c0898c08c560f0e63408ddd69a3d464643fb53a81ba9242d13c8bfb9d28b905505f74615306264919a27ddc8afa107282c0026b11657b75299d6bba840ac8b5be3ee236589ee55a2f3b3fb52763ad3edbb5e61ca83317169d557e36b285fd79bc1b54f0c39790024b9658cb2a6383b4cbd1be10f7943a032d0b0700844ed83d5d874da401ac83bc7730f6c9ce68136d03b7653465948339e66e5206df4803a3d7c9d90459e69d89cca55d4b101153346453d1b74e84c52f510ecf5818d4d0d7e80405ecd68608f45e4fb44167bf3bb358642b305f2dde4b1fef6603db61581716cfe807e5eb4c2cf9fdb8845f8c1875f39d6a3181e09b7ac7e21690c9d3fba14ac13dbadf873249fbe5d25d90cdae42e3f43ca249837db9dd78aff3626d5808fa94527f02f1968224e94214f5ee53daea084344b93c12a740bbcdddc52be490af44db5feb2e440e798a76675094e3e4c85706f43e12fa4a432f64df039700d33232e338a8b5615fd3555ddbb4336de6ced433f244044d3a34937106f6b302a423a236354cb62cbbb9b983fdf6f0d3fe514f8464a34440011dca1db4bd2a124c45fb9bb995ad9ec5f607fb61c6ac1d081b6eb529660d26f9aff300beced5547b633ed92c568f3a4e9a132d67b3e2d73fcfee633916fc4f25ca576a4770050809b60b0c7cf808b27bd1ef67a57558387a997098808213ee2181b95c7c4ead907abefbb8a4f50a8f110cfdbde29a2a64f74a25c6f49f8745ebd17991f6f83fc403f3664b47ab55212a3db9f15edc0dadfb699f34db6d073ea5ceb6458dc69a16f05e97e229309bd92df0a4c8758d23cfe1f6526615d557dd443f44d481a6e7183ffd6117935a3d116d8ad0fcde82d7fb7502e77d64e34af8329c6f40faf47d48be46434587086a5d56dca2600bf107258574361d479ab83b564915641808cfb6923d3385ed0398ae6f3c5d7f35185a58edf22c1833ecacb42c1b643ebdf7c415d923706f88c1060f629008ce3b22528a104d215fd0b090925759a123b1a69c2034b71d8264e59aa8c666b11138af93720bb11b4f62017b32a8ea33e636fd88fc10447284e2772fadbad6df047c8da1d1f4de80b2f739ca39d02fdc45c6b77b025cfb50129d8a988b942b95caf9a623e32c782ea69a7589a0411993bdccb03424b4cb51a71ab6a93428a3874a9509ef001a9dc8d96419cc1691001745825978c50ab3341d35ad1791d93a11a2754f5539fc242a136116d7f6fed62ac45f4bdae0f6196566806689dd2d2bde7446e9585822c68997feb31b019e02aa803527e597c4da4f85f875eec6a4d0cf8cc4bcecb48ee93437c3f00dd2e19ea12c72cc293d9b20e554b0e95e0c9781694ff2e155aae4bd5762a38d1e3043f6111fb4ee24f6bdc27356ac96ed4c4c00edaf2ab27a9a71744b8225a9259bc6807475de52c1dfb8074cc4e50f903128a0d595bcd30a91177ef9abfaff9e194dbde79dd341e21d4533b7bd09866418d3e35d3409a99eaad23b5e992999c9ce45fb95dd4b0eae2d9937749b9ea337f5722071493324f8aebe3563d2293ea4dab5e20ff399429a69cf16466dde7e98ed138ecdf9efbcbe601f307a28accce2f37342cc089aa513692d626f71bec647f224a8d789a05ce9d64a854e40c387a53f9bd3615c4ae0f048a6caa8a2c89a9c490232db100d68f7c79e2730656b504322f5f9b55123bbc51ca1eff0c781f1016b6dc28b8faf5ac7ae40829e4a480be19098f6d25444702a13e127f2de7b0dda651ce6661d00bc13ba6ae3dfcae164c233956174f5a7ea691cc7a50a2895be5794d813ffa99e28bbbfd1d41f80b181c3cc5c9cef838d70f8e3b487de826cf10f00a9567c12c025dc026a6693987daa18bb6275170eda95c9c361ffbdc37eb4328025071cde8cde70a9deb476e6ad19d5d0efb616a836cc1108f330ba464958ec6fa194e67c813b249f385fc94d9798a8690cffd484b15abf0b6b6f4307a33548872f091dc5aebe984fe15c0909e73866891bc866a449d4719e91ac2c58f77cbbdde3132e066629f11ae67f941cbc94a12d5919885d79862e028ac234760272e21c6d079c2aa088e5c130cc0361ee59e7f0418886dadb8a3bbdb7a5f92eb0c1d90ebc776b294d9cc85cda6abff191961f6877b776ab44f653e884ba79c830d02b771464ee39a2949ee7f60becce28a391392389307275b75646d0b738d07a0f9e5b5db5dce274e31bdd910bfa720f8b214306ca662100e51c89c4edbd302f6ae664cc502431c155204b47bd81d37c94500900a97ceb314ebe28b12b895be63d5b0e81b55bc38b415d2877fcdca545e7622a1d8932b9ce635869d2e01cc2c40ba17c5c6a23ee3e4ff58136ca087c916d039e72c4e668c44cec217765f7a7ad1f3de8b99d11a9c932833fd4057e5597ac4771bfe306b7590083c0212ced728b5581c4bc1713680a27f64d42f4fad132f576656f390026dfc3e21333a04db228365c1ca919122737b5608642f5e6ccb6560174e21dd3a60a4de57f17831d888c2ddf11ab42d774043ccde20fb51fd51884031170c9b611e577b130d7f6d36ecf3a0eff0baf18efcd3d5596d97ef170dc5ba03742201a2162aef70d0583ea658fe9e04e397cd766ed249f777d94b8ae94f19e8bc63145dc1c2a61f7f041e61791c439381d00430b03fcfe800cc0ac3aedaa09a7ab7148e944742501b0567f49a644e81b7089abf2df9a65c2d066788a7cdcc713f16368fe7408136780f48d7720d3fd28959f93734734f6cad5ee4c94c172f01d9ec0354875da4b76608e4bc7ae740bf906a65f97e27d9fbc1fea6a850b23be9eb480abd4c2c93351bc960c9e168b8c957e7cfeaee56803d36f4caa34fa8ebf77e51fbd6c0ba95402226f4eee396223e488002439dffb58cbfebb9fda1d3d5b283b23a0510a324f48b4343b22580a9060290cf466aadb48f20cdb58b1c8b73a40878289e479f8fb0d4cc29da242b56a5caebd4957be2afbc177b5758c0b9f426805a0181c6d410d1431f76ce97ec078b2e0b46af860bb1267f3dd100ebb230d5cb15d82b8c26a43df3745a1164a8c05576d8853cdcc5051b61daad87ec4d787fed5d6baacd7fc243ab09da6a7e56331836415a52a53a4435b1502d80a1b80dd0dc2027ac4c1f56da7e66f4a22d21c8181d2ea93c099c302c3634d3391af10ae197239501dfb4ae772ac3cbd3e80bca01af8e86eea24b85a7a2bb502ae0b1a19ff5a64e5c2fbd1997b3956e4475438777904f6c986ae8ee9280790c4e68a80e3d3c79eb77d3a53cb79f8dc3e2b2faf02074f4e9baa78f07f824daf156e27ce600fa92933c42a9cee7c925a9d80e814d3e36999b9b199da7f3e03238f43f8442a4c7a8263539593aa1354853e01b9dab0fdbaed242c592b331cd951cc756d81d1e97ca6d6507021ebea5ec74bdf38ca12090bca3d4ff618011d5e38b67d71eab3578787a9b66cb36d574a08106868b515c16bbd4d97c17773a1cf694c3ba983ef07b4b9f1b154c59c439cfb2a69ce54c8fa0e150d8ec1c0757a78929a37dcebc42cf32bd3d834bed4c329e286e9d6973c2ea31e2c3fb8611db7d924b72a1b47d0918e61e6e2e2382fdb6ea93c2381f832bf8efdd82d07f29c7f5975fba5ca445606494a4f3f50e9f559b65368735a9689ea7a2726a9fada1fdb546351494eee3dc697eb235e73bc523c184a4d2bf9a", 0x1000, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)="8293c2e604db94c8f981fa79cb8f32705b56afddca1ad5201c8b62c28b25c9ebc435efe6f98dee45f5b3f0502fc215b3e2e6e9863e751047414800de1faf6610d712bb913f8c5b7890486731a998b85aeb748e1254ddfebdb0922dc476204d0ef67e15884d51cbf841c07bb1d1b6183c9aae8de8ba5993c52cafc1246d") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x1, {0x7, 0x29, 0x1, 0x24ff87198ba8fd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x979}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) dup2(r3, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28000, 0x2a8f2}}, 0x20}, 0x1, 0xf000000, 0x0, 0x56}, 0x4004004) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6]) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000100)) 17m19.511829513s ago: executing program 32 (id=243): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="793f8bffc23da4521e4d24cbc0801900"], 0x28}}, 0xb240f6de09b96132) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r3, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x3) syz_clone(0x40200200, &(0x7f00000007c0)="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", 0x1000, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)="8293c2e604db94c8f981fa79cb8f32705b56afddca1ad5201c8b62c28b25c9ebc435efe6f98dee45f5b3f0502fc215b3e2e6e9863e751047414800de1faf6610d712bb913f8c5b7890486731a998b85aeb748e1254ddfebdb0922dc476204d0ef67e15884d51cbf841c07bb1d1b6183c9aae8de8ba5993c52cafc1246d") r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x1, {0x7, 0x29, 0x1, 0x24ff87198ba8fd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x979}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) dup2(r3, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28000, 0x2a8f2}}, 0x20}, 0x1, 0xf000000, 0x0, 0x56}, 0x4004004) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6]) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000100)) 16m51.652876857s ago: executing program 0 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x7, 0xda77df508094d5eb, 0x0, 0x0, {0x4, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (fail_nth: 2) 16m51.312363185s ago: executing program 0 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x70bd28, 0x25dfdbff, {0xa, 0x0, 0x10, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000007bc0)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)="4e3e77110f49d4086abaa7c443ad8be3ac228798c02802783da73fb73c07dec7deb19b17d032495b2638f77580b08d65b470", 0x32}], 0x1, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [r3, r5, 0xffffffffffffffff, r3]}}, @rights={{0x30, 0x1, 0x1, [r1, r5, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0xb0, 0x4000840}}, {{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006500)=[{&(0x7f00000008c0)="d2dfd7a8ba5704f1e90516bb198ec5e4aa84d19d4639b57e5f3506fcf5dde2db2e5a70c909106ed610c4836a242a2d0c7f70e13a2fd2f282fdad35b579f7e574fee77252311c254cb1f68455ca8b3810f281d210823e298bd05521cee548fe5c24a5a4d20b1d92a77356fc63ea648dc3f885a363242a8112d4a1a88e26fb29e290b60736b9b2abe1c931b0bd5172e4a01ba957a1af05c3497afc8cc90ca0494b87634238df32ecc87372608e15935475786ca8f9c380aa76ee3129263e8bfcc504713f2a02ec778334ea1e3f5dc8079e6ff532f727d88ea834b7c9ade88c38e0379709d979cb2ee8dad290cf541e6273a43c", 0xf2}, {&(0x7f0000000a00)="7c86ba57b4bdeb7ed10e0d83155cf8c8629147ca2e908f07bd5ed9012af0420f75a6acac0b7b3b4db11a387d7b96f9d1a72219224507067dfd4c943124f1ee404da9dd1b99fa3d2fc1fe19628232f971522d75abaf4eda6f1b043e4ac8fb4f608a855630b899675872ab21636dedd3b16424fa624278d87965b3d06616c4a6389dceee7a5b9e79ee1b80c54faa6772a573fd594d21d4176d659ac645854b1bfbdef830f3391097eeb427c43753c733057d7ac12eb0354b8dd61c3d641c90aeabb8c732a062e8d05503ccf1", 0xcb}, {&(0x7f0000000b00)="d206bd15836868e71b197392d79633fbad32a079127de472facb22c0ad93115aff41abfb8077d29fef66e50c86696703f01e3e455f51102750f7ad123870c23f2088a63b28d27d6ba6f5bd88705bcfc25ef533c98ba02c6cbfa7fa67acb670e6", 0x60}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="69d93dc539ca1fa0425bde3ffc15558eb556cf48fec5d5139549d2b2ae3aa2e2d08028ecd10949ad40cdab971209696b5cdd7254d15673a80cc585769733dfc827846cd64ce36487d7ec2261236732c89f03d18a458c402aff14cd7c56c586de89ce87fd4f6fb03960a0f62d7f0106f1aeb5f2ccda99196298851efb8a707c1749aa7d5427d161ffcfa79af49e1e6f46cad39565946de3b9fcd38617283a7d84dbaa68d65fd7a8ecf92ca81ce708ce47115f7071d056ba4b3374fae628cbde9af88fc67e2b382357b837b81b0579e455b0158dd3632f7b87bf823cd092b91874c3c830a1f664e8e7f7605af9", 0xec}, {&(0x7f0000005300)="50dbcb263fb2ade11442ce23c225e390d0709133d79ff21011d29223c1aa131442edae203a9004745db4f945b171282a", 0x30}, {&(0x7f0000005340)="f581cf86337a6e5dce3da3b0d7fb1c98ebfca88f6c13c9962e12a5ba547a0e5b047474e66b08121ad1ed91d2b6457ced57fb10d5af53f793e0055eee5d81d5ddafbfa9e316c41d9dd5277c99d8b473f240d6e65c", 0x54}, {&(0x7f00000053c0)="a78fa783dc55ba39788c322d94a06c7b6a4923e212caf9226bebe53a276981007fc89ec9a34ea00ada8f69158d2a61a5ba20d098", 0x34}, {&(0x7f0000005400)="45a99357f0aa9c5d2253e4fc8a052e8a8335b8ef40121ee2902e3f8ba0de8c841b59326b65fe86fb6724b5ab89f3e06025b64909e70372cab3e7a2814989b640d5fc0a16610287e44bdd8f24a06233328b34c357961b3b57eccaf6baa6985069f654f55bb433835b33c3f2c01e4895cfe9126df83666b8b35ce36025c610ecd879344e835670c7d60df7ba669b6de094de8f8d999186dfc72f98d87d995a2b51831e63c2d3970b3c0417de372112bf201ebab291c53075f2aed5d2dd1bb37d12d7", 0xc1}, {&(0x7f0000005500)="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", 0x1000}], 0xa, &(0x7f0000006800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r5, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0, 0x20000080}}, {{&(0x7f00000068c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007b00)=[{&(0x7f0000006940)="ff65c4ce119b598075cbd8ed3983fa556a930c44d1cbbd42b444cb8b0cb7b68dd4e0dfbc4f8ca56ba2e1682a6b068dbfa06676cf324289bf2fa631f737606cc188ffda8440a6dda3b204101e53d9ceb5c2afc5c958ba0a1311", 0x59}, {&(0x7f00000069c0)="1bfd137690f8d0304a1824f74425a6d17fe30db93251c6cadd0754dc30a68f9c31da8533ce16018e9b993bf7ddf195d0b69c9aa2030240dbcda1d2dd2ba4af5edfd5d11fcb3493563284f71fc30413944a777e415254f9489f955f7bd40e7a6b89b6793acd5a95c1072f49c8e2a2fe3a30ddbd978474d106d8ddaa3d65204105a0befaaae7f102b1f751c48ff66f4dc92f0e303180d8ea6e3d8d073492e0dd6d", 0xa0}, {&(0x7f0000006a80)="ebb73425d5029734a55866be04c7f9660ed123339e79b5a82365890fc2ffa084b6b74e903484fc77b241d7a7452c94e3eb7dcd8184fac30a7fff34d304ef9f6e28e138c7816f42032c25f5fc4f031b858219a1930805df4e2190fa15f243c796db79a2dcafc3", 0x66}, {&(0x7f0000006b00)="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", 0x1000}], 0x4, &(0x7f0000007b80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x40, 0x42080}}], 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 16m45.94059165s ago: executing program 0 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x928, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="02000000400000000900000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0600004001000000000000003f0000004f70ab50b438b2442cf12dde9ad8ced3162f5cd099e28554e73264787c80520372f52c6e4a15acc746c6e924753ea93ed04a8e5e1ec9a59acab4d6c0f4ee8af7"], 0x80}}, 0x2000c040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ea2b2d14000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) 16m44.762460786s ago: executing program 0 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xa8) 16m44.425860509s ago: executing program 0 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000340)=@userptr={0xf2, 0x3, 0x1, 0x20, 0x16, {r0, r1/1000+10000}, {0x5, 0xc, 0x2, 0xa9, 0x2, 0xc4, "d76fe158"}, 0x1, 0x2, {&(0x7f00000002c0)}, 0xee, 0x0, r2}) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='6', 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) setresuid(0xee01, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r7, 0x0, 0x1000008, 0x0) prlimit64(r7, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xf51dc000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, 0x0, &(0x7f00000003c0)) keyctl$get_persistent(0x16, 0x0, r10) 16m43.826925208s ago: executing program 0 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x55e1a51c, 0x7d051718, 0x2, @discrete={0x2}}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000000000000000000800000000010040200", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000000000000000000000000000000000000000000071cc5af310caee77425a2763a436f1ecb42e5f059cb2bea001d759a2fe9032b9d39e75e5c749d20f82a351c499"], 0x50) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@bridge_delvlan={0x24, 0x71, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}]}, 0x24}}, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r6, 0xffffffffffffffff, 0x0) 16m28.715428604s ago: executing program 33 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x55e1a51c, 0x7d051718, 0x2, @discrete={0x2}}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000000000000000000800000000010040200", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000000000000000000000000000000000000000000071cc5af310caee77425a2763a436f1ecb42e5f059cb2bea001d759a2fe9032b9d39e75e5c749d20f82a351c499"], 0x50) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@bridge_delvlan={0x24, 0x71, 0x400, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}]}, 0x24}}, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r6, 0xffffffffffffffff, 0x0) 11m46.636705972s ago: executing program 2 (id=962): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003240107050202"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x3ff) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x7f) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x0, 0xfd, 0x8, 0x2, 0xd, 0x0, 0x6, 0x10, 0x80, 0xa, 0x6, 0x6a, 0x5, 0x5, 0x6e, 0x8}}) bind$bt_hci(r4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 11m37.718311526s ago: executing program 4 (id=973): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f00000000c0)=r5}, 0x20) sendmsg$inet(r5, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x24005800) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace(0x10, r9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 11m35.413032636s ago: executing program 4 (id=977): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x220800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000050)={@private0, 0x40, 0x2}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d000701fcfffffffbdbdf25017c000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11m34.875761727s ago: executing program 2 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003240107050202"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x3ff) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x7f) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x0, 0xfd, 0x8, 0x2, 0xd, 0x0, 0x6, 0x10, 0x80, 0xa, 0x6, 0x6a, 0x5, 0x5, 0x6e, 0x8}}) bind$bt_hci(r4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 11m28.733100034s ago: executing program 2 (id=987): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f00000000c0)=r5}, 0x20) sendmsg$inet(r5, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x24005800) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace(0x10, r9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 11m26.314712257s ago: executing program 2 (id=988): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = fsmount(r0, 0x1, 0xd) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 11m22.948847469s ago: executing program 2 (id=998): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f00000000c0)=r5}, 0x20) sendmsg$inet(r5, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x24005800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace(0x10, r9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 11m21.688556418s ago: executing program 4 (id=999): syz_open_dev$video(&(0x7f0000000280), 0x4, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, 0x0) 11m20.447580235s ago: executing program 2 (id=1000): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) epoll_create1(0x0) keyctl$clear(0x7, 0xfffffffffffffffb) 11m19.952879981s ago: executing program 4 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) socket(0xa, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) ptrace(0x10, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb06}, 0x94) mount(0x0, 0x0, &(0x7f0000000000)='romfs\x00', 0x200000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x0, 0x3, 0x0, 0x0, 0xffff}}) 11m18.693866133s ago: executing program 4 (id=1005): epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m17.233577638s ago: executing program 4 (id=1009): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x220800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000050)={@private0, 0x40, 0x2}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d000701fcfffffffbdbdf25017c000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11m5.247783902s ago: executing program 34 (id=1000): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) epoll_create1(0x0) keyctl$clear(0x7, 0xfffffffffffffffb) 11m2.122975876s ago: executing program 35 (id=1009): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x220800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000050)={@private0, 0x40, 0x2}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d000701fcfffffffbdbdf25017c000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m34.276778983s ago: executing program 6 (id=1687): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40080) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/24) 6m30.816290914s ago: executing program 6 (id=1690): unshare(0x20000400) bind$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x3, 0x6, @random="005609001000"}, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6m30.572247591s ago: executing program 6 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003240107050202"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x3ff) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_SET_SIZE(r5, 0xab02, 0x7f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x0, 0xfd, 0x8, 0x2, 0xd, 0x0, 0x6, 0x10, 0x80, 0xa, 0x6, 0x6a, 0x5, 0x5, 0x6e, 0x8}}) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 6m24.445898827s ago: executing program 6 (id=1704): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0xfffffff7, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000080)="91", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040), 0x4) 6m23.893942656s ago: executing program 6 (id=1706): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/usb/devices/usb1/bNumInterfaces\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/16, 0x10) 6m22.452216994s ago: executing program 6 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003240107050202"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x3ff) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x7f) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x0, 0xfd, 0x8, 0x2, 0xd, 0x0, 0x6, 0x10, 0x80, 0xa, 0x6, 0x6a, 0x5, 0x5, 0x6e, 0x8}}) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 6m6.874405416s ago: executing program 36 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003240107050202"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x3ff) ioctl$NBD_DO_IT(r7, 0xab03) ioctl$NBD_SET_SIZE(r7, 0xab02, 0x7f) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x0, 0xfd, 0x8, 0x2, 0xd, 0x0, 0x6, 0x10, 0x80, 0xa, 0x6, 0x6a, 0x5, 0x5, 0x6e, 0x8}}) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 22.359504671s ago: executing program 5 (id=2389): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109d", 0x27) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r3) r4 = socket(0x29, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f4", 0xb) 18.590483471s ago: executing program 5 (id=2393): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x8}}, 0x4, 0x1, 0xf06, 0x2, 0xac, 0x7d, 0x5}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000040)="11", 0xfffffd93}, {0x0}], 0x10000000000000d6, 0x8b, 0x800) 18.490563994s ago: executing program 5 (id=2394): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000084081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80000000000009}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in6=@private2, 0x0, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x2, 0x1, 0x0, 0x85}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x5}]}]}, 0x1bc}}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x1) 16.770175839s ago: executing program 5 (id=2395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_iommufd/probability\x00', 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') setns(0xc9, 0x0) mount$nfs4(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c010172743d323034392c636c2e302e302e312c6d696e6f7205000000696f6e3d312c74696d656f3d25302c72657472616e733d31004100"/82]) 16.167536501s ago: executing program 3 (id=2399): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) 15.95078713s ago: executing program 3 (id=2400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0x80000, 0x5, 0x50}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 12.057810409s ago: executing program 5 (id=2405): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000084081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80000000000009}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in6=@private2, 0x0, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x2, 0x1, 0x0, 0x85}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x5}]}]}, 0x1bc}}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x1) 11.716294549s ago: executing program 7 (id=2407): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) 11.448862068s ago: executing program 7 (id=2409): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) 11.442596944s ago: executing program 8 (id=2410): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x2b) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002040)}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x300) syz_open_dev$video4linux(&(0x7f0000000040), 0x8e3, 0x88800) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r5, 0x8001}, &(0x7f0000000040)=0x8) 11.129722987s ago: executing program 7 (id=2411): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce010203010902"], 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB]) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 10.647002296s ago: executing program 3 (id=2412): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x11e) write(r0, &(0x7f0000000000)='7', 0x1) setresgid(0x0, 0xee01, 0x0) 10.408682099s ago: executing program 8 (id=2413): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) syz_open_dev$sndctrl(0x0, 0x458, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002010000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000be080001400000000208000140000000013400018008000140764f15e2"], 0x140}}, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x8, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x7, 0x3, 0x6, 0x4006, 0x0, 0x3]}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) 8.950345538s ago: executing program 3 (id=2414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_iommufd/probability\x00', 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') setns(0xc9, 0x0) mount$nfs4(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c010172743d323034392c636c2e302e302e312c6d696e6f7205000000696f6e3d312c74696d656f3d25302c72657472616e733d31004100"/82]) 8.798511034s ago: executing program 5 (id=2415): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)="02", 0x1, 0x4) 7.86400328s ago: executing program 7 (id=2416): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(0x0, 0x0, 0x482) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket(0x10, 0x3, 0x0) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0ec5c1e3161ac4b44283f1caf21b6000000", @ANYRES16=r7, @ANYBLOB="00012bbd7000fcdbdf250d000000400003800800030003000000060007004e2100000800030000000000140006002001000000000000000000000000000208000500ac14141608000500ac14140f44000180080008000b00000014000300fe88000000000000000000000000010108000800020000000800090027000000060004004e220000090006006c626c6300000000080006000100000008000500000000000800040000100000"], 0xb0}, 0x1, 0x0, 0x0, 0x24000010}, 0x850) 7.290185615s ago: executing program 8 (id=2417): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 7.016480318s ago: executing program 3 (id=2418): socket$alg(0x26, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x0, &(0x7f0000000040), 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x57) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r0, 0x0, &(0x7f0000001300)) 3.847171796s ago: executing program 9 (id=1728): openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) tkill(0x0, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 3.776225167s ago: executing program 7 (id=2419): ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000140)={0x3, {"0fefccfcc15325f91ab95fd474bc63e8", "99becb5edd81d4ee8bbe92ebe6746ba0", "1cfa3235a376cba9575d3bd919e7ab91"}, 0x6}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x2, 0x8}) 3.775776581s ago: executing program 8 (id=2420): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) 2.673454382s ago: executing program 3 (id=2421): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x27, [0x9, 0xa, 0x2, 0x106, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x402, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80008004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0xb, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x80003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x1000005, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x1, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1e, 0x0, 0x4000}, 0x10) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_nanosleep(0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x55, &(0x7f0000000200)={&(0x7f0000003900)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x28}, [@typed={0x15}]}, 0x18}}, 0x8040) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x12, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 2.483825167s ago: executing program 9 (id=2422): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x2b) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002040)}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x300) syz_open_dev$video4linux(&(0x7f0000000040), 0x8e3, 0x88800) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r5, 0x8001}, &(0x7f0000000040)=0x8) 2.440218868s ago: executing program 7 (id=2423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x25) 2.320506825s ago: executing program 8 (id=2424): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000084081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x80000000000009}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in6=@private2, 0x0, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x2, 0x1, 0x0, 0x85}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x5}]}]}, 0x1bc}}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x1) 0s ago: executing program 8 (id=2425): write(0xffffffffffffffff, &(0x7f0000000300)="3911b25928", 0x5) kernel console output (not intermixed with test programs): [ 725.577858][ T37] audit: type=1326 audit(1790545439.610:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.6.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7fc00000 [ 725.577912][ T37] audit: type=1326 audit(1790545439.880:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10944 comm="syz.6.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff363aef4d9 code=0x7fc00000 [ 725.758802][T10953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 727.457884][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1325'. [ 727.457903][T10976] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1325'. [ 727.457913][T10976] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1325'. [ 730.486104][ T37] audit: type=1326 audit(1790545444.480:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.3.1330" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dda3e159 code=0x7fc00000 [ 730.486155][ T37] audit: type=1326 audit(1790545444.800:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10991 comm="syz.3.1330" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40dd9df4d9 code=0x7fc00000 [ 731.359275][T11014] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1336'. [ 733.970618][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1340'. [ 733.970638][T11038] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1340'. [ 733.970648][T11038] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1340'. [ 735.493402][ T4910] Bluetooth: hci3: command 0x0406 tx timeout [ 735.830661][ T5601] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 736.234800][ T5601] usb 8-1: device not accepting address 3, error -71 [ 736.921239][T11070] 0x000000000000-0x000000020000 : "" [ 736.936828][T11070] ftl_cs: FTL header not found. [ 737.724487][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1357'. [ 737.724516][T11083] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1357'. [ 737.724535][T11083] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1357'. [ 737.920567][ T8497] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 738.091551][ T8497] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 738.093516][ T8497] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.093608][ T8497] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 738.093629][ T8497] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 738.093651][ T8497] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 738.101355][ T8497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.101378][ T8497] usb 4-1: Product: syz [ 738.101392][ T8497] usb 4-1: Manufacturer: syz [ 738.101405][ T8497] usb 4-1: SerialNumber: syz [ 738.165282][ T8497] usb-storage 4-1:1.0: USB Mass Storage device detected [ 738.175889][ T8497] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 738.182011][ T8497] scsi host1: usb-storage 4-1:1.0 [ 739.660230][T11100] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 741.080601][ T5702] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 741.401088][ T5702] usb 8-1: Using ep0 maxpacket: 32 [ 741.444543][ T5702] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 741.556994][ T5702] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 741.557196][ T5702] usb 8-1: config 0 has no interface number 0 [ 741.557972][ T5702] usb 8-1: config 0 interface 12 has no altsetting 0 [ 741.831441][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.831470][ T5702] usb 8-1: Product: syz [ 741.831483][ T5702] usb 8-1: Manufacturer: syz [ 741.831496][ T5702] usb 8-1: SerialNumber: syz [ 741.906483][ T5702] usb 8-1: config 0 descriptor?? [ 742.333889][ T5607] Bluetooth: hci5: unexpected event for opcode 0x0804 [ 742.654494][ T5605] usb 4-1: USB disconnect, device number 19 [ 742.891573][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 743.042765][ T9] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 743.046675][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.046721][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 743.046742][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 743.046765][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.046802][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.300944][ T5702] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 745.301003][ T5702] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 745.301021][ T5702] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 745.301106][ T5702] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 745.304935][ T10] usb 9-1: USB disconnect, device number 6 [ 745.447542][ T5702] usb 8-1: USB disconnect, device number 5 [ 745.537262][T11148] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 746.310543][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 747.546764][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.546830][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.651375][ T9] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 747.652465][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.652573][ T9] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 747.652585][ T9] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 747.652597][ T9] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 747.654963][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.654987][ T9] usb 9-1: Product: syz [ 747.655000][ T9] usb 9-1: Manufacturer: syz [ 747.655013][ T9] usb 9-1: SerialNumber: syz [ 747.798728][ T9] usb-storage 9-1:1.0: USB Mass Storage device detected [ 747.839129][ T9] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 747.844955][ T9] scsi host1: usb-storage 9-1:1.0 [ 748.107141][ T5607] Bluetooth: hci5: unexpected event for opcode 0x0804 [ 749.114609][T11183] 0x000000000000-0x000000020000 : "" [ 749.374738][T11183] ftl_cs: FTL header not found. [ 752.387329][ T10] usb 9-1: USB disconnect, device number 7 [ 753.931397][T11198] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 765.298849][ T5607] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 769.923310][T11293] overlayfs: overlapping lowerdir path [ 771.536427][ T37] audit: type=1326 audit(1790545485.710:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.3.1406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dda3e159 code=0x7fc00000 [ 771.687740][ T37] audit: type=1326 audit(1790545486.310:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11299 comm="syz.3.1406" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40dd9df4d9 code=0x7fc00000 [ 776.554590][ T37] audit: type=1326 audit(1790545490.960:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11321 comm="syz.7.1412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa333eee159 code=0x7fc00000 [ 776.712150][ T37] audit: type=1326 audit(1790545491.340:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11321 comm="syz.7.1412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa333e8f4d9 code=0x7fc00000 [ 781.006920][ T37] audit: type=1326 audit(1790545495.010:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11341 comm="syz.5.1428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aad9e159 code=0x7fc00000 [ 781.006975][ T37] audit: type=1326 audit(1790545495.220:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11341 comm="syz.5.1428" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6aad3f4d9 code=0x7fc00000 [ 783.220542][ T5605] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 783.370561][ T5605] usb 9-1: Using ep0 maxpacket: 32 [ 783.373443][ T5605] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 783.376021][ T5605] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 783.376045][ T5605] usb 9-1: config 0 has no interface number 0 [ 783.376087][ T5605] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.376108][ T5605] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 783.376133][ T5605] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 216 [ 783.376156][ T5605] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.390763][ T5605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.390786][ T5605] usb 9-1: Product: syz [ 783.390798][ T5605] usb 9-1: Manufacturer: syz [ 783.390811][ T5605] usb 9-1: SerialNumber: syz [ 783.427574][ T5605] usb 9-1: config 0 descriptor?? [ 783.429211][T11353] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 783.503315][ T5605] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input12 [ 783.552612][ T4946] usb 9-1: BOGUS urb xfer, pipe 1 != type 3 [ 783.812301][ C1] bcm5974 9-1:0.119: trackpad urb failed: -1 [ 783.859445][T11353] warning: `syz.8.1430' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 784.210605][T11363] ima: policy update failed [ 784.210749][ T37] audit: type=1802 audit(1790545498.900:499): pid=11363 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.7.1432" res=0 errno=0 [ 784.310122][ T9] usb 9-1: USB disconnect, device number 8 [ 785.450712][ T5601] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 786.391121][ T5601] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 786.393748][ T5601] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.393813][ T5601] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 786.393834][ T5601] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 786.393855][ T5601] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 786.400047][ T5601] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.400070][ T5601] usb 8-1: Product: syz [ 786.400083][ T5601] usb 8-1: Manufacturer: syz [ 786.400095][ T5601] usb 8-1: SerialNumber: syz [ 786.536703][ T5601] usb-storage 8-1:1.0: USB Mass Storage device detected [ 786.562171][ T5601] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 786.565511][ T5601] scsi host1: usb-storage 8-1:1.0 [ 789.410694][ T8497] usb 8-1: USB disconnect, device number 6 [ 789.590515][ T36] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 789.790509][ T36] usb 9-1: Using ep0 maxpacket: 32 [ 789.791433][ T36] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 789.792988][ T36] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 789.793010][ T36] usb 9-1: config 0 has no interface number 0 [ 789.793053][ T36] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 789.793072][ T36] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 789.793095][ T36] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 216 [ 789.793117][ T36] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.814632][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.814656][ T36] usb 9-1: Product: syz [ 789.814669][ T36] usb 9-1: Manufacturer: syz [ 789.814682][ T36] usb 9-1: SerialNumber: syz [ 789.902795][ T36] usb 9-1: config 0 descriptor?? [ 789.913257][T11419] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 789.949541][ T36] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input13 [ 790.434894][ T5601] usb 9-1: USB disconnect, device number 9 [ 790.678560][T11433] overlayfs: overlapping lowerdir path [ 792.660548][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 792.811993][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 792.817238][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 792.818972][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 792.819001][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 792.819023][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 792.819054][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.819093][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.079845][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 793.079895][ T9] usbtmc 8-1:16.0: can't read capabilities [ 793.213349][ T8497] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 793.377006][ T8497] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 793.397829][ T8497] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 793.397892][ T8497] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 793.397910][ T8497] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 793.397931][ T8497] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 793.436429][ T8497] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.436452][ T8497] usb 6-1: Product: syz [ 793.436465][ T8497] usb 6-1: Manufacturer: syz [ 793.436477][ T8497] usb 6-1: SerialNumber: syz [ 793.645301][ T9] usb 8-1: USB disconnect, device number 7 [ 793.686975][ T8497] usb-storage 6-1:1.0: USB Mass Storage device detected [ 793.737488][ T8497] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 793.765872][ T8497] scsi host1: usb-storage 6-1:1.0 [ 795.145912][ T8497] usb 6-1: USB disconnect, device number 8 [ 797.159601][T11511] Bluetooth: MGMT ver 1.23 [ 797.159983][T11511] FAULT_INJECTION: forcing a failure. [ 797.159983][T11511] name fail_futex, interval 1, probability 0, space 0, times 0 [ 797.162945][T11511] CPU: 1 UID: 0 PID: 11511 Comm: syz.5.1477 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 797.162971][T11511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.162982][T11511] Call Trace: [ 797.162990][T11511] [ 797.162998][T11511] dump_stack_lvl+0xe8/0x150 [ 797.163034][T11511] should_fail_ex+0x46b/0x600 [ 797.163065][T11511] get_futex_key+0x1b4/0x1580 [ 797.163093][T11511] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 797.163131][T11511] ? __pfx_get_futex_key+0x10/0x10 [ 797.163157][T11511] ? __asan_memcpy+0x40/0x70 [ 797.163182][T11511] ? sock_write_iter+0x2fd/0x3f0 [ 797.163212][T11511] futex_wake+0x119/0x600 [ 797.163239][T11511] ? __pfx_futex_wake+0x10/0x10 [ 797.163267][T11511] ? vfs_write+0x9e7/0xbb0 [ 797.163294][T11511] do_futex+0x458/0x4e0 [ 797.163318][T11511] ? __pfx_do_futex+0x10/0x10 [ 797.163344][T11511] __se_sys_futex+0x3a8/0x450 [ 797.163367][T11511] ? ksys_write+0x248/0x270 [ 797.163388][T11511] ? __pfx___se_sys_futex+0x10/0x10 [ 797.163407][T11511] ? __pfx_ksys_write+0x10/0x10 [ 797.163433][T11511] ? __x64_sys_futex+0x21/0xf0 [ 797.163455][T11511] do_syscall_64+0x166/0x520 [ 797.163474][T11511] ? trace_irq_disable+0x3b/0x140 [ 797.163497][T11511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.163515][T11511] ? clear_bhb_loop+0x70/0xc0 [ 797.163537][T11511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.163555][T11511] RIP: 0033:0x7fe6aad9e159 [ 797.163573][T11511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.163589][T11511] RSP: 002b:00007fe6a8ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 797.163609][T11511] RAX: ffffffffffffffda RBX: 00007fe6ab025fa8 RCX: 00007fe6aad9e159 [ 797.163623][T11511] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe6ab025fac [ 797.163635][T11511] RBP: 00007fe6ab025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 797.163647][T11511] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 797.163659][T11511] R13: 00007fe6ab026038 R14: 00007fffecd914d0 R15: 00007fffecd915b8 [ 797.163688][T11511] [ 803.828392][T11567] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 803.828392][T11567] The task syz.6.1490 (11567) triggered the difference, watch for misbehavior. [ 808.695374][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.695441][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.066432][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1492'. [ 811.066453][T11626] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1492'. [ 811.066463][T11626] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1492'. [ 811.600536][ T6590] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 811.752531][ T6590] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 811.755856][ T6590] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.755923][ T6590] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 811.755944][ T6590] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 811.755966][ T6590] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 811.762149][ T6590] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.762172][ T6590] usb 9-1: Product: syz [ 811.762185][ T6590] usb 9-1: Manufacturer: syz [ 811.762198][ T6590] usb 9-1: SerialNumber: syz [ 811.845312][ T6590] usb-storage 9-1:1.0: USB Mass Storage device detected [ 811.879197][ T6590] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 811.890529][ T6590] scsi host1: usb-storage 9-1:1.0 [ 815.994314][ T8497] usb 9-1: USB disconnect, device number 10 [ 816.418121][ T5607] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 817.165870][ T1409] IPVS: starting estimator thread 0... [ 817.600511][ T998] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 817.661958][T11695] IPVS: using max 8 ests per chain, 19200 per kthread [ 818.955941][ T998] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 818.957348][ T998] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.957414][ T998] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 818.957436][ T998] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 818.957457][ T998] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 818.960190][ T998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.960212][ T998] usb 6-1: Product: syz [ 818.960226][ T998] usb 6-1: Manufacturer: syz [ 818.960240][ T998] usb 6-1: SerialNumber: syz [ 819.061266][ T998] usb-storage 6-1:1.0: USB Mass Storage device detected [ 819.106933][ T998] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 819.118629][ T998] scsi host1: usb-storage 6-1:1.0 [ 821.597904][ T5607] Bluetooth: hci5: unexpected event for opcode 0x0804 [ 823.193540][ T5605] usb 6-1: USB disconnect, device number 9 [ 823.644018][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1546'. [ 825.152197][T11758] loop5: detected capacity change from 0 to 7 [ 825.308804][T11758] Dev loop5: unable to read RDB block 7 [ 825.308909][T11758] loop5: unable to read partition table [ 825.309108][T11758] loop5: partition table beyond EOD, truncated [ 825.309126][T11758] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 826.767762][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 826.792074][ T37] audit: type=1326 audit(1790545540.810:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11750 comm="syz.6.1543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7fc00000 [ 826.792125][ T37] audit: type=1326 audit(1790545541.470:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11750 comm="syz.6.1543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff363aef4d9 code=0x7fc00000 [ 828.013732][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1552'. [ 828.218604][T11789] ptp ptp0: new virtual clock ptp1 [ 828.218626][T11789] ptp ptp0: guarantee physical clock free running [ 828.219415][T11789] ptp ptp0: delete virtual clock ptp1 [ 828.389776][T11789] ptp ptp0: only physical clock in use now [ 832.039046][ T37] audit: type=1326 audit(1790545546.050:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11808 comm="syz.5.1560" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aad9e159 code=0x7fc00000 [ 832.039099][ T37] audit: type=1326 audit(1790545546.370:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11808 comm="syz.5.1560" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6aad3f4d9 code=0x7fc00000 [ 832.523465][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 833.418052][T11818] dummy0: entered promiscuous mode [ 833.640711][T11818] macvlan2: entered promiscuous mode [ 833.721475][T11818] dummy0: left promiscuous mode [ 834.411789][T11830] netlink: 'syz.3.1567': attribute type 6 has an invalid length. [ 837.683084][ T37] audit: type=1326 audit(1790545552.310:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11848 comm="syz.5.1571" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aad9e159 code=0x7fc00000 [ 840.110576][ T37] audit: type=1326 audit(1790545554.590:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11876 comm="syz.6.1583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7fc00000 [ 841.638098][ T998] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 841.821138][ T998] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 841.822309][ T998] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.822374][ T998] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 841.822395][ T998] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 841.822417][ T998] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 841.834353][ T998] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.834376][ T998] usb 9-1: Product: syz [ 841.834389][ T998] usb 9-1: Manufacturer: syz [ 841.834402][ T998] usb 9-1: SerialNumber: syz [ 841.866952][ T998] usb-storage 9-1:1.0: USB Mass Storage device detected [ 841.891721][ T998] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 841.898257][ T998] scsi host1: usb-storage 9-1:1.0 [ 842.720277][T11899] nbd8: detected capacity change from 0 to 1 [ 843.421937][T11900] nbd8: detected capacity change from 1 to 0 [ 844.441654][T11899] block nbd8: shutting down sockets [ 844.721884][ T8497] usb 9-1: USB disconnect, device number 11 [ 848.135906][T11936] fuse: Bad value for 'fd' [ 851.699921][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 851.699941][T11952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1605'. [ 851.699950][T11952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1605'. [ 851.758716][ T37] audit: type=1326 audit(1790545566.440:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 851.765452][ T37] audit: type=1326 audit(1790545566.450:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 851.816797][ T37] audit: type=1326 audit(1790545566.500:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 851.816932][ T37] audit: type=1326 audit(1790545566.500:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 851.821710][ T37] audit: type=1326 audit(1790545566.510:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 851.821753][ T37] audit: type=1326 audit(1790545566.510:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 851.821789][ T37] audit: type=1326 audit(1790545566.510:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 851.832841][ T37] audit: type=1326 audit(1790545566.520:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 851.832886][ T37] audit: type=1326 audit(1790545566.520:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11953 comm="syz.6.1607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff363b4e159 code=0x7ffc0000 [ 853.450434][ T37] audit: type=1326 audit(1790545568.130:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11963 comm="syz.7.1595" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa333eee159 code=0x7fc00000 [ 853.636696][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1614'. [ 855.401624][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1620'. [ 857.250619][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1629'. [ 858.471494][T12038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1630'. [ 858.851334][ T5702] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 859.137987][ T5702] usb 7-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 859.140056][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1635'. [ 859.163260][ T5702] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 859.163286][ T5702] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 859.165783][ T5702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.165806][ T5702] usb 7-1: Product: syz [ 859.165820][ T5702] usb 7-1: Manufacturer: syz [ 859.165833][ T5702] usb 7-1: SerialNumber: syz [ 860.516293][ T37] audit: type=1326 audit(1790545574.780:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12049 comm="syz.7.1633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa333eee159 code=0x7fc00000 [ 860.516342][ T37] audit: type=1326 audit(1790545575.070:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12049 comm="syz.7.1633" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa333e8f4d9 code=0x7fc00000 [ 860.551493][ T5702] ipheth 7-1:1.0: ipheth_get_macaddr: usb_control_msg: -110 [ 860.551836][ T5702] ipheth 7-1:1.0: probe with driver ipheth failed with error -110 [ 861.790018][ T5702] apple-mfi-fastcharge 7-1: USB disconnect, device number 9 [ 862.028208][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1642'. [ 862.128085][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1644'. [ 862.291622][ T8497] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 863.971675][ T8497] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 863.972997][ T8497] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.973053][ T8497] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 863.973066][ T8497] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 863.973077][ T8497] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 863.975713][ T8497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.975736][ T8497] usb 9-1: Product: syz [ 863.975749][ T8497] usb 9-1: Manufacturer: syz [ 863.975771][ T8497] usb 9-1: SerialNumber: syz [ 863.994538][ T8497] usb-storage 9-1:1.0: USB Mass Storage device detected [ 864.009400][ T8497] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 864.013178][ T8497] scsi host1: usb-storage 9-1:1.0 [ 864.772395][T12095] nbd8: detected capacity change from 0 to 1 [ 866.630647][T12097] nbd8: detected capacity change from 1 to 0 [ 867.533207][ T5702] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 867.699226][T12095] block nbd8: shutting down sockets [ 867.983608][ T8497] usb 9-1: USB disconnect, device number 12 [ 868.378233][T12116] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1657'. [ 868.668797][ T5702] usb 7-1: unable to get BOS descriptor or descriptor too short [ 868.669766][ T5702] usb 7-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 868.696893][ T5702] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 868.696927][ T5702] usb 7-1: can't read configurations, error -71 [ 870.052611][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.052682][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.644624][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 872.699122][T12158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1669'. [ 872.791193][ T10] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 872.792493][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.794123][ T10] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 872.794149][ T10] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 872.794171][ T10] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 872.796928][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.796950][ T10] usb 9-1: Product: syz [ 872.796963][ T10] usb 9-1: Manufacturer: syz [ 872.796976][ T10] usb 9-1: SerialNumber: syz [ 872.914650][ T10] usb-storage 9-1:1.0: USB Mass Storage device detected [ 872.931712][ T10] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 872.932378][ T10] scsi host1: usb-storage 9-1:1.0 [ 873.851221][T12170] nbd8: detected capacity change from 0 to 1 [ 875.090850][T12172] nbd8: detected capacity change from 1 to 0 [ 876.245780][T12170] block nbd8: shutting down sockets [ 876.410229][ T10] usb 9-1: USB disconnect, device number 13 [ 878.164253][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 878.510032][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1683'. [ 884.230535][ T36] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 884.551659][ T8497] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 884.701271][ T8497] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 884.702690][ T8497] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.702758][ T8497] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 884.702779][ T8497] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 884.702801][ T8497] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 884.705664][ T8497] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.705688][ T8497] usb 7-1: Product: syz [ 884.705701][ T8497] usb 7-1: Manufacturer: syz [ 884.705714][ T8497] usb 7-1: SerialNumber: syz [ 884.819762][ T8497] usb-storage 7-1:1.0: USB Mass Storage device detected [ 884.850559][ T8497] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 884.859301][ T8497] scsi host1: usb-storage 7-1:1.0 [ 884.954277][ T36] usb 8-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 884.988255][ T36] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.988368][ T36] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.988798][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.689193][T12247] nbd6: detected capacity change from 0 to 1 [ 887.453032][ T36] usbhid 8-1:1.0: can't add hid device: -71 [ 887.453165][ T36] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 887.478340][T12248] nbd6: detected capacity change from 1 to 0 [ 887.523310][ T36] usb 8-1: USB disconnect, device number 8 [ 887.762925][T12247] block nbd6: shutting down sockets [ 888.558591][ T9] usb 7-1: USB disconnect, device number 12 [ 890.817157][T12280] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1707'. [ 891.372890][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1696'. [ 893.421305][ T6590] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 893.881707][ T6590] usb 9-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 893.923526][ T6590] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.923559][ T6590] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.923594][ T6590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.318158][ T6590] usbhid 9-1:1.0: can't add hid device: -71 [ 895.318275][ T6590] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 895.353629][ T6590] usb 9-1: USB disconnect, device number 14 [ 895.757599][T12309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1714'. [ 897.268815][ T37] audit: type=1326 audit(1790545611.890:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12310 comm="syz.7.1716" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa333eee159 code=0x7fc00000 [ 897.410526][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 897.563860][ T10] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 897.564921][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.564986][ T10] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 897.564998][ T10] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 897.565009][ T10] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 897.569451][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.569465][ T10] usb 9-1: Product: syz [ 897.569473][ T10] usb 9-1: Manufacturer: syz [ 897.569480][ T10] usb 9-1: SerialNumber: syz [ 897.608091][ T10] usb-storage 9-1:1.0: USB Mass Storage device detected [ 897.625177][ T10] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 897.634977][ T10] scsi host1: usb-storage 9-1:1.0 [ 898.272198][T12325] nbd8: detected capacity change from 0 to 1 [ 899.500705][T12326] nbd8: detected capacity change from 1 to 0 [ 900.513950][T12325] block nbd8: shutting down sockets [ 900.530557][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 900.687393][ T10] usb 9-1: USB disconnect, device number 15 [ 900.705592][ T9] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 900.710297][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.732735][ T9] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 900.732760][ T9] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 900.732782][ T9] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 900.735415][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.735437][ T9] usb 7-1: Product: syz [ 900.735451][ T9] usb 7-1: Manufacturer: syz [ 900.735464][ T9] usb 7-1: SerialNumber: syz [ 900.827083][ T9] usb-storage 7-1:1.0: USB Mass Storage device detected [ 900.900927][ T9] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 900.901614][ T9] scsi host2: usb-storage 7-1:1.0 [ 901.561498][T12346] nbd6: detected capacity change from 0 to 1 [ 902.191896][T12347] nbd6: detected capacity change from 1 to 0 [ 903.425286][T12346] block nbd6: shutting down sockets [ 904.460583][ T5702] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 905.501176][ T5702] usb 6-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 905.502562][ T5702] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.502591][ T5702] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.502626][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.847354][ T9] usb 7-1: USB disconnect, device number 13 [ 906.986817][ T5702] usbhid 6-1:1.0: can't add hid device: -71 [ 906.986935][ T5702] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 907.222831][ T5702] usb 6-1: USB disconnect, device number 10 [ 907.371973][T12377] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 907.372392][T12377] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 911.789721][ T4910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 911.904078][ T4910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 911.906394][ T4910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 911.933721][ T4910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 911.937806][ T4910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 914.083433][T12423] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 914.121474][ T5607] Bluetooth: hci2: command tx timeout [ 914.287405][ T1574] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.030510][ T5607] Bluetooth: hci2: command tx timeout [ 917.448500][ T1574] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.800920][T12463] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1749'. [ 918.581212][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1749'. [ 919.083186][ T5607] Bluetooth: hci2: command tx timeout [ 919.839651][T12480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 920.991881][T12485] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 921.223863][ T5607] Bluetooth: hci2: command tx timeout [ 921.587114][ T1574] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.209838][ T1574] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.149834][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'. [ 926.149863][T12540] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1765'. [ 926.149882][T12540] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1765'. [ 927.998022][ T1574] bridge_slave_1: left allmulticast mode [ 927.998065][ T1574] bridge_slave_1: left promiscuous mode [ 927.998275][ T1574] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.217481][ T1574] bridge_slave_0: left allmulticast mode [ 929.217518][ T1574] bridge_slave_0: left promiscuous mode [ 929.217766][ T1574] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.482229][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.482297][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.487211][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 934.487231][T12590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1776'. [ 934.487240][T12590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1776'. [ 935.502624][ T1574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 935.558272][T12597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1778'. [ 935.612465][ T1574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.656972][ T1574] bond0 (unregistering): Released all slaves [ 937.028820][T12391] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.029873][T12391] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.030025][T12391] bridge_slave_0: entered allmulticast mode [ 937.061604][T12391] bridge_slave_0: entered promiscuous mode [ 937.083896][T12391] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.085617][T12391] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.085769][T12391] bridge_slave_1: entered allmulticast mode [ 937.113008][T12391] bridge_slave_1: entered promiscuous mode [ 937.381676][T12391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.404481][T12391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.519777][ T1574] tipc: Left network mode [ 937.670064][T12618] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 937.670624][T12618] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 938.466230][T12391] team0: Port device team_slave_0 added [ 938.479207][T12391] team0: Port device team_slave_1 added [ 942.199161][T12634] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1788'. [ 943.067141][ T5702] kernel read not supported for file /cpu/0/msr (pid: 5702 comm: kworker/1:4) [ 943.854336][T12391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.854354][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.854380][T12391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.702311][T12391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.702328][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.702352][T12391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.810596][ T6590] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 945.541143][ T6590] usb 9-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 945.580284][ T6590] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.580642][ T6590] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.580684][ T6590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.666906][T12391] hsr_slave_0: entered promiscuous mode [ 946.682944][T12391] hsr_slave_1: entered promiscuous mode [ 946.702930][T12391] debugfs: 'hsr0' already exists in 'hsr' [ 946.702956][T12391] Cannot create hsr debugfs directory [ 947.600045][ T6590] usbhid 9-1:1.0: can't add hid device: -71 [ 947.600160][ T6590] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 947.630129][ T6590] usb 9-1: USB disconnect, device number 16 [ 949.250584][ T6590] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 949.365284][T12683] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 949.465111][ T6590] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 949.468025][ T6590] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.468091][ T6590] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 949.523116][ T6590] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.523142][ T6590] usb 9-1: Product: syz [ 949.523156][ T6590] usb 9-1: Manufacturer: syz [ 949.523169][ T6590] usb 9-1: SerialNumber: syz [ 949.606468][ T6590] usb-storage 9-1:1.0: USB Mass Storage device detected [ 949.637893][ T6590] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 949.652151][ T6590] scsi host1: usb-storage 9-1:1.0 [ 949.719361][T12690] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1802'. [ 949.909501][ T6590] usb 9-1: USB disconnect, device number 17 [ 950.523849][T12694] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 951.330825][ T5601] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 951.482424][ T5601] usb 9-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 951.486303][ T5601] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.486332][ T5601] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.486368][ T5601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.025427][ T5601] usbhid 9-1:1.0: can't add hid device: -71 [ 954.025542][ T5601] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 954.066257][ T5601] usb 9-1: USB disconnect, device number 18 [ 955.894158][ T1574] hsr_slave_0: left promiscuous mode [ 955.941641][ T1574] hsr_slave_1: left promiscuous mode [ 955.942835][ T1574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.942859][ T1574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.001181][ T1574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.001212][ T1574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.220520][T12731] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 956.234622][ T1574] veth1_macvtap: left promiscuous mode [ 956.314388][ T1574] veth0_macvtap: left promiscuous mode [ 956.314550][ T1574] veth1_vlan: left promiscuous mode [ 956.314652][ T1574] veth0_vlan: left promiscuous mode [ 957.400495][ T6590] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 957.551287][ T6590] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 957.552950][ T6590] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.553027][ T6590] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 957.559418][ T6590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.559442][ T6590] usb 4-1: Product: syz [ 957.559455][ T6590] usb 4-1: Manufacturer: syz [ 957.559468][ T6590] usb 4-1: SerialNumber: syz [ 957.707075][ T6590] usb-storage 4-1:1.0: USB Mass Storage device detected [ 957.715884][ T6590] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 957.717475][ T6590] scsi host1: usb-storage 4-1:1.0 [ 957.932749][ T6590] usb 4-1: USB disconnect, device number 20 [ 957.992146][ T5605] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 958.153961][ T5605] usb 6-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 958.155203][ T5605] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.155231][ T5605] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.155265][ T5605] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.724412][ T5605] usbhid 6-1:1.0: can't add hid device: -71 [ 960.724530][ T5605] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 960.762952][ T5605] usb 6-1: USB disconnect, device number 11 [ 962.566287][T12770] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 964.034660][ T6590] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 964.110688][T12797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1831'. [ 964.378538][ T6590] usb 8-1: Using ep0 maxpacket: 8 [ 964.842507][ T6590] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 964.844767][ T6590] usb 8-1: config 0 has no interfaces? [ 964.871628][ T6590] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.871652][ T6590] usb 8-1: Product: syz [ 964.871665][ T6590] usb 8-1: Manufacturer: syz [ 964.871680][ T6590] usb 8-1: SerialNumber: syz [ 964.885077][ T6590] usb 8-1: config 0 descriptor?? [ 965.395099][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1829'. [ 966.028021][ T5601] usb 8-1: USB disconnect, device number 9 [ 966.092230][T12808] FAULT_INJECTION: forcing a failure. [ 966.092230][T12808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 966.092267][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.8.1834 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 966.092291][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 966.092303][T12808] Call Trace: [ 966.092311][T12808] [ 966.092320][T12808] dump_stack_lvl+0xe8/0x150 [ 966.092355][T12808] should_fail_ex+0x46b/0x600 [ 966.092387][T12808] prepare_alloc_pages+0x223/0x650 [ 966.092421][T12808] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 966.092455][T12808] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 966.092488][T12808] ? __pfx_policy_nodemask+0x10/0x10 [ 966.092507][T12808] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 966.092544][T12808] alloc_pages_mpol+0xd4/0x280 [ 966.092569][T12808] ___kmalloc_large_node+0x4f/0x120 [ 966.092595][T12808] ? snd_seq_oss_readq_new+0x3e/0x1e0 [ 966.092625][T12808] __kmalloc_large_node_noprof+0x18/0x90 [ 966.092651][T12808] ? snd_seq_oss_readq_new+0x3e/0x1e0 [ 966.092679][T12808] __kmalloc_noprof+0x4c4/0x790 [ 966.092704][T12808] ? snd_seq_queue_alloc+0x574/0x730 [ 966.092726][T12808] ? snd_seq_oss_readq_new+0x3e/0x1e0 [ 966.092764][T12808] snd_seq_oss_readq_new+0x3e/0x1e0 [ 966.092794][T12808] snd_seq_oss_open+0x806/0xf40 [ 966.092824][T12808] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 966.092858][T12808] ? __lock_acquire+0x747/0x2de0 [ 966.092908][T12808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 966.092956][T12808] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 966.092979][T12808] ? __pfx_free_devinfo+0x10/0x10 [ 966.093004][T12808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 966.093025][T12808] ? mutex_lock_nested+0x152/0x1d0 [ 966.093048][T12808] ? odev_open+0x5c/0xa0 [ 966.093072][T12808] odev_open+0x67/0xa0 [ 966.093092][T12808] chrdev_open+0x4dc/0x600 [ 966.093119][T12808] ? __pfx_chrdev_open+0x10/0x10 [ 966.093143][T12808] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 966.093174][T12808] ? __pfx_chrdev_open+0x10/0x10 [ 966.093198][T12808] do_dentry_open+0x849/0x1420 [ 966.093244][T12808] vfs_open+0x3b/0x350 [ 966.093259][T12808] ? path_openat+0x142d/0x1d60 [ 966.093286][T12808] path_openat+0x1448/0x1d60 [ 966.093329][T12808] do_file_open+0x23e/0x4a0 [ 966.093358][T12808] ? __pfx_do_file_open+0x10/0x10 [ 966.093401][T12808] ? alloc_fd+0x654/0x6d0 [ 966.093429][T12808] do_sys_openat2+0x115/0x200 [ 966.093446][T12808] ? __se_sys_futex+0x3a8/0x450 [ 966.093467][T12808] ? __pfx_do_sys_openat2+0x10/0x10 [ 966.093492][T12808] ? rcu_is_watching+0x16/0xb0 [ 966.093525][T12808] __x64_sys_openat+0x138/0x170 [ 966.093550][T12808] do_syscall_64+0x166/0x520 [ 966.093570][T12808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.093590][T12808] ? clear_bhb_loop+0x70/0xc0 [ 966.093613][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.093633][T12808] RIP: 0033:0x7f21f888e159 [ 966.093652][T12808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.093668][T12808] RSP: 002b:00007f21f6ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 966.093688][T12808] RAX: ffffffffffffffda RBX: 00007f21f8b16090 RCX: 00007f21f888e159 [ 966.093702][T12808] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 966.093716][T12808] RBP: 00007f21f892506b R08: 0000000000000000 R09: 0000000000000000 [ 966.093729][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.093741][T12808] R13: 00007f21f8b16128 R14: 00007f21f8b16090 R15: 00007ffd87f00318 [ 966.093773][T12808] [ 966.229834][ T6590] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 966.386393][T12391] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 966.621220][ T6590] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 966.622730][ T6590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.622759][ T6590] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.622795][ T6590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.229387][T12391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 968.441776][ T6590] usbhid 4-1:1.0: can't add hid device: -71 [ 968.441910][ T6590] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 968.503158][ T6590] usb 4-1: USB disconnect, device number 21 [ 970.074847][T12826] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 970.651608][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 970.716945][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 970.730188][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 970.746159][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 970.765461][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 972.259324][T12846] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1842'. [ 972.592780][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1844'. [ 973.051248][ T4910] Bluetooth: hci5: command tx timeout [ 974.558706][T12880] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 975.080510][ T4910] Bluetooth: hci5: command tx timeout [ 975.700513][T12894] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1854'. [ 977.160477][ T4910] Bluetooth: hci5: command tx timeout [ 978.754836][T12911] ptp ptp0: only physical clock in use now [ 979.122900][T12917] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 979.240448][ T4910] Bluetooth: hci5: command tx timeout [ 984.604106][T12830] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.604232][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.604409][T12830] bridge_slave_0: entered allmulticast mode [ 984.655248][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 984.680648][T12830] bridge_slave_0: entered promiscuous mode [ 984.814146][T12830] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.814270][T12830] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.814451][T12830] bridge_slave_1: entered allmulticast mode [ 984.827892][T12830] bridge_slave_1: entered promiscuous mode [ 984.862511][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 984.864064][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.864092][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.864113][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.864152][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.926745][ T9] usb 9-1: config 0 descriptor?? [ 985.365954][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 985.366065][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 985.416911][ T9] usb 9-1: USB disconnect, device number 19 [ 985.533706][T12972] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 985.973614][T12965] tipc: Started in network mode [ 985.973635][T12965] tipc: Node identity 4, cluster identity 4711 [ 985.973647][T12965] tipc: Node number set to 4 [ 986.215854][T12976] jffs2: notice: (12976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 986.646073][T12830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.672920][T12830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.824595][T13000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 988.290048][T12830] team0: Port device team_slave_0 added [ 988.392526][T12830] team0: Port device team_slave_1 added [ 988.752182][T12388] bridge_slave_1: left allmulticast mode [ 988.752218][T12388] bridge_slave_1: left promiscuous mode [ 988.752479][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.552448][T13009] ptp ptp0: new virtual clock ptp1 [ 989.552473][T13009] ptp ptp0: guarantee physical clock free running [ 989.673489][T12388] bridge_slave_0: left allmulticast mode [ 989.673525][T12388] bridge_slave_0: left promiscuous mode [ 989.673772][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.986504][ T37] audit: type=1326 audit(1790545704.670:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.1889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aad9e159 code=0x7fc00000 [ 989.987559][T13023] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 990.822382][ T37] audit: type=1326 audit(1790545705.440:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13017 comm="syz.5.1889" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6aad3f4d9 code=0x7fc00000 [ 993.081226][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.081299][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.241012][T12388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.371078][T12388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.461785][T12388] bond0 (unregistering): Released all slaves [ 993.508826][T13033] tipc: Cannot configure node identity twice [ 993.666196][T12830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.666213][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.666237][T12830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.678503][T12830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.678518][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.678542][T12830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.470333][T13049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 995.314319][T13054] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 995.314392][T13054] md: pers->run() failed ... [ 996.479757][ T37] audit: type=1326 audit(1790545711.160:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.8.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f888e159 code=0x7fc00000 [ 996.679384][ T37] audit: type=1326 audit(1790545711.360:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13061 comm="syz.8.1900" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21f882f4d9 code=0x7fc00000 [ 999.017962][T12830] hsr_slave_0: entered promiscuous mode [ 999.056260][T12830] hsr_slave_1: entered promiscuous mode [ 999.057127][T12830] debugfs: 'hsr0' already exists in 'hsr' [ 999.078568][T13081] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 999.092487][T12830] Cannot create hsr debugfs directory [ 999.152607][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1904'. [ 1000.758860][T12388] hsr_slave_0: left promiscuous mode [ 1000.792634][T12388] hsr_slave_1: left promiscuous mode [ 1000.795015][T12388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.869451][T12388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.168259][T13102] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1001.201022][T13102] md: array md0 already has disks! [ 1001.245628][T13102] md: could not open device unknown-block(1,1). [ 1001.245701][T13102] md: error, md_import_device() returned -16 [ 1001.395692][T13102] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1001.395724][T13102] md: pers->run() failed ... [ 1002.461998][T12388] team0 (unregistering): Port device team_slave_1 removed [ 1002.498988][ T37] audit: type=1326 audit(1790545717.170:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13112 comm="syz.5.1912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6aad9e159 code=0x7fc00000 [ 1002.499037][ T37] audit: type=1326 audit(1790545717.170:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13112 comm="syz.5.1912" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6aad3f4d9 code=0x7fc00000 [ 1002.591022][T12388] team0 (unregistering): Port device team_slave_0 removed [ 1003.088160][T13117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1914'. [ 1005.190719][T13134] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1005.190777][T13134] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1005.379440][T13127] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1008.711189][ T37] audit: type=1326 audit(1790545723.390:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13156 comm="syz.8.1922" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f888e159 code=0x7fc00000 [ 1008.825191][ T37] audit: type=1326 audit(1790545723.500:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13156 comm="syz.8.1922" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21f882f4d9 code=0x7fc00000 [ 1009.222677][T13162] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1009.261439][T13162] md: could not open device unknown-block(1,0). [ 1009.261500][T13162] md: error, md_import_device() returned -16 [ 1009.310606][T13162] md: could not open device unknown-block(1,1). [ 1009.310662][T13162] md: error, md_import_device() returned -16 [ 1009.447246][T13162] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1009.447271][T13162] md: pers->run() failed ... [ 1011.546903][T13179] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1011.546958][T13179] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1013.462443][T13182] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1014.800890][ T37] audit: type=1326 audit(1790545729.480:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.7.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa333eee159 code=0x7fc00000 [ 1014.925416][ T37] audit: type=1326 audit(1790545729.590:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13200 comm="syz.7.1933" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa333e8f4d9 code=0x7fc00000 [ 1015.352074][T13205] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1015.392887][T13205] md: could not open device unknown-block(1,0). [ 1015.392945][T13205] md: error, md_import_device() returned -16 [ 1015.544105][T13206] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1015.544127][T13206] md: pers->run() failed ... [ 1015.544317][T13205] md: could not open device unknown-block(1,1). [ 1015.544364][T13205] md: error, md_import_device() returned -16 [ 1015.672435][T12830] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1015.774976][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1015.776338][T12830] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1015.826083][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1015.840441][T12830] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1015.951936][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1015.956093][T12830] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1016.537705][T12830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.234281][T12830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.266181][T12830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.280328][ T1409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.280525][ T1409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.293188][ T1434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.293309][ T1434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.827022][T13239] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1020.071227][ T5601] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1020.436694][T13261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1021.643290][ T5601] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1021.652582][ T5601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.652608][ T5601] usb 4-1: Product: syz [ 1021.652622][ T5601] usb 4-1: Manufacturer: syz [ 1021.652644][ T5601] usb 4-1: SerialNumber: syz [ 1021.671356][ T5601] usb 4-1: config 0 descriptor?? [ 1021.682177][ T5601] ch341 4-1:0.0: ch341-uart converter detected [ 1021.856727][T13266] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 1021.856751][T13266] md: pers->run() failed ... [ 1021.857004][T13264] md: could not open device unknown-block(1,1). [ 1021.857060][T13264] md: error, md_import_device() returned -16 [ 1021.857334][T13261] md: could not open device unknown-block(1,0). [ 1021.857386][T13261] md: error, md_import_device() returned -16 [ 1022.211136][ T5601] usb 4-1: failed to receive control message: -32 [ 1022.211198][ T5601] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1022.401876][T12830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.483091][ T6590] usb 4-1: USB disconnect, device number 22 [ 1022.496976][ T6590] ch341 4-1:0.0: device disconnected [ 1023.328359][T13293] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1023.513991][T12830] veth0_vlan: entered promiscuous mode [ 1023.595394][T12830] veth1_vlan: entered promiscuous mode [ 1023.766241][T12830] veth0_macvtap: entered promiscuous mode [ 1024.928868][T12830] veth1_macvtap: entered promiscuous mode [ 1025.017663][T12830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.060964][T12830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.390796][T13307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1026.724436][ T1434] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.724981][ T1111] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.725370][ T1111] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.792035][ T1111] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.143698][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1028.173312][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1028.177352][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1028.178875][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1028.179529][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1030.360568][ T4910] Bluetooth: hci2: command tx timeout [ 1030.586168][T13356] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1032.440528][ T4910] Bluetooth: hci2: command tx timeout [ 1034.479312][ T36] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1034.520477][ T4910] Bluetooth: hci2: command tx timeout [ 1034.660831][ T274] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.803415][ T36] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1034.805294][ T36] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 1034.805317][ T36] usb 8-1: config 1 has no interface number 0 [ 1034.885006][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.885032][ T36] usb 8-1: Product: syz [ 1034.885045][ T36] usb 8-1: Manufacturer: syz [ 1034.885059][ T36] usb 8-1: SerialNumber: syz [ 1035.043297][ T36] usb 8-1: 3:0 : does not exist [ 1035.043320][ T36] usb 8-1: 3:0 : does not exist [ 1035.200416][ T5605] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1035.368301][ T5605] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1035.371042][ T5605] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1035.371066][ T5605] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.371081][ T5605] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1035.371124][ T5605] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.385520][ T5605] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1035.385544][ T5605] usb 6-1: Product: syz [ 1035.385557][ T5605] usb 6-1: Manufacturer: syz [ 1035.419737][ T5605] cdc_wdm 6-1:1.0: skipping garbage [ 1035.419755][ T5605] cdc_wdm 6-1:1.0: skipping garbage [ 1035.533866][ T5605] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1035.533904][ T5605] cdc_wdm 6-1:1.0: Unknown control protocol [ 1035.558942][ T36] usb 8-1: USB disconnect, device number 10 [ 1035.647369][ T998] usb 6-1: USB disconnect, device number 12 [ 1035.986267][T13396] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1036.038781][ T274] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.260489][ T998] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1036.592280][ T998] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1036.593790][ T998] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1036.593815][ T998] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.593833][ T998] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1036.593879][ T998] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.595709][ T998] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1036.595732][ T998] usb 6-1: Product: syz [ 1036.595744][ T998] usb 6-1: Manufacturer: syz [ 1036.600440][ T4910] Bluetooth: hci2: command tx timeout [ 1036.703530][ T998] cdc_wdm 6-1:1.0: skipping garbage [ 1036.703549][ T998] cdc_wdm 6-1:1.0: skipping garbage [ 1036.929305][ T998] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1036.929320][ T998] cdc_wdm 6-1:1.0: Unknown control protocol [ 1038.009282][ T5605] usb 6-1: USB disconnect, device number 13 [ 1038.146382][ T274] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.460179][ T274] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.370441][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1043.580403][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1043.581234][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1043.582027][ T10] usb 9-1: config 0 has no interfaces? [ 1043.582059][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.592047][ T10] usb 9-1: config 0 descriptor?? [ 1043.845420][T13323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.848889][ T9] usb 9-1: USB disconnect, device number 20 [ 1043.851589][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.851770][T13323] bridge_slave_0: entered allmulticast mode [ 1043.869588][T13323] bridge_slave_0: entered promiscuous mode [ 1043.930215][T13323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.939006][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.939192][T13323] bridge_slave_1: entered allmulticast mode [ 1043.966109][T13323] bridge_slave_1: entered promiscuous mode [ 1045.477436][T13323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.544970][T13323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.790514][T13323] team0: Port device team_slave_0 added [ 1047.657991][T13323] team0: Port device team_slave_1 added [ 1047.994265][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2005'. [ 1047.994289][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2005'. [ 1048.220715][T13323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.220733][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.220758][T13323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.234133][T13323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.234148][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.234172][T13323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.656654][ T274] bridge_slave_1: left allmulticast mode [ 1048.656689][ T274] bridge_slave_1: left promiscuous mode [ 1048.656936][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.837536][ T274] bridge_slave_0: left allmulticast mode [ 1048.837573][ T274] bridge_slave_0: left promiscuous mode [ 1048.837807][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.915281][T13521] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1049.915345][T13521] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1054.311961][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.366730][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.366799][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.381895][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.403223][ T274] bond0 (unregistering): Released all slaves [ 1054.726147][T13543] FAULT_INJECTION: forcing a failure. [ 1054.726147][T13543] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.726170][T13543] CPU: 0 UID: 0 PID: 13543 Comm: syz.3.2014 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1054.726183][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1054.726191][T13543] Call Trace: [ 1054.726196][T13543] [ 1054.726201][T13543] dump_stack_lvl+0xe8/0x150 [ 1054.726221][T13543] should_fail_ex+0x46b/0x600 [ 1054.726239][T13543] should_failslab+0xa8/0x100 [ 1054.726251][T13543] __kvmalloc_node_noprof+0x176/0x890 [ 1054.726267][T13543] ? __rhashtable_init_noprof+0x54d/0xaf0 [ 1054.726279][T13543] ? __rhashtable_init_noprof+0x54d/0xaf0 [ 1054.726296][T13543] __rhashtable_init_noprof+0x54d/0xaf0 [ 1054.726311][T13543] br_dev_init+0x29/0x490 [ 1054.726329][T13543] register_netdevice+0x6cd/0x1ed0 [ 1054.726349][T13543] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1054.726364][T13543] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1054.726375][T13543] ? trace_kmalloc+0x2a/0xf0 [ 1054.726390][T13543] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1054.726403][T13543] ? __pfx_register_netdevice+0x10/0x10 [ 1054.726415][T13543] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1054.726427][T13543] ? alloc_netdev_mqs+0xd59/0x12c0 [ 1054.726443][T13543] ? alloc_netdev_mqs+0xe78/0x12c0 [ 1054.726458][T13543] br_add_bridge+0xa3/0xf0 [ 1054.726472][T13543] br_ioctl_stub+0x588/0xd60 [ 1054.726487][T13543] ? do_vfs_ioctl+0x1184/0x1550 [ 1054.726500][T13543] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1054.726523][T13543] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1054.726536][T13543] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1054.726546][T13543] ? mutex_lock_nested+0x152/0x1d0 [ 1054.726559][T13543] ? sock_ioctl+0x4bb/0x7f0 [ 1054.726573][T13543] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1054.726585][T13543] sock_ioctl+0x4e4/0x7f0 [ 1054.726599][T13543] ? __pfx_sock_ioctl+0x10/0x10 [ 1054.726612][T13543] ? __fget_files+0x2a/0x420 [ 1054.726623][T13543] ? __fget_files+0x3a8/0x420 [ 1054.726633][T13543] ? __fget_files+0x2a/0x420 [ 1054.726645][T13543] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1054.726657][T13543] ? __pfx_sock_ioctl+0x10/0x10 [ 1054.726669][T13543] __se_sys_ioctl+0xff/0x170 [ 1054.726684][T13543] do_syscall_64+0x166/0x520 [ 1054.726694][T13543] ? trace_irq_disable+0x3b/0x140 [ 1054.726706][T13543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.726717][T13543] ? clear_bhb_loop+0x70/0xc0 [ 1054.726729][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.726739][T13543] RIP: 0033:0x7f40dda3e159 [ 1054.726750][T13543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.726758][T13543] RSP: 002b:00007f40dbc96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1054.726770][T13543] RAX: ffffffffffffffda RBX: 00007f40ddcc5fa0 RCX: 00007f40dda3e159 [ 1054.726777][T13543] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000004 [ 1054.726784][T13543] RBP: 00007f40ddad506b R08: 0000000000000000 R09: 0000000000000000 [ 1054.726790][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.726796][T13543] R13: 00007f40ddcc6038 R14: 00007f40ddcc5fa0 R15: 00007ffc36a8b718 [ 1054.726823][T13543] [ 1055.211444][T13323] hsr_slave_0: entered promiscuous mode [ 1055.212859][T13323] hsr_slave_1: entered promiscuous mode [ 1055.213752][T13323] debugfs: 'hsr0' already exists in 'hsr' [ 1055.213776][T13323] Cannot create hsr debugfs directory [ 1055.524960][T13564] block nbd3: shutting down sockets [ 1059.624698][ T37] audit: type=1800 audit(1790545774.250:529): pid=13586 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2027" name="devlink" dev="sda1" ino=2063 res=0 errno=0 [ 1060.913929][ T274] hsr_slave_0: left promiscuous mode [ 1060.954921][ T274] hsr_slave_1: left promiscuous mode [ 1060.956081][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.956104][ T274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.225560][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.225587][ T274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.489102][ T274] veth1_macvtap: left promiscuous mode [ 1062.489208][ T274] veth0_macvtap: left promiscuous mode [ 1062.489452][ T274] veth1_vlan: left promiscuous mode [ 1062.781063][ T998] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1062.942797][ T998] usb 8-1: Using ep0 maxpacket: 8 [ 1062.946416][ T998] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1062.974220][ T998] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1062.975148][ T998] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1062.975445][ T998] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1062.975508][ T998] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1062.975686][ T998] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.976125][ T998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.529381][ T274] veth0_vlan: left promiscuous mode [ 1065.107454][ T998] usb 8-1: GET_CAPABILITIES returned 0 [ 1065.107502][ T998] usbtmc 8-1:16.0: can't read capabilities [ 1065.330081][ T5605] usb 8-1: USB disconnect, device number 11 [ 1067.213859][ T274] team0 (unregistering): Port device team_slave_1 removed [ 1067.271040][ T274] team0 (unregistering): Port device team_slave_0 removed [ 1072.940158][T13663] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1072.940191][T13663] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1084.781508][T13732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1088.597942][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1088.629105][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1088.703567][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1088.755462][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1088.777112][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1090.930518][ T4910] Bluetooth: hci5: command tx timeout [ 1093.047214][ T4910] Bluetooth: hci5: command tx timeout [ 1095.081094][ T4910] Bluetooth: hci5: command tx timeout [ 1097.161021][ T4910] Bluetooth: hci5: command tx timeout [ 1097.760621][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1099.770371][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1099.792096][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1099.828095][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1099.828149][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1099.828171][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1099.828193][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1099.828214][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.828251][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.072694][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 1100.072742][ T9] usbtmc 8-1:16.0: can't read capabilities [ 1100.310439][ T9] usb 8-1: USB disconnect, device number 12 [ 1104.453054][T13755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.453269][T13755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.453430][T13755] bridge_slave_0: entered allmulticast mode [ 1104.485334][T13755] bridge_slave_0: entered promiscuous mode [ 1104.567197][T13755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.568898][T13755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.569484][T13755] bridge_slave_1: entered allmulticast mode [ 1104.607274][T13755] bridge_slave_1: entered promiscuous mode [ 1105.179286][T13755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.217246][T13755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.278746][T13755] team0: Port device team_slave_0 added [ 1105.289148][T13755] team0: Port device team_slave_1 added [ 1105.411470][T13755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.411487][T13755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.411527][T13755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.420092][T13755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.420108][T13755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.420133][T13755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.188348][T13755] hsr_slave_0: entered promiscuous mode [ 1106.197304][T13755] hsr_slave_1: entered promiscuous mode [ 1106.210062][T13755] debugfs: 'hsr0' already exists in 'hsr' [ 1106.210088][T13755] Cannot create hsr debugfs directory [ 1109.756965][T13927] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1110.031108][ T1429] bridge_slave_1: left allmulticast mode [ 1110.031144][ T1429] bridge_slave_1: left promiscuous mode [ 1110.031398][ T1429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.207585][ T1429] bridge_slave_0: left allmulticast mode [ 1110.207619][ T1429] bridge_slave_0: left promiscuous mode [ 1110.244582][ T1429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.015505][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.015583][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.904026][ T1429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.045425][ T1429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.133887][ T1429] bond0 (unregistering): Released all slaves [ 1121.017305][ T1429] hsr_slave_0: left promiscuous mode [ 1121.065510][ T1429] hsr_slave_1: left promiscuous mode [ 1121.066713][ T1429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.093415][ T1429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.081239][ T1429] team0 (unregistering): Port device team_slave_1 removed [ 1124.223983][ T1429] team0 (unregistering): Port device team_slave_0 removed [ 1124.862099][ T1898] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1125.022694][ T1898] usb 9-1: Using ep0 maxpacket: 8 [ 1125.039727][ T1898] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1125.047492][ T1898] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1125.047546][ T1898] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1125.047566][ T1898] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1125.047588][ T1898] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1125.047610][ T1898] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1125.047652][ T1898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.111507][ T1898] usb 9-1: GET_CAPABILITIES returned 0 [ 1126.111559][ T1898] usbtmc 9-1:16.0: can't read capabilities [ 1126.528407][ T5702] usb 9-1: USB disconnect, device number 21 [ 1129.398044][T14058] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1129.443543][T14058] fuse: Bad value for 'fd' [ 1131.018468][T14060] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1132.690500][ T1898] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1132.850816][ T1898] usb 8-1: Using ep0 maxpacket: 8 [ 1132.851818][ T1898] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1132.857498][ T1898] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1132.857572][ T1898] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1132.857593][ T1898] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1132.857617][ T1898] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1132.857638][ T1898] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.857678][ T1898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.501705][ T1898] usb 8-1: GET_CAPABILITIES returned 0 [ 1133.501754][ T1898] usbtmc 8-1:16.0: can't read capabilities [ 1136.423286][ T1898] usb 8-1: USB disconnect, device number 13 [ 1140.774448][T14133] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1142.135266][ T5605] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1142.300430][ T5605] usb 4-1: Using ep0 maxpacket: 8 [ 1142.301378][ T5605] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1142.302873][ T5605] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1142.302938][ T5605] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1142.302958][ T5605] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1142.302981][ T5605] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1142.303003][ T5605] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.303040][ T5605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.564411][ T5605] usb 4-1: GET_CAPABILITIES returned 0 [ 1142.564457][ T5605] usbtmc 4-1:16.0: can't read capabilities [ 1142.800980][ T5605] usb 4-1: USB disconnect, device number 23 [ 1143.537660][T13755] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1144.298242][T13755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1144.308085][T13755] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1144.637048][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2186'. [ 1144.693662][T13755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1144.892646][T13755] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1144.924192][T13755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1144.941995][T13755] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1145.054737][T13755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1145.668554][T13755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.117912][T13755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.735929][ T1429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.736959][ T1429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.755510][ T1429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.756399][ T1429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.681381][T14191] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1150.994179][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2198'. [ 1151.123308][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1151.206889][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1151.208620][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1151.230532][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1151.232033][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1151.623225][T14217] FAULT_INJECTION: forcing a failure. [ 1151.623225][T14217] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.623263][T14217] CPU: 0 UID: 0 PID: 14217 Comm: syz.5.2200 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.623285][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1151.623297][T14217] Call Trace: [ 1151.623305][T14217] [ 1151.623314][T14217] dump_stack_lvl+0xe8/0x150 [ 1151.623348][T14217] should_fail_ex+0x46b/0x600 [ 1151.623380][T14217] should_failslab+0xa8/0x100 [ 1151.623402][T14217] __kmalloc_noprof+0xfb/0x790 [ 1151.623429][T14217] ? tomoyo_realpath_from_path+0xef/0x640 [ 1151.623456][T14217] ? tomoyo_realpath_from_path+0xef/0x640 [ 1151.623491][T14217] tomoyo_realpath_from_path+0xef/0x640 [ 1151.623527][T14217] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1151.623552][T14217] tomoyo_path_number_perm+0x246/0x5f0 [ 1151.623579][T14217] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1151.623602][T14217] ? __lock_acquire+0x747/0x2de0 [ 1151.623641][T14217] ? hook_file_ioctl+0x1f5/0x610 [ 1151.623681][T14217] ? __fget_files+0x2a/0x420 [ 1151.623705][T14217] ? __fget_files+0x2a/0x420 [ 1151.623724][T14217] ? __fget_files+0x3a8/0x420 [ 1151.623743][T14217] ? __fget_files+0x2a/0x420 [ 1151.623768][T14217] security_file_ioctl+0xc3/0x2a0 [ 1151.623795][T14217] __se_sys_ioctl+0x47/0x170 [ 1151.623825][T14217] do_syscall_64+0x166/0x520 [ 1151.623844][T14217] ? trace_irq_disable+0x3b/0x140 [ 1151.623868][T14217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.623888][T14217] ? clear_bhb_loop+0x70/0xc0 [ 1151.623912][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.623931][T14217] RIP: 0033:0x7fe6aad9e159 [ 1151.623950][T14217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.623966][T14217] RSP: 002b:00007fe6a8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.623987][T14217] RAX: ffffffffffffffda RBX: 00007fe6ab025fa0 RCX: 00007fe6aad9e159 [ 1151.624001][T14217] RDX: 0000000000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 1151.624014][T14217] RBP: 00007fe6aae3506b R08: 0000000000000000 R09: 0000000000000000 [ 1151.624026][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.624037][T14217] R13: 00007fe6ab026038 R14: 00007fe6ab025fa0 R15: 00007fffecd915b8 [ 1151.624069][T14217] [ 1151.624090][T14217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1152.050330][T14220] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1152.050387][T14220] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1153.559033][ T5607] Bluetooth: hci2: command tx timeout [ 1155.560385][ T5607] Bluetooth: hci2: command tx timeout [ 1156.242707][T14254] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 1157.644582][ T5607] Bluetooth: hci2: command tx timeout [ 1158.929564][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2212'. [ 1159.444357][T14259] syz.5.2210 (14259): drop_caches: 2 [ 1159.735147][ T5607] Bluetooth: hci2: command tx timeout [ 1159.804773][T14281] FAULT_INJECTION: forcing a failure. [ 1159.804773][T14281] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.804805][T14281] CPU: 1 UID: 0 PID: 14281 Comm: syz.5.2214 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1159.804817][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.804824][T14281] Call Trace: [ 1159.804831][T14281] [ 1159.804836][T14281] dump_stack_lvl+0xe8/0x150 [ 1159.804856][T14281] should_fail_ex+0x46b/0x600 [ 1159.804874][T14281] should_failslab+0xa8/0x100 [ 1159.804887][T14281] __kmalloc_noprof+0xfb/0x790 [ 1159.804901][T14281] ? tomoyo_realpath_from_path+0xef/0x640 [ 1159.804917][T14281] ? tomoyo_realpath_from_path+0xef/0x640 [ 1159.804934][T14281] tomoyo_realpath_from_path+0xef/0x640 [ 1159.804954][T14281] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1159.804966][T14281] tomoyo_path_number_perm+0x246/0x5f0 [ 1159.804980][T14281] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1159.804992][T14281] ? __lock_acquire+0x747/0x2de0 [ 1159.805013][T14281] ? hook_file_ioctl+0x1f5/0x610 [ 1159.805034][T14281] ? __fget_files+0x2a/0x420 [ 1159.805046][T14281] ? __fget_files+0x2a/0x420 [ 1159.805056][T14281] ? __fget_files+0x3a8/0x420 [ 1159.805066][T14281] ? __fget_files+0x2a/0x420 [ 1159.805078][T14281] security_file_ioctl+0xc3/0x2a0 [ 1159.805093][T14281] __se_sys_ioctl+0x47/0x170 [ 1159.805109][T14281] do_syscall_64+0x166/0x520 [ 1159.805119][T14281] ? trace_irq_disable+0x3b/0x140 [ 1159.805132][T14281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.805142][T14281] ? clear_bhb_loop+0x70/0xc0 [ 1159.805155][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.805165][T14281] RIP: 0033:0x7fe6aad9e159 [ 1159.805176][T14281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.805184][T14281] RSP: 002b:00007fe6a8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.805196][T14281] RAX: ffffffffffffffda RBX: 00007fe6ab025fa0 RCX: 00007fe6aad9e159 [ 1159.805203][T14281] RDX: 0000000000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 1159.805209][T14281] RBP: 00007fe6aae3506b R08: 0000000000000000 R09: 0000000000000000 [ 1159.805215][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1159.805221][T14281] R13: 00007fe6ab026038 R14: 00007fe6ab025fa0 R15: 00007fffecd915b8 [ 1159.805237][T14281] [ 1159.805241][T14281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1163.371458][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2219'. [ 1163.470056][T14303] fuse: Bad value for 'fd' [ 1165.295848][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2225'. [ 1165.490302][T14326] syzkaller0: entered promiscuous mode [ 1165.490361][T14326] syzkaller0: entered allmulticast mode [ 1167.177299][T14349] fuse: Bad value for 'fd' [ 1168.096421][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2233'. [ 1171.240330][T14209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.240453][T14209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.240639][T14209] bridge_slave_0: entered allmulticast mode [ 1171.244869][T14209] bridge_slave_0: entered promiscuous mode [ 1171.268284][T14209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.268407][T14209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.268564][T14209] bridge_slave_1: entered allmulticast mode [ 1171.289779][T14209] bridge_slave_1: entered promiscuous mode [ 1171.441910][T14393] fuse: Bad value for 'fd' [ 1172.666215][T14209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.691356][T14209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.886016][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2248'. [ 1173.131687][ T998] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1173.322635][ T998] usb 8-1: Using ep0 maxpacket: 8 [ 1173.325874][ T998] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1173.373574][ T998] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1173.373759][ T998] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1173.374154][ T998] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1173.374233][ T998] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1173.374321][ T998] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1173.374363][ T998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.119601][ T998] usb 8-1: GET_CAPABILITIES returned 0 [ 1174.119650][ T998] usbtmc 8-1:16.0: can't read capabilities [ 1175.827097][ T998] usb 8-1: USB disconnect, device number 14 [ 1175.882795][T14209] team0: Port device team_slave_0 added [ 1175.929640][T14209] team0: Port device team_slave_1 added [ 1177.282452][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.282525][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.594670][ T3427] bridge_slave_1: left allmulticast mode [ 1177.594703][ T3427] bridge_slave_1: left promiscuous mode [ 1177.594934][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.794469][ T3427] bridge_slave_0: left allmulticast mode [ 1178.794503][ T3427] bridge_slave_0: left promiscuous mode [ 1178.794737][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.368396][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.406166][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.502336][ T3427] bond0 (unregistering): Released all slaves [ 1184.598872][T14209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.598885][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.598899][T14209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.605380][T14209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.605394][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.605417][T14209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.885294][T14209] hsr_slave_0: entered promiscuous mode [ 1184.889588][T14209] hsr_slave_1: entered promiscuous mode [ 1184.893685][T14209] debugfs: 'hsr0' already exists in 'hsr' [ 1184.893708][T14209] Cannot create hsr debugfs directory [ 1184.951538][T14474] FAULT_INJECTION: forcing a failure. [ 1184.951538][T14474] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.951758][T14474] CPU: 1 UID: 0 PID: 14474 Comm: syz.8.2266 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1184.951781][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.951791][T14474] Call Trace: [ 1184.951798][T14474] [ 1184.951807][T14474] dump_stack_lvl+0xe8/0x150 [ 1184.951847][T14474] should_fail_ex+0x46b/0x600 [ 1184.951878][T14474] should_failslab+0xa8/0x100 [ 1184.951900][T14474] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 1184.951926][T14474] ? nfs_get_tree+0xd0c/0x1650 [ 1184.951949][T14474] ? nfs_get_tree+0xd0c/0x1650 [ 1184.951979][T14474] kmemdup_nul+0x36/0xf0 [ 1184.952002][T14474] nfs_get_tree+0xd0c/0x1650 [ 1184.952035][T14474] vfs_get_tree+0x92/0x2a0 [ 1184.952061][T14474] vfs_cmd_create+0xa2/0x200 [ 1184.952091][T14474] __se_sys_fsconfig+0x6bf/0x810 [ 1184.952124][T14474] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1184.952154][T14474] ? rcu_is_watching+0x16/0xb0 [ 1184.952189][T14474] ? __x64_sys_fsconfig+0x20/0xc0 [ 1184.952218][T14474] do_syscall_64+0x166/0x520 [ 1184.952238][T14474] ? trace_irq_disable+0x3b/0x140 [ 1184.952261][T14474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.952280][T14474] ? clear_bhb_loop+0x70/0xc0 [ 1184.952303][T14474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.952321][T14474] RIP: 0033:0x7f21f888e159 [ 1184.952339][T14474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.952354][T14474] RSP: 002b:00007f21f6ae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1184.952375][T14474] RAX: ffffffffffffffda RBX: 00007f21f8b15fa0 RCX: 00007f21f888e159 [ 1184.952389][T14474] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1184.952400][T14474] RBP: 00007f21f892506b R08: 0000000000000000 R09: 0000000000000000 [ 1184.952412][T14474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.952423][T14474] R13: 00007f21f8b16038 R14: 00007f21f8b15fa0 R15: 00007ffd87f00318 [ 1184.952456][T14474] [ 1185.050464][ T5605] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1185.230322][ T5605] usb 4-1: Using ep0 maxpacket: 8 [ 1185.230972][ T5605] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1185.232470][ T5605] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1185.232531][ T5605] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1185.232553][ T5605] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1185.232576][ T5605] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1185.232599][ T5605] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1185.232638][ T5605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.160445][ T5605] usb 4-1: GET_CAPABILITIES returned 0 [ 1187.160494][ T5605] usbtmc 4-1:16.0: can't read capabilities [ 1187.375934][ T9] usb 4-1: USB disconnect, device number 24 [ 1187.410448][ T3427] hsr_slave_0: left promiscuous mode [ 1187.450370][ T3427] hsr_slave_1: left promiscuous mode [ 1187.451599][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.501181][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.140982][ T3427] team0 (unregistering): Port device team_slave_1 removed [ 1198.254584][ T3427] team0 (unregistering): Port device team_slave_0 removed [ 1205.540627][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2312'. [ 1205.540657][T14626] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2312'. [ 1205.540675][T14626] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2312'. [ 1209.499745][ T5605] libceph: connect (1)[c::]:6789 error -101 [ 1209.541456][T14642] ceph: No mds server is up or the cluster is laggy [ 1209.561146][ T5605] libceph: mon0 (1)[c::]:6789 connect error [ 1209.838584][ T5605] libceph: connect (1)[c::]:6789 error -101 [ 1209.838777][ T5605] libceph: mon0 (1)[c::]:6789 connect error [ 1213.774632][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1213.826457][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1213.837684][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1213.869486][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1213.900592][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1216.122004][ T4910] Bluetooth: hci5: command tx timeout [ 1217.184741][T14699] afs: Unknown parameter '/dev/sequencer2' [ 1218.214305][ T4910] Bluetooth: hci5: command tx timeout [ 1221.059587][ T4910] Bluetooth: hci5: command tx timeout [ 1221.082567][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 1221.193718][T12388] bridge_slave_1: left allmulticast mode [ 1221.193753][T12388] bridge_slave_1: left promiscuous mode [ 1221.194008][T12388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.490032][T12388] bridge_slave_0: left allmulticast mode [ 1221.490067][T12388] bridge_slave_0: left promiscuous mode [ 1221.502196][T12388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.184200][T14708] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1222.476137][T12388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1222.690365][T14714] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 1222.932413][T12388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.047680][T12388] bond0 (unregistering): Released all slaves [ 1223.060522][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2327'. [ 1223.060539][T14721] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2327'. [ 1223.060549][T14721] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2327'. [ 1223.080807][ T4910] Bluetooth: hci5: command tx timeout [ 1223.170302][ T5605] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1223.324541][ T5605] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1223.326952][ T5605] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.327018][ T5605] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1223.327038][ T5605] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1223.327068][ T5605] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1223.331915][ T5605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.331940][ T5605] usb 6-1: Product: syz [ 1223.331954][ T5605] usb 6-1: Manufacturer: syz [ 1223.331968][ T5605] usb 6-1: SerialNumber: syz [ 1223.388698][ T5605] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1223.417474][ T5605] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1223.424297][ T5605] scsi host1: usb-storage 6-1:1.0 [ 1223.476414][T14714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1223.792367][T14715] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1223.935694][T14738] afs: Unknown parameter '/dev/sequencer2' [ 1224.099888][T14739] nbd5: detected capacity change from 0 to 1 [ 1224.224826][T14719] bond1: (slave dummy0): making interface the new active one [ 1224.228006][T14719] dummy0: entered promiscuous mode [ 1224.249988][T14719] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1224.269545][T14740] nbd5: detected capacity change from 1 to 0 [ 1225.117760][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2347'. [ 1225.945738][T14739] block nbd5: shutting down sockets [ 1225.951165][T12388] hsr_slave_0: left promiscuous mode [ 1226.014386][T12388] hsr_slave_1: left promiscuous mode [ 1226.026610][T12388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.193171][T12388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.236461][T14755] IPVS: ip_vs_add_dest(): server weight less than zero [ 1229.130836][T12388] team0 (unregistering): Port device team_slave_1 removed [ 1229.801608][T12388] team0 (unregistering): Port device team_slave_0 removed [ 1230.829000][T14777] afs: Unknown parameter '/dev/sequencer2' [ 1233.741972][T14776] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1233.742029][T14776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1235.566534][T14787] FAULT_INJECTION: forcing a failure. [ 1235.566534][T14787] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.566571][T14787] CPU: 1 UID: 0 PID: 14787 Comm: syz.7.2356 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1235.566593][T14787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1235.566604][T14787] Call Trace: [ 1235.566612][T14787] [ 1235.566621][T14787] dump_stack_lvl+0xe8/0x150 [ 1235.566656][T14787] should_fail_ex+0x46b/0x600 [ 1235.566686][T14787] ? __d_alloc+0x37/0x6f0 [ 1235.566710][T14787] should_failslab+0xa8/0x100 [ 1235.566732][T14787] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1235.566758][T14787] ? __d_lookup+0x66/0x790 [ 1235.566780][T14787] ? __d_alloc+0x37/0x6f0 [ 1235.566810][T14787] __d_alloc+0x37/0x6f0 [ 1235.566838][T14787] d_alloc+0x4b/0x190 [ 1235.566859][T14787] ? lookup_one_qstr_excl+0xc4/0x360 [ 1235.566886][T14787] lookup_one_qstr_excl+0xd8/0x360 [ 1235.566915][T14787] filename_create+0x20e/0x370 [ 1235.566947][T14787] ? __pfx_filename_create+0x10/0x10 [ 1235.566983][T14787] filename_mkdirat+0xd2/0x520 [ 1235.567015][T14787] ? __pfx_filename_mkdirat+0x10/0x10 [ 1235.567045][T14787] ? do_getname+0x151/0x250 [ 1235.567067][T14787] __se_sys_mkdirat+0x35/0x150 [ 1235.567096][T14787] do_syscall_64+0x166/0x520 [ 1235.567116][T14787] ? trace_irq_disable+0x3b/0x140 [ 1235.567140][T14787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.567159][T14787] ? clear_bhb_loop+0x70/0xc0 [ 1235.567183][T14787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.567202][T14787] RIP: 0033:0x7fa333eee159 [ 1235.567221][T14787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.567237][T14787] RSP: 002b:00007fa332146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1235.567258][T14787] RAX: ffffffffffffffda RBX: 00007fa334175fa0 RCX: 00007fa333eee159 [ 1235.567280][T14787] RDX: 00000000000001ff RSI: 0000200000001500 RDI: ffffffffffffff9c [ 1235.567294][T14787] RBP: 00007fa333f8506b R08: 0000000000000000 R09: 0000000000000000 [ 1235.567307][T14787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.567318][T14787] R13: 00007fa334176038 R14: 00007fa334175fa0 R15: 00007ffc85bab548 [ 1235.567351][T14787] [ 1237.396689][ T998] usb 6-1: USB disconnect, device number 14 [ 1237.786338][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2361'. [ 1237.798471][T14798] input: syz1 as /devices/virtual/input/input14 [ 1238.696240][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.696310][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.911932][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 1239.835843][T14821] afs: Unknown parameter '/dev/sequencer2' [ 1239.904677][T14672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.905300][T14672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.031967][T14672] bridge_slave_0: entered allmulticast mode [ 1240.122332][T14672] bridge_slave_0: entered promiscuous mode [ 1240.456121][T14672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.514102][T14672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.521962][T14672] bridge_slave_1: entered allmulticast mode [ 1240.628878][T14672] bridge_slave_1: entered promiscuous mode [ 1242.378108][T14831] FAULT_INJECTION: forcing a failure. [ 1242.378108][T14831] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.378143][T14831] CPU: 1 UID: 0 PID: 14831 Comm: syz.3.2370 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1242.378165][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1242.378176][T14831] Call Trace: [ 1242.378184][T14831] [ 1242.378192][T14831] dump_stack_lvl+0xe8/0x150 [ 1242.378224][T14831] should_fail_ex+0x46b/0x600 [ 1242.378256][T14831] should_failslab+0xa8/0x100 [ 1242.378279][T14831] __kmalloc_noprof+0xfb/0x790 [ 1242.378303][T14831] ? prepare_creds+0x30/0x820 [ 1242.378323][T14831] ? security_prepare_creds+0x52/0x360 [ 1242.378348][T14831] ? security_prepare_creds+0x52/0x360 [ 1242.378380][T14831] security_prepare_creds+0x52/0x360 [ 1242.378408][T14831] prepare_creds+0x57d/0x820 [ 1242.378434][T14831] __sys_setresgid+0x583/0x8f0 [ 1242.378464][T14831] do_syscall_64+0x166/0x520 [ 1242.378484][T14831] ? trace_irq_disable+0x3b/0x140 [ 1242.378507][T14831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.378526][T14831] ? clear_bhb_loop+0x70/0xc0 [ 1242.378549][T14831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.378577][T14831] RIP: 0033:0x7f40dda3e159 [ 1242.378594][T14831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.378610][T14831] RSP: 002b:00007f40dbc96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 1242.378630][T14831] RAX: ffffffffffffffda RBX: 00007f40ddcc5fa0 RCX: 00007f40dda3e159 [ 1242.378644][T14831] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 1242.378656][T14831] RBP: 00007f40ddad506b R08: 0000000000000000 R09: 0000000000000000 [ 1242.378668][T14831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1242.378680][T14831] R13: 00007f40ddcc6038 R14: 00007f40ddcc5fa0 R15: 00007ffc36a8b718 [ 1242.378711][T14831] [ 1242.464195][T14672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.479785][T14672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.702699][T14672] team0: Port device team_slave_0 added [ 1242.755742][T14672] team0: Port device team_slave_1 added [ 1242.962328][T14672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.962345][T14672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.962370][T14672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.019815][T14672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.019832][T14672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.019857][T14672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.718070][T14846] nfs4: Unknown parameter 'rt' [ 1243.750020][T14672] hsr_slave_0: entered promiscuous mode [ 1243.764724][T14672] hsr_slave_1: entered promiscuous mode [ 1243.784796][T14672] debugfs: 'hsr0' already exists in 'hsr' [ 1243.784823][T14672] Cannot create hsr debugfs directory [ 1244.336187][T14856] afs: Unknown parameter '/dev/sequencer2' [ 1246.895541][T12587] dummy0: left promiscuous mode [ 1248.873056][T14872] nfs4: Unknown parameter 'rt' [ 1249.600351][ T998] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1249.764945][ T998] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1249.767869][ T998] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.767947][ T998] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1249.767968][ T998] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1249.767990][ T998] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1249.783522][ T998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.783544][ T998] usb 4-1: Product: syz [ 1249.783557][ T998] usb 4-1: Manufacturer: syz [ 1249.783570][ T998] usb 4-1: SerialNumber: syz [ 1249.829693][ T998] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1249.874770][ T998] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1249.889212][ T998] scsi host1: usb-storage 4-1:1.0 [ 1250.178443][T14672] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1252.208070][T14672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1252.366708][T14896] nbd3: detected capacity change from 0 to 1 [ 1252.630784][T14904] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1252.630841][T14904] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1252.714880][T14672] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1252.754917][T14898] nbd3: detected capacity change from 1 to 0 [ 1252.795516][T14672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1252.797352][T14672] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1252.872323][T14672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1252.891039][T14672] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1253.089374][T14672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1253.808648][T14896] block nbd3: shutting down sockets [ 1254.178118][T14672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.352344][T14919] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2390'. [ 1254.430651][T14672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.474486][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.474696][ T6794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.515462][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.515593][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.241704][ T5605] usb 4-1: USB disconnect, device number 25 [ 1258.452685][T14672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.099945][T14672] veth0_vlan: entered promiscuous mode [ 1262.139049][T14672] veth1_vlan: entered promiscuous mode [ 1262.446297][T14672] veth0_macvtap: entered promiscuous mode [ 1262.473824][T14672] veth1_macvtap: entered promiscuous mode [ 1262.551679][T14672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.585209][T14672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.613742][ T1434] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.613950][ T1434] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.614141][ T1434] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.629121][T12824] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1262.750889][ T3427] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.780259][T12824] usb 8-1: Using ep0 maxpacket: 32 [ 1262.781076][T12824] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1262.781832][T12824] usb 8-1: config 0 has no interfaces? [ 1262.787988][T12824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.788019][T12824] usb 8-1: Product: syz [ 1262.788033][T12824] usb 8-1: Manufacturer: syz [ 1262.788045][T12824] usb 8-1: SerialNumber: syz [ 1262.847481][T12824] usb 8-1: config 0 descriptor?? [ 1264.443652][ T9] usb 8-1: USB disconnect, device number 15 [ 1264.772558][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2413'. [ 1264.772579][T15004] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2413'. [ 1264.772589][T15004] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2413'. [ 1265.596985][ T6793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.597008][ T6793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.949024][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.949045][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.730272][ T37] audit: type=1326 audit(1790545985.360:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15026 comm="syz.9.1728" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51222e159 code=0x7fc00000 [ 1300.123646][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.123714][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1338.057192][T15055] Bluetooth: hci5: command 0x0406 tx timeout [ 1361.583118][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.583185][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.250387][ T38] INFO: task syz-executor:5582 blocked in I/O wait for more than 143 seconds. [ 1417.250415][ T38] Not tainted syzkaller #0 [ 1417.250424][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.250433][ T38] task:syz-executor state:D stack:19712 pid:5582 tgid:5582 ppid:5581 task_flags:0x440100 flags:0x00080000 [ 1417.250599][ T38] Call Trace: [ 1417.250606][ T38] [ 1417.250619][ T38] __schedule+0x16d9/0x5700 [ 1417.250681][ T38] ? __pfx___schedule+0x10/0x10 [ 1417.250718][ T38] ? schedule+0x90/0x2b0 [ 1417.250748][ T38] schedule+0x164/0x2b0 [ 1417.250777][ T38] io_schedule+0x80/0xe0 [ 1417.250798][ T38] bit_wait_io+0x11/0xd0 [ 1417.250820][ T38] __wait_on_bit+0xac/0x2f0 [ 1417.250839][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 1417.250862][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 1417.250884][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 1417.250903][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1417.250926][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 1417.250958][ T38] do_get_write_access+0x671/0x1090 [ 1417.250998][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 1417.251025][ T38] __ext4_journal_get_write_access+0xf1/0x620 [ 1417.251065][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1417.251089][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1417.251122][ T38] ext4_reserve_inode_write+0x294/0x360 [ 1417.251154][ T38] __ext4_mark_inode_dirty+0x146/0x7b0 [ 1417.251192][ T38] ext4_dirty_inode+0xd0/0x110 [ 1417.251214][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1417.251235][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 1417.251268][ T38] file_update_time_flags+0x39f/0x450 [ 1417.251298][ T38] ext4_page_mkwrite+0x225/0x1150 [ 1417.251330][ T38] ? reacquire_held_locks+0x117/0x1a0 [ 1417.251361][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1417.251393][ T38] do_page_mkwrite+0x14a/0x310 [ 1417.251424][ T38] do_wp_page+0x20a7/0x3d20 [ 1417.251463][ T38] ? preempt_count_add+0x6a/0x140 [ 1417.251488][ T38] ? __pfx_do_wp_page+0x10/0x10 [ 1417.251508][ T38] ? rt_spin_lock+0x2d0/0x400 [ 1417.251533][ T38] ? __pfx_rt_spin_lock+0x10/0x10 [ 1417.251561][ T38] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1417.251587][ T38] handle_mm_fault+0xd69/0x28c0 [ 1417.251616][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 1417.251649][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 1417.251670][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 1417.251709][ T38] ? __pfx_set_user_sigmask+0x10/0x10 [ 1417.251758][ T38] do_user_addr_fault+0xa4f/0x1340 [ 1417.251790][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 1417.251811][ T38] exc_page_fault+0x6a/0xc0 [ 1417.251833][ T38] asm_exc_page_fault+0x26/0x30 [ 1417.251852][ T38] RIP: 0033:0x7f9b49b801e3 [ 1417.251870][ T38] RSP: 002b:00007ffd922dade0 EFLAGS: 00010206 [ 1417.251887][ T38] RAX: 00007f9b45b0fef8 RBX: 00007ffd922daf10 RCX: 0000000000000000 [ 1417.251901][ T38] RDX: 00007f9b45b0fef4 RSI: 0000000000000008 RDI: 00007ffd922daf10 [ 1417.251913][ T38] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 1417.251924][ T38] R10: 00007ffd922daef0 R11: 0000000000000000 R12: 0000000000000000 [ 1417.251935][ T38] R13: 0000000000000108 R14: fffffffffffffef8 R15: 0000000000000000 [ 1417.251966][ T38] [ 1417.252045][ T38] INFO: task syz.7.2423:15045 blocked in I/O wait for more than 143 seconds. [ 1417.252067][ T38] Not tainted syzkaller #0 [ 1417.252077][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.252086][ T38] task:syz.7.2423 state:D stack:24872 pid:15045 tgid:15045 ppid:9897 task_flags:0x440040 flags:0x00080002 [ 1417.252130][ T38] Call Trace: [ 1417.252137][ T38] [ 1417.252149][ T38] __schedule+0x16d9/0x5700 [ 1417.252204][ T38] ? __pfx___schedule+0x10/0x10 [ 1417.252240][ T38] ? schedule+0x90/0x2b0 [ 1417.252269][ T38] schedule+0x164/0x2b0 [ 1417.252298][ T38] io_schedule+0x80/0xe0 [ 1417.252319][ T38] bit_wait_io+0x11/0xd0 [ 1417.252340][ T38] __wait_on_bit+0xac/0x2f0 [ 1417.252359][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 1417.252380][ T38] out_of_line_wait_on_bit+0x13b/0x190 [ 1417.252401][ T38] ? __pfx_bit_wait_io+0x10/0x10 [ 1417.252420][ T38] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1417.252443][ T38] ? __pfx_wake_bit_function+0x10/0x10 [ 1417.252474][ T38] do_get_write_access+0x671/0x1090 [ 1417.252513][ T38] jbd2_journal_get_write_access+0x1d7/0x230 [ 1417.252539][ T38] __ext4_journal_get_write_access+0xf1/0x620 [ 1417.252567][ T38] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1417.252590][ T38] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1417.252622][ T38] ext4_reserve_inode_write+0x294/0x360 [ 1417.252652][ T38] __ext4_mark_inode_dirty+0x146/0x7b0 [ 1417.252690][ T38] ext4_dirty_inode+0xd0/0x110 [ 1417.252711][ T38] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1417.252732][ T38] __mark_inode_dirty+0x3a8/0x13b0 [ 1417.252763][ T38] file_update_time_flags+0x39f/0x450 [ 1417.252791][ T38] ext4_page_mkwrite+0x225/0x1150 [ 1417.252823][ T38] ? __pfx_filemap_fault+0x10/0x10 [ 1417.252847][ T38] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1417.252869][ T38] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 1417.252900][ T38] do_page_mkwrite+0x14a/0x310 [ 1417.252930][ T38] do_pte_missing+0x734/0x28f0 [ 1417.252971][ T38] handle_mm_fault+0xf64/0x28c0 [ 1417.253000][ T38] ? handle_mm_fault+0xeb/0x28c0 [ 1417.253032][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 1417.253059][ T38] ? lock_vma_under_rcu+0x45a/0x500 [ 1417.253109][ T38] do_user_addr_fault+0xa4f/0x1340 [ 1417.253140][ T38] ? trace_page_fault_user+0x84/0x1e0 [ 1417.253162][ T38] exc_page_fault+0x6a/0xc0 [ 1417.253183][ T38] asm_exc_page_fault+0x26/0x30 [ 1417.253200][ T38] RIP: 0033:0x7fa333dc2809 [ 1417.253216][ T38] RSP: 002b:00007ffc85bab590 EFLAGS: 00010202 [ 1417.253232][ T38] RAX: 0000001b2f624000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 1417.253244][ T38] RDX: 0000001b2f623ffc RSI: 00000000003ffde8 RDI: 00007fa334ca5700 [ 1417.253257][ T38] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fa334162000 [ 1417.253269][ T38] R10: 00007fa334ca5700 R11: 0000000000000000 R12: 0000000000000000 [ 1417.253281][ T38] R13: 0000000000000334 R14: ffffffff816d57ce R15: 00007fa334ca5720 [ 1417.253294][ T38] ? fpregs_assert_state_consistent+0xee/0x150 [ 1417.253334][ T38] [ 1417.253363][ T38] [ 1417.253363][ T38] Showing all locks held in the system: [ 1417.253378][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 1417.253391][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1417.253459][ T38] locks held by udevd/4961: 2, last CPU#0: [ 1417.253472][ T38] #0: ffff88803777a510 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1417.253526][ T38] #1: ffff8880387b3208 (&ep->lock){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 1417.253572][ T38] locks held by getty/5348: 2, on CPU#0: [ 1417.253585][ T38] #0: ffff8880372b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1417.253632][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1417.253683][ T38] locks held by syz-executor/5582: 3, on CPU#1: [ 1417.253696][ T38] #0: ffff88803083fd08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1417.253747][ T38] #1: ffff8880372fc688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 1417.253793][ T38] #2: ffff8880372f8bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 1417.253845][ T38] locks held by syz.7.2423/15045: 3, on CPU#0: [ 1417.253859][ T38] #0: ffff88803af82088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1417.253908][ T38] #1: ffff8880372fc688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x203/0x1150 [ 1417.253955][ T38] #2: ffff8880372f8bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 1417.254001][ T38] locks held by syz.9.2422/15047: 3, on CPU#1: [ 1417.254014][ T38] #0: ffff88803b43c4b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 1417.254066][ T38] #1: ffff8880372fc510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 1417.254116][ T38] #2: ffff8880372f8bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 1417.254161][ T38] locks held by syz.8.2425/15048: 3, on CPU#1: [ 1417.254174][ T38] #0: ffff888040ad5eb8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 1417.254219][ T38] #1: ffff8880372fc510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 1417.254267][ T38] #2: ffff8880372f8bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 1417.254313][ T38] [ 1417.254318][ T38] ============================================= [ 1417.254318][ T38] [ 1417.254328][ T38] NMI backtrace for cpu 1 [ 1417.254346][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1417.254371][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1417.254380][ T38] Call Trace: [ 1417.254388][ T38] [ 1417.254395][ T38] dump_stack_lvl+0xe8/0x150 [ 1417.254421][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1417.254446][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1417.254467][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1417.254494][ T38] sys_info+0x135/0x170 [ 1417.254515][ T38] watchdog+0xfd7/0x1030 [ 1417.254545][ T38] ? watchdog+0x1c7/0x1030 [ 1417.254574][ T38] kthread+0x38b/0x470 [ 1417.254593][ T38] ? __pfx_watchdog+0x10/0x10 [ 1417.254613][ T38] ? __pfx_kthread+0x10/0x10 [ 1417.254633][ T38] ret_from_fork+0x514/0xb70 [ 1417.254654][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.254673][ T38] ? __switch_to+0xc89/0x1420 [ 1417.254699][ T38] ? __pfx_kthread+0x10/0x10 [ 1417.254720][ T38] ret_from_fork_asm+0x1a/0x30 [ 1417.254752][ T38] [ 1417.254759][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1417.254790][ C0] NMI backtrace for cpu 0 [ 1417.254804][ C0] CPU: 0 UID: 0 PID: 4961 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1417.254822][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1417.254830][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x18/0x40 [ 1417.254850][ C0] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 1b b1 59 04 00 74 1d 83 3d 2a c1 59 04 00 74 14 <65> 48 8b 0d 68 44 4d 07 31 c0 83 b9 0c 0c 00 00 00 0f 94 c0 c3 cc [ 1417.254863][ C0] RSP: 0018:ffffc9000156f9b0 EFLAGS: 00000002 [ 1417.254877][ C0] RAX: 0000000000000000 RBX: ffffffff93504778 RCX: ffff888035b45dc0 [ 1417.254888][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880890bab20 [ 1417.254898][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 1417.254907][ C0] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: ffff8880890bab20 [ 1417.254919][ C0] R13: 0000000000000001 R14: ffff8880890bab20 R15: ffffffff99aefa20 [ 1417.254930][ C0] FS: 00007fa86997a880(0000) GS:ffff888125bc4000(0000) knlGS:0000000000000000 [ 1417.254943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1417.254954][ C0] CR2: 00005572e29c9168 CR3: 000000003824c000 CR4: 00000000003526f0 [ 1417.254969][ C0] Call Trace: [ 1417.254975][ C0] [ 1417.254981][ C0] look_up_lock_class+0x57/0x110 [ 1417.254997][ C0] register_lock_class+0x31/0x2e0 [ 1417.255018][ C0] __lock_acquire+0x10c/0x2de0 [ 1417.255046][ C0] lock_acquire+0x115/0x350 [ 1417.255064][ C0] ? rt_spin_lock+0x157/0x400 [ 1417.255086][ C0] ? rcu_is_watching+0x16/0xb0 [ 1417.255109][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1417.255125][ C0] ? rt_spin_lock+0x157/0x400 [ 1417.255143][ C0] rt_spin_lock+0x157/0x400 [ 1417.255162][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 1417.255184][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1417.255207][ C0] __d_add+0x35/0x960 [ 1417.255226][ C0] ? rt_spin_unlock+0x165/0x200 [ 1417.255246][ C0] d_splice_alias_ops+0x11c/0x440 [ 1417.255266][ C0] ? d_splice_alias+0x12/0x30 [ 1417.255285][ C0] lookup_one_qstr_excl+0x12d/0x360 [ 1417.255305][ C0] filename_unlinkat+0x2c0/0x610 [ 1417.255328][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 1417.255351][ C0] ? do_getname+0x151/0x250 [ 1417.255366][ C0] __se_sys_unlink+0x2e/0x140 [ 1417.255388][ C0] do_syscall_64+0x166/0x520 [ 1417.255403][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.255418][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1417.255434][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.255449][ C0] RIP: 0033:0x7fa869ad6937 [ 1417.255462][ C0] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1417.255474][ C0] RSP: 002b:00007ffef8009748 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1417.255490][ C0] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007fa869ad6937 [ 1417.255501][ C0] RDX: 0000000000000000 RSI: 000000005475b440 RDI: 0000562b133f702e [ 1417.255511][ C0] RBP: 0000000000000000 R08: 00000000547689b5 R09: 3fffffffffffffff [ 1417.255522][ C0] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1417.255532][ C0] R13: 0000562b13412100 R14: 0000000000000001 R15: 0000000000000000 [ 1417.255555][ C0] [ 1417.255797][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1418.507466][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1418.517096][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1418.527150][ T38] Call Trace: [ 1418.530429][ T38] [ 1418.533366][ T38] vpanic+0x56d/0xa60 [ 1418.537352][ T38] ? __pfx_vpanic+0x10/0x10 [ 1418.541854][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 1418.547413][ T38] panic+0xc5/0xd0 [ 1418.551155][ T38] ? __pfx_panic+0x10/0x10 [ 1418.555576][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 1418.560607][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1418.566774][ T38] watchdog+0x1030/0x1030 [ 1418.571132][ T38] ? watchdog+0x1c7/0x1030 [ 1418.575557][ T38] kthread+0x38b/0x470 [ 1418.579629][ T38] ? __pfx_watchdog+0x10/0x10 [ 1418.584307][ T38] ? __pfx_kthread+0x10/0x10 [ 1418.588905][ T38] ret_from_fork+0x514/0xb70 [ 1418.593500][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1418.598609][ T38] ? __switch_to+0xc89/0x1420 [ 1418.603293][ T38] ? __pfx_kthread+0x10/0x10 [ 1418.607885][ T38] ret_from_fork_asm+0x1a/0x30 [ 1418.612662][ T38] [ 1418.615932][ T38] Kernel Offset: disabled [ 1418.620246][ T38] Rebooting in 86400 seconds..