last executing test programs: 6m34.61448248s ago: executing program 3 (id=977): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffeb8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 6m32.626036214s ago: executing program 3 (id=979): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x2cc31, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./bus\x00') r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) 6m31.400196216s ago: executing program 1 (id=980): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50]}, 0x34) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYBLOB="09e200000000000000000000000000000000e200"], 0x48) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) r1 = socket$kcm(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)=']', 0x1}], 0x1}, 0x20004040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="ac184d", @ANYRESHEX, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6m24.289964003s ago: executing program 1 (id=989): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0xfffffffffffffeb8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 6m20.766321634s ago: executing program 1 (id=992): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 6m19.333083819s ago: executing program 3 (id=995): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000200)=ANY=[@ANYBLOB='#syz1only\x00\x00'], &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 6m15.112632019s ago: executing program 3 (id=998): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000003"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1', 0x1) 6m14.483145651s ago: executing program 1 (id=1000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000024000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x8841) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="14010000140001002dbd7000fcdbdf2502"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x83}, "3646d3d56918e14feba6f5c3712b58bb62e203a3ba7bdb10661fd5c4a057b1125de0ae5fb950c87ebaceca4a4613de0346ba6f0ecdbf16f5d1d6edb3c39c3d1a57e1a259ed746367d1635873a22859d0094018fb6de83e67ab1134168fbf1376c4f85be3a5a51444ea7e97de43dc994f8bcd704f3c62ee37cb4cf9566bc99c343725fd"}, 0x87) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x8}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x11}, @TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x12}]}}]}, 0x58}}, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000001680)={&(0x7f0000000680)=[0xfffffff8, 0xc253, 0x100, 0xbbc8, 0x6, 0x7, 0xf, 0x0, 0xffffffc7, 0x4775, 0x4, 0x6, 0x7, 0xe, 0x9633, 0x0, 0x0, 0x0, 0x9, 0x7, 0xf409, 0x1, 0xdc, 0x7f, 0x7, 0x5, 0x1ff, 0x5, 0xf63, 0x403, 0x8, 0x9, 0x6, 0x2, 0x3b, 0x3, 0x80000001, 0x21ff, 0x8, 0x9, 0xa1e, 0x2, 0x81, 0x8, 0x9, 0x8000, 0x2, 0x8001, 0x81, 0x8, 0x8, 0x0, 0x9, 0x3, 0x2400000, 0x6, 0x1, 0x78, 0x4, 0x1, 0x1, 0x3, 0x800, 0x2, 0x6, 0xc, 0xfffffff8, 0x1, 0x7fffffff, 0x1, 0x2, 0x9, 0x0, 0x2, 0xddb, 0x3, 0x8, 0x0, 0xffffffff, 0x7, 0x292, 0x81, 0x711f8814, 0x0, 0xf, 0x1c4, 0xa4, 0x10000, 0x7f, 0x2, 0x2, 0x1ff, 0x100, 0x7ff, 0x1ff, 0x8, 0x6, 0x0, 0x100, 0x1, 0x4, 0x7, 0x1d99, 0x10001, 0x2c, 0x100, 0x3, 0x9, 0x7fffffff, 0x1, 0x8, 0xd4e2, 0xffffffff, 0x9, 0x0, 0x2, 0x9, 0x2, 0x1, 0x117, 0x8e, 0x9, 0x4, 0x94f6, 0x8, 0x327c, 0x5, 0x4000000, 0x10001, 0x8001, 0xd, 0x1ff, 0x24800000, 0x1, 0x7, 0x0, 0x4, 0x7, 0xf, 0x1, 0x4, 0x3, 0x6, 0x8, 0x8, 0xc, 0x101, 0x3, 0x57fb, 0xf, 0x8, 0x900000, 0xffffffff, 0x1, 0x3, 0x8, 0xc0, 0x4, 0x7ff, 0x7fffffff, 0xf, 0x1, 0x8f9, 0x8, 0x3, 0x0, 0xfffffff9, 0x1, 0xfffffffe, 0x4, 0x5ae5, 0x2, 0x9e984120, 0x0, 0x7f, 0x0, 0x10000, 0x7fffffff, 0x200, 0x5, 0x6, 0x9, 0x7fff, 0x2, 0x5, 0x1, 0xffffffd0, 0x10001, 0xfffffff7, 0x3, 0x5, 0xb, 0xff, 0x5, 0xff8, 0x8, 0x60f8, 0x3d0, 0x7, 0x6, 0x401, 0x5, 0x9, 0x200, 0x0, 0x4, 0xc, 0x8, 0x6, 0x7, 0xdc, 0x0, 0x848f, 0x1, 0x8, 0x8001, 0x5, 0x7, 0xf, 0x4, 0x5, 0xd79, 0xf, 0x4, 0x8, 0xb1, 0x5, 0x4, 0xfff, 0x2, 0x1, 0xfffffffb, 0xfffffff1, 0x80, 0x5, 0x100, 0x3, 0x1, 0x5, 0x9, 0x5, 0x3, 0x8, 0x3, 0x7, 0x1, 0x10000, 0x8, 0xff, 0x4, 0x7f, 0x1, 0x7, 0x1, 0xd301, 0x47, 0x9, 0xff, 0x4d7, 0x3, 0xa, 0x5, 0xf9b, 0x0, 0x7f, 0x0, 0x0, 0x8001, 0x7ff, 0xfffffe01, 0x5f, 0x7, 0xb, 0x85, 0x8, 0x6, 0x6, 0xd00, 0xd6, 0x2, 0xb0, 0x2, 0xfffffff6, 0x3, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x4, 0x2003, 0xffff, 0x3, 0xa, 0x7, 0x7, 0x6, 0x401, 0x0, 0xc, 0x7, 0x21, 0x80, 0x6, 0x27201a63, 0xffff0000, 0xffff, 0x40044af5, 0x67, 0x8, 0xfffffffb, 0x9, 0x7, 0x1, 0x7fffffff, 0x8, 0x2, 0x0, 0x4, 0xfffffffa, 0x9, 0x1, 0xfffffff2, 0x7ff, 0xffff, 0x10001000, 0x1ff, 0x4, 0x6, 0x10, 0xf7, 0x200, 0x7, 0x4, 0xb, 0x6, 0x7ff, 0x8, 0x5, 0xbe8, 0x200, 0x800, 0xfffff378, 0xfff, 0x0, 0x6, 0x2, 0x9, 0x4, 0x1ff, 0xba94, 0x5a5, 0x1ff, 0x7ff, 0xfffffffc, 0x19, 0x8, 0x6, 0x329, 0x83, 0x0, 0x0, 0x1, 0xff, 0x10000000, 0x1000, 0xfffffffc, 0x7, 0x3, 0x9, 0x4, 0x1, 0xffffff81, 0x80000001, 0x9, 0x1, 0x820, 0xffffffff, 0x7, 0x6, 0x1, 0xcc, 0x1, 0x7, 0x94e, 0x7, 0x9, 0x3, 0x1, 0x2, 0x2a3a8ffe, 0x5, 0x8, 0x6, 0x0, 0x8, 0x3, 0x80, 0x1, 0x4, 0x2, 0x1, 0x4, 0x4, 0x9, 0x8, 0x5, 0x9, 0x7bd, 0x5, 0x7, 0x9, 0x3, 0x8, 0x0, 0x3cc, 0x4, 0x6, 0x2, 0x80, 0x4, 0xe, 0x81, 0x8, 0x6, 0xd, 0x7f, 0x10, 0xa0, 0x4, 0x7, 0x686, 0x20000000, 0x101, 0x1, 0x3ff, 0x6, 0x67a7, 0x4, 0x3, 0x8, 0xd41, 0xf8, 0x7, 0x7, 0x9, 0xffffff7f, 0x6, 0x1000, 0x1, 0x4, 0x6, 0x7, 0x9, 0x8, 0x3, 0x7f, 0x0, 0xb8c, 0x0, 0x5, 0x7, 0x2, 0x3, 0x8, 0x80000000, 0xff, 0xa4c, 0x7, 0x7, 0x8, 0x5, 0x0, 0x9, 0xaedc, 0x6, 0x3, 0xf, 0x10000, 0xdb, 0x7fff, 0x3ae, 0x1, 0xfffffff1, 0x1, 0x4, 0x7ff, 0x1, 0x7fffffff, 0x3ff, 0x1, 0x3ff, 0x6ca1, 0x8000, 0x10001, 0x0, 0x3dc, 0xfff, 0x3, 0x10000, 0x6, 0x7f, 0xfffffffa, 0x2, 0x0, 0x2, 0x0, 0x1e, 0x9b4, 0x1, 0x3, 0x53e, 0x20, 0x0, 0xfff, 0x9, 0x0, 0x1, 0x2, 0x0, 0x7, 0x0, 0xade, 0x4ac, 0xd, 0x8, 0x29, 0xffffffff, 0x975, 0x7, 0x6, 0x7fff, 0x8, 0x0, 0x9, 0xfa, 0x9, 0x2a4b6444, 0xb69, 0x5cd, 0xfffffff7, 0x8, 0x2, 0x6, 0x9, 0x0, 0xb, 0x80000001, 0x7, 0x2, 0x7cb4, 0x4, 0x1, 0x0, 0xc, 0xfffffff7, 0x339b, 0x0, 0xffffffff, 0x4, 0x6, 0x7fff, 0x10001, 0x100, 0x9, 0x10001, 0xdc8, 0x2, 0x467, 0xe842, 0x7, 0x80000001, 0x43, 0xf0a8, 0x5, 0x9, 0x8, 0x80, 0xb02, 0x4, 0x1, 0x4a, 0x8000, 0x7, 0x8, 0x3, 0xa9, 0x3, 0x8001, 0x8, 0x0, 0x81, 0x8, 0x96, 0x1, 0x6, 0x2, 0x80000000, 0x8, 0x1, 0x4, 0x8, 0x1, 0x6, 0x2, 0x9086, 0x12, 0x9, 0x5, 0x6, 0xc, 0x7, 0x3, 0x5, 0x7, 0xe, 0x2, 0x2, 0x100, 0x6, 0x7e24, 0x7fff, 0x0, 0x6, 0x1, 0x4, 0xfff, 0xfc6, 0x6, 0x641b, 0xea, 0x3, 0xb900, 0x9, 0x3, 0x223, 0x1, 0x6, 0x6, 0xecc, 0x4000000, 0xfffff000, 0x6, 0xb, 0x8, 0x73d7, 0x0, 0x8, 0xfffffc01, 0x0, 0x5, 0xd7, 0x0, 0x4, 0x2, 0x0, 0x3, 0x3, 0x7, 0x1ff, 0x9, 0x10000, 0x6, 0x5f5, 0x6, 0x3, 0x6, 0x401, 0x1, 0x101, 0x5, 0x0, 0xc2, 0x33c, 0x0, 0x7, 0x4, 0xb, 0xc6a7, 0x80000000, 0x1, 0x3, 0xa530, 0xa, 0x2, 0x9, 0x6, 0x6, 0x4, 0x5, 0x8, 0x1000000, 0xd, 0x2, 0xfff, 0x3c4, 0x2, 0x7fff, 0x8, 0x1ff, 0x4, 0x2, 0x1, 0x7, 0x2, 0x9c, 0x5, 0xc6, 0x5, 0x3, 0x3, 0x9dd, 0x8d1, 0x3, 0x4, 0x0, 0x40, 0x0, 0x3, 0x10001, 0xe4ef, 0x7, 0x9, 0x41cb, 0x40000, 0xae, 0xfffffffd, 0x7, 0x9, 0x5, 0x4, 0xfff, 0x4020, 0x5, 0x3, 0x3, 0x10001, 0x3, 0xb, 0x2, 0x7, 0x5, 0x9, 0x98, 0x9, 0x80, 0x8, 0x6, 0x4, 0x400, 0x8, 0x1, 0x3, 0x5524bcda, 0x3318, 0xfffffffe, 0x9, 0xfffffffe, 0x9, 0x6, 0x0, 0x1, 0x4, 0x200, 0xffffffff, 0xcdbf, 0xfb7, 0x0, 0x4, 0x2, 0x7, 0x2, 0x1, 0xe, 0x85, 0x0, 0x1, 0x80000000, 0x5a0000, 0x4, 0x0, 0x2, 0x0, 0x7fffffff, 0x3, 0x9, 0x2f8, 0xf0a, 0x4, 0x1, 0x100, 0x4, 0x7, 0x6, 0x2, 0x4, 0x4, 0xae41, 0x7d63, 0xffffffff, 0x3d, 0x9, 0x3, 0x10001, 0x0, 0x4, 0x800000, 0x7, 0x9, 0x0, 0x9, 0x5, 0x6, 0x3, 0x1, 0x6, 0x2, 0x4, 0x8a, 0x3, 0x7, 0xe, 0x8000, 0x2, 0x1078, 0x7, 0x80000000, 0x5f, 0x8, 0x3, 0x4, 0xcb, 0x7, 0x9, 0x20a9, 0x4, 0x12000, 0x9, 0xab2, 0xfffffff8, 0x4, 0x0, 0xe0d5, 0x2, 0x0, 0x9, 0x69b8, 0x9, 0xf3, 0x80000000, 0x3, 0x7fffffff, 0x6ad3, 0xfffffe5a, 0x4d7, 0x2, 0x7, 0x47, 0xfa9b, 0xe8, 0x2, 0x2, 0x4, 0xc, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x80000000, 0x9, 0x5, 0x5, 0xfff, 0x7fffffff, 0x7, 0x743, 0xa, 0x3, 0x401, 0x5, 0x80000001, 0x2, 0x1, 0x0, 0x0, 0x2, 0x26bf3b1b, 0x2, 0x9aa, 0x6, 0x6, 0x3, 0x7, 0xfffffffb, 0xc, 0x6, 0x4b680ec9, 0x2, 0x4, 0xcc, 0x10000, 0x2415, 0x800, 0xfffffffa, 0x1, 0x100, 0x80000001, 0x1, 0x5bf, 0x9, 0x8, 0xa00000, 0x81, 0x81, 0x8, 0x5, 0x1000, 0x8, 0x9, 0x4, 0x3, 0x5, 0x4, 0x7, 0x8, 0x3c, 0x9, 0x1, 0x9, 0xfffffffc, 0x7694, 0x3, 0x81, 0xaec, 0x7fffffff, 0x3, 0x9, 0xfffffffa, 0x5, 0x401, 0x4b3f, 0xb, 0x7, 0x0, 0x7, 0x10000, 0x3, 0x4, 0xe8a9, 0x9cd7, 0x0, 0x4, 0x9, 0x2, 0x80, 0xcf04, 0x1, 0x60b, 0x4, 0xc, 0x6, 0x9, 0x8, 0x101, 0xffffffff, 0x0, 0x42be, 0x8001, 0x10, 0xc7ae, 0xc, 0x8, 0xc27, 0x400, 0xa, 0x0, 0xfffffbff, 0xfffffff7, 0xfc, 0x80000001, 0x9, 0x0, 0xfffffffe, 0x6, 0x80, 0x2, 0x8, 0x5, 0x0, 0xfffffff8, 0x2, 0x2, 0x6, 0x7, 0x4, 0xa2, 0x6, 0x6, 0xe, 0xa, 0x190b, 0x733681a8, 0x5, 0x4, 0x923, 0x5, 0x2, 0xffffff58, 0x6, 0xc1df, 0x0, 0x6179, 0x2, 0x8, 0x8, 0x401, 0x0, 0x8, 0x9ccd, 0x1, 0x8], 0x2, 0x400, 0xd41}) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x20, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x10, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 6m10.647787741s ago: executing program 1 (id=1007): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb060003"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0800000000000000df2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="00032cbd7000ffdbdf25180000002400098008000200020000000800020001000000080001000700000008000200100000003000028008000100a20d0000040004000800010000040000080001000000c600080002000700000008000200080000006400028008000200080000000800020008000000040004000c00038008000200000000000800020000010000040004003400038008000100000100000800010003000000080001000500000008000200ff03000008000200f8ffffff080001009c000000"], 0xcc}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f5", 0x16b, r6) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c02000000150005001601ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc10080400240200e260f9", 0x55}], 0x1}, 0x4008014) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 6m10.34530256s ago: executing program 3 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$peek(0x3, r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x1082, 0x0) 6m8.531344794s ago: executing program 1 (id=1009): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000180)={'veth0_to_bond\x00', 0x2}) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x880) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) socket$inet6(0xa, 0x3, 0x87) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x200104, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000400)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{0xb256, 0x28516288}, {0x4, 0x7f}]}) 6m6.782209403s ago: executing program 3 (id=1010): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 5m51.675796028s ago: executing program 32 (id=1009): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000180)={'veth0_to_bond\x00', 0x2}) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x880) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffcb9}]}) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) socket$inet6(0xa, 0x3, 0x87) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x200104, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000400)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000000)=[{0xb256, 0x28516288}, {0x4, 0x7f}]}) 5m51.167760559s ago: executing program 33 (id=1010): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 18.766065906s ago: executing program 2 (id=1413): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="f5afe34b0000ffffffff0e10000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 18.265288761s ago: executing program 2 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x2c00) 14.886193334s ago: executing program 2 (id=1422): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xfffffffffffffd9f, 0x19, 0x1, 0x70ad2b, 0x10000, {{@in6=@local, @in=@remote, 0x0, 0xdb, 0x0, 0x0, 0x2, 0x20, 0x0, 0x62, 0x0, r2}, {0xffff, 0x10, 0x100100002, 0x100, 0x1001, 0xffffffffffffb472, 0xffffffffffffffff, 0x81}, {0x1, 0x2000000000000003, 0x10000002, 0xffffffbfffffffff}, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x4004) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0x5}, &(0x7f00000003c0)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c03209040000010202010005240010010524060001070525"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={r4, 0x1, r0, 0x4b09}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0xc}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, {0x4}}]}]}, 0x7c}}, 0x4000010) r6 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x20, 0x23, 0xad, {0xad, 0xb, "c9ba5601a156073648b85659326aad62dca28229ddeeb14948b02d424ea4021e4b3fa951d29a339b46fe57a5a3529be519ec5a98e9f57c4438f4728bdee5d99500afc9a950a085ef28432c605139ceac736d85b61c7a24d090b26a34ef532ddc1a8884238cb5a89fc27cacbdf421cad14ddc52c838f93111e042152817d24b13eafef6634fde950042db2cce3d93cfc1d4fb4353d2ee8c86ea608b59a81b5008a327fd8f634fe30967079b"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x953847d93adbf6c4}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x0, 0xf, 0x43, "fcf6d7782d48aaae2fedb651072ee1ae0667308127326430fc4c5033f2b64d434f0a56edd56bc6970eae8246955d5feb46bec04c52cbc55ecd7a8a40d3466a98fc73a6"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x200}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x4}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "77dea1533028de35a30a39fcd9b5d68694f875282bdb74c4d29ea0bba38c84488d6621bdfe5f1243769f4937de857e"}}) 12.486819186s ago: executing program 0 (id=1425): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a4ad7c"], 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7}}, @var={0x6, 0x0, 0x0, 0xe, 0x1}, @var={0xd, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000440)=""/35, 0x53, 0x23, 0x1, 0x39}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@multicast2, @loopback, 0xff, 0x0, 'gretap0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x89, 0x0, 0x9}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x1, 0x2, 0x1, 0x0, 0x2], 0x1}, {0x1, [0x1, 0x1, 0x1, 0x1, 0x3, 0x4], 0x4, 0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3b}, @local, 0xffffff00, 0x0, 'veth0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x16, 0x2, 0x49}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x9, 0xf1, 'pptp\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000005540)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x404c800) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0900000000000000009a9cf40000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setns(0xc9, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000600)="da", &(0x7f0000000000)=""/6, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004440)={0x11, 0x14, &(0x7f0000004380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x22) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000500)={0x1f, @none}, 0x8) 12.411735816s ago: executing program 4 (id=1426): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c000780080004000400000008000100070000000800020009000000080004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb060003"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0800000000000000df2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc00", @ANYRES16=r2, @ANYBLOB="00032cbd7000ffdbdf25180000002400098008000200020000000800020001000000080001000700000008000200100000003000028008000100a20d0000040004000800010000040000080001000000c600080002000700000008000200080000006400028008000200080000000800020008000000040004000c00038008000200000000000800020000010000040004003400038008000100000100000800010003000000080001000500000008000200ff03000008000200f8ffffff080001009c000000"], 0xcc}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x16b, r7) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c02000000150005001601ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc10080400240200e260f9", 0x55}], 0x1}, 0x4008014) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x290302, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000400000000000000000000f3850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 11.647274961s ago: executing program 5 (id=1428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004380)=@deltfilter={0x40, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.695744418s ago: executing program 5 (id=1429): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000100)=0x3ff, 0x4) 10.591261034s ago: executing program 6 (id=1430): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="01000000000000000000e787df0000000000000000dc050000000000000000010000000000000000050100000000040000000000000072c2e4e50000000000000000000000000000000500"/84, 0x54) syz_open_procfs(0x0, &(0x7f00000005c0)='sched\x00') socket$kcm(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 9.888837255s ago: executing program 4 (id=1431): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffd, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac1414"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000000600)=""/46, &(0x7f0000000480)=0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x8, 0x2010, r5, 0x2e2b000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001a40)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) 9.63593828s ago: executing program 0 (id=1432): r0 = syz_open_dev$video(&(0x7f0000000140), 0xffffffffffffa4d0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x400) flock(0xffffffffffffffff, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000014000780080012400006000008000840000000370d000300686173683a6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x8800) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x9, @pix_mp={0x1000, 0x2, 0x32315258, 0x8, 0xc, [{0xe, 0xffff53bb}, {0xc56a, 0x8}, {0xe1, 0x5}, {0x2, 0x4}, {0xffffffff, 0x9}, {0x1ef, 0xd}, {0x5, 0x9}, {0x5, 0xfffffff6}], 0x6, 0x0, 0x4, 0x2, 0x3}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r6, 0x18, 0x0, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xffff}}, 0x6, 0x0, 0x3fc, 0x4, 0x32, 0x3, 0xb4}, 0x9c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000100989032be000000000a00000a54000000090a030000000000000000000000000208000840000000bb080005400000003108000a400000000308000340000001100900020073797a310000000008000c4000000788090001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x3, 0x1, [0xfffffffd, 0xf117, 0x1, 0x4, 0x9, 0xc, 0x1, 0x4]}) 9.635628712s ago: executing program 5 (id=1433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x11, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x7, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x8, 0xfc, 0x1, 0x0, 0x0, 0x2, 0x3}, {0x2000, 0x2, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xd, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xfc, 0x6, 0x12}, {0x80a0000, 0x7000, 0x10, 0x4, 0x4, 0x8, 0xfb, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x12}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0xd000, 0x0, 0xfc, 0x0, 0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x80000003, 0x0, 0x1]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1, 0xc, 0x63, 0x200002000001, 0x1000, 0x6, 0x5, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xc, 0xe, 0x0, "3258ae1e10004000"}) 9.590024982s ago: executing program 6 (id=1434): socket$nl_generic(0x10, 0x3, 0x10) open$dir(0x0, 0xd4002, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 9.589441391s ago: executing program 4 (id=1435): write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.498811745s ago: executing program 6 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) 8.152445091s ago: executing program 0 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f00000003c0)="25377ffff1beaa3f90ddc0c1ce88fe41e6de78c43f58ce23cf8fb38040bcc368925cd42338a0f061c12c0176e55ade6e08d7b2fb8fa58bc09eb3e44d6a557434df763115967dfa48ed9a3a5178e6979ba758d086fbab939a614f49f91aa8d0df53cb07d98c33efd560a188ed3d7554cc7959c95a955a52434b4912", 0x7b}, {&(0x7f0000000580)="9af7238f7094ec05a22edeaceebedf0a470c07115ea5e1d52126bc49ce0d0b161f318adfeb60713b6cdd8db564d222af6f5dddbf32b7ee0eb5477b", 0x3b}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.013602132s ago: executing program 2 (id=1438): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) 4.930203217s ago: executing program 4 (id=1439): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r0, 0x402, 0x80000038) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x40080) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/26, 0xfdef, 0xff) 4.846740402s ago: executing program 0 (id=1440): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './tracing', [], 0xa, "f5a753fe1c521a74db926348206e6481978ab3d88c287a11eb3127bf"}, 0x29) 4.78620461s ago: executing program 2 (id=1441): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x4000}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaa00f0"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='44100,48000,88200,96000', 0x17) 4.751296997s ago: executing program 6 (id=1442): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b000100000001090401"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) 2.80577298s ago: executing program 4 (id=1443): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000200)={@any, 0x1e, 0x6, 0x9, 0x2, 0x1, "bee60ab1fb5b67fcdb058153b7deb937505ae23ee93051004e78954f8ddd188aa4cef2a6e51c508ec9278f2b8174a863203ca8d5b54b43f03b0a60e09b95f1af6ab60fd14009f766dec76c9c314b401332f3a4cd53ffccc7545cfc031235756f24b2d01bfc97575923fa09be49b70b64a09acfe34bd211d6a37f313e9b9cd802"}) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) 2.717468232s ago: executing program 0 (id=1444): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000000080), 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r1, 0x3, 0x0, &(0x7f0000000400), &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 2.558687241s ago: executing program 5 (id=1445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x91}}], 0x1, 0x240088e0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000480)=""/66, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000040)='\'\x00', 0x200a01, &(0x7f0000000140)={@_ha_fsid={[0x8, 0x8]}, {0x6, 0x1, 0x0, 0xfffffffffffffffd}}, 0x9, &(0x7f0000000180), &(0x7f0000000240)=0x4}) 926.915082ms ago: executing program 4 (id=1446): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x83, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x28, 0x1056}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(r0, &(0x7f0000000000)='./config\x00', 0x1c9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x2) write(r4, &(0x7f0000000e80)="01000000070538abb5ce00", 0xb) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) fcntl$setownex(r1, 0xf, 0x0) 257.568776ms ago: executing program 5 (id=1447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0_to_bond\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x10, 0x7, 0x0, 0xf362, 0x8001, 0x80, 0xc, 0x8, 0xff}}) 236.211911ms ago: executing program 6 (id=1448): socket$netlink(0x10, 0x3, 0xc) r0 = syz_open_dev$dvb_frontend(0x0, 0xc6ea, 0x48002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) 83.431664ms ago: executing program 0 (id=1449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), 0x0, &(0x7f0000000000)) syz_open_dev$sg(0x0, 0x0, 0x401) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x2000, 0x113000, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) 82.72875ms ago: executing program 6 (id=1450): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000008, 0x50, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001540)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r5, 0xaf02, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13.263684ms ago: executing program 2 (id=1451): shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000080)="01303030303030323030303089d8b99bcc0b6187aa702840d43da030303030302030", 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(r3, &(0x7f0000000180)=@file={0x0, './proc/net/rpc/auth.rpcsec.context/channel/../file0\x00'}, 0x6e) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) kexec_load(0x100000000, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x20004050) syz_clone3(&(0x7f0000001040)={0x200100, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) 0s ago: executing program 5 (id=1452): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) dup2(0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='7777\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) kernel console output (not intermixed with test programs): an endpoint descriptor with address 0x25, changing to 0x5 [ 544.374107][ T5572] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 544.374144][ T5572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.594165][ T5572] ims_pcu 3-1:1.0: Control endpoint is not INTERRUPT IN [ 544.594228][ T5572] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 544.844235][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 544.844456][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 545.180336][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 546.196848][ T9199] PKCS7: Unknown OID: [4] 0.0 [ 546.196867][ T9199] PKCS7: Only support pkcs7_signedData type [ 546.621124][ T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 546.689000][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 546.689035][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 546.689078][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.703396][ T31] usb 5-1: config 0 descriptor?? [ 546.770359][ T5572] usb 3-1: USB disconnect, device number 16 [ 547.134476][ T5601] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 547.192495][ T31] ath6kl: Failed to submit usb control message: -71 [ 547.192545][ T31] ath6kl: unable to send the bmi data to the device: -71 [ 547.192560][ T31] ath6kl: Unable to send get target info: -71 [ 547.196013][ T31] ath6kl: Failed to init ath6kl core: -71 [ 547.232510][ T31] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 547.435440][ T31] usb 5-1: USB disconnect, device number 14 [ 547.876287][ T9222] bond0: option arp_interval: invalid value ( ) [ 547.876313][ T9222] bond0: option arp_interval: allowed values 0 - 2147483647 [ 549.022943][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 550.747030][ T9238] binder: 9237:9238 ioctl c0306201 200000000080 returned -14 [ 551.600274][ T5593] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 551.751125][ T5593] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 551.753588][ T5593] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.765215][ T5593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.765242][ T5593] usb 3-1: Product: syz [ 551.765269][ T5593] usb 3-1: Manufacturer: syz [ 551.765284][ T5593] usb 3-1: SerialNumber: syz [ 551.816795][ T5593] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 551.990333][ T8951] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 552.151678][ T8951] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 552.153473][ T8951] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.153498][ T8951] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.153606][ T8951] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x25, changing to 0x5 [ 552.153633][ T8951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.153672][ T8951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.220734][ T8951] ims_pcu 1-1:1.0: Control endpoint is not INTERRUPT IN [ 552.221346][ T8951] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -22 [ 552.374891][ T9266] kAFS: No cell specified [ 552.622794][ T5593] gspca_mr97310a: reg read [21] error -110 [ 552.623045][ T5593] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 553.325934][ T10] usb 1-1: USB disconnect, device number 23 [ 553.433897][ T5593] usb 3-1: USB disconnect, device number 17 [ 555.464191][ T9292] kAFS: No cell specified [ 556.360934][ T9295] binder: 9293:9295 ioctl c0306201 200000000080 returned -14 [ 560.721557][ T9314] loop9: detected capacity change from 0 to 7 [ 560.722457][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.722505][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.722540][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.722572][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.722623][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.725339][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.725397][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.725417][ T9314] ldm_validate_partition_table(): Disk read failed. [ 560.725444][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.725474][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.725505][ T9314] Buffer I/O error on dev loop9, logical block 0, async page read [ 560.725539][ T9314] Dev loop9: unable to read RDB block 0 [ 560.725615][ T9314] loop9: unable to read partition table [ 560.725825][ T9314] loop9: partition table beyond EOD, truncated [ 560.725843][ T9314] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 560.725843][ T9314] ) failed (rc=-5) [ 560.937822][ T9318] netlink: 72 bytes leftover after parsing attributes in process `syz.1.884'. [ 561.235956][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 562.770335][ T5703] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 563.223909][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.223974][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.454809][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 564.044602][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 564.044662][ T5703] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 564.045648][ T5703] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 564.045682][ T5703] usb 3-1: can't read configurations, error -71 [ 564.177150][ T9348] kAFS: No cell specified [ 565.205474][ T9360] loop9: detected capacity change from 0 to 7 [ 565.207524][ T9360] ldm_validate_partition_table(): Disk read failed. [ 565.207607][ T9360] Dev loop9: unable to read RDB block 0 [ 565.207673][ T9360] loop9: unable to read partition table [ 565.207868][ T9360] loop9: partition table beyond EOD, truncated [ 565.207888][ T9360] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 565.207888][ T9360] ) failed (rc=-5) [ 565.634360][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 571.219943][ T9396] kAFS: No cell specified [ 572.636092][ T9400] kAFS: No cell specified [ 576.138075][ T9419] loop9: detected capacity change from 0 to 7 [ 576.138788][ T9419] buffer_io_error: 28 callbacks suppressed [ 576.138884][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.138926][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.138959][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.138989][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.139040][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.139084][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.139114][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.139131][ T9419] ldm_validate_partition_table(): Disk read failed. [ 576.139159][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.139269][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.139301][ T9419] Buffer I/O error on dev loop9, logical block 0, async page read [ 576.139333][ T9419] Dev loop9: unable to read RDB block 0 [ 576.139399][ T9419] loop9: unable to read partition table [ 576.207940][ T9419] loop9: partition table beyond EOD, truncated [ 576.207977][ T9419] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 576.207977][ T9419] ) failed (rc=-5) [ 576.420454][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 576.570251][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 576.571528][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.573290][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.573313][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.578939][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.578966][ T31] usb 5-1: Product: syz [ 576.578981][ T31] usb 5-1: Manufacturer: syz [ 576.578996][ T31] usb 5-1: SerialNumber: syz [ 576.662978][ T31] usb 5-1: 0:2 : does not exist [ 576.889758][ T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 577.227916][ T31] usb 5-1: USB disconnect, device number 15 [ 579.156808][ T9366] udevd[9366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.260570][ T5572] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 579.391132][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 579.430964][ T5572] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 579.434683][ T5572] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 579.434709][ T5572] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 579.434728][ T5572] usb 2-1: config 171 has no interface number 0 [ 579.434781][ T5572] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 14129, setting to 64 [ 579.434809][ T5572] usb 2-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 579.437472][ T5572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.437495][ T5572] usb 2-1: Product: syz [ 579.437510][ T5572] usb 2-1: Manufacturer: syz [ 579.437524][ T5572] usb 2-1: SerialNumber: syz [ 579.491707][ T9462] kAFS: No cell specified [ 579.540496][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 579.570712][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 579.577854][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.577898][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.561206][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.561238][ T31] usb 5-1: Product: syz [ 580.561253][ T31] usb 5-1: Manufacturer: syz [ 580.561267][ T31] usb 5-1: SerialNumber: syz [ 580.722877][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 580.722934][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 580.763102][ T31] usb 5-1: 0:2 : does not exist [ 580.957168][ T31] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 581.356715][ T31] usb 5-1: USB disconnect, device number 16 [ 582.208299][ T5572] ath6kl: Failed to submit usb control message: -110 [ 582.208347][ T5572] ath6kl: unable to send the bmi data to the device: -110 [ 582.208362][ T5572] ath6kl: Unable to send get target info: -110 [ 582.209650][ T5572] ath6kl: Failed to init ath6kl core: -110 [ 582.211864][ T5572] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 582.590396][ T5572] usb 2-1: USB disconnect, device number 18 [ 583.028683][ T9366] udevd[9366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 591.216142][ T9548] loop9: detected capacity change from 0 to 7 [ 591.218416][ T9548] buffer_io_error: 9 callbacks suppressed [ 591.218434][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218477][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218513][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218543][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218593][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218635][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218667][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218684][ T9548] ldm_validate_partition_table(): Disk read failed. [ 591.218710][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218737][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218767][ T9548] Buffer I/O error on dev loop9, logical block 0, async page read [ 591.218798][ T9548] Dev loop9: unable to read RDB block 0 [ 591.218862][ T9548] loop9: unable to read partition table [ 591.219048][ T9548] loop9: partition table beyond EOD, truncated [ 591.219101][ T9548] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 591.219101][ T9548] ) failed (rc=-5) [ 591.270461][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 591.421617][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 591.423170][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.425393][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.425417][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.435222][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.435249][ T10] usb 2-1: Product: syz [ 591.435263][ T10] usb 2-1: Manufacturer: syz [ 591.435277][ T10] usb 2-1: SerialNumber: syz [ 591.555354][ T10] usb 2-1: 0:2 : does not exist [ 591.752570][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 595.253729][ T10] usb 2-1: USB disconnect, device number 19 [ 595.603182][ T9366] udevd[9366]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.930277][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 596.650322][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 596.849442][ T10] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 596.866028][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.866060][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 596.866087][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 596.866120][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.917600][ T10] usb 2-1: config 0 descriptor?? [ 598.467909][ T10] pantherlord 0003:0810:0001.0009: no output reports found [ 598.532771][ T10] pantherlord 0003:0810:0001.0009: hidraw0: USB HID v0.0a Joystick [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 599.158256][ T31] usb 2-1: USB disconnect, device number 20 [ 600.360336][ T5572] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 600.539330][ T5572] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 600.651044][ T5572] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 600.651085][ T5572] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 600.651420][ T5572] usb 3-1: config 171 has no interface number 0 [ 600.651780][ T5572] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 600.651850][ T5572] usb 3-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 600.822227][ T9606] fido_id[9606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 600.822570][ T5572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.822585][ T5572] usb 3-1: Product: syz [ 600.822593][ T5572] usb 3-1: Manufacturer: syz [ 600.822600][ T5572] usb 3-1: SerialNumber: syz [ 601.112863][ T5572] ath6kl: Failed to submit usb control message: -71 [ 601.112917][ T5572] ath6kl: unable to send the bmi data to the device: -71 [ 601.112932][ T5572] ath6kl: Unable to send get target info: -71 [ 601.743369][ T5572] ath6kl: Failed to init ath6kl core: -71 [ 601.963870][ T5572] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 602.011415][ T5572] usb 3-1: USB disconnect, device number 20 [ 604.007169][ T9627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.850290][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 606.020522][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 606.021682][ T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 606.022934][ T10] usb 1-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 606.022986][ T10] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.023007][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 606.023026][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.029902][ T10] usb 1-1: config 0 descriptor?? [ 606.073252][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 609.125392][ T10] usb 1-1: USB disconnect, device number 24 [ 609.409317][ T9678] FAULT_INJECTION: forcing a failure. [ 609.409317][ T9678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.409354][ T9678] CPU: 0 UID: 0 PID: 9678 Comm: syz.4.972 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 609.409377][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.409388][ T9678] Call Trace: [ 609.409397][ T9678] [ 609.409406][ T9678] dump_stack_lvl+0xe8/0x150 [ 609.409442][ T9678] should_fail_ex+0x46b/0x600 [ 609.409500][ T9678] _copy_from_iter+0x1d3/0x1660 [ 609.409532][ T9678] ? trace_kmem_cache_alloc+0x29/0xe0 [ 609.409562][ T9678] ? __pfx__copy_from_iter+0x10/0x10 [ 609.409584][ T9678] ? __alloc_skb+0x27a/0x7a0 [ 609.409611][ T9678] ? __alloc_skb+0x27a/0x7a0 [ 609.409643][ T9678] ? netlink_sendmsg+0x650/0xb40 [ 609.409666][ T9678] ? skb_put+0x112/0x210 [ 609.409688][ T9678] netlink_sendmsg+0x6c0/0xb40 [ 609.409720][ T9678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.409745][ T9678] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 609.409780][ T9678] ? __kernel_text_address+0xd/0x30 [ 609.409802][ T9678] ? unwind_get_return_address+0x4d/0x90 [ 609.409829][ T9678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.409850][ T9678] sock_sendmsg_nosec+0x13a/0x180 [ 609.409879][ T9678] sock_write_iter+0x2e4/0x3f0 [ 609.409906][ T9678] ? __pfx_sock_write_iter+0x10/0x10 [ 609.409948][ T9678] do_iter_readv_writev+0x624/0x8d0 [ 609.409976][ T9678] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 609.410005][ T9678] ? bpf_lsm_file_permission+0x9/0x20 [ 609.410025][ T9678] ? security_file_permission+0x75/0x260 [ 609.410051][ T9678] ? rw_verify_area+0x209/0x4d0 [ 609.410077][ T9678] vfs_writev+0x34c/0x990 [ 609.410106][ T9678] ? do_raw_spin_lock+0x12b/0x2f0 [ 609.410129][ T9678] ? __pfx_vfs_writev+0x10/0x10 [ 609.410162][ T9678] ? __fget_files+0x2a/0x420 [ 609.410187][ T9678] ? __fget_files+0x3a8/0x420 [ 609.410206][ T9678] ? __fget_files+0x2a/0x420 [ 609.410234][ T9678] do_writev+0x15a/0x2e0 [ 609.410263][ T9678] ? __pfx_do_writev+0x10/0x10 [ 609.410301][ T9678] do_syscall_64+0x166/0x520 [ 609.410329][ T9678] ? trace_irq_disable+0x3b/0x140 [ 609.410354][ T9678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.410374][ T9678] ? clear_bhb_loop+0x70/0xc0 [ 609.410397][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.410417][ T9678] RIP: 0033:0x7f1a21c9e159 [ 609.410437][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.410453][ T9678] RSP: 002b:00007f1a1fe93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 609.410474][ T9678] RAX: ffffffffffffffda RBX: 00007f1a21f26270 RCX: 00007f1a21c9e159 [ 609.410489][ T9678] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 609.410509][ T9678] RBP: 00007f1a1fe93090 R08: 0000000000000000 R09: 0000000000000000 [ 609.410521][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.410533][ T9678] R13: 00007f1a21f26308 R14: 00007f1a21f26270 R15: 00007ffcca232c98 [ 609.410565][ T9678] [ 610.877522][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 610.877682][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 621.769839][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 621.770040][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 624.485882][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.486159][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.082016][ T9744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.830278][ T5703] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 626.983116][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 626.996022][ T5703] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 626.997726][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.997752][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.152653][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.152683][ T5703] usb 3-1: Product: syz [ 627.152696][ T5703] usb 3-1: Manufacturer: syz [ 627.152708][ T5703] usb 3-1: SerialNumber: syz [ 629.852961][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 631.055679][ T5703] usb 3-1: can't set config #1, error -71 [ 631.058982][ T5703] usb 3-1: USB disconnect, device number 21 [ 631.639631][ T9786] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1000'. [ 631.649777][ T5601] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 636.413866][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 640.024604][ T5703] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 640.360407][ T5703] usb 1-1: not running at top speed; connect to a high speed hub [ 640.360449][ T5703] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 640.363163][ T5703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.380265][ T6297] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 640.491672][ T5703] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 640.491699][ T5703] usb 1-1: Product: syz [ 640.491712][ T5703] usb 1-1: Manufacturer: syz [ 640.571306][ T6297] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 640.579471][ T6297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 640.579592][ T6297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 640.579637][ T6297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.682492][ T6297] usb 5-1: config 0 descriptor?? [ 640.721316][ T9827] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 640.868690][ T5703] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 640.868767][ T5703] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 641.168628][ T37] audit: type=1326 audit(1789848568.448:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.174411][ T37] audit: type=1326 audit(1789848568.478:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.174460][ T37] audit: type=1326 audit(1789848568.488:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.195484][ T37] audit: type=1326 audit(1789848568.488:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.195535][ T37] audit: type=1326 audit(1789848568.488:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.195575][ T37] audit: type=1326 audit(1789848568.488:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.195613][ T37] audit: type=1326 audit(1789848568.508:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.195652][ T37] audit: type=1326 audit(1789848568.508:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.235457][ T37] audit: type=1326 audit(1789848568.548:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 641.253719][ T5703] usb 1-1: USB disconnect, device number 25 [ 641.295949][ T37] audit: type=1326 audit(1789848568.578:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9825 comm="syz.0.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc050ee98e code=0x7ffc0000 [ 646.810638][ T6297] usbhid 5-1:0.0: can't add hid device: -32 [ 646.810724][ T6297] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 647.864172][ T6297] usb 5-1: USB disconnect, device number 18 [ 651.532662][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 654.144357][ T5719] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 654.320265][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 654.320861][ T5719] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.321898][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.321912][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.323730][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.323744][ T5719] usb 2-1: Product: syz [ 654.323751][ T5719] usb 2-1: Manufacturer: syz [ 654.323759][ T5719] usb 2-1: SerialNumber: syz [ 654.401805][ T5719] usb 2-1: 0:2 : does not exist [ 656.458413][ T5719] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 657.114528][ T9884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.696661][ T5719] usb 2-1: USB disconnect, device number 22 [ 658.057647][ T5588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 658.092720][ T5588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 658.096965][ T5588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 658.135926][ T5588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 658.138351][ T5588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 658.388352][ T5588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 658.457718][ T5588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 658.467813][ T5588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 658.486915][ T5588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 658.490421][ T5588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 658.541213][ T9366] udevd[9366]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.673407][ T9930] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1029'. [ 659.674387][ T5601] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 659.952951][ T5243] veth1_vlan: left promiscuous mode [ 660.281271][ T5601] Bluetooth: hci5: command tx timeout [ 660.443508][ T9933] FAULT_INJECTION: forcing a failure. [ 660.443508][ T9933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.443545][ T9933] CPU: 1 UID: 0 PID: 9933 Comm: syz.4.1032 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 660.443570][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.443583][ T9933] Call Trace: [ 660.443591][ T9933] [ 660.443600][ T9933] dump_stack_lvl+0xe8/0x150 [ 660.443637][ T9933] should_fail_ex+0x46b/0x600 [ 660.443670][ T9933] _copy_to_user+0x31/0xb0 [ 660.443707][ T9933] io_query+0x2dd/0x6d0 [ 660.443777][ T9933] ? __pfx_io_query+0x10/0x10 [ 660.443813][ T9933] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 660.443845][ T9933] ? rt_mutex_slowunlock+0x219/0x460 [ 660.443869][ T9933] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.443900][ T9933] __se_sys_io_uring_register+0x42c/0x1a20 [ 660.443933][ T9933] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 660.443960][ T9933] ? ksys_write+0x248/0x270 [ 660.443986][ T9933] ? __pfx_ksys_write+0x10/0x10 [ 660.444020][ T9933] do_syscall_64+0x166/0x520 [ 660.444047][ T9933] ? trace_irq_disable+0x3b/0x140 [ 660.444072][ T9933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.444093][ T9933] ? clear_bhb_loop+0x70/0xc0 [ 660.444117][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.444137][ T9933] RIP: 0033:0x7f1a21c9e159 [ 660.444155][ T9933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.444172][ T9933] RSP: 002b:00007f1a1fef6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 660.444194][ T9933] RAX: ffffffffffffffda RBX: 00007f1a21f25fa0 RCX: 00007f1a21c9e159 [ 660.444208][ T9933] RDX: 0000200000002700 RSI: 0000000000000023 RDI: ffffffffffffffff [ 660.444222][ T9933] RBP: 00007f1a1fef6090 R08: 0000000000000000 R09: 0000000000000000 [ 660.444234][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.444247][ T9933] R13: 00007f1a21f26038 R14: 00007f1a21f25fa0 R15: 00007ffcca232c98 [ 660.444278][ T9933] [ 660.680674][ T5601] Bluetooth: hci6: command tx timeout [ 662.370326][ T5601] Bluetooth: hci5: command tx timeout [ 662.771829][ T5601] Bluetooth: hci6: command tx timeout [ 664.440245][ T5601] Bluetooth: hci5: command tx timeout [ 664.846117][ T5601] Bluetooth: hci6: command tx timeout [ 666.520426][ T5601] Bluetooth: hci5: command tx timeout [ 666.714049][ T9995] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1039'. [ 666.716809][ T5601] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 667.011273][ T5601] Bluetooth: hci6: command tx timeout [ 674.218136][T10045] netlink: 'syz.0.1051': attribute type 17 has an invalid length. [ 674.218164][T10045] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1051'. [ 674.310456][T10045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.461956][ T5703] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 674.611307][ T5703] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 674.612915][ T5703] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 674.612947][ T5703] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 674.615896][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.615921][ T5703] usb 3-1: Product: syz [ 674.615936][ T5703] usb 3-1: Manufacturer: syz [ 674.615951][ T5703] usb 3-1: SerialNumber: syz [ 674.878849][ T5703] kaweth 3-1:1.0: Firmware present in device. [ 675.045783][ T5703] kaweth 3-1:1.0: Error reading configuration (-71), no net device created [ 675.046052][ T5703] kaweth 3-1:1.0: probe with driver kaweth failed with error -5 [ 675.100241][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 675.100251][ T5703] usb 3-1: USB disconnect, device number 22 [ 675.260924][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 675.261980][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 675.263564][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 675.263589][ T10] usb 5-1: config 0 has no interface number 0 [ 675.263635][ T10] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 675.263656][ T10] usb 5-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 675.266106][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.266129][ T10] usb 5-1: Product: syz [ 675.266143][ T10] usb 5-1: Manufacturer: syz [ 675.266158][ T10] usb 5-1: SerialNumber: syz [ 675.346897][ T10] usb 5-1: config 0 descriptor?? [ 675.358716][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 675.358986][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 675.453742][ T122] bridge_slave_1: left allmulticast mode [ 675.453858][ T122] bridge_slave_1: left promiscuous mode [ 675.480636][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.595001][ T122] bridge_slave_0: left allmulticast mode [ 675.595037][ T122] bridge_slave_0: left promiscuous mode [ 675.595306][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.079855][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 678.204924][T10077] Invalid argument reading file caps for ./file0 [ 681.612635][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.680865][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.721065][ T122] bond0 (unregistering): Released all slaves [ 682.056836][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.058670][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.380593][T10072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.386465][T10072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.348511][ T5593] usb 5-1: USB disconnect, device number 19 [ 683.582424][ T5601] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 683.617261][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 683.617281][ T37] audit: type=1326 audit(1789848610.928:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.625576][ T37] audit: type=1326 audit(1789848610.938:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.625628][ T37] audit: type=1326 audit(1789848610.938:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.643781][ T37] audit: type=1326 audit(1789848610.928:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.643835][ T37] audit: type=1326 audit(1789848610.958:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.643901][ T37] audit: type=1326 audit(1789848610.958:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.643939][ T37] audit: type=1326 audit(1789848610.958:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.644780][ T37] audit: type=1326 audit(1789848610.958:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.644822][ T37] audit: type=1326 audit(1789848610.958:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 683.645556][ T37] audit: type=1326 audit(1789848610.958:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10096 comm="syz.0.1063" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 685.367804][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 686.938339][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.938409][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.160465][ T5593] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 687.321257][ T5593] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 687.324257][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.355998][ T5593] usb 5-1: config 0 descriptor?? [ 687.400457][ T5593] cp210x 5-1:0.0: cp210x converter detected [ 687.782064][ T5593] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 687.782097][ T5593] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 687.877963][ T5593] usb 5-1: cp210x converter now attached to ttyUSB0 [ 687.939211][ T5593] usb 5-1: USB disconnect, device number 20 [ 687.960753][T10151] FAULT_INJECTION: forcing a failure. [ 687.960753][T10151] name failslab, interval 1, probability 0, space 0, times 0 [ 687.960777][T10151] CPU: 0 UID: 0 PID: 10151 Comm: syz.0.1072 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 687.960790][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.960797][T10151] Call Trace: [ 687.960801][T10151] [ 687.960806][T10151] dump_stack_lvl+0xe8/0x150 [ 687.960827][T10151] should_fail_ex+0x46b/0x600 [ 687.960845][T10151] should_failslab+0xa8/0x100 [ 687.960863][T10151] kmem_cache_alloc_node_noprof+0xac/0x660 [ 687.960878][T10151] ? __alloc_skb+0x1db/0x7a0 [ 687.960896][T10151] ? __alloc_skb+0x1db/0x7a0 [ 687.960914][T10151] __alloc_skb+0x1db/0x7a0 [ 687.960931][T10151] netlink_sendmsg+0x5d4/0xb40 [ 687.960951][T10151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.960965][T10151] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 687.960984][T10151] ? __kernel_text_address+0xd/0x30 [ 687.960997][T10151] ? unwind_get_return_address+0x4d/0x90 [ 687.961012][T10151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.961024][T10151] sock_sendmsg_nosec+0x13a/0x180 [ 687.961040][T10151] ____sys_sendmsg+0x565/0x870 [ 687.961055][T10151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.961070][T10151] ? import_iovec+0x73/0xa0 [ 687.961087][T10151] ___sys_sendmsg+0x2a5/0x360 [ 687.961097][T10151] ? __lock_acquire+0x747/0x2de0 [ 687.961114][T10151] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.961142][T10151] ? __fget_files+0x2a/0x420 [ 687.961153][T10151] ? __fget_files+0x3a8/0x420 [ 687.961168][T10151] __x64_sys_sendmsg+0x1b7/0x290 [ 687.961189][T10151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 687.961210][T10151] do_syscall_64+0x166/0x520 [ 687.961227][T10151] ? trace_irq_disable+0x3b/0x140 [ 687.961240][T10151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.961254][T10151] ? clear_bhb_loop+0x70/0xc0 [ 687.961267][T10151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.961277][T10151] RIP: 0033:0x7efc0512e159 [ 687.961288][T10151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.961297][T10151] RSP: 002b:00007efc03386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.961310][T10151] RAX: ffffffffffffffda RBX: 00007efc053b5fa0 RCX: 00007efc0512e159 [ 687.961318][T10151] RDX: 0000000000040084 RSI: 00002000000002c0 RDI: 0000000000000003 [ 687.961325][T10151] RBP: 00007efc03386090 R08: 0000000000000000 R09: 0000000000000000 [ 687.961332][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.961338][T10151] R13: 00007efc053b6038 R14: 00007efc053b5fa0 R15: 00007ffe0abc3b88 [ 687.961354][T10151] [ 688.221918][ T5593] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 688.222932][ T5593] cp210x 5-1:0.0: device disconnected [ 688.523156][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.523288][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.523502][ T9907] bridge_slave_0: entered allmulticast mode [ 688.528378][ T9907] bridge_slave_0: entered promiscuous mode [ 688.614784][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.614908][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.615071][ T9898] bridge_slave_0: entered allmulticast mode [ 688.619291][ T9898] bridge_slave_0: entered promiscuous mode [ 690.341625][ T122] hsr_slave_0: left promiscuous mode [ 690.380620][ T122] hsr_slave_1: left promiscuous mode [ 690.411717][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.485402][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.610655][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 690.700245][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 690.850311][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 690.879638][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 690.879699][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 690.897964][ T31] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 690.897991][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is -1 [ 690.898009][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is -1 [ 690.898026][ T31] usb 1-1: config 0 has an invalid interface number: 2 but max is -1 [ 690.898044][ T31] usb 1-1: config 0 has an invalid interface number: 2 but max is -1 [ 690.898062][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.898080][ T31] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 0 [ 690.898163][ T31] usb 1-1: config 0 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 690.972258][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.972287][ T31] usb 1-1: Product: syz [ 690.972301][ T31] usb 1-1: Manufacturer: syz [ 690.972316][ T31] usb 1-1: SerialNumber: syz [ 690.976276][ T31] usb 1-1: config 0 descriptor?? [ 691.285271][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 691.285291][ T37] audit: type=1800 audit(1789848618.598:63): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1076" name=11 dev="sda1" ino=2051 res=0 errno=0 [ 691.734278][ T122] team0 (unregistering): Port device team_slave_1 removed [ 691.794704][ T122] team0 (unregistering): Port device team_slave_0 removed [ 692.222472][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.222656][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.261582][ T9907] bridge_slave_1: entered allmulticast mode [ 692.291320][ T9907] bridge_slave_1: entered promiscuous mode [ 692.337976][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.338100][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.338266][ T9898] bridge_slave_1: entered allmulticast mode [ 692.349090][ T9898] bridge_slave_1: entered promiscuous mode [ 692.402227][ T5243] 8021q: adding VLAN 0 to HW filter on device eth1 [ 692.878520][ T9907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.884908][ T9907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.903918][ T9898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.960757][ T9898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.031211][ T9907] team0: Port device team_slave_0 added [ 693.067064][ T9907] team0: Port device team_slave_1 added [ 693.076570][ T9898] team0: Port device team_slave_0 added [ 693.340050][ T9898] team0: Port device team_slave_1 added [ 694.913758][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 694.989207][ T31] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 694.989347][ T31] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 695.142306][ T31] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 695.170040][ T31] usb 1-1: USB disconnect, device number 26 [ 695.278583][ T9366] udevd[9366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 695.422283][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.422304][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.422332][ T9907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.569331][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.569351][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.569366][ T9907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.668008][T10205] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1084'. [ 695.686897][ T5601] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 695.698886][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.698907][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.698933][ T9898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.783092][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.783110][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.783137][ T9898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.169793][ T9907] hsr_slave_0: entered promiscuous mode [ 696.172418][ T9907] hsr_slave_1: entered promiscuous mode [ 696.179260][ T9907] debugfs: 'hsr0' already exists in 'hsr' [ 696.179289][ T9907] Cannot create hsr debugfs directory [ 696.304046][ T9898] hsr_slave_0: entered promiscuous mode [ 696.307101][ T9898] hsr_slave_1: entered promiscuous mode [ 696.318153][ T9898] debugfs: 'hsr0' already exists in 'hsr' [ 696.318180][ T9898] Cannot create hsr debugfs directory [ 696.721294][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 699.306166][T10246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'. [ 699.318965][ T5243] 8021q: adding VLAN 0 to HW filter on device eth2 [ 700.789791][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 701.536262][ T31] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 701.576136][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.890877][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.890906][ T31] usb 1-1: Product: syz [ 701.890921][ T31] usb 1-1: Manufacturer: syz [ 701.890935][ T31] usb 1-1: SerialNumber: syz [ 701.946401][ T31] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 702.530411][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.640544][ T31] gspca_mr97310a: reg read [21] error -110 [ 702.640643][ T31] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 703.444064][ T31] usb 1-1: USB disconnect, device number 27 [ 704.032020][ T47] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.032144][ T47] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.032182][ T47] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.334247][T10296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 707.357708][ T5243] 8021q: adding VLAN 0 to HW filter on device eth3 [ 707.645178][ T37] audit: type=1326 audit(1789848634.958:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.645231][ T37] audit: type=1326 audit(1789848634.958:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.647422][ T37] audit: type=1326 audit(1789848634.958:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.647618][ T37] audit: type=1326 audit(1789848634.958:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.693950][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 707.711974][ T37] audit: type=1326 audit(1789848634.958:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.712027][ T37] audit: type=1326 audit(1789848634.968:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.712070][ T37] audit: type=1326 audit(1789848635.008:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.712111][ T37] audit: type=1326 audit(1789848635.028:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.712151][ T37] audit: type=1326 audit(1789848635.028:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 707.725480][ T37] audit: type=1326 audit(1789848635.038:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10317 comm="syz.0.1106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc0512e159 code=0x7ffc0000 [ 710.145581][ T9907] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 710.246221][ T9907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.245092][ T9907] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 712.294500][ T9907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.333964][ T9907] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 714.255563][ T9907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.258052][ T9907] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 714.317488][ T9907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.860299][ T5719] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 717.016929][ T5243] 8021q: adding VLAN 0 to HW filter on device eth4 [ 717.122730][ T5588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 717.178872][T10389] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 717.231511][T10389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 717.260566][T10389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 717.262551][T10389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 717.263355][T10389] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 717.283477][T10391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 717.286534][T10391] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 717.312338][T10389] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 717.316380][T10389] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 719.343830][T10408] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1122'. [ 719.352776][ T5588] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 719.864176][ T5588] Bluetooth: hci1: command tx timeout [ 719.887266][ T5588] Bluetooth: hci4: command tx timeout [ 722.455807][ T5588] Bluetooth: hci1: command tx timeout [ 722.455842][ T5588] Bluetooth: hci4: command tx timeout [ 723.263263][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 724.842621][T10389] Bluetooth: hci4: command tx timeout [ 724.842656][T10389] Bluetooth: hci1: command tx timeout [ 726.397746][ T9898] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 727.704438][T10389] Bluetooth: hci4: command tx timeout [ 727.704475][T10389] Bluetooth: hci1: command tx timeout [ 727.816362][ T122] bridge_slave_1: left allmulticast mode [ 727.816387][ T122] bridge_slave_1: left promiscuous mode [ 727.816547][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.007450][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 728.372963][ T122] bridge_slave_0: left allmulticast mode [ 728.372989][ T122] bridge_slave_0: left promiscuous mode [ 728.373195][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.460847][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.500924][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.521028][ T122] bond0 (unregistering): Released all slaves [ 734.528863][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'. [ 739.790926][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 741.300351][ T5593] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 743.054785][ T5593] usb 3-1: device descriptor read/all, error -71 [ 744.812104][ T122] hsr_slave_0: left promiscuous mode [ 744.842624][ T122] hsr_slave_1: left promiscuous mode [ 744.843880][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.882007][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.280467][ T5593] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 745.432379][ T5593] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 745.435679][ T5593] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 745.435710][ T5593] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 745.471977][ T5593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.472002][ T5593] usb 3-1: Product: syz [ 745.472016][ T5593] usb 3-1: Manufacturer: syz [ 745.472030][ T5593] usb 3-1: SerialNumber: syz [ 745.981665][ T5593] kaweth 3-1:1.0: Firmware present in device. [ 748.349977][ T5593] kaweth 3-1:1.0: Error reading configuration (-71), no net device created [ 748.354922][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.355001][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.382050][ T5593] kaweth 3-1:1.0: probe with driver kaweth failed with error -5 [ 748.400976][ T122] team0 (unregistering): Port device team_slave_1 removed [ 748.465104][ T5593] usb 3-1: USB disconnect, device number 24 [ 748.502769][ T122] team0 (unregistering): Port device team_slave_0 removed [ 748.822759][ T5243] 8021q: adding VLAN 0 to HW filter on device eth5 [ 749.306583][T10580] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(960.8192.36), cmd(7) [ 750.437861][T10383] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.438041][T10383] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.438243][T10383] bridge_slave_0: entered allmulticast mode [ 750.539878][T10383] bridge_slave_0: entered promiscuous mode [ 752.078316][T10383] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.078455][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.078655][T10383] bridge_slave_1: entered allmulticast mode [ 752.112120][T10383] bridge_slave_1: entered promiscuous mode [ 752.155707][T10387] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.155831][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.156029][T10387] bridge_slave_0: entered allmulticast mode [ 752.168064][T10387] bridge_slave_0: entered promiscuous mode [ 752.279020][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.279147][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.279322][T10387] bridge_slave_1: entered allmulticast mode [ 752.282552][T10387] bridge_slave_1: entered promiscuous mode [ 754.054301][T10383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.106628][T10387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.125509][T10383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.135449][T10387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.506150][T10383] team0: Port device team_slave_0 added [ 754.524524][T10383] team0: Port device team_slave_1 added [ 754.527302][T10387] team0: Port device team_slave_0 added [ 754.584064][T10387] team0: Port device team_slave_1 added [ 754.697581][T10383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.697600][T10383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.697627][T10383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.767346][T10383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.767365][T10383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.767392][T10383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.117844][T10387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.117863][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.118852][T10387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.200881][T10387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.200899][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.200926][T10387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.011696][ T5243] 8021q: adding VLAN 0 to HW filter on device eth6 [ 758.142308][T10383] hsr_slave_0: entered promiscuous mode [ 758.155713][T10383] hsr_slave_1: entered promiscuous mode [ 758.156626][T10383] debugfs: 'hsr0' already exists in 'hsr' [ 758.156650][T10383] Cannot create hsr debugfs directory [ 758.366059][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 758.867143][T10387] hsr_slave_0: entered promiscuous mode [ 758.870767][T10387] hsr_slave_1: entered promiscuous mode [ 758.872362][T10387] debugfs: 'hsr0' already exists in 'hsr' [ 758.872387][T10387] Cannot create hsr debugfs directory [ 765.534733][T10692] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1170'. [ 765.604741][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 765.605006][T10690] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 765.903242][ T5243] 8021q: adding VLAN 0 to HW filter on device eth7 [ 766.083314][ T122] bridge_slave_1: left allmulticast mode [ 766.083349][ T122] bridge_slave_1: left promiscuous mode [ 766.083612][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.484675][ T122] bridge_slave_0: left allmulticast mode [ 766.484712][ T122] bridge_slave_0: left promiscuous mode [ 766.484986][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.752049][ T122] bridge_slave_1: left allmulticast mode [ 766.752087][ T122] bridge_slave_1: left promiscuous mode [ 766.764661][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.881496][ T122] bridge_slave_0: left allmulticast mode [ 766.881521][ T122] bridge_slave_0: left promiscuous mode [ 766.881736][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.273102][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 767.273123][ T37] audit: type=1326 audit(1789848694.578:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.274417][ T37] audit: type=1326 audit(1789848694.588:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.274471][ T37] audit: type=1326 audit(1789848694.588:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.274806][ T37] audit: type=1326 audit(1789848694.588:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.275113][ T37] audit: type=1326 audit(1789848694.588:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.275619][ T37] audit: type=1326 audit(1789848694.588:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.275952][ T37] audit: type=1326 audit(1789848694.588:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.276215][ T37] audit: type=1326 audit(1789848694.588:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.276493][ T37] audit: type=1326 audit(1789848694.588:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.276991][ T37] audit: type=1326 audit(1789848694.588:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10719 comm="syz.4.1176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 767.498487][T10723] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1177'. [ 767.499282][ T5588] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 767.905123][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.662616][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.882024][ T122] bond0 (unregistering): Released all slaves [ 770.151016][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.230865][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.291872][ T122] bond0 (unregistering): Released all slaves [ 775.232340][ T122] hsr_slave_0: left promiscuous mode [ 775.505101][ T122] hsr_slave_1: left promiscuous mode [ 775.506317][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.587348][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.639971][T10784] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1189'. [ 775.653853][ T5588] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 777.271730][ T122] hsr_slave_0: left promiscuous mode [ 777.303509][ T122] hsr_slave_1: left promiscuous mode [ 777.304712][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.368825][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.413375][T10389] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 777.448855][T10389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 777.458011][T10389] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 777.465085][T10389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 777.470097][T10389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 777.689571][T10389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 777.747561][T10389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 777.776663][T10389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 777.793532][T10389] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 777.797055][T10389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 778.677424][ T122] team0 (unregistering): Port device team_slave_1 removed [ 778.734611][ T122] team0 (unregistering): Port device team_slave_0 removed [ 779.570359][T10389] Bluetooth: hci5: command tx timeout [ 779.820868][ T122] team0 (unregistering): Port device team_slave_1 removed [ 780.026993][T10389] Bluetooth: hci6: command tx timeout [ 780.620976][ T122] team0 (unregistering): Port device team_slave_0 removed [ 780.972325][ T5243] 8021q: adding VLAN 0 to HW filter on device eth8 [ 781.887521][T10389] Bluetooth: hci5: command tx timeout [ 782.130327][T10389] Bluetooth: hci6: command tx timeout [ 784.629098][T10389] Bluetooth: hci5: command tx timeout [ 784.629114][ T5588] Bluetooth: hci6: command tx timeout [ 786.682621][T10389] Bluetooth: hci5: command tx timeout [ 786.682657][T10389] Bluetooth: hci6: command tx timeout [ 791.504509][T10883] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1206'. [ 791.506901][ T5588] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 791.680424][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 791.680462][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'. [ 795.524868][T10910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.274026][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 797.850302][ T5572] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 798.003162][ T5572] usb 5-1: not running at top speed; connect to a high speed hub [ 798.003204][ T5572] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 798.004817][ T5572] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.006970][ T5572] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 798.006996][ T5572] usb 5-1: Product: syz [ 798.007012][ T5572] usb 5-1: Manufacturer: syz [ 798.096848][ T5572] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 798.099296][ T5572] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 798.274532][ T5572] usb 5-1: USB disconnect, device number 21 [ 798.810645][ T122] bridge_slave_1: left allmulticast mode [ 798.810684][ T122] bridge_slave_1: left promiscuous mode [ 798.810945][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.996914][ T122] bridge_slave_0: left allmulticast mode [ 798.996952][ T122] bridge_slave_0: left promiscuous mode [ 798.997582][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.276462][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 802.591170][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1221'. [ 804.027932][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.140868][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.244933][ T122] bond0 (unregistering): Released all slaves [ 804.831484][ T5593] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 805.191061][ T5593] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 805.488908][ T5593] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.488967][ T5593] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.488990][ T5593] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 805.489014][ T5593] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 805.536554][ T5593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.536584][ T5593] usb 1-1: Product: syz [ 805.536599][ T5593] usb 1-1: Manufacturer: syz [ 805.536614][ T5593] usb 1-1: SerialNumber: syz [ 805.619031][ T5593] kaweth 1-1:1.0: couldn't find required endpoints [ 805.829430][ T8951] usb 1-1: USB disconnect, device number 29 [ 805.940294][ T5572] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 805.984821][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 805.984840][ T37] audit: type=1326 audit(1789848733.298:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.984959][ T37] audit: type=1326 audit(1789848733.298:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.985132][ T37] audit: type=1326 audit(1789848733.298:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.985265][ T37] audit: type=1326 audit(1789848733.298:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.985415][ T37] audit: type=1326 audit(1789848733.298:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.985554][ T37] audit: type=1326 audit(1789848733.298:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.986020][ T37] audit: type=1326 audit(1789848733.298:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.986064][ T37] audit: type=1326 audit(1789848733.298:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.986615][ T37] audit: type=1326 audit(1789848733.298:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 805.986938][ T37] audit: type=1326 audit(1789848733.298:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10985 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 806.092279][ T5572] usb 3-1: not running at top speed; connect to a high speed hub [ 806.092320][ T5572] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 806.093798][ T5572] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.095778][ T122] hsr_slave_0: left promiscuous mode [ 806.113726][ T5572] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 806.113756][ T5572] usb 3-1: Product: syz [ 806.113770][ T5572] usb 3-1: Manufacturer: syz [ 806.216997][ T5572] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 806.217066][ T5572] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 806.342944][ T122] hsr_slave_1: left promiscuous mode [ 806.351751][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.356693][ T5572] usb 3-1: USB disconnect, device number 25 [ 806.423950][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.738908][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.738977][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.800632][ T5593] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 811.070270][ T5593] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 811.073932][ T5593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.074002][ T5593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.074080][ T5593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.271174][ T5593] usb 1-1: config 0 descriptor?? [ 813.464451][ T5593] usbhid 1-1:0.0: can't add hid device: -71 [ 813.464572][ T5593] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 813.504270][ T5593] usb 1-1: USB disconnect, device number 30 [ 813.506971][ T122] team0 (unregistering): Port device team_slave_1 removed [ 813.627454][ T122] team0 (unregistering): Port device team_slave_0 removed [ 817.081927][T11025] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1236'. [ 817.091360][ T5588] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 817.225268][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.225403][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.225564][T10795] bridge_slave_0: entered allmulticast mode [ 817.228228][T10795] bridge_slave_0: entered promiscuous mode [ 817.300358][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.300434][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.300568][T10795] bridge_slave_1: entered allmulticast mode [ 817.304029][T10795] bridge_slave_1: entered promiscuous mode [ 817.456793][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.456914][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.457026][T10798] bridge_slave_0: entered allmulticast mode [ 817.459249][T10798] bridge_slave_0: entered promiscuous mode [ 817.534501][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.534884][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.535005][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.535536][T10798] bridge_slave_1: entered allmulticast mode [ 817.565657][T10798] bridge_slave_1: entered promiscuous mode [ 817.671472][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.570683][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.588422][T10795] team0: Port device team_slave_0 added [ 818.606874][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.739470][T10795] team0: Port device team_slave_1 added [ 820.165155][T10798] team0: Port device team_slave_0 added [ 820.166364][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.166380][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.166407][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.169580][T10798] team0: Port device team_slave_1 added [ 820.247017][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.247030][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.247052][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.360279][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.360297][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.360322][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.364457][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.364472][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.364494][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.738449][T10795] hsr_slave_0: entered promiscuous mode [ 820.739346][T10795] hsr_slave_1: entered promiscuous mode [ 820.743195][T10795] debugfs: 'hsr0' already exists in 'hsr' [ 820.743221][T10795] Cannot create hsr debugfs directory [ 822.604861][T10798] hsr_slave_0: entered promiscuous mode [ 822.630551][T10798] hsr_slave_1: entered promiscuous mode [ 822.631585][T10798] debugfs: 'hsr0' already exists in 'hsr' [ 822.631610][T10798] Cannot create hsr debugfs directory [ 825.316193][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'. [ 828.858783][T11108] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1245'. [ 828.859480][ T5588] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 833.523648][ T122] bridge_slave_1: left allmulticast mode [ 833.523689][ T122] bridge_slave_1: left promiscuous mode [ 833.523951][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.676411][ T122] bridge_slave_0: left allmulticast mode [ 833.676447][ T122] bridge_slave_0: left promiscuous mode [ 833.676716][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.761411][T11155] fuse: Bad value for 'fd' [ 836.039626][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.254034][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.515937][T10389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 837.217683][ T122] bond0 (unregistering): Released all slaves [ 837.344444][T10389] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 837.345926][T10389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 837.354087][T10389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 837.356063][T10389] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 839.234171][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 839.592566][ T5588] Bluetooth: hci1: command tx timeout [ 840.876351][T10389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 840.882540][T10389] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 840.898917][T10389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 840.937228][T10389] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 840.938235][T10389] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 841.913819][ T5588] Bluetooth: hci1: command tx timeout [ 842.225213][T11196] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1260'. [ 842.249588][ T5588] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 843.678101][ T122] hsr_slave_0: left promiscuous mode [ 843.711966][ T122] hsr_slave_1: left promiscuous mode [ 843.713197][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.752727][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.880531][ T5588] Bluetooth: hci4: command tx timeout [ 843.962158][T10389] Bluetooth: hci1: command tx timeout [ 845.960286][T10389] Bluetooth: hci4: command tx timeout [ 846.040266][T10389] Bluetooth: hci1: command tx timeout [ 847.723098][ T122] team0 (unregistering): Port device team_slave_1 removed [ 847.798232][ T122] team0 (unregistering): Port device team_slave_0 removed [ 848.040295][T10389] Bluetooth: hci4: command tx timeout [ 848.077244][ T5243] 8021q: adding VLAN 0 to HW filter on device eth9 [ 851.349594][T10389] Bluetooth: hci4: command tx timeout [ 861.260677][ T5588] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 863.889357][ T12] bridge_slave_1: left allmulticast mode [ 863.889396][ T12] bridge_slave_1: left promiscuous mode [ 863.889654][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.910287][T11314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.928572][T11319] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1275'. [ 864.000336][ T6297] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 865.493466][ T12] bridge_slave_0: left allmulticast mode [ 865.493582][ T6297] usb 5-1: not running at top speed; connect to a high speed hub [ 865.493613][ T12] bridge_slave_0: left promiscuous mode [ 865.493620][ T6297] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 865.493873][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.495518][ T6297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.499661][ T6297] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 865.499695][ T6297] usb 5-1: Product: syz [ 865.499709][ T6297] usb 5-1: Manufacturer: syz [ 865.620088][ T6297] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 865.620298][ T6297] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 865.806119][ T5719] usb 5-1: USB disconnect, device number 22 [ 869.591008][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.815423][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.859912][T11375] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1288'. [ 869.876908][ T5588] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 869.915349][ T12] bond0 (unregistering): Released all slaves [ 870.129195][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.129266][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.301800][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.301924][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.302098][T11162] bridge_slave_0: entered allmulticast mode [ 870.307787][T11162] bridge_slave_0: entered promiscuous mode [ 870.336169][T11162] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.336293][T11162] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.336480][T11162] bridge_slave_1: entered allmulticast mode [ 870.342803][T11162] bridge_slave_1: entered promiscuous mode [ 872.121150][ T12] hsr_slave_0: left promiscuous mode [ 872.162721][ T12] hsr_slave_1: left promiscuous mode [ 872.163935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.212678][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.522468][ T12] team0 (unregistering): Port device team_slave_1 removed [ 874.580981][ T12] team0 (unregistering): Port device team_slave_0 removed [ 874.868249][T11162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.868536][T11180] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.868804][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.868971][T11180] bridge_slave_0: entered allmulticast mode [ 874.909349][T11180] bridge_slave_0: entered promiscuous mode [ 874.966289][T11162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.967286][T11180] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.967409][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.967576][T11180] bridge_slave_1: entered allmulticast mode [ 875.039694][T11180] bridge_slave_1: entered promiscuous mode [ 877.777209][T11162] team0: Port device team_slave_0 added [ 879.329173][T11180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.344326][T11162] team0: Port device team_slave_1 added [ 879.392212][T11180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.517249][T11162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.517268][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.517296][T11162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.592435][T11162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.592455][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.592482][T11162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.708272][T11180] team0: Port device team_slave_0 added [ 879.729188][T11180] team0: Port device team_slave_1 added [ 880.203793][T11180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.203812][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.203838][T11180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.266926][T11162] hsr_slave_0: entered promiscuous mode [ 880.269586][T11162] hsr_slave_1: entered promiscuous mode [ 880.282657][T11162] debugfs: 'hsr0' already exists in 'hsr' [ 880.282684][T11162] Cannot create hsr debugfs directory [ 880.285562][T11180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.285577][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.285604][T11180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.040785][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 881.078573][T11457] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1298'. [ 881.079373][ T5588] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 881.100552][ T12] bridge_slave_1: left allmulticast mode [ 881.100590][ T12] bridge_slave_1: left promiscuous mode [ 881.100855][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.502276][ T12] bridge_slave_0: left allmulticast mode [ 881.502314][ T12] bridge_slave_0: left promiscuous mode [ 881.502586][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.290915][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.370838][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.390399][ T8951] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 882.455271][ T12] bond0 (unregistering): Released all slaves [ 882.589433][ T8951] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 882.593188][ T8951] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.601362][ T8951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.601389][ T8951] usb 3-1: Product: syz [ 882.601403][ T8951] usb 3-1: Manufacturer: syz [ 882.601417][ T8951] usb 3-1: SerialNumber: syz [ 882.648596][T11180] hsr_slave_0: entered promiscuous mode [ 882.649606][T11180] hsr_slave_1: entered promiscuous mode [ 882.654451][T11180] debugfs: 'hsr0' already exists in 'hsr' [ 882.654476][T11180] Cannot create hsr debugfs directory [ 882.723990][ T8951] kaweth 3-1:1.0: couldn't find required endpoints [ 883.080017][ T5572] usb 3-1: USB disconnect, device number 26 [ 884.091840][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'. [ 884.091879][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1304'. [ 887.203874][T11492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.462605][ T12] hsr_slave_0: left promiscuous mode [ 887.540714][ T12] hsr_slave_1: left promiscuous mode [ 887.541924][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.595752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.939069][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 887.939088][ T37] audit: type=1326 audit(1789848815.248:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.939132][ T37] audit: type=1326 audit(1789848815.248:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.939567][ T37] audit: type=1326 audit(1789848815.248:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.939609][ T37] audit: type=1326 audit(1789848815.248:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.940055][ T37] audit: type=1326 audit(1789848815.248:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.940097][ T37] audit: type=1326 audit(1789848815.248:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.943328][ T37] audit: type=1326 audit(1789848815.258:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.943372][ T37] audit: type=1326 audit(1789848815.258:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.943664][ T37] audit: type=1326 audit(1789848815.258:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.944067][ T37] audit: type=1326 audit(1789848815.258:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.4.1310" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21c9e159 code=0x7ffc0000 [ 887.989275][T11513] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1311'. [ 887.989921][ T5588] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 889.072461][ T12] team0 (unregistering): Port device team_slave_1 removed [ 889.361178][ T12] team0 (unregistering): Port device team_slave_0 removed [ 893.308985][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 893.309004][ T37] audit: type=1326 audit(1789848820.618:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.309050][ T37] audit: type=1326 audit(1789848820.618:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.309091][ T37] audit: type=1326 audit(1789848820.618:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.309130][ T37] audit: type=1326 audit(1789848820.618:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.309734][ T37] audit: type=1326 audit(1789848820.618:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.309778][ T37] audit: type=1326 audit(1789848820.618:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.309817][ T37] audit: type=1326 audit(1789848820.618:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.311918][ T37] audit: type=1326 audit(1789848820.628:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.311963][ T37] audit: type=1326 audit(1789848820.628:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 893.316933][ T37] audit: type=1326 audit(1789848820.628:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11541 comm="syz.2.1317" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6dbe4e159 code=0x7ffc0000 [ 894.646305][T11162] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 894.724976][T11162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 894.726470][T11162] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 894.795863][T11162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 894.824065][T11162] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 895.055400][T11570] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1319'. [ 895.112318][T11567] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1323'. [ 895.113013][ T5588] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 895.725484][T11162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 895.854137][T11162] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 896.109764][T11162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 896.376993][T11180] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 896.441196][T11180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 896.443077][T11180] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 896.492644][T11180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 896.493840][T11180] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 896.524316][T11180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 896.525572][T11180] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 896.575328][T11180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 898.175003][T10389] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 898.296904][T10389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 898.329457][T10389] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 898.363881][T10389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 898.366519][T10389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 900.520297][ T5588] Bluetooth: hci5: command tx timeout [ 901.235323][T10389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 901.303923][T10389] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 901.335826][T10389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 901.347729][T10389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 901.359674][T10389] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.235264][ T5588] Bluetooth: hci5: command tx timeout [ 903.403279][ T5588] Bluetooth: hci1: command tx timeout [ 904.047798][T11645] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1334'. [ 905.241876][ T5588] Bluetooth: hci5: command tx timeout [ 905.488378][ T5588] Bluetooth: hci1: command tx timeout [ 906.810479][ T1132] bridge_slave_1: left allmulticast mode [ 906.810505][ T1132] bridge_slave_1: left promiscuous mode [ 906.810686][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.931972][ T1132] bridge_slave_0: left allmulticast mode [ 906.931999][ T1132] bridge_slave_0: left promiscuous mode [ 906.932194][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.430478][T11650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.436874][ T5588] Bluetooth: hci5: command tx timeout [ 908.349280][ T5588] Bluetooth: hci1: command tx timeout [ 909.601513][T11705] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1345'. [ 909.683103][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.020053][T11711] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1346'. [ 910.021163][ T5588] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 910.071172][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.142767][ T1132] bond0 (unregistering): Released all slaves [ 910.210316][ T5572] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 910.279331][T11597] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.279578][T11597] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.279783][T11597] bridge_slave_0: entered allmulticast mode [ 910.289475][T11597] bridge_slave_0: entered promiscuous mode [ 910.355972][T11597] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.356180][T11597] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.356367][T11597] bridge_slave_1: entered allmulticast mode [ 910.360261][ T5588] Bluetooth: hci1: command tx timeout [ 910.363290][ T5572] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 910.364616][ T5572] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 910.366825][ T5572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.366848][ T5572] usb 3-1: Product: syz [ 910.366862][ T5572] usb 3-1: Manufacturer: syz [ 910.366876][ T5572] usb 3-1: SerialNumber: syz [ 910.390019][ T5572] kaweth 3-1:1.0: couldn't find required endpoints [ 910.392118][T11597] bridge_slave_1: entered promiscuous mode [ 910.618188][ T6297] usb 3-1: USB disconnect, device number 27 [ 910.648613][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.648737][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.648903][T11624] bridge_slave_0: entered allmulticast mode [ 910.652509][T11624] bridge_slave_0: entered promiscuous mode [ 911.770403][ T1132] hsr_slave_0: left promiscuous mode [ 911.810643][ T1132] hsr_slave_1: left promiscuous mode [ 911.811901][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.840903][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.930392][ T8951] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 912.094192][ T8951] usb 1-1: not running at top speed; connect to a high speed hub [ 912.094228][ T8951] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 912.095940][ T8951] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.097907][ T8951] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 912.097933][ T8951] usb 1-1: Product: syz [ 912.097949][ T8951] usb 1-1: Manufacturer: syz [ 912.175234][ T8951] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 912.175323][ T8951] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 912.212498][ T5719] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 913.061033][ T5719] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 913.062555][ T5719] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 913.062587][ T5719] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 913.064939][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.064963][ T5719] usb 5-1: Product: syz [ 913.064978][ T5719] usb 5-1: Manufacturer: syz [ 913.064992][ T5719] usb 5-1: SerialNumber: syz [ 913.151058][ T6297] usb 1-1: USB disconnect, device number 31 [ 913.327672][ T5719] kaweth 5-1:1.0: Firmware present in device. [ 913.329556][ T5719] kaweth 5-1:1.0: Error reading configuration (-71), no net device created [ 913.329847][ T5719] kaweth 5-1:1.0: probe with driver kaweth failed with error -5 [ 913.352816][ T5719] usb 5-1: USB disconnect, device number 23 [ 913.523247][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 913.581536][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 915.982759][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.985737][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.986418][T11624] bridge_slave_1: entered allmulticast mode [ 916.005615][T11624] bridge_slave_1: entered promiscuous mode [ 916.042567][T11597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.696162][T11735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 916.766167][T11597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.901043][T11624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.973817][T11624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.976725][T11597] team0: Port device team_slave_0 added [ 917.016411][T11597] team0: Port device team_slave_1 added [ 917.063630][T11624] team0: Port device team_slave_0 added [ 917.093488][T11624] team0: Port device team_slave_1 added [ 917.094678][T11597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.094693][T11597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.094720][T11597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.203080][T11597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.203099][T11597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.203124][T11597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.726920][T11624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.726939][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.726965][T11624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.730526][T11624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.730542][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.730569][T11624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.161797][T11624] hsr_slave_0: entered promiscuous mode [ 919.176335][T11624] hsr_slave_1: entered promiscuous mode [ 919.177270][T11624] debugfs: 'hsr0' already exists in 'hsr' [ 919.264976][T11624] Cannot create hsr debugfs directory [ 919.314335][T11597] hsr_slave_0: entered promiscuous mode [ 919.317847][T11597] hsr_slave_1: entered promiscuous mode [ 919.318735][T11597] debugfs: 'hsr0' already exists in 'hsr' [ 919.318762][T11597] Cannot create hsr debugfs directory [ 920.661828][ T5719] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 920.811213][ T5719] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 920.818172][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 920.818201][ T5719] usb 5-1: Product: syz [ 920.818215][ T5719] usb 5-1: SerialNumber: syz [ 920.831675][ T5719] usb 5-1: config 0 descriptor?? [ 920.970775][ T5243] 8021q: adding VLAN 0 to HW filter on device eth9 [ 921.067510][ T5719] hso 5-1:0.0: Failed to find BULK eps [ 921.262552][ T6297] usb 5-1: USB disconnect, device number 24 [ 921.750441][ T8951] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 922.111102][ T8951] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 922.112638][ T8951] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.112663][ T8951] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 922.112711][ T8951] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x25, changing to 0x5 [ 922.112737][ T8951] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 922.112775][ T8951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.203045][ T8951] ims_pcu 3-1:1.0: Control endpoint is not INTERRUPT IN [ 922.203097][ T8951] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 923.530921][ T5243] 8021q: adding VLAN 0 to HW filter on device eth10 [ 923.539413][ T8951] usb 3-1: USB disconnect, device number 28 [ 923.726376][T11831] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1372'. [ 923.727022][ T5588] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 924.630903][ T5243] 8021q: adding VLAN 0 to HW filter on device eth11 [ 924.800464][ T1132] bridge_slave_1: left allmulticast mode [ 924.800503][ T1132] bridge_slave_1: left promiscuous mode [ 924.800761][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.990388][ T1132] bridge_slave_0: left allmulticast mode [ 924.990436][ T1132] bridge_slave_0: left promiscuous mode [ 924.990688][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.502037][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.600764][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.663161][ T1132] bond0 (unregistering): Released all slaves [ 925.884771][ T5243] 8021q: adding VLAN 0 to HW filter on device eth12 [ 926.190680][ T1132] hsr_slave_0: left promiscuous mode [ 926.231448][ T1132] hsr_slave_1: left promiscuous mode [ 926.253307][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.292257][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.671040][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 926.691038][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 926.984873][ T5243] 8021q: adding VLAN 0 to HW filter on device eth13 [ 930.447791][T11624] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 930.475495][T11624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 930.476933][T11624] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 930.504689][T11624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 930.524777][T11624] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 930.579611][T11624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.592082][T11624] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 930.624869][T11624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 930.974003][T11597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 931.020101][T11597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.023767][T11597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 931.095880][T11597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 931.105718][T11597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 931.137475][T11597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 931.144636][T11597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 931.187609][T11597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 931.325562][T11624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.457792][T11624] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.508761][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.508972][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.566787][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.566859][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.589623][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.589781][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.767940][T11597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.976340][T11597] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.003644][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.003791][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.051612][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.051860][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.601476][T11624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.747004][T11597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.012447][T11624] veth0_vlan: entered promiscuous mode [ 933.064814][T11624] veth1_vlan: entered promiscuous mode [ 933.139774][T11624] veth0_macvtap: entered promiscuous mode [ 933.158579][T11624] veth1_macvtap: entered promiscuous mode [ 933.171966][T11597] veth0_vlan: entered promiscuous mode [ 933.202644][T11624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.203177][T11597] veth1_vlan: entered promiscuous mode [ 933.224647][T11624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.547360][T11597] veth0_macvtap: entered promiscuous mode [ 933.616676][T11597] veth1_macvtap: entered promiscuous mode [ 933.877409][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.877432][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.911770][T11597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.932098][T11597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.994036][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.994058][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.051534][ T1132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.162394][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.644114][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.646721][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.647019][ T67] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.648031][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.648189][ T67] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.728741][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.728762][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.738219][T12046] fuse: Bad value for 'fd' [ 934.863329][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.863351][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.990470][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.342177][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1381'. [ 974.430292][T12043] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 975.672131][T12043] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 975.673475][T12043] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.673528][T12043] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.673550][T12043] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 975.673574][T12043] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 975.678727][T12043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.678753][T12043] usb 5-1: Product: syz [ 975.678767][T12043] usb 5-1: Manufacturer: syz [ 975.678782][T12043] usb 5-1: SerialNumber: syz [ 975.788500][T12043] kaweth 5-1:1.0: couldn't find required endpoints [ 976.024207][T12043] usb 5-1: USB disconnect, device number 25 [ 977.006791][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 980.091813][ T5593] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 980.318149][ T5593] usb 5-1: device descriptor read/all, error -71 [ 980.667470][T12166] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11597] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12166] [ 980.889019][T12170] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1402'. [ 980.889048][T12170] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1402'. [ 982.378582][ T5830] IPVS: starting estimator thread 0... [ 982.487849][T12175] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 982.737629][T12174] IPVS: using max 10 ests per chain, 24000 per kthread [ 983.000867][ T5593] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 983.162488][ T5593] usb 5-1: Using ep0 maxpacket: 16 [ 984.997386][ T5593] usb 5-1: unable to get BOS descriptor or descriptor too short [ 984.997448][ T5593] usb 5-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.00 [ 985.024738][ T5593] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 985.024775][ T5593] usb 5-1: can't read configurations, error -71 [ 985.315384][T12197] FAULT_INJECTION: forcing a failure. [ 985.315384][T12197] name failslab, interval 1, probability 0, space 0, times 0 [ 985.315422][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.4.1406 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 985.315446][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 985.315459][T12197] Call Trace: [ 985.315468][T12197] [ 985.315478][T12197] dump_stack_lvl+0xe8/0x150 [ 985.315518][T12197] should_fail_ex+0x46b/0x600 [ 985.315553][T12197] should_failslab+0xa8/0x100 [ 985.315584][T12197] ? do_getname+0x2e/0x250 [ 985.315623][T12197] kmem_cache_alloc_noprof+0x9e/0x690 [ 985.315652][T12197] ? do_getname+0x2e/0x250 [ 985.315687][T12197] do_getname+0x2e/0x250 [ 985.315714][T12197] ? getname_flags+0x11/0x20 [ 985.315745][T12197] do_sys_openat2+0xcc/0x200 [ 985.315775][T12197] ? __se_sys_futex+0x3a8/0x450 [ 985.315798][T12197] ? __pfx_do_sys_openat2+0x10/0x10 [ 985.315832][T12197] ? rcu_is_watching+0x16/0xb0 [ 985.315865][T12197] __x64_sys_openat+0x138/0x170 [ 985.315897][T12197] do_syscall_64+0x166/0x520 [ 985.315927][T12197] ? trace_irq_disable+0x3b/0x140 [ 985.315947][T12197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.315965][T12197] ? clear_bhb_loop+0x70/0xc0 [ 985.315984][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.316000][T12197] RIP: 0033:0x7f1a21c9e159 [ 985.316015][T12197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.316029][T12197] RSP: 002b:00007f1a1fef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 985.316047][T12197] RAX: ffffffffffffffda RBX: 00007f1a21f25fa0 RCX: 00007f1a21c9e159 [ 985.316058][T12197] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 985.316069][T12197] RBP: 00007f1a21d3506b R08: 0000000000000000 R09: 0000000000000000 [ 985.316079][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.316089][T12197] R13: 00007f1a21f26038 R14: 00007f1a21f25fa0 R15: 00007ffcca232c98 [ 985.316115][T12197] [ 985.680546][ T8951] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 985.841998][ T8951] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 985.843560][ T8951] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 985.843593][ T8951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 985.843634][ T8951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.880486][ T8951] usb 7-1: config 0 descriptor?? [ 986.390407][ T8951] ath6kl: Failed to submit usb control message: -71 [ 986.390460][ T8951] ath6kl: unable to send the bmi data to the device: -71 [ 986.390475][ T8951] ath6kl: Unable to send get target info: -71 [ 986.441257][ T8951] ath6kl: Failed to init ath6kl core: -71 [ 986.442763][ T8951] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 986.470387][ T8951] usb 7-1: USB disconnect, device number 2 [ 989.480563][T12247] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5583] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12247] [ 993.192387][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.192457][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.913300][ T5593] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 994.261080][ T5593] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 994.264167][ T5593] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 994.264201][ T5593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 994.264244][ T5593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.317695][ T5593] usb 1-1: config 0 descriptor?? [ 994.653779][ T5593] ath6kl: Failed to submit usb control message: -71 [ 994.653834][ T5593] ath6kl: unable to send the bmi data to the device: -71 [ 994.653850][ T5593] ath6kl: Unable to send get target info: -71 [ 994.654751][ T5593] ath6kl: Failed to init ath6kl core: -71 [ 994.656199][ T5593] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 994.720471][ T5593] usb 1-1: USB disconnect, device number 32 [ 995.300872][ T5572] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 995.431599][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 995.431783][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 995.771221][ T5572] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 995.772723][ T5572] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.772748][ T5572] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 995.772796][ T5572] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x25, changing to 0x5 [ 995.772831][ T5572] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 995.772868][ T5572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.342020][ T5572] ims_pcu 3-1:1.0: Control endpoint is not INTERRUPT IN [ 997.342082][ T5572] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 997.429156][ T5572] usb 3-1: USB disconnect, device number 29 [ 1002.030510][ T5593] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1002.213501][ T5593] usb 7-1: Using ep0 maxpacket: 8 [ 1002.227514][ T5593] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1002.298364][ T5593] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1002.298430][ T5593] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.298482][ T5593] usb 7-1: config 0 has no interface number 0 [ 1002.298655][ T5593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.549161][ T5593] usb 7-1: config 0 descriptor?? [ 1002.742502][ T5593] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1003.073529][ T5593] usb 7-1: USB disconnect, device number 3 [ 1003.489479][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 1003.489536][ T37] audit: type=1800 audit(1789848930.778:198): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1443" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1006.753236][T12341] gadgetfs: bound to dummy_udc driver [ 1008.468773][T12343] ================================================================== [ 1008.468792][T12343] BUG: KASAN: slab-use-after-free in mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1008.468830][T12343] Read of size 1 at addr ffff888032979458 by task syz.4.1446/12343 [ 1008.468847][T12343] ** replaying previous printk message ** [ 1008.468847][T12343] [ 1008.468859][T12343] CPU: 0 UID: 0 PID: 12343 Comm: syz.4.1446 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1008.468882][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1008.468894][T12343] Call Trace: [ 1008.468901][T12343] [ 1008.468910][T12343] dump_stack_lvl+0xe8/0x150 [ 1008.468952][T12343] print_address_description+0x55/0x1e0 [ 1008.468998][T12343] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1008.469017][T12343] print_report+0x58/0x70 [ 1008.469038][T12343] kasan_report+0x117/0x150 [ 1008.469068][T12343] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1008.469092][T12343] ? ep_open+0x4e/0x270 [ 1008.469197][T12343] __kasan_check_byte+0x2a/0x40 [ 1008.469226][T12343] lock_acquire+0x7d/0x350 [ 1008.469253][T12343] ? ep_open+0x4e/0x270 [ 1008.469282][T12343] ? ep_open+0x4e/0x270 [ 1008.469308][T12343] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1008.469329][T12343] ? ep_open+0x4e/0x270 [ 1008.469354][T12343] ep_open+0x4e/0x270 [ 1008.469375][T12343] ? do_dentry_open+0x83a/0x1420 [ 1008.469402][T12343] ? __pfx_ep_open+0x10/0x10 [ 1008.469426][T12343] do_dentry_open+0x849/0x1420 [ 1008.469457][T12343] vfs_open+0x3b/0x350 [ 1008.469480][T12343] ? path_openat+0x142d/0x1d60 [ 1008.469503][T12343] path_openat+0x1448/0x1d60 [ 1008.469531][T12343] do_file_open+0x23e/0x4a0 [ 1008.469549][T12343] ? __pfx_do_file_open+0x10/0x10 [ 1008.469566][T12343] ? alloc_fd+0x654/0x6d0 [ 1008.469578][T12343] do_sys_openat2+0x115/0x200 [ 1008.469593][T12343] ? __pfx_do_sys_openat2+0x10/0x10 [ 1008.469610][T12343] __x64_sys_openat+0x138/0x170 [ 1008.469626][T12343] do_syscall_64+0x166/0x520 [ 1008.469641][T12343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.469652][T12343] ? clear_bhb_loop+0x70/0xc0 [ 1008.469664][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.469674][T12343] RIP: 0033:0x7f1a21c9e159 [ 1008.469685][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.469695][T12343] RSP: 002b:00007f1a1feb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1008.469707][T12343] RAX: ffffffffffffffda RBX: 00007f1a21f26180 RCX: 00007f1a21c9e159 [ 1008.469715][T12343] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 1008.469723][T12343] RBP: 00007f1a21d3506b R08: 0000000000000000 R09: 0000000000000000 [ 1008.469729][T12343] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1008.469736][T12343] R13: 00007f1a21f26218 R14: 00007f1a21f26180 R15: 00007ffcca232c98 [ 1008.469748][T12343] [ 1008.469752][T12343] [ 1008.469762][T12343] Allocated by task 12341: [ 1008.469803][T12343] kasan_save_track+0x3e/0x80 [ 1008.469818][T12343] __kasan_kmalloc+0x93/0xb0 [ 1008.469837][T12343] __kmalloc_cache_noprof+0x3d5/0x680 [ 1008.469851][T12343] gadgetfs_bind+0x27a/0xae0 [ 1008.469868][T12343] gadget_bind_driver+0x2ca/0x9e0 [ 1008.469932][T12343] really_probe+0x254/0xae0 [ 1008.469989][T12343] __driver_probe_device+0x1e8/0x360 [ 1008.470003][T12343] driver_probe_device+0x4f/0x240 [ 1008.470012][T12343] __driver_attach+0x339/0x600 [ 1008.470021][T12343] bus_for_each_dev+0x23e/0x2c0 [ 1008.470032][T12343] bus_add_driver+0x348/0x670 [ 1008.470043][T12343] driver_register+0x23a/0x320 [ 1008.470053][T12343] usb_gadget_register_driver_owner+0xf9/0x270 [ 1008.470065][T12343] dev_config+0xe4e/0x12c0 [ 1008.470082][T12343] vfs_write+0x29f/0xbb0 [ 1008.470097][T12343] ksys_write+0x156/0x270 [ 1008.470114][T12343] do_syscall_64+0x166/0x520 [ 1008.470134][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.470150][T12343] [ 1008.470154][T12343] Freed by task 12341: [ 1008.470162][T12343] kasan_save_track+0x3e/0x80 [ 1008.470183][T12343] kasan_save_free_info+0x40/0x50 [ 1008.470201][T12343] __kasan_slab_free+0x5c/0x80 [ 1008.470222][T12343] kfree+0x1c5/0x6d0 [ 1008.470239][T12343] destroy_ep_files+0x29f/0x330 [ 1008.470261][T12343] gadgetfs_unbind+0x112/0x2c0 [ 1008.470284][T12343] gadget_unbind_driver+0x1cb/0x410 [ 1008.470302][T12343] device_release_driver_internal+0x48b/0x880 [ 1008.470317][T12343] driver_detach+0x1f3/0x2d0 [ 1008.470331][T12343] bus_remove_driver+0x229/0x320 [ 1008.470351][T12343] usb_gadget_unregister_driver+0x4e/0x70 [ 1008.470370][T12343] dev_release+0x86/0x210 [ 1008.470382][T12343] __fput+0x42a/0xa80 [ 1008.470390][T12343] task_work_run+0x1d9/0x270 [ 1008.470402][T12343] exit_to_user_mode_loop+0x204/0x770 [ 1008.470414][T12343] do_syscall_64+0x328/0x520 [ 1008.470427][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.470438][T12343] [ 1008.470442][T12343] The buggy address belongs to the object at ffff888032979400 [ 1008.470442][T12343] which belongs to the cache kmalloc-512 of size 512 [ 1008.470452][T12343] The buggy address is located 88 bytes inside of [ 1008.470452][T12343] freed 512-byte region [ffff888032979400, ffff888032979600) [ 1008.470502][T12343] [ 1008.470505][T12343] The buggy address belongs to the physical page: [ 1008.470541][T12343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32978 [ 1008.470552][T12343] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1008.470562][T12343] flags: 0x80000000000040(head|node=0|zone=1) [ 1008.470576][T12343] page_type: f5(slab) [ 1008.470587][T12343] raw: 0080000000000040 ffff88813ffbdc80 dead000000000100 dead000000000122 [ 1008.470596][T12343] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1008.470606][T12343] head: 0080000000000040 ffff88813ffbdc80 dead000000000100 dead000000000122 [ 1008.470614][T12343] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1008.470623][T12343] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1008.470632][T12343] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 1008.470637][T12343] page dumped because: kasan: bad access detected [ 1008.470646][T12343] page_owner tracks the page as allocated [ 1008.470650][T12343] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20742703551 [ 1008.470666][T12343] post_alloc_hook+0x1f9/0x250 [ 1008.470679][T12343] get_page_from_freelist+0x2591/0x2600 [ 1008.470694][T12343] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 1008.470713][T12343] allocate_slab+0x7d/0x620 [ 1008.470729][T12343] refill_objects+0x2d8/0x350 [ 1008.470746][T12343] __pcs_replace_empty_main+0x339/0x690 [ 1008.470755][T12343] __kmalloc_noprof+0x54b/0x790 [ 1008.470767][T12343] ops_init+0x1eb/0x5d0 [ 1008.470816][T12343] register_pernet_operations+0x32e/0x870 [ 1008.470830][T12343] register_pernet_subsys+0x28/0x40 [ 1008.470843][T12343] do_one_initcall+0x250/0x870 [ 1008.470857][T12343] do_initcall_level+0x10a/0x1a0 [ 1008.470972][T12343] do_initcalls+0x59/0xa0 [ 1008.470990][T12343] kernel_init_freeable+0x29d/0x3e0 [ 1008.471010][T12343] kernel_init+0x22/0x1d0 [ 1008.471027][T12343] ret_from_fork+0x514/0xb70 [ 1008.471044][T12343] page_owner free stack trace missing [ 1008.471051][T12343] [ 1008.471056][T12343] Memory state around the buggy address: [ 1008.471066][T12343] ffff888032979300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1008.471079][T12343] ffff888032979380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1008.471091][T12343] >ffff888032979400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1008.471100][T12343] ^ [ 1008.471110][T12343] ffff888032979480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1008.471121][T12343] ffff888032979500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1008.471130][T12343] ================================================================== [ 1008.499330][T12343] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1009.236525][T12343] CPU: 0 UID: 0 PID: 12343 Comm: syz.4.1446 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1009.246397][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1009.256440][T12343] Call Trace: [ 1009.259705][T12343] [ 1009.262620][T12343] vpanic+0x56d/0xa60 [ 1009.266586][T12343] ? __pfx_vpanic+0x10/0x10 [ 1009.271069][T12343] ? __pfx___schedule+0x10/0x10 [ 1009.275906][T12343] panic+0xc5/0xd0 [ 1009.279604][T12343] ? __pfx_panic+0x10/0x10 [ 1009.284000][T12343] ? preempt_schedule_common+0x7f/0xd0 [ 1009.289446][T12343] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1009.295668][T12343] check_panic_on_warn+0x89/0xb0 [ 1009.300592][T12343] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1009.306817][T12343] end_report+0x73/0x170 [ 1009.311047][T12343] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1009.317268][T12343] kasan_report+0x128/0x150 [ 1009.321797][T12343] ? mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1009.328041][T12343] ? ep_open+0x4e/0x270 [ 1009.332186][T12343] __kasan_check_byte+0x2a/0x40 [ 1009.337022][T12343] lock_acquire+0x7d/0x350 [ 1009.341426][T12343] ? ep_open+0x4e/0x270 [ 1009.345571][T12343] ? ep_open+0x4e/0x270 [ 1009.349707][T12343] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1009.355757][T12343] ? ep_open+0x4e/0x270 [ 1009.359905][T12343] ep_open+0x4e/0x270 [ 1009.363980][T12343] ? do_dentry_open+0x83a/0x1420 [ 1009.368915][T12343] ? __pfx_ep_open+0x10/0x10 [ 1009.373495][T12343] do_dentry_open+0x849/0x1420 [ 1009.378251][T12343] vfs_open+0x3b/0x350 [ 1009.382329][T12343] ? path_openat+0x142d/0x1d60 [ 1009.387104][T12343] path_openat+0x1448/0x1d60 [ 1009.391684][T12343] do_file_open+0x23e/0x4a0 [ 1009.396173][T12343] ? __pfx_do_file_open+0x10/0x10 [ 1009.401186][T12343] ? alloc_fd+0x654/0x6d0 [ 1009.405502][T12343] do_sys_openat2+0x115/0x200 [ 1009.410171][T12343] ? __pfx_do_sys_openat2+0x10/0x10 [ 1009.415378][T12343] __x64_sys_openat+0x138/0x170 [ 1009.420225][T12343] do_syscall_64+0x166/0x520 [ 1009.424847][T12343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.430911][T12343] ? clear_bhb_loop+0x70/0xc0 [ 1009.435570][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.441442][T12343] RIP: 0033:0x7f1a21c9e159 [ 1009.445858][T12343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.465449][T12343] RSP: 002b:00007f1a1feb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1009.473850][T12343] RAX: ffffffffffffffda RBX: 00007f1a21f26180 RCX: 00007f1a21c9e159 [ 1009.481809][T12343] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 1009.489764][T12343] RBP: 00007f1a21d3506b R08: 0000000000000000 R09: 0000000000000000 [ 1009.497715][T12343] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1009.505669][T12343] R13: 00007f1a21f26218 R14: 00007f1a21f26180 R15: 00007ffcca232c98 [ 1009.513632][T12343] [ 1009.516932][T12343] Kernel Offset: disabled [ 1009.521251][T12343] Rebooting in 86400 seconds..