last executing test programs: 19m58.351504736s ago: executing program 32 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x11, 0xa, 0x5) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) 17m49.845573146s ago: executing program 33 (id=670): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fsopen(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xffffffff, 0x2000006, 0x20030, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x5422, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0), r4) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff10604b4e8573d7dc7b6cc88387322fa38d4a8664fdff1166ea0b1c35d84913e145199f8e84d03d32"], 0x8, 0x800) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000100)=0x24, 0x4) 15m58.623839892s ago: executing program 34 (id=793): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$key(r0, 0x0, 0x800) 15m51.522480746s ago: executing program 35 (id=803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x1100000000000000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r6, &(0x7f0000005f80), 0x0, 0x8040) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x2, 0x33565348, 0x5, 0x0, [{0x4, 0x7}, {0x80000001, 0xffffffff}, {0xfffffff7, 0x5}, {0x6, 0x4}, {0x10, 0x7}, {0xe2, 0xaa6}, {0xfffffffb, 0x8}, {0xffffffff, 0x400}], 0xe9, 0x3, 0x3, 0x0, 0x6}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x200480d0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1b6) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000300)='val\x00', 0x3, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000400), 0x100) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400), 0x100) fgetxattr(r8, &(0x7f0000000200)=@known='user.syz\x00', &(0x7f0000000400), 0x100) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x1c, r1, 0x515, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 14m14.111247376s ago: executing program 36 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) 13m53.591755806s ago: executing program 2 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) 13m51.355943007s ago: executing program 2 (id=873): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x22380, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 13m42.159945543s ago: executing program 2 (id=879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) 13m41.709153626s ago: executing program 2 (id=880): ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13m40.632796087s ago: executing program 2 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001680)) r5 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) 13m38.864575582s ago: executing program 2 (id=882): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendfile(r0, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) 13m22.980506726s ago: executing program 37 (id=882): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendfile(r0, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) 12m26.044358023s ago: executing program 6 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300)) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil) 12m24.858157117s ago: executing program 6 (id=927): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 12m19.075606149s ago: executing program 6 (id=933): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 12m18.017067847s ago: executing program 6 (id=929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) 12m16.957241516s ago: executing program 6 (id=931): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0xc000, 0x1) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 12m9.26940119s ago: executing program 6 (id=934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcc, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) 11m51.937779423s ago: executing program 38 (id=934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcc, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) 8m52.616186456s ago: executing program 9 (id=891): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') mlockall(0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x80288100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r4, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 8m48.115305921s ago: executing program 9 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102376, 0x18fe8) getpid() syz_open_procfs(0x0, &(0x7f000001a280)='maps\x00') r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72d, 0x40, 0x8, 0x390}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x90, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r10, r9, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x5, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x2, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x1f, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000003, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, 0x0, 0x0, 0x0) timer_create(0x8, 0x0, 0x0) 8m32.899629623s ago: executing program 39 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102376, 0x18fe8) getpid() syz_open_procfs(0x0, &(0x7f000001a280)='maps\x00') r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72d, 0x40, 0x8, 0x390}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x90, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r10, r9, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x5, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x2, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x1f, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000003, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, 0x0, 0x0, 0x0) timer_create(0x8, 0x0, 0x0) 8m15.817532351s ago: executing program 7 (id=1100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x42fa4cdb, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x8, 0x40], [0x10000007, 0x401, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0xb77f, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x20005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x5, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x10, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x40009, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xfffffffb, 0x5, 0xfffffffb, 0x8, 0x30b1d695, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac0, 0xb1e, 0xd7, 0x9, 0xffff3441, 0x8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8m13.875277753s ago: executing program 7 (id=1102): syz_emit_vhci(0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000add000/0x3000)=nil, 0x3000, 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @dev={0xfe, 0x80, '\x00', 0x24}, 0x12}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 8m7.06424637s ago: executing program 7 (id=1114): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000e00)=@vmx={0x4, 0x0, 0x2080, {0x6000, 0x200000, {0x3}, 0x0, 0xea}, {"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", "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"}}) write(r2, &(0x7f0000000180)="3e0000000b000141000000000000000000", 0x11) 8m2.550957258s ago: executing program 7 (id=1121): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0x10d615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 8m1.483123835s ago: executing program 7 (id=1122): syz_emit_vhci(0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000add000/0x3000)=nil, 0x3000, 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @dev={0xfe, 0x80, '\x00', 0x24}, 0x12}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 7m58.49313099s ago: executing program 7 (id=1123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 7m42.81217875s ago: executing program 40 (id=1123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 7m2.467718258s ago: executing program 1 (id=1164): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x100c010, &(0x7f0000000500)) 6m54.349381643s ago: executing program 1 (id=1170): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 6m52.596332395s ago: executing program 1 (id=1171): syz_emit_vhci(0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2a, 0x0) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000add000/0x3000)=nil, 0x3000, 0x2) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @dev={0xfe, 0x80, '\x00', 0x24}, 0x12}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 6m49.776386014s ago: executing program 1 (id=1173): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e20c108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35300900000045c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15b6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337edca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253a04dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e2b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef54035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0xfffffffffffffffe, 0x3, 0x0, '\x00', {0x7ff, 0x10000000, 0xadb, 0x10, r2, 0xffffffffffffffff, 0x8000, '\x00', 0x6, 0x7, 0x80002, 0x3, {0x1, 0x80006}, {0x4000000000006, 0x45}, {0x1fffffe, 0x9}, {0x9, 0xa00}, 0x2, 0x7, 0xfff, 0xf}}}}) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x386f, 0x2810901, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07}}, 0x50) 6m48.083675943s ago: executing program 1 (id=1174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x42fa4cdb, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x8, 0x40], [0x10000007, 0x401, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0xb77f, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x20005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x5, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x10, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x40009, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xfffffffb, 0x5, 0xfffffffb, 0x8, 0x30b1d695, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac0, 0xb1e, 0xd7, 0x9, 0xffff3441, 0x8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m46.21709125s ago: executing program 1 (id=1175): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300400000fbdbdf250c00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) 6m30.511503705s ago: executing program 41 (id=1175): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030300400000fbdbdf250c00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) 3m1.057348808s ago: executing program 3 (id=1360): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100), 0x0) 2m58.428895117s ago: executing program 3 (id=1362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x15) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4005, @local, 'batadv0\x00'}}, 0x1e) 2m56.976406805s ago: executing program 3 (id=1364): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m53.981155951s ago: executing program 3 (id=1367): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, 0x0) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x1, 0x7, 0x2, 0x3effffff, 0x0}) 2m51.826998369s ago: executing program 3 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(r3, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 2m49.933342081s ago: executing program 3 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYBLOB="00000000000000007608000000c00000180000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) listen(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1}, 0x40002000) 2m33.840299879s ago: executing program 42 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYBLOB="00000000000000007608000000c00000180000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) listen(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1}, 0x40002000) 33.257431377s ago: executing program 0 (id=1485): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c082, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000000c0), 0x75, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, 0x0, 0xfffffffffffffe62, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl(r4, 0x3b90, 0x0) 29.108429429s ago: executing program 0 (id=1494): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d06, &(0x7f0000000100)=0x30) 23.801427625s ago: executing program 0 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(r3, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) 23.731633761s ago: executing program 8 (id=1498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001800)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 22.030957112s ago: executing program 0 (id=1499): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0xc000, 0x1) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 18.60180834s ago: executing program 5 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) r3 = socket(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x3, @mcast2, 0x4}, 0x1c) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000c4c000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r4, r5, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000140)={0x0, 0x9f21, 0x20, 0x3, 0x2ac, 0x0, r5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) pipe2$9p(&(0x7f00000001c0), 0x0) io_uring_enter(r6, 0x2215, 0xcf74, 0x16, 0x0, 0x0) 17.435014178s ago: executing program 5 (id=1504): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x6, 0x7fffffff, 0x0, 'queue0\x00', 0x8000000}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x306575}, 0x0, {0x3}}) 16.877034056s ago: executing program 5 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(r3, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) 13.909924546s ago: executing program 5 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(r3, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 11.125720508s ago: executing program 0 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(r3, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) 10.83135842s ago: executing program 8 (id=1508): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x22000) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a', @ANYRESOCT=r0], 0x0) 10.094987417s ago: executing program 4 (id=1509): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-1', 0x19, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, 0x0, 0x0, 0x1e8000) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0x1e800c) pwrite64(r0, 0x0, 0x0, 0x1e8030) pwrite64(r0, &(0x7f0000000100), 0x0, 0x1e8123) pwrite64(r0, 0x0, 0x0, 0x1e812b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 9.383572428s ago: executing program 4 (id=1510): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)="00000000000000000000000000000000020000006c61706230") 8.960988168s ago: executing program 4 (id=1511): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c082, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000180), &(0x7f00000000c0), 0x75, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, 0x0, 0xfffffffffffffe62, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl(r4, 0x3b90, 0x0) 7.30060121s ago: executing program 5 (id=1512): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x5b95b610, 0x701c83) ioctl$MEMREAD(r4, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x2, 0x4, 0x4bb}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.834879779s ago: executing program 8 (id=1513): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x6, 0x7fffffff, 0x0, 'queue0\x00', 0x8000000}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x306575}, 0x0, {0x3}}) 6.376343017s ago: executing program 8 (id=1514): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000ac0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.26664332s ago: executing program 4 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) 4.896781141s ago: executing program 4 (id=1516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x15) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4005, @local, 'batadv0\x00'}}, 0x1e) 2.862858183s ago: executing program 0 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102376, 0x18fe8) r3 = getpid() r4 = syz_open_procfs(0x0, &(0x7f000001a280)='maps\x00') r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72d, 0x40, 0x8, 0x390}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x90, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r11, r10, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x5, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x40000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x2, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x1f, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) pread64(r4, 0x0, 0x0, 0x80000000000000) syz_pidfd_open(r3, 0x0) gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x400000003, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) unshare(0x2c020400) 2.663981505s ago: executing program 8 (id=1518): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 1.558812359s ago: executing program 5 (id=1519): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) syz_open_dev$vcsa(&(0x7f0000000380), 0x5b95b610, 0x701c83) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.374986468s ago: executing program 8 (id=1520): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100), 0x0) 0s ago: executing program 4 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(r3, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) kernel console output (not intermixed with test programs): [T12067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1266.680306][T12067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.728972][T12067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.846148][T12183] syz.0.1228 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1270.856032][T12183] CPU: 1 PID: 12183 Comm: syz.0.1228 Not tainted syzkaller #0 [ 1270.863520][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1270.873582][T12183] Call Trace: [ 1270.876868][T12183] [ 1270.879809][T12183] dump_stack_lvl+0x18c/0x250 [ 1270.884507][T12183] ? show_regs_print_info+0x20/0x20 [ 1270.889785][T12183] ? load_image+0x420/0x420 [ 1270.894304][T12183] ? ___ratelimit+0x478/0x610 [ 1270.899003][T12183] ? radix_tree_cpu_dead+0x160/0x160 [ 1270.904312][T12183] dump_header+0xd8/0x820 [ 1270.908678][T12183] oom_kill_process+0x390/0x580 [ 1270.913548][T12183] out_of_memory+0xe0e/0x1200 [ 1270.918241][T12183] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1270.923894][T12183] ? print_unlock_imbalance_bug+0x160/0x160 [ 1270.929816][T12183] ? mutex_lock_nested+0x20/0x20 [ 1270.934768][T12183] ? unregister_oom_notifier+0x20/0x20 [ 1270.940250][T12183] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1270.945810][T12183] ? try_charge_memcg+0xc91/0x17c0 [ 1270.950934][T12183] ? drain_local_stock+0x630/0x630 [ 1270.956076][T12183] ? do_raw_spin_unlock+0x121/0x230 [ 1270.961305][T12183] try_charge_memcg+0xca1/0x17c0 [ 1270.966263][T12183] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1270.972097][T12183] ? folio_flags+0x120/0x120 [ 1270.976697][T12183] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1270.981851][T12183] ? percpu_ref_tryget+0x15/0x180 [ 1270.986896][T12183] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1270.992376][T12183] charge_memcg+0x11b/0x3b0 [ 1270.996923][T12183] ? __mem_cgroup_charge+0x80/0x80 [ 1271.002081][T12183] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1271.007567][T12183] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1271.013063][T12183] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1271.018638][T12183] __mem_cgroup_charge+0x25/0x80 [ 1271.023592][T12183] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1271.029154][T12183] ? xas_load+0x12b/0x140 [ 1271.033509][T12183] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1271.038649][T12183] shmem_get_folio_gfp+0x1037/0x2b40 [ 1271.043977][T12183] shmem_fault+0x1b8/0x820 [ 1271.048417][T12183] ? zero_pipe_buf_get+0x10/0x10 [ 1271.053375][T12183] ? handle_mm_fault+0xe6/0x4a50 [ 1271.058327][T12183] ? __lock_acquire+0x7d80/0x7d80 [ 1271.063371][T12183] __do_fault+0x13b/0x4d0 [ 1271.067725][T12183] ? handle_mm_fault+0x3929/0x4a50 [ 1271.072846][T12183] ? handle_mm_fault+0xe6/0x4a50 [ 1271.077792][T12183] handle_mm_fault+0x3945/0x4a50 [ 1271.082758][T12183] ? handle_mm_fault+0xe6/0x4a50 [ 1271.087738][T12183] ? numa_migrate_prep+0x350/0x350 [ 1271.092863][T12183] ? follow_page_pte+0x6d0/0x1ae0 [ 1271.097915][T12183] ? pmd_lock+0x60/0x60 [ 1271.102110][T12183] __get_user_pages+0x604/0x1580 [ 1271.107075][T12183] ? file_update_time+0x98/0x1a0 [ 1271.112032][T12183] ? populate_vma_page_range+0x380/0x380 [ 1271.117688][T12183] ? get_dump_page+0xb6/0x200 [ 1271.122396][T12183] ? down_read_killable+0x1d0/0x340 [ 1271.127626][T12183] get_dump_page+0x10c/0x200 [ 1271.132251][T12183] ? fault_in_readable+0x150/0x150 [ 1271.137389][T12183] ? __asan_memset+0x22/0x40 [ 1271.142002][T12183] ? iov_iter_bvec+0xd4/0x1b0 [ 1271.146703][T12183] dump_user_range+0x127/0x840 [ 1271.151510][T12183] ? dump_skip+0x40/0x40 [ 1271.155760][T12183] ? dump_emit+0x78/0xe0 [ 1271.160032][T12183] ? dump_emit+0xa6/0xe0 [ 1271.164288][T12183] ? elf_core_dump+0x2dbb/0x37c0 [ 1271.169244][T12183] elf_core_dump+0x320e/0x37c0 [ 1271.174051][T12183] ? load_elf_binary+0x2850/0x2850 [ 1271.179186][T12183] ? verify_lock_unused+0x140/0x140 [ 1271.184397][T12183] ? __lock_acquire+0x7d80/0x7d80 [ 1271.189433][T12183] ? mas_next_slot+0x94c/0x980 [ 1271.194242][T12183] ? rcu_read_lock_any_held+0xb4/0x140 [ 1271.199712][T12183] ? 0xffffffffff600000 [ 1271.203899][T12183] do_coredump+0x1791/0x24a0 [ 1271.208519][T12183] ? nfs_stat_to_errno+0x170/0x170 [ 1271.213653][T12183] ? lock_chain_count+0x20/0x20 [ 1271.218526][T12183] ? _raw_spin_unlock_irq+0x23/0x50 [ 1271.223744][T12183] ? lockdep_hardirqs_on+0x98/0x150 [ 1271.228956][T12183] get_signal+0x10da/0x1390 [ 1271.233487][T12183] arch_do_signal_or_restart+0xc2/0x7b0 [ 1271.239056][T12183] ? get_sigframe_size+0x20/0x20 [ 1271.244014][T12183] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1271.250016][T12183] ? exit_to_user_mode_loop+0x3b/0x110 [ 1271.255493][T12183] exit_to_user_mode_loop+0x70/0x110 [ 1271.260808][T12183] exit_to_user_mode_prepare+0xee/0x180 [ 1271.266393][T12183] irqentry_exit_to_user_mode+0x9/0x30 [ 1271.271864][T12183] exc_page_fault+0x8c/0x100 [ 1271.276466][T12183] asm_exc_page_fault+0x26/0x30 [ 1271.281349][T12183] RIP: 0033:0x7f81f139e161 [ 1271.285801][T12183] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1271.305418][T12183] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1271.311505][T12183] RAX: 0000000000000000 RBX: 00007f81f1626090 RCX: 00007f81f139e159 [ 1271.319504][T12183] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1271.327485][T12183] RBP: 00007f81f143506b R08: 0000000000000000 R09: 0000000000000000 [ 1271.335467][T12183] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1271.343450][T12183] R13: 00007f81f1626128 R14: 00007f81f1626090 R15: 00007ffe2ddbac18 [ 1271.351472][T12183] [ 1271.355223][T12183] memory: usage 307200kB, limit 307200kB, failcnt 83834 [ 1271.362199][T12183] memory+swap: usage 411384kB, limit 9007199254740988kB, failcnt 0 [ 1271.370091][T12183] kmem: usage 2164kB, limit 9007199254740988kB, failcnt 0 [ 1271.377249][T12183] Memory cgroup stats for /syz0: [ 1271.377367][T12183] cache 312016896 [ 1271.385998][T12183] rss 221184 [ 1271.389206][T12183] rss_huge 0 [ 1271.392444][T12183] shmem 312008704 [ 1271.396094][T12183] mapped_file 198279168 [ 1271.400264][T12183] dirty 8192 [ 1271.403490][T12183] writeback 0 [ 1271.406792][T12183] workingset_refault_anon 15 [ 1271.411428][T12183] workingset_refault_file 4571 [ 1271.416193][T12183] swap 106684416 [ 1271.419741][T12183] pgpgin 1413588 [ 1271.423867][T12183] pgpgout 1337356 [ 1271.427505][T12183] pgfault 510040 [ 1271.431074][T12183] pgmajfault 72 [ 1271.434534][T12183] inactive_anon 52322304 [ 1271.438781][T12183] active_anon 259915776 [ 1271.442966][T12183] inactive_file 8192 [ 1271.446865][T12183] active_file 0 [ 1271.450328][T12183] unevictable 0 [ 1271.453870][T12183] hierarchical_memory_limit 314572800 [ 1271.459261][T12183] hierarchical_memsw_limit 9223372036854771712 [ 1271.465466][T12183] total_cache 312016896 [ 1271.469620][T12183] total_rss 221184 [ 1271.473381][T12183] total_rss_huge 0 [ 1271.477115][T12183] total_shmem 312008704 [ 1271.481285][T12183] total_mapped_file 198279168 [ 1271.485954][T12183] total_dirty 8192 [ 1271.489712][T12183] total_writeback 0 [ 1271.493573][T12183] total_workingset_refault_anon 15 [ 1271.498687][T12183] total_workingset_refault_file 4571 [ 1271.503997][T12183] total_swap 106684416 [ 1271.508071][T12183] total_pgpgin 1413588 [ 1271.512170][T12183] total_pgpgout 1337356 [ 1271.516326][T12183] total_pgfault 510040 [ 1271.520399][T12183] total_pgmajfault 72 [ 1271.524973][T12183] total_inactive_anon 52322304 [ 1271.529760][T12183] total_active_anon 259915776 [ 1271.534491][T12183] total_inactive_file 8192 [ 1271.538911][T12183] total_active_file 0 [ 1271.542917][T12183] total_unevictable 0 [ 1271.546905][T12183] anon_cost 0 [ 1271.550194][T12183] file_cost 0 [ 1271.553504][T12183] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1228,pid=12183,uid=0 [ 1271.568659][T12183] Memory cgroup out of memory: Killed process 12183 (syz.0.1228) total-vm:200684kB, anon-rss:672kB, file-rss:20480kB, shmem-rss:109824kB, UID:0 pgtables:328kB oom_score_adj:1000 [ 1272.709331][T12090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.961030][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.030914][T12090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.202220][T12090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.209246][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.324503][T12090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.657393][ T28] audit: type=1800 audit(1790567057.383:1758): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302046 res=0 errno=0 [ 1273.928476][ T28] audit: type=1800 audit(1790567057.383:1759): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=302051 res=0 errno=0 [ 1273.975385][ T28] audit: type=1800 audit(1790567057.383:1760): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=302055 res=0 errno=0 [ 1274.100983][ T28] audit: type=1800 audit(1790567057.443:1761): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=302054 res=0 errno=0 [ 1274.170524][T12090] hsr_slave_0: entered promiscuous mode [ 1274.258352][ T28] audit: type=1800 audit(1790567057.463:1762): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=302057 res=0 errno=0 [ 1274.362804][ T28] audit: type=1800 audit(1790567057.783:1763): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302522 res=0 errno=0 [ 1274.383400][ T28] audit: type=1800 audit(1790567057.783:1764): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=302527 res=0 errno=0 [ 1274.385089][T12090] hsr_slave_1: entered promiscuous mode [ 1274.441081][ T28] audit: type=1800 audit(1790567057.783:1765): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=302531 res=0 errno=0 [ 1274.509427][ T28] audit: type=1800 audit(1790567057.783:1766): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=302530 res=0 errno=0 [ 1274.535692][T12090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.554421][T12090] Cannot create hsr debugfs directory [ 1274.600814][ T28] audit: type=1800 audit(1790567057.783:1767): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=302533 res=0 errno=0 [ 1274.848433][T12067] hsr_slave_0: entered promiscuous mode [ 1274.899455][T12067] hsr_slave_1: entered promiscuous mode [ 1274.939402][T12067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.951908][T12067] Cannot create hsr debugfs directory [ 1283.030867][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1283.030889][ T28] audit: type=1800 audit(1790567066.733:1801): pid=12090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=23938 res=0 errno=0 [ 1283.127043][ T28] audit: type=1800 audit(1790567066.773:1802): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307109 res=0 errno=0 [ 1283.717549][ T28] audit: type=1800 audit(1790567067.443:1803): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307461 res=0 errno=0 [ 1283.733219][T12067] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1283.896045][T11732] hsr_slave_0: left promiscuous mode [ 1283.926254][T11732] hsr_slave_1: left promiscuous mode [ 1283.970552][T11732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.053206][T11732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.083867][T11732] bridge_slave_1: left allmulticast mode [ 1284.089599][T11732] bridge_slave_1: left promiscuous mode [ 1284.143734][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.311732][T11732] bridge_slave_0: left allmulticast mode [ 1284.317432][T11732] bridge_slave_0: left promiscuous mode [ 1284.324545][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.816107][T12271] syz.0.1238 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1286.826057][T12271] CPU: 0 PID: 12271 Comm: syz.0.1238 Not tainted syzkaller #0 [ 1286.833558][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.843662][T12271] Call Trace: [ 1286.846955][T12271] [ 1286.849897][T12271] dump_stack_lvl+0x18c/0x250 [ 1286.854606][T12271] ? show_regs_print_info+0x20/0x20 [ 1286.859824][T12271] ? load_image+0x420/0x420 [ 1286.864340][T12271] ? ___ratelimit+0x478/0x610 [ 1286.869042][T12271] ? radix_tree_cpu_dead+0x160/0x160 [ 1286.874355][T12271] dump_header+0xd8/0x820 [ 1286.878716][T12271] oom_kill_process+0x390/0x580 [ 1286.883609][T12271] out_of_memory+0xe0e/0x1200 [ 1286.888341][T12271] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1286.893993][T12271] ? print_unlock_imbalance_bug+0x160/0x160 [ 1286.899920][T12271] ? mutex_lock_nested+0x20/0x20 [ 1286.904889][T12271] ? unregister_oom_notifier+0x20/0x20 [ 1286.910384][T12271] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1286.915979][T12271] ? try_charge_memcg+0xc91/0x17c0 [ 1286.921115][T12271] ? drain_local_stock+0x630/0x630 [ 1286.926252][T12271] ? do_raw_spin_unlock+0x121/0x230 [ 1286.931483][T12271] try_charge_memcg+0xca1/0x17c0 [ 1286.936450][T12271] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 1286.942294][T12271] ? folio_flags+0x120/0x120 [ 1286.946904][T12271] ? shmem_alloc_folio+0x1f4/0x2a0 [ 1286.952041][T12271] ? percpu_ref_tryget+0x15/0x180 [ 1286.957086][T12271] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1286.962566][T12271] charge_memcg+0x11b/0x3b0 [ 1286.967085][T12271] ? __mem_cgroup_charge+0x80/0x80 [ 1286.972213][T12271] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1286.977690][T12271] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1286.983178][T12271] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1286.988769][T12271] __mem_cgroup_charge+0x25/0x80 [ 1286.993743][T12271] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1286.999320][T12271] ? xas_load+0x12b/0x140 [ 1287.003709][T12271] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1287.008858][T12271] shmem_get_folio_gfp+0x1037/0x2b40 [ 1287.014197][T12271] shmem_fault+0x1b8/0x820 [ 1287.018647][T12271] ? zero_pipe_buf_get+0x10/0x10 [ 1287.023608][T12271] ? handle_mm_fault+0xe6/0x4a50 [ 1287.028557][T12271] ? __lock_acquire+0x7d80/0x7d80 [ 1287.033600][T12271] __do_fault+0x13b/0x4d0 [ 1287.037940][T12271] ? handle_mm_fault+0x3929/0x4a50 [ 1287.043068][T12271] ? handle_mm_fault+0xe6/0x4a50 [ 1287.048022][T12271] handle_mm_fault+0x3945/0x4a50 [ 1287.052988][T12271] ? handle_mm_fault+0xe6/0x4a50 [ 1287.057948][T12271] ? numa_migrate_prep+0x350/0x350 [ 1287.063072][T12271] ? follow_page_pte+0x6d0/0x1ae0 [ 1287.068120][T12271] ? pmd_lock+0x60/0x60 [ 1287.072301][T12271] __get_user_pages+0x604/0x1580 [ 1287.077288][T12271] ? file_update_time+0x98/0x1a0 [ 1287.082248][T12271] ? populate_vma_page_range+0x380/0x380 [ 1287.087913][T12271] ? get_dump_page+0xb6/0x200 [ 1287.092635][T12271] ? down_read_killable+0x1d0/0x340 [ 1287.097846][T12271] get_dump_page+0x10c/0x200 [ 1287.102472][T12271] ? fault_in_readable+0x150/0x150 [ 1287.107601][T12271] ? __asan_memset+0x22/0x40 [ 1287.112210][T12271] ? iov_iter_bvec+0xd4/0x1b0 [ 1287.116909][T12271] dump_user_range+0x127/0x840 [ 1287.121700][T12271] ? dump_skip+0x40/0x40 [ 1287.125965][T12271] ? dump_emit+0x78/0xe0 [ 1287.130231][T12271] ? dump_emit+0xa6/0xe0 [ 1287.134483][T12271] ? elf_core_dump+0x2dbb/0x37c0 [ 1287.139443][T12271] elf_core_dump+0x320e/0x37c0 [ 1287.144243][T12271] ? load_elf_binary+0x2850/0x2850 [ 1287.149418][T12271] ? verify_lock_unused+0x140/0x140 [ 1287.154666][T12271] ? __lock_acquire+0x7d80/0x7d80 [ 1287.159769][T12271] ? mas_next_slot+0x94c/0x980 [ 1287.164599][T12271] ? rcu_read_lock_any_held+0xb4/0x140 [ 1287.170079][T12271] ? 0xffffffffff600000 [ 1287.174283][T12271] do_coredump+0x1791/0x24a0 [ 1287.178907][T12271] ? nfs_stat_to_errno+0x170/0x170 [ 1287.184050][T12271] ? lock_chain_count+0x20/0x20 [ 1287.188921][T12271] ? _raw_spin_unlock_irq+0x23/0x50 [ 1287.194142][T12271] ? lockdep_hardirqs_on+0x98/0x150 [ 1287.199386][T12271] get_signal+0x10da/0x1390 [ 1287.203927][T12271] arch_do_signal_or_restart+0xc2/0x7b0 [ 1287.209496][T12271] ? get_sigframe_size+0x20/0x20 [ 1287.214459][T12271] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1287.220493][T12271] ? exit_to_user_mode_loop+0x3b/0x110 [ 1287.225970][T12271] exit_to_user_mode_loop+0x70/0x110 [ 1287.231294][T12271] exit_to_user_mode_prepare+0xee/0x180 [ 1287.236881][T12271] irqentry_exit_to_user_mode+0x9/0x30 [ 1287.242383][T12271] exc_page_fault+0x8c/0x100 [ 1287.246989][T12271] asm_exc_page_fault+0x26/0x30 [ 1287.251861][T12271] RIP: 0033:0x7f81f139e161 [ 1287.256285][T12271] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1287.275933][T12271] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1287.282013][T12271] RAX: 0000000000000000 RBX: 00007f81f1625fa0 RCX: 00007f81f139e159 [ 1287.290000][T12271] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1287.298008][T12271] RBP: 00007f81f143506b R08: 0000000000000000 R09: 0000000000000000 [ 1287.306000][T12271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1287.313992][T12271] R13: 00007f81f1626038 R14: 00007f81f1625fa0 R15: 00007ffe2ddbac18 [ 1287.321994][T12271] [ 1287.325838][T12271] memory: usage 307200kB, limit 307200kB, failcnt 87972 [ 1287.332849][T12271] memory+swap: usage 411504kB, limit 9007199254740988kB, failcnt 0 [ 1287.340831][T12271] kmem: usage 2404kB, limit 9007199254740988kB, failcnt 0 [ 1287.347968][T12271] Memory cgroup stats for /syz0: [ 1287.348074][T12271] cache 311746560 [ 1287.356692][T12271] rss 233472 [ 1287.359896][T12271] rss_huge 0 [ 1287.363141][T12271] shmem 311738368 [ 1287.366782][T12271] mapped_file 200478720 [ 1287.371004][T12271] dirty 8192 [ 1287.374232][T12271] writeback 0 [ 1287.377538][T12271] workingset_refault_anon 15 [ 1287.382227][T12271] workingset_refault_file 4571 [ 1287.387018][T12271] swap 106807296 [ 1287.390582][T12271] pgpgin 1485140 [ 1287.394186][T12271] pgpgout 1408972 [ 1287.398245][T12271] pgfault 540464 [ 1287.401851][T12271] pgmajfault 72 [ 1287.405322][T12271] inactive_anon 125952000 [ 1287.409661][T12271] active_anon 186019840 [ 1287.413854][T12271] inactive_file 8192 [ 1287.417756][T12271] active_file 0 [ 1287.421272][T12271] unevictable 0 [ 1287.424741][T12271] hierarchical_memory_limit 314572800 [ 1287.430126][T12271] hierarchical_memsw_limit 9223372036854771712 [ 1287.436347][T12271] total_cache 311746560 [ 1287.440541][T12271] total_rss 233472 [ 1287.444351][T12271] total_rss_huge 0 [ 1287.448075][T12271] total_shmem 311738368 [ 1287.452270][T12271] total_mapped_file 200478720 [ 1287.456975][T12271] total_dirty 8192 [ 1287.460818][T12271] total_writeback 0 [ 1287.464642][T12271] total_workingset_refault_anon 15 [ 1287.469774][T12271] total_workingset_refault_file 4571 [ 1287.475088][T12271] total_swap 106807296 [ 1287.479161][T12271] total_pgpgin 1485140 [ 1287.483291][T12271] total_pgpgout 1408972 [ 1287.487461][T12271] total_pgfault 540464 [ 1287.491559][T12271] total_pgmajfault 72 [ 1287.495546][T12271] total_inactive_anon 125952000 [ 1287.500625][T12271] total_active_anon 186019840 [ 1287.505386][T12271] total_inactive_file 8192 [ 1287.509858][T12271] total_active_file 0 [ 1287.513913][T12271] total_unevictable 0 [ 1287.517907][T12271] anon_cost 0 [ 1287.521252][T12271] file_cost 0 [ 1287.524547][T12271] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1181,pid=11828,uid=0 [ 1287.539717][T12271] Memory cgroup out of memory: Killed process 11828 (syz.0.1181) total-vm:200684kB, anon-rss:644kB, file-rss:20480kB, shmem-rss:112896kB, UID:0 pgtables:368kB oom_score_adj:1000 [ 1289.613551][ T30] oom_reaper: reaped process 11828 (syz.0.1181), now anon-rss:104kB, file-rss:20480kB, shmem-rss:74092kB [ 1289.950983][T11732] hsr_slave_0: left promiscuous mode [ 1290.133524][T11732] hsr_slave_1: left promiscuous mode [ 1290.231082][T11732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.101332][T11732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.211534][T11732] bridge_slave_1: left allmulticast mode [ 1291.217255][T11732] bridge_slave_1: left promiscuous mode [ 1291.246795][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.411720][T11732] bridge_slave_0: left allmulticast mode [ 1291.417454][T11732] bridge_slave_0: left promiscuous mode [ 1291.423475][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.321729][T11732] team0 (unregistering): Port device team_slave_1 removed [ 1293.672780][T11732] team0 (unregistering): Port device team_slave_0 removed [ 1293.998145][T11732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1294.204473][T11732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.024187][T11732] bond0 (unregistering): Released all slaves [ 1295.140777][ T28] audit: type=1800 audit(1790567078.853:1804): pid=12298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307476 res=0 errno=0 [ 1295.161115][ T28] audit: type=1800 audit(1790567078.853:1805): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307486 res=0 errno=0 [ 1295.321387][ T28] audit: type=1800 audit(1790567079.033:1806): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4823 res=0 errno=0 [ 1295.351784][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1295.363845][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1295.373036][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1295.380914][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1295.391657][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1295.399151][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1295.501059][ T28] audit: type=1800 audit(1790567079.203:1807): pid=12298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307505 res=0 errno=0 [ 1295.529813][T12306] CIFS: Attempting to mount //127.0.0.1/share [ 1295.540434][T12306] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1295.548111][T12306] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1295.802331][ T28] audit: type=1800 audit(1790567079.533:1808): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307516 res=0 errno=0 [ 1296.848181][T12313] jffs2: notice: (12313) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1297.522434][ T5785] Bluetooth: hci1: command tx timeout [ 1299.736142][ T5785] Bluetooth: hci1: command tx timeout [ 1299.792041][T11732] team0 (unregistering): Port device team_slave_1 removed [ 1300.061857][T11732] team0 (unregistering): Port device team_slave_0 removed [ 1300.254754][T12330] FAULT_INJECTION: forcing a failure. [ 1300.254754][T12330] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1300.310901][T12330] CPU: 1 PID: 12330 Comm: syz.8.1250 Not tainted syzkaller #0 [ 1300.318448][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1300.328531][T12330] Call Trace: [ 1300.331839][T12330] [ 1300.334796][T12330] dump_stack_lvl+0x18c/0x250 [ 1300.339512][T12330] ? show_regs_print_info+0x20/0x20 [ 1300.344777][T12330] ? load_image+0x420/0x420 [ 1300.349313][T12330] ? __lock_acquire+0x7d80/0x7d80 [ 1300.354367][T12330] ? __virt_addr_valid+0x10c/0x380 [ 1300.359513][T12330] should_fail_ex+0x394/0x4c0 [ 1300.364234][T12330] _copy_from_user+0x2f/0xe0 [ 1300.368862][T12330] bpf_vlog_reverse_ubuf+0x122/0x3a0 [ 1300.374190][T12330] bpf_vlog_finalize+0x1b3/0x3e0 [ 1300.379170][T12330] btf_new_fd+0x4ca/0x9e0 [ 1300.383538][T12330] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1300.388684][T12330] ? capable+0x88/0xe0 [ 1300.392813][T12330] __sys_bpf+0x670/0x890 [ 1300.397087][T12330] ? bpf_link_show_fdinfo+0x560/0x560 [ 1300.402525][T12330] ? lock_chain_count+0x20/0x20 [ 1300.407413][T12330] __x64_sys_bpf+0x7c/0x90 [ 1300.411864][T12330] do_syscall_64+0x55/0xb0 [ 1300.416324][T12330] ? clear_bhb_loop+0x40/0x90 [ 1300.421028][T12330] ? clear_bhb_loop+0x40/0x90 [ 1300.425736][T12330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.431660][T12330] RIP: 0033:0x7f85f279e159 [ 1300.436105][T12330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.455741][T12330] RSP: 002b:00007f85f365f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1300.464183][T12330] RAX: ffffffffffffffda RBX: 00007f85f2a25fa0 RCX: 00007f85f279e159 [ 1300.472183][T12330] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 1300.480181][T12330] RBP: 00007f85f283506b R08: 0000000000000000 R09: 0000000000000000 [ 1300.488173][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.496211][T12330] R13: 00007f85f2a26038 R14: 00007f85f2a25fa0 R15: 00007ffd549e8478 [ 1300.504224][T12330] [ 1300.549702][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.561150][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.581417][T11732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.661527][T11732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.040628][T12332] CIFS: Attempting to mount //127.0.0.1/share [ 1301.078067][T12332] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1301.090869][T12332] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1301.717912][T12339] Illegal XDP return value 4294967199 on prog (id 51) dev N/A, expect packet loss! [ 1301.769640][ T5785] Bluetooth: hci1: command tx timeout [ 1303.803239][T11732] bond0 (unregistering): Released all slaves [ 1303.848908][ T5785] Bluetooth: hci1: command tx timeout [ 1305.510830][T12067] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1306.341644][T11901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1306.361007][T11901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1306.369532][T11901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1306.391023][T11901] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1306.421144][T11901] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1306.428430][ T28] audit: type=1800 audit(1790567090.153:1809): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309088 res=0 errno=0 [ 1306.448589][T11901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1306.515226][ T28] audit: type=1800 audit(1790567090.243:1810): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309106 res=0 errno=0 [ 1306.631301][ T28] audit: type=1800 audit(1790567090.283:1811): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309488 res=0 errno=0 [ 1306.710892][ T28] audit: type=1800 audit(1790567090.353:1812): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=309499 res=0 errno=0 [ 1306.853522][T12296] chnl_net:caif_netlink_parms(): no params data found [ 1308.161839][T12382] CIFS: Attempting to mount //127.0.0.1/share [ 1308.212604][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.236594][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.245128][T12382] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1308.246570][T12296] bridge_slave_0: entered allmulticast mode [ 1308.268650][T12296] bridge_slave_0: entered promiscuous mode [ 1308.271264][T12382] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1308.404107][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.441655][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.448999][T12296] bridge_slave_1: entered allmulticast mode [ 1308.492326][T12296] bridge_slave_1: entered promiscuous mode [ 1308.610936][T11901] Bluetooth: hci4: command tx timeout [ 1308.897771][ T28] audit: type=1800 audit(1790567092.623:1813): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=312354 res=0 errno=0 [ 1308.930130][T12296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.073039][T12296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.530298][T12296] team0: Port device team_slave_0 added [ 1309.563150][T12296] team0: Port device team_slave_1 added [ 1309.595849][ T28] audit: type=1800 audit(1790567093.323:1814): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=3521 res=0 errno=0 [ 1309.653836][ T28] audit: type=1800 audit(1790567093.383:1815): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=21159 res=0 errno=0 [ 1309.688846][ T28] audit: type=1800 audit(1790567093.403:1816): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=21507 res=0 errno=0 [ 1309.732513][T12296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.739530][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.761103][ T28] audit: type=1800 audit(1790567093.453:1817): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=21590 res=0 errno=0 [ 1309.821150][T12296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.875324][T12296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.901062][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.941095][T12296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.996376][T12360] chnl_net:caif_netlink_parms(): no params data found [ 1310.014644][ T28] audit: type=1800 audit(1790567093.743:1818): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=314064 res=0 errno=0 [ 1310.162424][T12296] hsr_slave_0: entered promiscuous mode [ 1310.169478][T12296] hsr_slave_1: entered promiscuous mode [ 1311.306348][T11901] Bluetooth: hci4: command tx timeout [ 1311.453902][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1311.453920][ T28] audit: type=1800 audit(1790567095.183:1827): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=23131 res=0 errno=0 [ 1311.522748][T12360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.529948][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.580989][T12360] bridge_slave_0: entered allmulticast mode [ 1311.610874][T12360] bridge_slave_0: entered promiscuous mode [ 1311.619791][T12360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.640866][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.651653][T12360] bridge_slave_1: entered allmulticast mode [ 1311.659548][T12360] bridge_slave_1: entered promiscuous mode [ 1311.750802][ T28] audit: type=1800 audit(1790567095.473:1828): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=50928 res=0 errno=0 [ 1312.189845][ T28] audit: type=1800 audit(1790567095.913:1829): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=51071 res=0 errno=0 [ 1312.627193][T12360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.644435][ T28] audit: type=1800 audit(1790567096.353:1830): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=51154 res=0 errno=0 [ 1312.693264][T12360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.739847][ T28] audit: type=1800 audit(1790567096.463:1831): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=23939 res=0 errno=0 [ 1312.838713][ T28] audit: type=1800 audit(1790567096.563:1832): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=318349 res=0 errno=0 [ 1312.884789][ T28] audit: type=1800 audit(1790567096.583:1833): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=51237 res=0 errno=0 [ 1312.933559][ T28] audit: type=1800 audit(1790567096.603:1834): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=318354 res=0 errno=0 [ 1312.991903][T12360] team0: Port device team_slave_0 added [ 1313.009921][ T28] audit: type=1800 audit(1790567096.603:1835): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=318358 res=0 errno=0 [ 1313.032049][T12360] team0: Port device team_slave_1 added [ 1313.057787][ T28] audit: type=1800 audit(1790567096.603:1836): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=318357 res=0 errno=0 [ 1313.361459][T11901] Bluetooth: hci4: command tx timeout [ 1313.492004][T12360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.509248][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.570017][T12360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.594211][T12360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.601892][T12360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.663570][T12360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.817927][T12360] hsr_slave_0: entered promiscuous mode [ 1313.832530][T12360] hsr_slave_1: entered promiscuous mode [ 1313.859564][T12360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1313.870854][T12360] Cannot create hsr debugfs directory [ 1315.884525][T11901] Bluetooth: hci4: command tx timeout [ 1317.367905][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 1317.367940][ T28] audit: type=1800 audit(1790567101.093:1872): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52648 res=0 errno=0 [ 1317.832515][ T28] audit: type=1800 audit(1790567101.563:1873): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52731 res=0 errno=0 [ 1317.914500][ T28] audit: type=1800 audit(1790567101.643:1874): pid=12360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=23939 res=0 errno=0 [ 1318.026984][T12296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1318.038593][ T28] audit: type=1800 audit(1790567101.763:1875): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52814 res=0 errno=0 [ 1318.099748][T12296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1318.147086][ T28] audit: type=1800 audit(1790567101.873:1876): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52897 res=0 errno=0 [ 1318.168001][T12296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1318.268407][ T28] audit: type=1800 audit(1790567101.993:1877): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=52980 res=0 errno=0 [ 1318.288703][T12296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1318.370952][ T28] audit: type=1800 audit(1790567102.083:1878): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53063 res=0 errno=0 [ 1318.494774][T11732] hsr_slave_0: left promiscuous mode [ 1318.545155][T11732] hsr_slave_1: left promiscuous mode [ 1318.564104][T11732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.589957][T11732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.621129][T11732] bridge_slave_1: left allmulticast mode [ 1318.631929][T11732] bridge_slave_1: left promiscuous mode [ 1318.644387][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.663075][T11732] bridge_slave_0: left allmulticast mode [ 1318.674422][T11732] bridge_slave_0: left promiscuous mode [ 1318.692226][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.755781][T11732] hsr_slave_0: left promiscuous mode [ 1318.782849][T11732] hsr_slave_1: left promiscuous mode [ 1318.791207][T11732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.821672][T11732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.852632][T11732] bridge_slave_1: left allmulticast mode [ 1318.858317][T11732] bridge_slave_1: left promiscuous mode [ 1318.881059][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.919798][T11732] bridge_slave_0: left allmulticast mode [ 1318.934201][T11732] bridge_slave_0: left promiscuous mode [ 1318.971227][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.269653][ T28] audit: type=1800 audit(1790567107.993:1879): pid=12469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=321753 res=0 errno=0 [ 1324.304381][T11732] team0 (unregistering): Port device team_slave_1 removed [ 1324.374963][T11732] team0 (unregistering): Port device team_slave_0 removed [ 1324.446693][T11732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.545928][T11732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.872339][T11732] bond0 (unregistering): Released all slaves [ 1328.651702][T11732] team0 (unregistering): Port device team_slave_1 removed [ 1328.795773][T11732] team0 (unregistering): Port device team_slave_0 removed [ 1328.897519][T11732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.024927][T11732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.419976][T11732] bond0 (unregistering): Released all slaves [ 1329.537195][ T28] audit: type=1800 audit(1790567113.263:1880): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53146 res=0 errno=0 [ 1329.600108][ T28] audit: type=1800 audit(1790567113.323:1881): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53229 res=0 errno=0 [ 1329.699163][ T28] audit: type=1800 audit(1790567113.363:1882): pid=12360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=23938 res=0 errno=0 [ 1329.813281][ T28] audit: type=1800 audit(1790567113.413:1883): pid=12486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=321772 res=0 errno=0 [ 1329.918687][ T28] audit: type=1800 audit(1790567113.533:1884): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53312 res=0 errno=0 [ 1329.992909][ T28] audit: type=1800 audit(1790567113.603:1885): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53395 res=0 errno=0 [ 1330.023572][T12360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1330.060034][T12360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1330.113456][T12360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1330.148967][ T28] audit: type=1800 audit(1790567113.713:1886): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53478 res=0 errno=0 [ 1330.169050][T12360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1330.468958][ T28] audit: type=1800 audit(1790567113.873:1887): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53561 res=0 errno=0 [ 1330.715672][T12296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.738650][ T28] audit: type=1800 audit(1790567113.933:1888): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53644 res=0 errno=0 [ 1330.946330][ T28] audit: type=1800 audit(1790567114.043:1889): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=53727 res=0 errno=0 [ 1330.983567][T12296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.135434][ T6723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.142615][ T6723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.222593][T12360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.252429][ T6723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.259698][ T6723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.194330][T12360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.258148][T11877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.265389][T11877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1332.317449][T12296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1332.349166][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.356410][T11877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.390985][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1332.568624][T12360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1332.585334][ T5816] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1332.595492][ T5816] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1332.614875][ T5816] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1332.651879][ T9953] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1332.662870][ T5816] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 1332.710258][ T5816] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1332.743343][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.781275][T12493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1332.816976][T12493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1332.847794][T12493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1332.875703][ T9953] usb 9-1: Using ep0 maxpacket: 16 [ 1332.888705][T12493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1332.929320][ T5816] mos7720 1-1:1.0: required endpoints missing [ 1332.948738][ T9953] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.998658][ T9953] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1333.050239][ T9953] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1333.078336][ T9953] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1333.105617][ T9953] usb 9-1: SerialNumber: syz [ 1333.145449][ T6844] usb 1-1: USB disconnect, device number 4 [ 1333.185719][ T9953] usb 9-1: 0:2 : does not exist [ 1333.589484][ T9953] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1333.614313][T12296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.628826][T12360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.663150][ T9953] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1333.731207][ T9953] usb 9-1: USB disconnect, device number 7 [ 1333.836544][T12508] udevd[12508]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.930954][T12360] veth0_vlan: entered promiscuous mode [ 1334.755299][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 1334.755351][ T28] audit: type=1800 audit(1790567117.683:1971): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=185159 res=0 errno=0 [ 1335.280174][T12360] veth1_vlan: entered promiscuous mode [ 1335.312086][ T28] audit: type=1800 audit(1790567119.043:1972): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=204962 res=0 errno=0 [ 1335.381501][ T28] audit: type=1800 audit(1790567119.093:1973): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=205046 res=0 errno=0 [ 1335.448844][T12360] veth0_macvtap: entered promiscuous mode [ 1335.475574][ T28] audit: type=1800 audit(1790567119.153:1974): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=205130 res=0 errno=0 [ 1335.535949][T12360] veth1_macvtap: entered promiscuous mode [ 1335.580855][ T28] audit: type=1800 audit(1790567119.233:1975): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=205214 res=0 errno=0 [ 1335.620518][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.650757][ T28] audit: type=1800 audit(1790567119.243:1976): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=221012 res=0 errno=0 [ 1335.692245][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.730778][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.742228][ T28] audit: type=1800 audit(1790567119.263:1977): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=221292 res=0 errno=0 [ 1335.766645][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.797240][T12360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.828168][ T28] audit: type=1800 audit(1790567119.283:1978): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=221376 res=0 errno=0 [ 1335.887079][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.940930][ T28] audit: type=1800 audit(1790567119.293:1979): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=221562 res=0 errno=0 [ 1335.971496][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.000770][T12360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.045841][ T28] audit: type=1800 audit(1790567119.603:1980): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=246075 res=0 errno=0 [ 1336.066281][T12360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.092439][T12360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.146427][T12360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.191068][T12360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.199861][T12360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.253870][T12360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.518932][T12296] veth0_vlan: entered promiscuous mode [ 1336.626135][T12296] veth1_vlan: entered promiscuous mode [ 1336.665406][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.697520][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.830994][ T6844] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1336.883886][ T6723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.921370][ T6723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.956968][T12296] veth0_macvtap: entered promiscuous mode [ 1336.989301][T12296] veth1_macvtap: entered promiscuous mode [ 1337.050935][ T6844] usb 9-1: Using ep0 maxpacket: 32 [ 1337.083444][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.124555][ T6844] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1337.162959][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.180847][ T6844] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1337.194270][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.206487][ T6844] usb 9-1: can't read configurations, error -71 [ 1337.250746][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.271020][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.288144][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.312951][T12296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.350257][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.390853][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.419996][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.477840][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.559222][T12536] CIFS: Attempting to mount //127.0.0.1/share [ 1337.722071][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.363370][T12536] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1338.368695][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.384229][T12296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.454789][T12296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.463669][T12296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.481309][T12296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.490085][T12296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.101613][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.787954][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.009353][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1340.009370][ T28] audit: type=1800 audit(1790567123.733:1998): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1340.113381][T11004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.127540][T11004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.380765][ T28] audit: type=1800 audit(1790567124.103:1999): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1340.507226][ T28] audit: type=1800 audit(1790567124.153:2000): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1340.565753][ T28] audit: type=1800 audit(1790567124.203:2001): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1340.826388][ T28] audit: type=1800 audit(1790567124.553:2002): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1342.468860][ T28] audit: type=1800 audit(1790567126.173:2003): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1342.597305][ T28] audit: type=1800 audit(1790567126.273:2004): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323095 res=0 errno=0 [ 1345.142270][ T28] audit: type=1800 audit(1790567128.873:2005): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1345.262543][ T28] audit: type=1800 audit(1790567128.963:2006): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1356.871194][ T28] audit: type=1800 audit(1790567140.583:2007): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1357.026885][ T28] audit: type=1800 audit(1790567140.753:2008): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323199 res=0 errno=0 [ 1358.094605][ T28] audit: type=1800 audit(1790567141.813:2009): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1358.270815][ T28] audit: type=1800 audit(1790567141.993:2010): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1358.480840][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1358.726676][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1358.762238][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1358.789524][ T23] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1358.827152][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.849372][ T28] audit: type=1800 audit(1790567142.573:2011): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323226 res=0 errno=0 [ 1358.946513][ T28] audit: type=1800 audit(1790567142.593:2012): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=323266 res=0 errno=0 [ 1359.048384][ T28] audit: type=1800 audit(1790567142.633:2013): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=323233 res=0 errno=0 [ 1359.160768][ T28] audit: type=1800 audit(1790567142.633:2014): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=323234 res=0 errno=0 [ 1359.241519][ T28] audit: type=1800 audit(1790567142.633:2015): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=323235 res=0 errno=0 [ 1359.306547][T10461] usb 1-1: USB disconnect, device number 5 [ 1359.340606][ T28] audit: type=1800 audit(1790567142.673:2016): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323275 res=0 errno=0 [ 1360.149830][T12659] autofs4:pid:12659:autofs_fill_super: called with bogus options [ 1361.971329][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.977701][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.653621][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1362.653632][ T28] audit: type=1800 audit(1790567146.383:2021): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1362.885037][ T28] audit: type=1800 audit(1790567146.603:2022): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323412 res=0 errno=0 [ 1363.060810][ T28] audit: type=1800 audit(1790567146.763:2023): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1363.263750][ T28] audit: type=1800 audit(1790567146.993:2024): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1363.643028][ T28] audit: type=1800 audit(1790567147.363:2025): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323431 res=0 errno=0 [ 1363.885830][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1364.109826][ T28] audit: type=1800 audit(1790567147.833:2026): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323454 res=0 errno=0 [ 1364.142178][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1364.284398][ T28] audit: type=1800 audit(1790567148.003:2027): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1364.310814][ T9678] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1364.540829][ T9678] usb 1-1: Using ep0 maxpacket: 8 [ 1364.552515][ T9678] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1364.570972][ T9678] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1364.627480][ T28] audit: type=1800 audit(1790567148.353:2028): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1325" name="fscaps" dev="sysfs" ino=1329 res=0 errno=0 [ 1364.656189][ T9678] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1364.694765][ T9678] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1364.726033][ T9678] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1364.795745][ T9678] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1364.845186][ T9678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.988252][ T28] audit: type=1800 audit(1790567148.713:2029): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=323433 res=0 errno=0 [ 1365.165732][ T28] audit: type=1800 audit(1790567148.823:2030): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323468 res=0 errno=0 [ 1365.816183][T12708] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 1365.851462][ T9678] usb 1-1: USB disconnect, device number 6 [ 1369.069896][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1369.069913][ T28] audit: type=1800 audit(1790567152.793:2044): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1372.615881][T12735] CIFS: Attempting to mount //127.0.0.1/share [ 1372.624920][T12735] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1372.632696][T12735] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1375.397858][ T28] audit: type=1800 audit(1790567159.123:2045): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1375.515192][ T28] audit: type=1800 audit(1790567159.223:2046): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1375.668258][ T28] audit: type=1800 audit(1790567159.393:2047): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1375.728977][T12750] Config c/1 of g1 needs at least one function. [ 1375.752553][ T28] audit: type=1800 audit(1790567159.453:2048): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1339" name="UDC" dev="configfs" ino=43584 res=0 errno=0 [ 1375.774151][T12750] udc dummy_udc.0: failed to start g1: -22 [ 1375.780028][T12750] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 1375.815491][T12750] UDC core: g1: couldn't find an available UDC or it's busy [ 1375.906366][ T28] audit: type=1800 audit(1790567159.633:2049): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1376.030712][ T28] audit: type=1800 audit(1790567159.753:2050): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1376.187605][ T28] audit: type=1800 audit(1790567159.913:2051): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1379.142435][ T28] audit: type=1800 audit(1790567162.873:2052): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1381.425989][ T28] audit: type=1800 audit(1790567165.123:2053): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1384.086212][ T28] audit: type=1800 audit(1790567167.813:2054): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1389.269857][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 1390.430810][ T28] audit: type=1800 audit(1790567174.153:2055): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1391.007897][ T28] audit: type=1800 audit(1790567174.733:2056): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1391.237961][T12843] binder_alloc: 12841: binder_alloc_buf, no vma [ 1391.390216][ T28] audit: type=1800 audit(1790567175.113:2057): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1393.295104][ T28] audit: type=1800 audit(1790567177.023:2058): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1393.560721][ T28] audit: type=1800 audit(1790567177.273:2059): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1395.459604][T12867] CIFS: Attempting to mount //127.0.0.1/share [ 1395.474860][T12867] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1395.482681][T12867] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1396.257998][ T28] audit: type=1800 audit(1790567179.973:2060): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1396.750799][ T5814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1396.973118][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1396.991153][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.010875][ T5814] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1397.027810][ T5814] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1397.047839][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.065480][ T5814] usb 1-1: Product: syz [ 1397.075141][ T5814] usb 1-1: Manufacturer: syz [ 1397.085208][ T5814] usb 1-1: SerialNumber: syz [ 1397.109999][ T5814] usb 1-1: selecting invalid altsetting 1 [ 1397.116736][ T5814] usb 1-1: unit 6 not found! [ 1397.142128][ T28] audit: type=1800 audit(1790567180.863:2061): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323621 res=0 errno=0 [ 1397.265383][ T28] audit: type=1800 audit(1790567180.863:2062): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=323664 res=0 errno=0 [ 1397.365657][ T28] audit: type=1800 audit(1790567180.863:2063): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=323628 res=0 errno=0 [ 1397.430876][ T28] audit: type=1800 audit(1790567180.863:2064): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=323629 res=0 errno=0 [ 1397.719439][ T28] audit: type=1800 audit(1790567181.443:2065): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1397.832744][ T28] audit: type=1800 audit(1790567181.523:2066): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1397.955538][ T5814] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1398.214089][ T5814] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1398.269268][ T28] audit: type=1800 audit(1790567181.993:2067): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=323650 res=0 errno=0 [ 1398.318778][ T5814] usb 1-1: USB disconnect, device number 7 [ 1398.324868][ T28] audit: type=1800 audit(1790567181.993:2068): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=323651 res=0 errno=0 [ 1398.324943][ T28] audit: type=1800 audit(1790567181.993:2069): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=323630 res=0 errno=0 [ 1400.536952][T12879] udevd[12879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1401.863991][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1401.864008][ T28] audit: type=1800 audit(1790567185.593:2072): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1402.265984][T12915] FAULT_INJECTION: forcing a failure. [ 1402.265984][T12915] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.299346][T12915] CPU: 1 PID: 12915 Comm: syz.0.1369 Not tainted syzkaller #0 [ 1402.306911][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1402.317005][T12915] Call Trace: [ 1402.320298][T12915] [ 1402.323240][T12915] dump_stack_lvl+0x18c/0x250 [ 1402.327940][T12915] ? show_regs_print_info+0x20/0x20 [ 1402.333156][T12915] ? load_image+0x420/0x420 [ 1402.337687][T12915] ? __might_sleep+0xe0/0xe0 [ 1402.342293][T12915] ? __lock_acquire+0x7d80/0x7d80 [ 1402.347328][T12915] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1402.353352][T12915] should_fail_ex+0x394/0x4c0 [ 1402.358098][T12915] should_failslab+0x9/0x20 [ 1402.362653][T12915] slab_pre_alloc_hook+0x59/0x300 [ 1402.367738][T12915] ? alloc_trace_uprobe+0x2e/0x200 [ 1402.372895][T12915] ? alloc_trace_uprobe+0x2e/0x200 [ 1402.378060][T12915] __kmem_cache_alloc_node+0x53/0x250 [ 1402.383503][T12915] ? alloc_trace_uprobe+0x2e/0x200 [ 1402.388666][T12915] __kmalloc+0xa7/0x240 [ 1402.392889][T12915] ? traceprobe_parse_event_name+0x53a/0x610 [ 1402.398922][T12915] alloc_trace_uprobe+0x2e/0x200 [ 1402.403918][T12915] __trace_uprobe_create+0x86c/0xc30 [ 1402.409269][T12915] ? trace_uprobe_match+0x570/0x570 [ 1402.414566][T12915] ? argv_split+0x190/0x400 [ 1402.419124][T12915] ? rcu_is_watching+0x15/0xb0 [ 1402.423949][T12915] ? argv_split+0x190/0x400 [ 1402.428510][T12915] ? __kmalloc+0xe5/0x240 [ 1402.432905][T12915] ? kstrndup+0xbd/0x140 [ 1402.437209][T12915] ? argv_split+0x37b/0x400 [ 1402.441797][T12915] trace_probe_create+0xc8/0x130 [ 1402.446751][T12915] ? __lock_acquire+0x7d80/0x7d80 [ 1402.451787][T12915] ? trace_uprobe_match+0x570/0x570 [ 1402.456998][T12915] ? trace_probe_match_command_args+0x200/0x200 [ 1402.463254][T12915] ? __virt_addr_valid+0x10c/0x380 [ 1402.468382][T12915] ? __virt_addr_valid+0x10c/0x380 [ 1402.473509][T12915] ? __might_fault+0xaa/0x120 [ 1402.478200][T12915] ? __might_fault+0xc6/0x120 [ 1402.482887][T12915] dyn_event_create+0x48/0x60 [ 1402.487590][T12915] create_or_delete_trace_uprobe+0x65/0xa0 [ 1402.493428][T12915] trace_parse_run_command+0x1f2/0x340 [ 1402.498925][T12915] ? probes_open+0x130/0x130 [ 1402.503547][T12915] ? uprobe_buffer_disable+0x180/0x180 [ 1402.509063][T12915] vfs_write+0x299/0x9a0 [ 1402.513464][T12915] ? file_end_write+0x250/0x250 [ 1402.518373][T12915] ? __fget_files+0x28/0x460 [ 1402.523021][T12915] ? __fget_files+0x3fc/0x460 [ 1402.527769][T12915] ? __fdget_pos+0x2a3/0x330 [ 1402.532420][T12915] ? ksys_write+0x74/0x260 [ 1402.536905][T12915] ksys_write+0x151/0x260 [ 1402.541309][T12915] ? __ia32_sys_read+0x90/0x90 [ 1402.546140][T12915] ? lockdep_hardirqs_on+0x98/0x150 [ 1402.551388][T12915] do_syscall_64+0x55/0xb0 [ 1402.555860][T12915] ? clear_bhb_loop+0x40/0x90 [ 1402.560591][T12915] ? clear_bhb_loop+0x40/0x90 [ 1402.565327][T12915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1402.571283][T12915] RIP: 0033:0x7f81f139e159 [ 1402.575745][T12915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.595403][T12915] RSP: 002b:00007f81f226f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1402.603892][T12915] RAX: ffffffffffffffda RBX: 00007f81f1625fa0 RCX: 00007f81f139e159 [ 1402.611911][T12915] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 1402.619965][T12915] RBP: 00007f81f143506b R08: 0000000000000000 R09: 0000000000000000 [ 1402.627998][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1402.636006][T12915] R13: 00007f81f1626038 R14: 00007f81f1625fa0 R15: 00007ffe2ddbac18 [ 1402.644017][T12915] [ 1402.828856][ T28] audit: type=1800 audit(1790567186.523:2073): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1402.984837][ T28] audit: type=1800 audit(1790567186.713:2074): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1405.880623][T12940] CIFS: Attempting to mount //127.0.0.1/share [ 1405.894600][T12940] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1405.902348][T12940] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1411.455325][ T28] audit: type=1800 audit(1790567195.183:2075): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1411.576033][ T28] audit: type=1800 audit(1790567195.303:2076): pid=12976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1374" name="n_vclocks" dev="sysfs" ino=48049 res=0 errno=0 [ 1411.706245][ T28] audit: type=1800 audit(1790567195.433:2077): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1411.948106][ T28] audit: type=1800 audit(1790567195.673:2078): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1412.199617][ T28] audit: type=1800 audit(1790567195.923:2079): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1417.227015][ T28] audit: type=1800 audit(1790567200.953:2080): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1418.888038][ T28] audit: type=1800 audit(1790567202.613:2081): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1420.753079][ T28] audit: type=1800 audit(1790567204.483:2082): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14849 res=0 errno=0 [ 1420.811367][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 1420.818952][T13016] FAULT_INJECTION: forcing a failure. [ 1420.818952][T13016] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.901118][T13016] CPU: 0 PID: 13016 Comm: syz.8.1380 Not tainted syzkaller #0 [ 1420.908674][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1420.918799][T13016] Call Trace: [ 1420.922147][T13016] [ 1420.925123][T13016] dump_stack_lvl+0x18c/0x250 [ 1420.929865][T13016] ? show_regs_print_info+0x20/0x20 [ 1420.935137][T13016] ? load_image+0x420/0x420 [ 1420.939713][T13016] ? __might_sleep+0xe0/0xe0 [ 1420.944368][T13016] ? __lock_acquire+0x7d80/0x7d80 [ 1420.949486][T13016] should_fail_ex+0x394/0x4c0 [ 1420.954251][T13016] should_failslab+0x9/0x20 [ 1420.958837][T13016] slab_pre_alloc_hook+0x59/0x300 [ 1420.963981][T13016] kmem_cache_alloc+0x5a/0x2c0 [ 1420.968813][T13016] ? getname_kernel+0x5a/0x2f0 [ 1420.973653][T13016] getname_kernel+0x5a/0x2f0 [ 1420.978329][T13016] kern_path+0x1d/0x50 [ 1420.982446][T13016] __trace_uprobe_create+0x3fc/0xc30 [ 1420.987793][T13016] ? trace_uprobe_match+0x570/0x570 [ 1420.993085][T13016] ? argv_split+0x190/0x400 [ 1420.999442][T13016] ? rcu_is_watching+0x15/0xb0 [ 1420.999519][T13016] ? argv_split+0x190/0x400 [ 1420.999551][T13016] ? __kmalloc+0xe5/0x240 [ 1420.999583][T13016] ? kstrndup+0xbd/0x140 [ 1420.999616][T13016] ? argv_split+0x37b/0x400 [ 1420.999654][T13016] trace_probe_create+0xc8/0x130 [ 1420.999680][T13016] ? __lock_acquire+0x7d80/0x7d80 [ 1420.999706][T13016] ? trace_uprobe_match+0x570/0x570 [ 1420.999731][T13016] ? trace_probe_match_command_args+0x200/0x200 [ 1420.999756][T13016] ? __virt_addr_valid+0x10c/0x380 [ 1420.999785][T13016] ? __virt_addr_valid+0x10c/0x380 [ 1420.999814][T13016] ? __might_fault+0xaa/0x120 [ 1420.999838][T13016] ? __might_fault+0xc6/0x120 [ 1420.999865][T13016] dyn_event_create+0x48/0x60 [ 1420.999901][T13016] create_or_delete_trace_uprobe+0x65/0xa0 [ 1420.999929][T13016] trace_parse_run_command+0x1f2/0x340 [ 1420.999953][T13016] ? probes_open+0x130/0x130 [ 1420.999978][T13016] ? uprobe_buffer_disable+0x180/0x180 [ 1421.000006][T13016] vfs_write+0x299/0x9a0 [ 1421.000046][T13016] ? file_end_write+0x250/0x250 [ 1421.000080][T13016] ? __fget_files+0x28/0x460 [ 1421.000113][T13016] ? __fget_files+0x3fc/0x460 [ 1421.000155][T13016] ? __fdget_pos+0x2a3/0x330 [ 1421.000185][T13016] ? ksys_write+0x74/0x260 [ 1421.000219][T13016] ksys_write+0x151/0x260 [ 1421.000264][T13016] ? __ia32_sys_read+0x90/0x90 [ 1421.000301][T13016] ? lockdep_hardirqs_on+0x98/0x150 [ 1421.000330][T13016] do_syscall_64+0x55/0xb0 [ 1421.000358][T13016] ? clear_bhb_loop+0x40/0x90 [ 1421.000388][T13016] ? clear_bhb_loop+0x40/0x90 [ 1421.000422][T13016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1421.000452][T13016] RIP: 0033:0x7f85f279e159 [ 1421.000476][T13016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.000497][T13016] RSP: 002b:00007f85f365f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1421.000524][T13016] RAX: ffffffffffffffda RBX: 00007f85f2a25fa0 RCX: 00007f85f279e159 [ 1421.000542][T13016] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 1421.000557][T13016] RBP: 00007f85f283506b R08: 0000000000000000 R09: 0000000000000000 [ 1421.000573][T13016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1421.000587][T13016] R13: 00007f85f2a26038 R14: 00007f85f2a25fa0 R15: 00007ffd549e8478 [ 1421.000622][T13016] [ 1422.190946][T13019] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1422.226426][ T28] audit: type=1800 audit(1790567205.953:2083): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323786 res=0 errno=0 [ 1422.283118][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1422.295809][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1422.304038][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1422.358151][ T28] audit: type=1800 audit(1790567205.993:2084): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323796 res=0 errno=0 [ 1422.381197][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1422.389627][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1422.410883][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1422.891744][ T28] audit: type=1800 audit(1790567206.393:2085): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323815 res=0 errno=0 [ 1423.642191][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.648590][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.683808][ T28] audit: type=1800 audit(1790567207.413:2086): pid=13040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=323826 res=0 errno=0 [ 1424.965648][ T5785] Bluetooth: hci2: command tx timeout [ 1425.187336][ T28] audit: type=1800 audit(1790567208.903:2087): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1427.131254][ T5785] Bluetooth: hci2: command tx timeout [ 1427.689863][T13032] chnl_net:caif_netlink_parms(): no params data found [ 1427.840028][T10673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.155299][T10673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.822140][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1395'. [ 1429.921250][ T5785] Bluetooth: hci2: command tx timeout [ 1432.196298][ T5785] Bluetooth: hci2: command tx timeout [ 1435.276462][T10673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.429182][T10673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.476763][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.501034][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.508333][T13032] bridge_slave_0: entered allmulticast mode [ 1435.543782][T13032] bridge_slave_0: entered promiscuous mode [ 1435.570859][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.578133][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.601657][T13032] bridge_slave_1: entered allmulticast mode [ 1435.609240][T13032] bridge_slave_1: entered promiscuous mode [ 1435.630734][ T28] audit: type=1800 audit(1790567219.353:2088): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1435.758105][T13032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.393044][T13032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.425063][ T28] audit: type=1800 audit(1790567220.153:2089): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1438.872545][T13094] FAULT_INJECTION: forcing a failure. [ 1438.872545][T13094] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.913530][ T28] audit: type=1800 audit(1790567222.633:2090): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327687 res=0 errno=0 [ 1438.970515][T13094] CPU: 0 PID: 13094 Comm: syz.4.1397 Not tainted syzkaller #0 [ 1438.978127][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1438.988279][T13094] Call Trace: [ 1438.988505][ T28] audit: type=1800 audit(1790567222.663:2091): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=327692 res=0 errno=0 [ 1438.991596][T13094] [ 1438.991608][T13094] dump_stack_lvl+0x18c/0x250 [ 1438.991650][T13094] ? show_regs_print_info+0x20/0x20 [ 1438.991689][T13094] ? load_image+0x420/0x420 [ 1438.991720][T13094] ? __might_sleep+0xe0/0xe0 [ 1438.991749][T13094] ? __lock_acquire+0x7d80/0x7d80 [ 1438.991779][T13094] should_fail_ex+0x394/0x4c0 [ 1439.017653][T13032] team0: Port device team_slave_0 added [ 1439.019012][T13094] should_failslab+0x9/0x20 [ 1439.019052][T13094] slab_pre_alloc_hook+0x59/0x300 [ 1439.058672][T13094] ? __kmem_cache_alloc_node+0x194/0x250 [ 1439.064378][T13094] ? argv_split+0x190/0x400 [ 1439.068946][T13094] ? argv_split+0x190/0x400 [ 1439.073517][T13094] __kmem_cache_alloc_node+0x53/0x250 [ 1439.074533][ T28] audit: type=1800 audit(1790567222.663:2092): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=327696 res=0 errno=0 [ 1439.078947][T13094] ? argv_split+0x190/0x400 [ 1439.078984][T13094] __kmalloc+0xa7/0x240 [ 1439.107519][T13094] ? kstrndup+0xbd/0x140 [ 1439.111811][T13094] argv_split+0x190/0x400 [ 1439.116185][T13094] ? trace_uprobe_match+0x570/0x570 [ 1439.121428][T13094] trace_probe_create+0x95/0x130 [ 1439.126413][T13094] ? __lock_acquire+0x7d80/0x7d80 [ 1439.131478][T13094] ? trace_probe_match_command_args+0x200/0x200 [ 1439.137768][T13094] ? __virt_addr_valid+0x10c/0x380 [ 1439.142949][T13094] ? __virt_addr_valid+0x10c/0x380 [ 1439.148119][T13094] ? __might_fault+0xaa/0x120 [ 1439.152831][T13094] ? __might_fault+0xc6/0x120 [ 1439.157558][T13094] dyn_event_create+0x48/0x60 [ 1439.162281][T13094] create_or_delete_trace_uprobe+0x65/0xa0 [ 1439.168128][T13094] trace_parse_run_command+0x1f2/0x340 [ 1439.173623][T13094] ? probes_open+0x130/0x130 [ 1439.178254][T13094] ? uprobe_buffer_disable+0x180/0x180 [ 1439.183767][T13094] vfs_write+0x299/0x9a0 [ 1439.188053][T13094] ? file_end_write+0x250/0x250 [ 1439.192943][T13094] ? __fget_files+0x28/0x460 [ 1439.197572][T13094] ? __fget_files+0x3fc/0x460 [ 1439.202293][T13094] ? __fdget_pos+0x2a3/0x330 [ 1439.206949][T13094] ? ksys_write+0x74/0x260 [ 1439.211410][T13094] ksys_write+0x151/0x260 [ 1439.215786][T13094] ? __ia32_sys_read+0x90/0x90 [ 1439.220587][T13094] ? lockdep_hardirqs_on+0x98/0x150 [ 1439.225827][T13094] do_syscall_64+0x55/0xb0 [ 1439.230285][T13094] ? clear_bhb_loop+0x40/0x90 [ 1439.234994][T13094] ? clear_bhb_loop+0x40/0x90 [ 1439.239705][T13094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1439.245632][T13094] RIP: 0033:0x7fb6ddb9e159 [ 1439.250103][T13094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.269764][T13094] RSP: 002b:00007fb6deb42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1439.278220][T13094] RAX: ffffffffffffffda RBX: 00007fb6dde25fa0 RCX: 00007fb6ddb9e159 [ 1439.286313][T13094] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000004 [ 1439.294314][T13094] RBP: 00007fb6ddc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1439.302315][T13094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.310340][T13094] R13: 00007fb6dde26038 R14: 00007fb6dde25fa0 R15: 00007ffc5354ffb8 [ 1439.318366][T13094] [ 1439.403772][ T28] audit: type=1800 audit(1790567222.663:2093): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=327695 res=0 errno=0 [ 1439.442142][ T28] audit: type=1800 audit(1790567222.663:2094): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=327698 res=0 errno=0 [ 1439.465063][ T28] audit: type=1800 audit(1790567222.793:2095): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=327774 res=0 errno=0 [ 1439.503944][T13032] team0: Port device team_slave_1 added [ 1439.520582][ T28] audit: type=1800 audit(1790567223.153:2096): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=327779 res=0 errno=0 [ 1439.626239][ T28] audit: type=1800 audit(1790567223.153:2097): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=327783 res=0 errno=0 [ 1440.593171][T13032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.722407][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.136869][T13032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.274796][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1441.274850][ T28] audit: type=1800 audit(1790567225.003:2110): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1448.645447][T13032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.675146][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.770681][T13032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.247702][T13032] hsr_slave_0: entered promiscuous mode [ 1449.292590][T13032] hsr_slave_1: entered promiscuous mode [ 1449.341817][T13032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1449.349456][T13032] Cannot create hsr debugfs directory [ 1450.276280][ T28] audit: type=1800 audit(1790567233.993:2111): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=23939 res=0 errno=0 [ 1454.737436][ T28] audit: type=1800 audit(1790567238.463:2112): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1455.770063][T10673] hsr_slave_0: left promiscuous mode [ 1455.795832][T10673] hsr_slave_1: left promiscuous mode [ 1455.889338][ T28] audit: type=1800 audit(1790567239.613:2113): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1455.964938][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.001090][T10673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.629075][T10673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.636775][T10673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.653351][T10673] bridge_slave_1: left allmulticast mode [ 1457.681052][T10673] bridge_slave_1: left promiscuous mode [ 1457.722287][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.744705][T10673] bridge_slave_0: left allmulticast mode [ 1457.750497][T10673] bridge_slave_0: left promiscuous mode [ 1457.768018][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.867287][T10673] veth1_macvtap: left promiscuous mode [ 1457.886789][T10673] veth0_macvtap: left promiscuous mode [ 1457.913610][T10673] veth1_vlan: left promiscuous mode [ 1457.919038][T10673] veth0_vlan: left promiscuous mode [ 1465.369115][ T28] audit: type=1800 audit(1790567249.093:2114): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1467.868190][T13194] CIFS: Attempting to mount //127.0.0.1/share [ 1467.884873][T13194] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1467.892692][T13194] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1468.595832][T10673] team0 (unregistering): Port device team_slave_1 removed [ 1468.921040][T10673] team0 (unregistering): Port device team_slave_0 removed [ 1471.304373][ T28] audit: type=1800 audit(1790567255.033:2115): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1471.373326][T10673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.443424][ T28] audit: type=1800 audit(1790567255.173:2116): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1471.564567][T10673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.057985][ T28] audit: type=1800 audit(1790567262.153:2117): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1480.549037][T10673] bond0 (unregistering): Released all slaves [ 1482.547089][ T28] audit: type=1800 audit(1790567266.273:2118): pid=13228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330720 res=0 errno=0 [ 1482.702036][T11901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1482.712766][T11901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1482.721833][T11901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1482.729929][T11901] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1482.731038][ T28] audit: type=1800 audit(1790567266.323:2119): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330730 res=0 errno=0 [ 1482.742650][T11901] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1482.764193][T11901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1484.260703][ T28] audit: type=1800 audit(1790567266.523:2120): pid=13228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330749 res=0 errno=0 [ 1484.388494][ T28] audit: type=1800 audit(1790567266.523:2121): pid=13228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=330760 res=0 errno=0 [ 1484.807109][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.814902][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.832768][T11901] Bluetooth: hci4: command tx timeout [ 1485.047512][ T28] audit: type=1800 audit(1790567268.773:2122): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1485.232483][ T28] audit: type=1800 audit(1790567268.953:2123): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1486.892194][T11901] Bluetooth: hci4: command tx timeout [ 1486.949975][T13250] chnl_net:caif_netlink_parms(): no params data found [ 1488.158612][ T28] audit: type=1800 audit(1790567271.883:2124): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1488.269986][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.342031][T13250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.391317][T13250] bridge_slave_0: entered allmulticast mode [ 1488.398961][T13250] bridge_slave_0: entered promiscuous mode [ 1488.489810][T13250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.524214][T13250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.540599][T13250] bridge_slave_1: entered allmulticast mode [ 1488.548261][T13250] bridge_slave_1: entered promiscuous mode [ 1488.618652][T13295] FAULT_INJECTION: forcing a failure. [ 1488.618652][T13295] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.641430][T13295] CPU: 1 PID: 13295 Comm: syz.0.1431 Not tainted syzkaller #0 [ 1488.648986][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1488.659103][T13295] Call Trace: [ 1488.662430][T13295] [ 1488.665403][T13295] dump_stack_lvl+0x18c/0x250 [ 1488.670152][T13295] ? show_regs_print_info+0x20/0x20 [ 1488.675497][T13295] ? load_image+0x420/0x420 [ 1488.680068][T13295] ? __might_sleep+0xe0/0xe0 [ 1488.684720][T13295] ? __lock_acquire+0x7d80/0x7d80 [ 1488.689805][T13295] ? verify_lock_unused+0x140/0x140 [ 1488.695068][T13295] should_fail_ex+0x394/0x4c0 [ 1488.699816][T13295] should_failslab+0x9/0x20 [ 1488.704473][T13295] slab_pre_alloc_hook+0x59/0x300 [ 1488.709567][T13295] kmem_cache_alloc+0x5a/0x2c0 [ 1488.714394][T13295] ? mas_alloc_nodes+0x2f8/0x8c0 [ 1488.719411][T13295] mas_alloc_nodes+0x2f8/0x8c0 [ 1488.724243][T13295] mas_preallocate+0xa1f/0x1170 [ 1488.729167][T13295] ? vma_merge+0xf68/0x2130 [ 1488.733726][T13295] ? mas_destroy+0x20a0/0x20a0 [ 1488.738530][T13295] ? down_read_killable+0x340/0x340 [ 1488.743764][T13295] ? vma_iter_config+0xe6/0x270 [ 1488.748645][T13295] vma_merge+0x1709/0x2130 [ 1488.753100][T13295] ? init_vma_prep+0x160/0x160 [ 1488.757919][T13295] userfaultfd_release+0x487/0xa20 [ 1488.763068][T13295] ? ima_get_current_hash_algo+0x10/0x10 [ 1488.768752][T13295] ? userfaultfd_ioctl+0x4a60/0x4a60 [ 1488.774088][T13295] ? __might_sleep+0xe0/0xe0 [ 1488.778750][T13295] ? userfaultfd_ioctl+0x4a60/0x4a60 [ 1488.784091][T13295] __fput+0x221/0x940 [ 1488.788119][T13295] __se_sys_close+0x15c/0x1e0 [ 1488.792835][T13295] do_syscall_64+0x55/0xb0 [ 1488.797282][T13295] ? clear_bhb_loop+0x40/0x90 [ 1488.801994][T13295] ? clear_bhb_loop+0x40/0x90 [ 1488.806711][T13295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1488.812634][T13295] RIP: 0033:0x7f81f139e159 [ 1488.817084][T13295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.836731][T13295] RSP: 002b:00007f81f226f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1488.845186][T13295] RAX: ffffffffffffffda RBX: 00007f81f1625fa0 RCX: 00007f81f139e159 [ 1488.853187][T13295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1488.861182][T13295] RBP: 00007f81f143506b R08: 0000000000000000 R09: 0000000000000000 [ 1488.869177][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.877171][T13295] R13: 00007f81f1626038 R14: 00007f81f1625fa0 R15: 00007ffe2ddbac18 [ 1488.885183][T13295] [ 1488.980950][T11901] Bluetooth: hci4: command tx timeout [ 1489.179850][T13250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.353436][T13250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.495035][T13250] team0: Port device team_slave_0 added [ 1490.114060][T13250] team0: Port device team_slave_1 added [ 1491.040793][T11901] Bluetooth: hci4: command tx timeout [ 1491.083476][ T28] audit: type=1800 audit(1790567274.813:2125): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1491.201803][T13307] CIFS: Attempting to mount //127.0.0.1/share [ 1492.056196][T13307] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1493.024303][T11004] hsr_slave_0: left promiscuous mode [ 1493.119563][ T28] audit: type=1800 audit(1790567276.843:2126): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1493.248180][T11004] hsr_slave_1: left promiscuous mode [ 1493.340795][ T28] audit: type=1800 audit(1790567277.063:2127): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335018 res=0 errno=0 [ 1493.363650][T11004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.382286][T11004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.399813][T11004] bridge_slave_1: left allmulticast mode [ 1493.420816][T11004] bridge_slave_1: left promiscuous mode [ 1493.440895][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.503929][T11004] bridge_slave_0: left allmulticast mode [ 1493.524144][T11004] bridge_slave_0: left promiscuous mode [ 1493.545819][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.576509][ T28] audit: type=1800 audit(1790567277.303:2128): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1501.992962][T11004] team0 (unregistering): Port device team_slave_1 removed [ 1503.961933][T11004] team0 (unregistering): Port device team_slave_0 removed [ 1504.207861][T11004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.367782][T11004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.945606][T11004] bond0 (unregistering): Released all slaves [ 1505.161069][T13250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.168096][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.301989][T13250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.342750][T13250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.349754][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.440952][T13250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.134127][T13250] hsr_slave_0: entered promiscuous mode [ 1507.167521][T13250] hsr_slave_1: entered promiscuous mode [ 1507.196940][T13250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1507.228966][T13250] Cannot create hsr debugfs directory [ 1507.680341][ T28] audit: type=1800 audit(1790567291.403:2129): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1507.881046][ T28] audit: type=1800 audit(1790567291.593:2130): pid=13250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=23939 res=0 errno=0 [ 1509.081904][ T28] audit: type=1800 audit(1790567291.593:2131): pid=13250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=23938 res=0 errno=0 [ 1509.351357][ T28] audit: type=1800 audit(1790567291.653:2132): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=337336 res=0 errno=0 [ 1509.460790][ T28] audit: type=1800 audit(1790567292.913:2133): pid=13375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26705 res=0 errno=0 [ 1509.714977][T13250] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1509.775775][T13250] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1509.819343][T13250] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1509.861325][T13250] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1510.295932][T13393] FAULT_INJECTION: forcing a failure. [ 1510.295932][T13393] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.342330][T13250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.371357][T13393] CPU: 0 PID: 13393 Comm: syz.8.1452 Not tainted syzkaller #0 [ 1510.378924][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1510.389045][T13393] Call Trace: [ 1510.392375][T13393] [ 1510.395352][T13393] dump_stack_lvl+0x18c/0x250 [ 1510.400103][T13393] ? show_regs_print_info+0x20/0x20 [ 1510.405374][T13393] ? load_image+0x420/0x420 [ 1510.409955][T13393] ? __might_sleep+0xe0/0xe0 [ 1510.414603][T13393] ? __lock_acquire+0x7d80/0x7d80 [ 1510.419696][T13393] ? verify_lock_unused+0x140/0x140 [ 1510.425001][T13393] should_fail_ex+0x394/0x4c0 [ 1510.429751][T13393] should_failslab+0x9/0x20 [ 1510.434324][T13393] slab_pre_alloc_hook+0x59/0x300 [ 1510.439423][T13393] kmem_cache_alloc+0x5a/0x2c0 [ 1510.444257][T13393] ? mas_alloc_nodes+0x2f8/0x8c0 [ 1510.449261][T13393] mas_alloc_nodes+0x2f8/0x8c0 [ 1510.454095][T13393] mas_preallocate+0xa1f/0x1170 [ 1510.459011][T13393] ? vma_merge+0xf68/0x2130 [ 1510.463580][T13393] ? mas_destroy+0x20a0/0x20a0 [ 1510.468408][T13393] ? down_read_killable+0x340/0x340 [ 1510.473678][T13393] ? vma_iter_config+0xe6/0x270 [ 1510.478591][T13393] vma_merge+0x1709/0x2130 [ 1510.483083][T13393] ? init_vma_prep+0x160/0x160 [ 1510.487937][T13393] userfaultfd_release+0x487/0xa20 [ 1510.493113][T13393] ? ima_get_current_hash_algo+0x10/0x10 [ 1510.498812][T13393] ? userfaultfd_ioctl+0x4a60/0x4a60 [ 1510.504239][T13393] ? __might_sleep+0xe0/0xe0 [ 1510.508900][T13393] ? userfaultfd_ioctl+0x4a60/0x4a60 [ 1510.514235][T13393] __fput+0x221/0x940 [ 1510.518287][T13393] __se_sys_close+0x15c/0x1e0 [ 1510.523037][T13393] do_syscall_64+0x55/0xb0 [ 1510.528380][T13393] ? clear_bhb_loop+0x40/0x90 [ 1510.533120][T13393] ? clear_bhb_loop+0x40/0x90 [ 1510.537863][T13393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1510.538674][T13250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.543797][T13393] RIP: 0033:0x7f85f279e159 [ 1510.554919][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.574579][T13393] RSP: 002b:00007f85f365f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1510.583052][T13393] RAX: ffffffffffffffda RBX: 00007f85f2a25fa0 RCX: 00007f85f279e159 [ 1510.591073][T13393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1510.599100][T13393] RBP: 00007f85f283506b R08: 0000000000000000 R09: 0000000000000000 [ 1510.607122][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.615155][T13393] R13: 00007f85f2a26038 R14: 00007f85f2a25fa0 R15: 00007ffd549e8478 [ 1510.623196][T13393] [ 1510.649676][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.656940][T10673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.693606][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.700859][T10673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.998509][T13250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1512.370192][ T28] audit: type=1800 audit(1790567296.093:2134): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1513.745766][T13250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.683760][T13250] veth0_vlan: entered promiscuous mode [ 1519.457390][T13250] veth1_vlan: entered promiscuous mode [ 1519.596160][T13250] veth0_macvtap: entered promiscuous mode [ 1519.643343][T13250] veth1_macvtap: entered promiscuous mode [ 1519.650955][ T28] audit: type=1800 audit(1790567303.363:2135): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1520.853443][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.870727][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.881092][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.892031][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.902214][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1520.913090][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.925324][T13250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1520.950828][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.977846][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.998183][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1521.036985][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.660696][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1522.672072][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1522.722328][T13250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1522.784415][T13250] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.834277][T13250] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.863804][T13250] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.910794][T13250] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.170122][ T28] audit: type=1800 audit(1790567306.893:2136): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=337698 res=0 errno=0 [ 1523.288046][T11732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.296982][ T28] audit: type=1800 audit(1790567307.023:2137): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=337833 res=0 errno=0 [ 1523.340906][T11732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.109184][T11876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.161261][T11876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.348466][ T28] audit: type=1800 audit(1790567309.073:2138): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1525.444218][ T28] audit: type=1800 audit(1790567309.103:2139): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1526.443285][ T28] audit: type=1800 audit(1790567310.173:2140): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1526.560834][ T28] audit: type=1800 audit(1790567310.253:2141): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1528.736208][ T28] audit: type=1800 audit(1790567312.463:2142): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1528.868437][T13486] loop0: detected capacity change from 0 to 4096 [ 1528.907440][ T28] audit: type=1800 audit(1790567312.633:2143): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1528.988080][T13486] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1529.020783][T13486] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1529.052463][T13486] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1529.081045][T13486] loop0: [ 1529.340294][ T28] audit: type=1800 audit(1790567313.033:2144): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1530.441973][T13499] CIFS: Attempting to mount //127.0.0.1/share [ 1531.201267][T13499] CIFS: VFS: error -4 create cifsd thread [ 1531.334253][T13499] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1531.435423][ T28] audit: type=1800 audit(1790567315.163:2145): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1534.417134][ T28] audit: type=1800 audit(1790567318.143:2146): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1534.698953][ T28] audit: type=1800 audit(1790567318.413:2147): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1535.149106][ T28] audit: type=1800 audit(1790567318.873:2148): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1535.810676][ T28] audit: type=1800 audit(1790567319.523:2149): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1536.140719][ T28] audit: type=1800 audit(1790567319.843:2150): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1536.300667][ T28] audit: type=1800 audit(1790567320.023:2151): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1536.998402][ T28] audit: type=1800 audit(1790567320.723:2152): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1537.301712][ T28] audit: type=1800 audit(1790567321.033:2153): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1538.492630][ T28] audit: type=1800 audit(1790567322.223:2154): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1538.753001][ T28] audit: type=1800 audit(1790567322.483:2155): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1538.867303][ T28] audit: type=1800 audit(1790567322.593:2156): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1541.383024][ T28] audit: type=1800 audit(1790567325.113:2157): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1542.620677][ T28] audit: type=1800 audit(1790567326.323:2158): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1543.245650][ T28] audit: type=1800 audit(1790567326.973:2159): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1544.560549][ T28] audit: type=1800 audit(1790567328.283:2160): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1544.839537][T13638] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1544.856509][ T28] audit: type=1800 audit(1790567328.583:2161): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1544.995843][ T28] audit: type=1800 audit(1790567328.723:2162): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=337993 res=0 errno=0 [ 1545.094814][ T28] audit: type=1800 audit(1790567328.813:2163): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=337997 res=0 errno=0 [ 1545.133422][ T28] audit: type=1800 audit(1790567328.853:2164): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338076 res=0 errno=0 [ 1545.163404][ T5435] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1545.218424][ T28] audit: type=1800 audit(1790567328.853:2165): pid=13436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338080 res=0 errno=0 [ 1545.614812][ T28] audit: type=1800 audit(1790567329.343:2166): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1547.699763][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.706321][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.926587][ T28] audit: type=1800 audit(1790567334.603:2167): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1552.814814][ T28] audit: type=1800 audit(1790567336.543:2168): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1553.904239][ T28] audit: type=1800 audit(1790567337.633:2169): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1554.211722][ T28] audit: type=1800 audit(1790567337.933:2170): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1554.425123][ T28] audit: type=1800 audit(1790567338.153:2171): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338159 res=0 errno=0 [ 1554.550728][ T28] audit: type=1800 audit(1790567338.183:2172): pid=13666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338163 res=0 errno=0 [ 1554.676012][ T28] audit: type=1800 audit(1790567338.273:2173): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338242 res=0 errno=0 [ 1554.791044][ T28] audit: type=1800 audit(1790567338.313:2174): pid=13685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338246 res=0 errno=0 [ 1554.904170][ T28] audit: type=1800 audit(1790567338.633:2175): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1555.332970][T13693] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1556.049501][ T28] audit: type=1800 audit(1790567339.773:2176): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1556.314408][ T28] audit: type=1800 audit(1790567340.043:2177): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1556.505793][T13700] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1557.206059][ T28] audit: type=1800 audit(1790567340.913:2178): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1557.774955][ T28] audit: type=1800 audit(1790567341.503:2179): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1562.705822][ T28] audit: type=1800 audit(1790567346.433:2180): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1563.843974][ T28] audit: type=1800 audit(1790567347.563:2181): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338343 res=0 errno=0 [ 1563.947511][ T28] audit: type=1800 audit(1790567347.603:2182): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338426 res=0 errno=0 [ 1564.004450][ T28] audit: type=1800 audit(1790567347.613:2183): pid=13687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338430 res=0 errno=0 [ 1564.064200][ T28] audit: type=1800 audit(1790567347.623:2184): pid=13666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338347 res=0 errno=0 [ 1564.549055][ T28] audit: type=1800 audit(1790567348.273:2185): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1564.774872][T13736] loop0: detected capacity change from 0 to 4096 [ 1564.894372][T13736] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1564.969537][T13736] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1565.023036][T13736] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1565.029779][T13736] loop0: [ 1565.297948][ T28] audit: type=1800 audit(1790567349.013:2186): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1565.490983][ T28] audit: type=1800 audit(1790567349.193:2187): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1565.689683][ T28] audit: type=1800 audit(1790567349.413:2188): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1567.685823][ T28] audit: type=1800 audit(1790567351.413:2189): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338524 res=0 errno=0 [ 1567.708670][T13753] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1567.790796][ T28] audit: type=1800 audit(1790567351.433:2190): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338528 res=0 errno=0 [ 1567.878945][ T28] audit: type=1800 audit(1790567351.483:2191): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338625 res=0 errno=0 [ 1567.917406][ T28] audit: type=1800 audit(1790567351.483:2192): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338629 res=0 errno=0 [ 1568.386272][ T28] audit: type=1800 audit(1790567352.093:2193): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1569.970681][ T28] audit: type=1800 audit(1790567353.693:2194): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1571.979734][ T28] audit: type=1800 audit(1790567355.703:2195): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338716 res=0 errno=0 [ 1572.073537][ T28] audit: type=1800 audit(1790567355.733:2196): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=338799 res=0 errno=0 [ 1572.120874][ T28] audit: type=1800 audit(1790567355.743:2197): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338720 res=0 errno=0 [ 1572.193884][ T28] audit: type=1800 audit(1790567355.753:2198): pid=13666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=338803 res=0 errno=0 [ 1572.360953][ T28] audit: type=1800 audit(1790567356.083:2199): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1573.120681][ T28] audit: type=1800 audit(1790567356.843:2200): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15075 res=0 errno=0 [ 1573.273900][ T28] audit: type=1800 audit(1790567357.003:2201): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14962 res=0 errno=0 [ 1574.754205][ T28] audit: type=1800 audit(1790567358.483:2202): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14510 res=0 errno=0 [ 1574.912845][T13814] CIFS: Attempting to mount //127.0.0.1/share [ 1576.951215][T13814] ================================================================== [ 1576.959357][T13814] BUG: KASAN: slab-use-after-free in cifs_free_hash+0x86/0x100 [ 1576.967052][T13814] Read of size 8 at addr ffff88807b3c0468 by task syz.8.1520/13814 [ 1576.974988][T13814] [ 1576.977346][T13814] CPU: 0 PID: 13814 Comm: syz.8.1520 Not tainted syzkaller #0 [ 1576.984840][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.994944][T13814] Call Trace: [ 1576.998256][T13814] [ 1577.001223][T13814] dump_stack_lvl+0x18c/0x250 [ 1577.005961][T13814] ? __lock_acquire+0x7d80/0x7d80 [ 1577.011036][T13814] ? show_regs_print_info+0x20/0x20 [ 1577.016287][T13814] ? load_image+0x420/0x420 [ 1577.020838][T13814] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1577.026359][T13814] ? __virt_addr_valid+0x10c/0x380 [ 1577.031523][T13814] ? __virt_addr_valid+0x10c/0x380 [ 1577.036680][T13814] ? __virt_addr_valid+0x10c/0x380 [ 1577.041838][T13814] ? __virt_addr_valid+0x10c/0x380 [ 1577.047010][T13814] print_report+0xa8/0x210 [ 1577.051471][T13814] ? cifs_free_hash+0x86/0x100 [ 1577.056282][T13814] kasan_report+0x117/0x150 [ 1577.060836][T13814] ? slab_free_freelist_hook+0x130/0x1a0 [ 1577.066523][T13814] ? cifs_free_hash+0x86/0x100 [ 1577.071338][T13814] cifs_free_hash+0x86/0x100 [ 1577.075977][T13814] cifs_crypto_secmech_release+0x32/0x110 [ 1577.081748][T13814] cifs_put_tcp_session+0x20b/0x320 [ 1577.086998][T13814] cifs_mount_put_conns+0xb4/0x280 [ 1577.092164][T13814] cifs_mount+0xdc/0x650 [ 1577.096460][T13814] ? __rwlock_init+0x150/0x150 [ 1577.101265][T13814] ? cifs_is_path_remote+0x6f0/0x6f0 [ 1577.106575][T13814] ? do_raw_spin_unlock+0x121/0x230 [ 1577.111806][T13814] ? smb3_update_mnt_flags+0x52f/0xc10 [ 1577.117315][T13814] ? cifs_setup_cifs_sb+0x52f/0x840 [ 1577.122529][T13814] cifs_smb3_do_mount+0x2e5/0x710 [ 1577.127854][T13814] ? cifs_sb_deactive+0x80/0x80 [ 1577.132745][T13814] ? vfs_parse_fs_string+0x10f/0x170 [ 1577.138059][T13814] ? vfs_parse_fs_param+0x420/0x420 [ 1577.143272][T13814] smb3_get_tree+0x5a5/0xa90 [ 1577.147883][T13814] vfs_get_tree+0x8c/0x280 [ 1577.152313][T13814] do_new_mount+0x24a/0xa40 [ 1577.156832][T13814] __se_sys_mount+0x2e7/0x3d0 [ 1577.161524][T13814] ? __x64_sys_mount+0xc0/0xc0 [ 1577.166299][T13814] ? lockdep_hardirqs_on+0x98/0x150 [ 1577.171509][T13814] ? __x64_sys_mount+0x20/0xc0 [ 1577.176287][T13814] do_syscall_64+0x55/0xb0 [ 1577.180735][T13814] ? clear_bhb_loop+0x40/0x90 [ 1577.185452][T13814] ? clear_bhb_loop+0x40/0x90 [ 1577.190145][T13814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1577.196065][T13814] RIP: 0033:0x7f85f279e159 [ 1577.200486][T13814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.220117][T13814] RSP: 002b:00007f85f363e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1577.228548][T13814] RAX: ffffffffffffffda RBX: 00007f85f2a26090 RCX: 00007f85f279e159 [ 1577.236534][T13814] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 1577.244533][T13814] RBP: 00007f85f283506b R08: 0000000000000000 R09: 0000000000000000 [ 1577.252516][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1577.260496][T13814] R13: 00007f85f2a26128 R14: 00007f85f2a26090 R15: 00007ffd549e8478 [ 1577.268480][T13814] [ 1577.271502][T13814] [ 1577.273850][T13814] Allocated by task 13814: [ 1577.278280][T13814] kasan_set_track+0x4e/0x70 [ 1577.282889][T13814] __kasan_kmalloc+0x8f/0xa0 [ 1577.287492][T13814] cifs_get_tcp_session+0xb5/0x1a10 [ 1577.292702][T13814] cifs_mount_get_session+0xae/0x440 [ 1577.297998][T13814] dfs_mount_share+0x1e9/0x7b0 [ 1577.302771][T13814] cifs_mount+0xbc/0x650 [ 1577.307022][T13814] cifs_smb3_do_mount+0x2e5/0x710 [ 1577.312063][T13814] smb3_get_tree+0x5a5/0xa90 [ 1577.316676][T13814] vfs_get_tree+0x8c/0x280 [ 1577.321122][T13814] do_new_mount+0x24a/0xa40 [ 1577.325628][T13814] __se_sys_mount+0x2e7/0x3d0 [ 1577.330328][T13814] do_syscall_64+0x55/0xb0 [ 1577.334758][T13814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1577.340670][T13814] [ 1577.343015][T13814] Freed by task 13817: [ 1577.347085][T13814] kasan_set_track+0x4e/0x70 [ 1577.351688][T13814] kasan_save_free_info+0x28/0x40 [ 1577.356722][T13814] ____kasan_slab_free+0x126/0x1f0 [ 1577.361845][T13814] slab_free_freelist_hook+0x130/0x1a0 [ 1577.367322][T13814] __kmem_cache_free+0xba/0x1f0 [ 1577.372193][T13814] clean_demultiplex_info+0xb63/0xd60 [ 1577.377578][T13814] cifs_demultiplex_thread+0x274e/0x2a70 [ 1577.383222][T13814] kthread+0x2fa/0x390 [ 1577.387310][T13814] ret_from_fork+0x48/0x80 [ 1577.391754][T13814] ret_from_fork_asm+0x11/0x20 [ 1577.396555][T13814] [ 1577.398901][T13814] The buggy address belongs to the object at ffff88807b3c0000 [ 1577.398901][T13814] which belongs to the cache kmalloc-4k of size 4096 [ 1577.412973][T13814] The buggy address is located 1128 bytes inside of [ 1577.412973][T13814] freed 4096-byte region [ffff88807b3c0000, ffff88807b3c1000) [ 1577.426947][T13814] [ 1577.429274][T13814] The buggy address belongs to the physical page: [ 1577.435706][T13814] page:ffffea0001ecf000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b3c0 [ 1577.445860][T13814] head:ffffea0001ecf000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1577.454799][T13814] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1577.463214][T13814] page_type: 0xffffffff() [ 1577.467542][T13814] raw: 00fff00000000840 ffff888017c42140 0000000000000000 dead000000000001 [ 1577.476131][T13814] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1577.484718][T13814] page dumped because: kasan: bad access detected [ 1577.491202][T13814] page_owner tracks the page as allocated [ 1577.496979][T13814] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u4:0), ts 1309372298862, free_ts 1309274431996 [ 1577.519133][T13814] post_alloc_hook+0x1c1/0x200 [ 1577.523951][T13814] get_page_from_freelist+0x2181/0x22a0 [ 1577.529520][T13814] __alloc_pages+0x1f0/0x460 [ 1577.534154][T13814] alloc_slab_page+0x5d/0x180 [ 1577.538836][T13814] new_slab+0x87/0x2d0 [ 1577.542914][T13814] ___slab_alloc+0xc5c/0x12f0 [ 1577.547612][T13814] __kmem_cache_alloc_node+0x11f/0x250 [ 1577.553100][T13814] __kmalloc_node_track_caller+0xa4/0x230 [ 1577.558845][T13814] kmalloc_reserve+0x116/0x240 [ 1577.563616][T13814] __alloc_skb+0x138/0x2c0 [ 1577.568053][T13814] nsim_dev_trap_report_work+0x253/0xa90 [ 1577.573714][T13814] process_scheduled_works+0xa60/0x1600 [ 1577.579273][T13814] worker_thread+0xa5e/0xfe0 [ 1577.583877][T13814] kthread+0x2fa/0x390 [ 1577.587965][T13814] ret_from_fork+0x48/0x80 [ 1577.592406][T13814] ret_from_fork_asm+0x11/0x20 [ 1577.597191][T13814] page last free stack trace: [ 1577.601880][T13814] free_unref_page_prepare+0x7d7/0x8f0 [ 1577.607345][T13814] free_unref_page+0x32/0x2e0 [ 1577.612027][T13814] __unfreeze_partials+0x1cf/0x210 [ 1577.617140][T13814] put_cpu_partial+0x17c/0x250 [ 1577.621905][T13814] __slab_free+0x319/0x400 [ 1577.626326][T13814] qlist_free_all+0x75/0xd0 [ 1577.630847][T13814] kasan_quarantine_reduce+0x143/0x160 [ 1577.636315][T13814] __kasan_slab_alloc+0x22/0x80 [ 1577.641176][T13814] slab_post_alloc_hook+0x6a/0x4d0 [ 1577.646297][T13814] kmem_cache_alloc+0x17e/0x2c0 [ 1577.651157][T13814] security_inode_alloc+0x34/0x110 [ 1577.656276][T13814] inode_init_always+0x914/0xc90 [ 1577.661234][T13814] new_inode_pseudo+0x95/0x1d0 [ 1577.666014][T13814] __sock_create+0x12d/0x940 [ 1577.670617][T13814] __sys_socket+0xd7/0x1b0 [ 1577.675071][T13814] __x64_sys_socket+0x7a/0x90 [ 1577.679754][T13814] [ 1577.682084][T13814] Memory state around the buggy address: [ 1577.687726][T13814] ffff88807b3c0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1577.695806][T13814] ffff88807b3c0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1577.703870][T13814] >ffff88807b3c0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1577.711935][T13814] ^ [ 1577.719384][T13814] ffff88807b3c0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1577.727464][T13814] ffff88807b3c0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1577.735524][T13814] ================================================================== [ 1577.747341][T13814] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1577.754678][T13814] CPU: 0 PID: 13814 Comm: syz.8.1520 Not tainted syzkaller #0 [ 1577.762144][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1577.772349][T13814] Call Trace: [ 1577.775649][T13814] [ 1577.778600][T13814] dump_stack_lvl+0x18c/0x250 [ 1577.783298][T13814] ? show_regs_print_info+0x20/0x20 [ 1577.788523][T13814] ? load_image+0x420/0x420 [ 1577.793253][T13814] panic+0x2ca/0x720 [ 1577.797169][T13814] ? bpf_jit_dump+0xd0/0xd0 [ 1577.801690][T13814] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1577.807710][T13814] ? _raw_spin_unlock+0x40/0x40 [ 1577.812573][T13814] ? print_memory_metadata+0x314/0x400 [ 1577.818055][T13814] ? cifs_free_hash+0x86/0x100 [ 1577.822831][T13814] check_panic_on_warn+0x84/0xa0 [ 1577.827781][T13814] ? cifs_free_hash+0x86/0x100 [ 1577.832577][T13814] end_report+0x6f/0x130 [ 1577.836845][T13814] kasan_report+0x128/0x150 [ 1577.841387][T13814] ? slab_free_freelist_hook+0x130/0x1a0 [ 1577.847025][T13814] ? cifs_free_hash+0x86/0x100 [ 1577.851823][T13814] cifs_free_hash+0x86/0x100 [ 1577.856428][T13814] cifs_crypto_secmech_release+0x32/0x110 [ 1577.862159][T13814] cifs_put_tcp_session+0x20b/0x320 [ 1577.867369][T13814] cifs_mount_put_conns+0xb4/0x280 [ 1577.872579][T13814] cifs_mount+0xdc/0x650 [ 1577.876828][T13814] ? __rwlock_init+0x150/0x150 [ 1577.881605][T13814] ? cifs_is_path_remote+0x6f0/0x6f0 [ 1577.886911][T13814] ? do_raw_spin_unlock+0x121/0x230 [ 1577.892124][T13814] ? smb3_update_mnt_flags+0x52f/0xc10 [ 1577.897591][T13814] ? cifs_setup_cifs_sb+0x52f/0x840 [ 1577.902816][T13814] cifs_smb3_do_mount+0x2e5/0x710 [ 1577.907909][T13814] ? cifs_sb_deactive+0x80/0x80 [ 1577.912782][T13814] ? vfs_parse_fs_string+0x10f/0x170 [ 1577.918091][T13814] ? vfs_parse_fs_param+0x420/0x420 [ 1577.923312][T13814] smb3_get_tree+0x5a5/0xa90 [ 1577.927920][T13814] vfs_get_tree+0x8c/0x280 [ 1577.932354][T13814] do_new_mount+0x24a/0xa40 [ 1577.936871][T13814] __se_sys_mount+0x2e7/0x3d0 [ 1577.941560][T13814] ? __x64_sys_mount+0xc0/0xc0 [ 1577.946333][T13814] ? lockdep_hardirqs_on+0x98/0x150 [ 1577.951541][T13814] ? __x64_sys_mount+0x20/0xc0 [ 1577.956332][T13814] do_syscall_64+0x55/0xb0 [ 1577.960775][T13814] ? clear_bhb_loop+0x40/0x90 [ 1577.965477][T13814] ? clear_bhb_loop+0x40/0x90 [ 1577.970163][T13814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1577.976061][T13814] RIP: 0033:0x7f85f279e159 [ 1577.980488][T13814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.000107][T13814] RSP: 002b:00007f85f363e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1578.008535][T13814] RAX: ffffffffffffffda RBX: 00007f85f2a26090 RCX: 00007f85f279e159 [ 1578.016514][T13814] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 1578.024491][T13814] RBP: 00007f85f283506b R08: 0000000000000000 R09: 0000000000000000 [ 1578.032469][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1578.040458][T13814] R13: 00007f85f2a26128 R14: 00007f85f2a26090 R15: 00007ffd549e8478 [ 1578.048456][T13814] [ 1578.052120][T13814] Kernel Offset: disabled [ 1578.056457][T13814] Rebooting in 86400 seconds..