last executing test programs: 1m37.132669251s ago: executing program 2 (id=156): syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x4000) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x40, 0xf6, 0xf, 0x6}, {0x0, 0xd, 0x1}, {0x6, 0x6, 0x5, 0x5}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newchain={0x34, 0x64, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0xffe0, 0x8}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 1m36.299841952s ago: executing program 2 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000fc0), &(0x7f0000000400)='./file0\x00', 0x2000085c, &(0x7f0000001280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000005500)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = syz_open_dev$mtd(&(0x7f00000000c0), 0xfffffffffffffffa, 0x100) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_int={{0x14}}], 0x50}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd28, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x6}, {0x10, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff8000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1m36.240632133s ago: executing program 0 (id=165): r0 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000340)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x48, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 1m35.469903632s ago: executing program 0 (id=172): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) io_uring_enter(0xffffffffffffffff, 0x4714, 0x4f75, 0x1, &(0x7f00000001c0)={[0x4]}, 0x8) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0xffffffffffffffff}) 1m35.428788913s ago: executing program 2 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@initdev}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1m35.306857976s ago: executing program 0 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x43c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x18bd}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81000) renameat2(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000280)={0x9, "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"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) r4 = gettid() r5 = syz_open_dev$sndctrl(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000b40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) 1m32.467130207s ago: executing program 2 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000500)='8', 0x1) setxattr$system_posix_acl(&(0x7f00000017c0)='.\x00', &(0x7f0000001800)='system.posix_acl_default\x00', &(0x7f00000018c0)=ANY=[@ANYBLOB="02"], 0x24, 0x3) 1m32.34966233s ago: executing program 2 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xfff2}}}, 0x24}}, 0x448c0) 1m32.34780615s ago: executing program 0 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fsmount(0xffffffffffffffff, 0x1, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 1m32.199818993s ago: executing program 2 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x700, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000003c0)="80", 0x1, 0x40, &(0x7f0000000400)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m32.167633814s ago: executing program 0 (id=184): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) io_uring_enter(0xffffffffffffffff, 0x4714, 0x4f75, 0x1, &(0x7f00000001c0)={[0x4]}, 0x8) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0xffffffffffffffff}) 1m32.058040867s ago: executing program 0 (id=185): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1m16.307687618s ago: executing program 32 (id=185): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1m16.297566888s ago: executing program 33 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x700, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000003c0)="80", 0x1, 0x40, &(0x7f0000000400)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 5.020860286s ago: executing program 6 (id=823): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000640)='./tracefs\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000740), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000007c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./tracefs/instances/foo\x00', 0x1ff) 4.507817238s ago: executing program 6 (id=831): r0 = syz_usb_connect(0x3, 0x3c, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x20082) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1a000, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x1000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 3.19652972s ago: executing program 6 (id=845): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000fc0), &(0x7f0000000400)='./file0\x00', 0x2000085c, &(0x7f0000001280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000005500)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = syz_open_dev$mtd(&(0x7f00000000c0), 0xfffffffffffffffa, 0x100) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_int={{0x14}}], 0x50}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 3.115805913s ago: executing program 3 (id=847): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000440)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 2.255561474s ago: executing program 1 (id=850): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r8, &(0x7f0000000740)='1024\n', 0x5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 2.255210564s ago: executing program 3 (id=851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x6, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 2.220886355s ago: executing program 3 (id=852): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb080000000000000000004e020000b592e499a02cf811f0b06db78800489078030000000400000096597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cbaf6af5116bf52dbb91d30ae25aab828a961858d03614d08d5ec55f8f4cf7117ba90c7e30d0aed3e1eb8fa7342fb55fbd6f0b89dae3c44c95cb07f66714512fc1efe2dbaf4bb42ca0c8089b8f6287b67b60c30a410b657f789f03f684b26a4b92d1f588d6a84e5f1dd9e0280989905c00e6f7d9e6a500d575418fdc4c2786b12894f0cc091a88"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x0, 0x9, @local}}, 0x2, 0x20, 0xffffffff, 0x0, 0x0, 0x3}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=r5, @ANYBLOB="0100000000000000000005000000400002801400010000000000000000000000000000000001060002005000000008000400010000000800050000000000080006000000000006000e004e210000"], 0x54}, 0x1, 0x0, 0x0, 0x4806}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.149080977s ago: executing program 6 (id=854): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000005c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x87f, 0x0, &(0x7f00000016c0)=""/2175}) 1.688830958s ago: executing program 1 (id=855): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.647034809s ago: executing program 6 (id=857): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, 0x0, 0x1, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.646202959s ago: executing program 1 (id=859): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000640)='./tracefs\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000740), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./tracefs/instances/foo\x00', 0x1ff) 1.60585909s ago: executing program 4 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000002300000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x48040) 1.471807613s ago: executing program 4 (id=863): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) 1.366991996s ago: executing program 4 (id=864): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000fc0), &(0x7f0000000400)='./file0\x00', 0x2000085c, &(0x7f0000001280)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000005500)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r4 = syz_open_dev$mtd(&(0x7f00000000c0), 0xfffffffffffffffa, 0x100) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_int={{0x14}}], 0x50}, 0x40010) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x800, 0x70bd28, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0x6}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1.291965678s ago: executing program 3 (id=866): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000004c0)={0xc, @multicast1, 0x4e21, 0x1, 'sed\x00', 0xb, 0x5, 0x38}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') 1.20855705s ago: executing program 5 (id=868): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n', 0x2) 414.97606ms ago: executing program 3 (id=869): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 368.640201ms ago: executing program 6 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000280)={0x9, "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"}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) r4 = gettid() r5 = syz_open_dev$sndctrl(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000b40)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xf, 0x4, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000600)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) 368.321481ms ago: executing program 1 (id=871): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x1, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x1, 0x0, 0xee01}, {0x9, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50, 0x6b4d}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00"/52], 0xb8}}, 0x4000) 335.036831ms ago: executing program 3 (id=872): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000440)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 276.351403ms ago: executing program 5 (id=873): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x11, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="fc06", 0x2}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xa051, 0xe, 0x1, 0xffff}}], 0x18}], 0x1, 0x4000004) getpeername$packet(r0, 0x0, 0x0) 276.031083ms ago: executing program 1 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000100002f000000180001801400020064756d6d7930"], 0x2c}}, 0x0) 275.822593ms ago: executing program 4 (id=875): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 220.316714ms ago: executing program 1 (id=876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0xc00) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r0, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x600000000000000) 171.943246ms ago: executing program 5 (id=877): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='ipv4\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='127.0.0.1\n', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='4420\n', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r8, &(0x7f0000000740)='1024\n', 0x5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 110.098267ms ago: executing program 5 (id=878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f00000005c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x87f, 0x0, &(0x7f00000016c0)=""/2175}) 94.251977ms ago: executing program 4 (id=879): syz_emit_ethernet(0xfdef, &(0x7f0000001cc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f510000fc020000000000000000000000000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"], 0x0) 47.418279ms ago: executing program 4 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(&(0x7f0000000300), &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r1, &(0x7f00000005c0)='naa.', 0x4) write(r1, &(0x7f0000000600)='NULL', 0x4) 36.981979ms ago: executing program 5 (id=881): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 0s ago: executing program 5 (id=882): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ef) mount(0x0, &(0x7f0000000640)='./tracefs\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000740), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./tracefs/instances/foo\x00', 0x1ff) kernel console output (not intermixed with test programs): loop2-75 [ 46.264780][ T4639] JBD2: bad block at offset 32 [ 46.270793][ T4639] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 46.294616][ T4333] ocfs2: Unmounting device (7,2) on (node local) [ 46.294840][ T4616] device macvlan0 entered promiscuous mode [ 46.333944][ T4616] device macvlan1 entered promiscuous mode [ 46.336896][ T4616] device ipvlan0 entered promiscuous mode [ 46.338102][ T4616] device ipvlan1 entered promiscuous mode [ 46.382640][ T4616] device macvtap0 entered promiscuous mode [ 46.390678][ T4616] device macsec0 entered promiscuous mode [ 46.442301][ T4616] device geneve0 entered promiscuous mode [ 46.449715][ T4616] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.451372][ T4616] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.453485][ T4616] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.455941][ T4616] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.509197][ T4649] FAULT_INJECTION: forcing a failure. [ 46.509197][ T4649] name failslab, interval 1, probability 0, space 0, times 1 [ 46.511678][ T4649] CPU: 0 PID: 4649 Comm: syz.2.80 Not tainted syzkaller #0 [ 46.513181][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.515012][ T4649] Call trace: [ 46.515726][ T4649] dump_backtrace+0x1c4/0x1f0 [ 46.516650][ T4649] show_stack+0x2c/0x3c [ 46.517395][ T4649] __dump_stack+0x30/0x40 [ 46.518159][ T4649] dump_stack_lvl+0xf4/0x15c [ 46.519046][ T4649] dump_stack+0x1c/0x5c [ 46.519804][ T4649] should_fail_ex+0x3cc/0x524 [ 46.520670][ T4649] __should_failslab+0xc0/0x11c [ 46.521569][ T4649] should_failslab+0x10/0x28 [ 46.522461][ T4649] kmem_cache_alloc+0x88/0x310 [ 46.523280][ T4649] dst_alloc+0xfc/0x16c [ 46.524041][ T4649] ip_route_output_key_hash_rcu+0xfbc/0x1dfc [ 46.525205][ T4649] ip_route_output_key_hash+0x1b0/0x2fc [ 46.526226][ T4649] ip_route_output_flow+0x3c/0x158 [ 46.527163][ T4649] udp_sendmsg+0x10a8/0x1db0 [ 46.527987][ T4649] udpv6_sendmsg+0x8dc/0x20d0 [ 46.528831][ T4649] inet6_sendmsg+0xb4/0xd8 [ 46.529620][ T4649] sock_write_iter+0x268/0x368 [ 46.530481][ T4649] vfs_write+0x3c8/0x7c8 [ 46.531308][ T4649] ksys_write+0x12c/0x228 [ 46.532075][ T4649] __arm64_sys_write+0x7c/0x90 [ 46.532937][ T4649] invoke_syscall+0x98/0x290 [ 46.533761][ T4649] el0_svc_common+0x13c/0x258 [ 46.534636][ T4649] do_el0_svc+0x5c/0x134 [ 46.535357][ T4649] el0_svc+0x58/0x12c [ 46.536079][ T4649] el0t_64_sync_handler+0x84/0xf0 [ 46.537007][ T4649] el0t_64_sync+0x18c/0x190 [ 46.537886][ C0] vkms_vblank_simulate: vblank timer overrun [ 46.733482][ T4616] device geneve1 entered promiscuous mode [ 46.746297][ T4616] device netdevsim0 entered promiscuous mode [ 46.751760][ T4616] device netdevsim1 entered promiscuous mode [ 46.757627][ T4616] device netdevsim2 entered promiscuous mode [ 46.764711][ T4616] device netdevsim3 entered promiscuous mode [ 46.852307][ T4616] device wlan0 entered promiscuous mode [ 46.933456][ T4616] device wlan1 entered promiscuous mode [ 46.938462][ T4616] device hsr1 entered promiscuous mode [ 46.944075][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 46.946000][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 48.171878][ C0] sched: RT throttling activated [ 48.193014][ T4641] device syz_tun entered promiscuous mode [ 48.327216][ T4641] device syz_tun left promiscuous mode [ 48.372307][ T27] audit: type=1326 audit(48.360:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.85" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x7ffc0000 [ 48.377920][ T27] audit: type=1326 audit(48.360:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.85" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x7ffc0000 [ 48.387072][ T27] audit: type=1326 audit(48.360:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.85" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x7ffc0000 [ 48.390893][ T27] audit: type=1326 audit(48.360:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.85" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x7ffc0000 [ 48.396051][ T27] audit: type=1326 audit(48.370:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.85" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8377a9a8 code=0x7ffc0000 [ 48.407552][ T27] audit: type=1326 audit(48.370:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.85" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x7ffc0000 [ 48.411573][ T27] audit: type=1326 audit(48.370:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.85" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8377a9a8 code=0x7ffc0000 [ 48.417835][ T27] audit: type=1326 audit(48.370:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.3.85" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8377a9a8 code=0x7ffc0000 [ 48.422731][ T27] audit: type=1326 audit(48.400:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.88" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x0 [ 48.847292][ T4670] loop4: detected capacity change from 0 to 32768 [ 48.868130][ T4670] JBD2: Ignoring recovery information on journal [ 48.871777][ T4670] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 48.873992][ T4670] JBD2: bad block at offset 32 [ 48.880396][ T4670] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 49.191238][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 49.250507][ T4685] loop2: detected capacity change from 0 to 256 [ 49.255602][ T4685] ======================================================= [ 49.255602][ T4685] WARNING: The mand mount option has been deprecated and [ 49.255602][ T4685] and is ignored by this kernel. Remove the mand [ 49.255602][ T4685] option from the mount to silence this warning. [ 49.255602][ T4685] ======================================================= [ 49.266806][ T4685] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 49.310282][ T4687] device syzkaller0 entered promiscuous mode [ 53.420833][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 53.558747][ T4713] loop0: detected capacity change from 0 to 32768 [ 53.575818][ T4713] JBD2: Ignoring recovery information on journal [ 53.578202][ T4713] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 53.579694][ T4713] JBD2: bad block at offset 32 [ 53.588950][ T4713] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 53.596883][ T4713] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 53.610974][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 53.629621][ T27] audit: type=1326 audit(53.610:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.0.104" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b97a9a8 code=0x0 [ 60.259825][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 60.406601][ T4746] loop0: detected capacity change from 0 to 32768 [ 60.417230][ T4746] JBD2: Ignoring recovery information on journal [ 60.419280][ T4746] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 60.420722][ T4746] JBD2: bad block at offset 32 [ 60.425342][ T4746] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 60.434509][ T4746] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 60.459685][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 60.503796][ T27] audit: type=1326 audit(60.490:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.116" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b97a9a8 code=0x0 [ 61.845972][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 61.847765][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 61.849305][ T4693] netlink: 'syz.2.93': attribute type 15 has an invalid length. [ 61.850518][ T4693] netlink: 'syz.2.93': attribute type 18 has an invalid length. [ 61.990044][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 62.531615][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 62.842964][ T4779] loop3: detected capacity change from 0 to 32768 [ 62.875588][ T4779] JBD2: Ignoring recovery information on journal [ 62.877662][ T4779] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 62.879818][ T4779] JBD2: bad block at offset 32 [ 62.895779][ T4779] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 62.911077][ T4779] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 62.964574][ T4329] ocfs2: Unmounting device (7,3) on (node local) [ 63.015987][ T27] audit: type=1326 audit(63.000:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4784 comm="syz.1.128" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb7a9a8 code=0x0 [ 63.069087][ T4792] loop2: detected capacity change from 0 to 256 [ 63.086047][ T4792] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 63.361538][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.363466][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.365057][ T4797] netlink: 'syz.2.130': attribute type 15 has an invalid length. [ 63.366606][ T4797] netlink: 'syz.2.130': attribute type 18 has an invalid length. [ 63.726001][ T4800] device syzkaller0 entered promiscuous mode [ 64.493171][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494672][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.761687][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 65.336907][ T4816] loop0: detected capacity change from 0 to 32768 [ 65.356149][ T4816] JBD2: Ignoring recovery information on journal [ 65.358240][ T4816] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 65.359903][ T4816] JBD2: bad block at offset 32 [ 65.362613][ T4816] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 65.370727][ T4816] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 65.384669][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 66.040887][ T4787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.748748][ T27] audit: type=1326 audit(66.730:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4837 comm="syz.2.143" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd7a9a8 code=0x0 [ 67.158332][ T4841] loop0: detected capacity change from 0 to 256 [ 67.167021][ T4841] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 67.617869][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 69.613769][ T22] cfg80211: failed to load regulatory.db [ 75.552215][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 75.553841][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 75.555385][ T4842] netlink: 'syz.0.144': attribute type 15 has an invalid length. [ 75.556711][ T4842] netlink: 'syz.0.144': attribute type 18 has an invalid length. [ 75.591056][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 76.817710][ T27] audit: type=1326 audit(76.800:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.2.156" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd7a9a8 code=0x0 [ 76.919855][ T4893] FAULT_INJECTION: forcing a failure. [ 76.919855][ T4893] name failslab, interval 1, probability 0, space 0, times 0 [ 76.922528][ T4893] CPU: 1 PID: 4893 Comm: syz.0.158 Not tainted syzkaller #0 [ 76.923880][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 76.925809][ T4893] Call trace: [ 76.926421][ T4893] dump_backtrace+0x1c4/0x1f0 [ 76.927315][ T4893] show_stack+0x2c/0x3c [ 76.928123][ T4893] __dump_stack+0x30/0x40 [ 76.928966][ T4893] dump_stack_lvl+0xf4/0x15c [ 76.929916][ T4893] dump_stack+0x1c/0x5c [ 76.930672][ T4893] should_fail_ex+0x3cc/0x524 [ 76.931519][ T4893] __should_failslab+0xc0/0x11c [ 76.932446][ T4893] should_failslab+0x10/0x28 [ 76.933306][ T4893] __kmem_cache_alloc_node+0x7c/0x318 [ 76.934329][ T4893] kmalloc_trace+0x48/0x94 [ 76.935165][ T4893] ref_tracker_alloc+0x138/0x3f0 [ 76.936088][ T4893] dst_init+0xc0/0x3dc [ 76.936782][ T4893] dst_alloc+0x124/0x16c [ 76.937564][ T4893] ip_route_output_key_hash_rcu+0xfbc/0x1dfc [ 76.938637][ T4893] ip_route_output_key_hash+0x1b0/0x2fc [ 76.939787][ T4893] ip_route_output_flow+0x3c/0x158 [ 76.940786][ T4893] udp_sendmsg+0x10a8/0x1db0 [ 76.941693][ T4893] udpv6_sendmsg+0x8dc/0x20d0 [ 76.942638][ T4893] inet6_sendmsg+0xb4/0xd8 [ 76.943522][ T4893] sock_write_iter+0x268/0x368 [ 76.944469][ T4893] vfs_write+0x3c8/0x7c8 [ 76.945247][ T4893] ksys_write+0x12c/0x228 [ 76.946054][ T4893] __arm64_sys_write+0x7c/0x90 [ 76.946871][ T4893] invoke_syscall+0x98/0x290 [ 76.947882][ T4893] el0_svc_common+0x13c/0x258 [ 76.948893][ T4893] do_el0_svc+0x5c/0x134 [ 76.949764][ T4893] el0_svc+0x58/0x12c [ 76.950586][ T4893] el0t_64_sync_handler+0x84/0xf0 [ 76.951699][ T4893] el0t_64_sync+0x18c/0x190 [ 76.952742][ T4893] memory allocation failure, unreliable refcount tracker. [ 76.979460][ T4886] loop1: detected capacity change from 0 to 32768 [ 76.986638][ T4886] JBD2: Ignoring recovery information on journal [ 76.990167][ T4886] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 76.994442][ T4886] JBD2: bad block at offset 32 [ 77.078962][ T4886] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 77.120924][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 77.528022][ T48] Bluetooth: hci4: hcon 00000000dc878315 sent 1 < count 8192 [ 77.656335][ T4909] loop2: detected capacity change from 0 to 256 [ 77.669755][ T4909] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 77.869740][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 77.871611][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 77.873634][ T4913] netlink: 'syz.2.164': attribute type 15 has an invalid length. [ 77.875106][ T4913] netlink: 'syz.2.164': attribute type 18 has an invalid length. [ 78.407310][ T4923] loop4: detected capacity change from 0 to 32768 [ 78.432961][ T4923] JBD2: Ignoring recovery information on journal [ 78.435050][ T4923] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 78.436581][ T4923] JBD2: bad block at offset 32 [ 78.451208][ T4923] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 78.505698][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 81.439390][ T27] audit: type=1326 audit(81.420:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4941 comm="syz.3.175" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x0 [ 81.491445][ T4946] FAULT_INJECTION: forcing a failure. [ 81.491445][ T4946] name fail_futex, interval 1, probability 0, space 0, times 0 [ 81.495963][ T4946] CPU: 0 PID: 4946 Comm: syz.2.177 Not tainted syzkaller #0 [ 81.497445][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 81.499372][ T4946] Call trace: [ 81.500056][ T4946] dump_backtrace+0x1c4/0x1f0 [ 81.500942][ T4946] show_stack+0x2c/0x3c [ 81.501745][ T4946] __dump_stack+0x30/0x40 [ 81.502577][ T4946] dump_stack_lvl+0xf4/0x15c [ 81.503455][ T4946] dump_stack+0x1c/0x5c [ 81.504293][ T4946] should_fail_ex+0x3cc/0x524 [ 81.505274][ T4946] should_fail+0x14/0x24 [ 81.506113][ T4946] get_futex_key+0x904/0xfb0 [ 81.506919][ T4946] futex_wake+0x10c/0x458 [ 81.507771][ T4946] do_futex+0x2c4/0x340 [ 81.508591][ T4946] __arm64_sys_futex+0x390/0x414 [ 81.509490][ T4946] invoke_syscall+0x98/0x290 [ 81.510345][ T4946] el0_svc_common+0x13c/0x258 [ 81.511198][ T4946] do_el0_svc+0x5c/0x134 [ 81.512004][ T4946] el0_svc+0x58/0x12c [ 81.512798][ T4946] el0t_64_sync_handler+0x84/0xf0 [ 81.513741][ T4946] el0t_64_sync+0x18c/0x190 [ 81.698837][ T4955] loop0: detected capacity change from 0 to 32768 [ 81.721644][ T4955] JBD2: Ignoring recovery information on journal [ 81.724443][ T4955] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 81.726226][ T4955] JBD2: bad block at offset 32 [ 81.728403][ T4960] device syzkaller0 entered promiscuous mode [ 81.743476][ T4955] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 81.779680][ T4334] ocfs2: Unmounting device (7,0) on (node local) [ 81.970795][ T4971] netlink: 52 bytes leftover after parsing attributes in process `syz.4.186'. [ 81.983257][ T4971] netlink: 52 bytes leftover after parsing attributes in process `syz.4.186'. [ 85.557691][ T4993] loop4: detected capacity change from 0 to 32768 [ 85.575790][ T4993] JBD2: Ignoring recovery information on journal [ 85.577960][ T4993] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 85.579554][ T4993] JBD2: bad block at offset 32 [ 85.590386][ T4993] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 85.918171][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 86.350078][ T5009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.352179][ T5009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.594044][ T27] audit: type=1326 audit(86.580:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.4.199" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb757a9a8 code=0x0 [ 91.251834][ T5034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.253618][ T5034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.852917][ T5037] loop4: detected capacity change from 0 to 32768 [ 91.861689][ T5037] JBD2: Ignoring recovery information on journal [ 91.864044][ T5037] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 91.865984][ T5037] JBD2: bad block at offset 32 [ 91.867796][ T5037] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 91.899284][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 92.100643][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.102818][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.106665][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.108419][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.518576][ T5056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.520293][ T5056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.295332][ T4342] Bluetooth: hci4: command 0x0406 tx timeout [ 96.441346][ T5067] binder: 5066:5067 tried to acquire reference to desc 0, got 1 instead [ 96.444389][ T5067] binder_alloc: 5066: pid 5066 spamming oneway? 2 buffers allocated for a total size of 5120 [ 96.446530][ T5067] binder: 5066:5067 ioctl c0306201 0 returned -14 [ 96.454679][ T24] binder: undelivered transaction 6, process died. [ 96.457240][ T24] binder: undelivered transaction 5, process died. [ 97.682273][ T4342] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.686865][ T4342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.688554][ T4342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.690115][ T4342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.691740][ T4342] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.693463][ T4342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.715511][ T4342] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.717626][ T4342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.719422][ T4342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.721135][ T4342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.725032][ T4342] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.726409][ T4342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.358866][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.361432][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.772409][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 99.781450][ T4342] Bluetooth: hci6: command 0x0409 tx timeout [ 99.937584][ T5094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 99.941777][ T5094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 100.152413][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 100.223391][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 100.270067][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.271414][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.274327][ T5072] device bridge_slave_0 entered promiscuous mode [ 100.281701][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.283153][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.284759][ T5072] device bridge_slave_1 entered promiscuous mode [ 100.294843][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.297054][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.299465][ T5076] device bridge_slave_0 entered promiscuous mode [ 100.307189][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.309170][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.310684][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.313761][ T5076] device bridge_slave_1 entered promiscuous mode [ 101.624791][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.653685][ T5124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.656246][ T5124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.664040][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.676743][ T5072] team0: Port device team_slave_0 added [ 101.679946][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.756327][ T5072] team0: Port device team_slave_1 added [ 101.765959][ T5076] team0: Port device team_slave_0 added [ 101.771742][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.773689][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.778922][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.826268][ T5076] team0: Port device team_slave_1 added [ 101.833813][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.835184][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.840288][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.855732][ T4342] Bluetooth: hci6: command 0x041b tx timeout [ 101.857016][ T4342] Bluetooth: hci5: command 0x041b tx timeout [ 101.858669][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.860246][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.869113][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.869231][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.880016][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.881254][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.886092][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.892899][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.897080][ T5143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 101.898990][ T5143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 101.941196][ T5143] device syz_tun entered promiscuous mode [ 101.994324][ T5143] device syz_tun left promiscuous mode [ 102.133192][ T5072] device hsr_slave_0 entered promiscuous mode [ 102.172299][ T5072] device hsr_slave_1 entered promiscuous mode [ 102.195627][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.197146][ T5072] Cannot create hsr debugfs directory [ 102.263540][ T5076] device hsr_slave_0 entered promiscuous mode [ 102.342283][ T5076] device hsr_slave_1 entered promiscuous mode [ 102.383068][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.384672][ T5076] Cannot create hsr debugfs directory [ 103.840579][ T5175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.842926][ T5175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.856737][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 103.898860][ T5182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.900571][ T5182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.931966][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 103.933250][ T48] Bluetooth: hci6: command 0x040f tx timeout [ 104.025842][ T5072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.332789][ T5072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.427173][ T5072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.463385][ T5072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.541816][ T5192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.547494][ T5192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.559474][ T5076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 104.638979][ T5076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 104.735983][ T5076] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 104.776663][ T5076] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.833330][ T5212] Zero length message leads to an empty skb [ 106.170362][ T4342] Bluetooth: hci6: command 0x0419 tx timeout [ 106.171765][ T4342] Bluetooth: hci5: command 0x0419 tx timeout [ 106.411326][ T5221] loop4: detected capacity change from 0 to 256 [ 106.536198][ T5221] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 106.614752][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.626417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.628367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.632267][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.635035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.639406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.641258][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.642739][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.043979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.046519][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 107.048308][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.256'. [ 107.049793][ T5230] netlink: 'syz.4.256': attribute type 15 has an invalid length. [ 107.051071][ T5230] netlink: 'syz.4.256': attribute type 18 has an invalid length. [ 107.099020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.101023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.103245][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.104456][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.106120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.110523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.113515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.115688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.117546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.119533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.121292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.124468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.129840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.131515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.134698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.140853][ T5240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.144179][ T5240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.151332][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.159830][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.370298][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.373425][ T5247] tipc: Started in network mode [ 107.374341][ T5247] tipc: Node identity 4, cluster identity 4711 [ 107.375431][ T5247] tipc: Node number set to 4 [ 107.390326][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.392225][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.399153][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.401169][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.409769][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.411018][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.414997][ T5254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'. [ 107.415988][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.422798][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.427308][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.428550][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.480907][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.483053][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.490561][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.500256][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.503894][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.505657][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.507620][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.509778][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.522819][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.524744][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.526519][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.528452][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.751137][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.152183][ T5288] loop1: detected capacity change from 0 to 256 [ 108.168194][ T5288] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 108.202108][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.205229][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.207903][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.243569][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.670085][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 111.236733][ T5032] team0 (unregistering): Port device team_slave_1 removed [ 111.463464][ T5032] team0 (unregistering): Port device team_slave_0 removed [ 111.632394][ T5032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.832934][ T5032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.331942][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 113.313286][ T5032] bond0 (unregistering): Released all slaves [ 113.561824][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 113.563866][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 113.565514][ T5291] netlink: 'syz.1.268': attribute type 15 has an invalid length. [ 113.566986][ T5291] netlink: 'syz.1.268': attribute type 18 has an invalid length. [ 113.610280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.611815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.620684][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.700151][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.782201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.783888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.902014][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.903810][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.198178][ T5076] device veth0_vlan entered promiscuous mode [ 114.205926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.207834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.209633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.211089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.218326][ T5076] device veth1_vlan entered promiscuous mode [ 114.229466][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.231399][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.234727][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.236987][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.240184][ T5076] device veth0_macvtap entered promiscuous mode [ 114.244836][ T5076] device veth1_macvtap entered promiscuous mode [ 114.255622][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.258007][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.259992][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.262604][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.265419][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.268427][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.270326][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.272103][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.274118][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.276838][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.278654][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.280587][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.282814][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.284692][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.288712][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.292524][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.309266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.311011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.320084][ T5076] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.322743][ T5076] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.325546][ T5076] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.330745][ T5076] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.339448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.341213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.347035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.349212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.353007][ T5072] device veth0_vlan entered promiscuous mode [ 114.375501][ T5072] device veth1_vlan entered promiscuous mode [ 114.426875][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.428895][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.431065][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.433554][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.447029][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.448589][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.450201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.456666][ T5072] device veth0_macvtap entered promiscuous mode [ 114.474365][ T5072] device veth1_macvtap entered promiscuous mode [ 114.503673][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.506074][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.506588][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.508241][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.511220][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.517850][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.519469][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.521314][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.530158][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.531700][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.533978][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.536061][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.538091][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.545792][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.555597][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.557365][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.559207][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.561208][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.569665][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.571568][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.583809][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.586193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.588342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.602581][ T5072] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.604397][ T5072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.606245][ T5072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.608136][ T5072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.725286][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.726726][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.760392][ T27] audit: type=1326 audit(114.740:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5397 comm="syz.6.286" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffab37a9a8 code=0x0 [ 114.765552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.780354][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.782557][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.784249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.300028][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 115.448418][ T5404] loop5: detected capacity change from 0 to 32768 [ 115.470086][ T5404] JBD2: Ignoring recovery information on journal [ 115.485692][ T5404] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 115.489459][ T5404] JBD2: bad block at offset 32 [ 115.530251][ T5404] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 115.630965][ T5072] ocfs2: Unmounting device (7,5) on (node local) [ 115.760308][ T5434] device syzkaller0 entered promiscuous mode [ 116.416367][ T5471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.422312][ T5471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.433245][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.298'. [ 116.435019][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.298'. [ 116.473023][ T5476] trusted_key: encrypted_key: insufficient parameters specified [ 116.475845][ T5476] trusted_key: encrypted_key: insufficient parameters specified [ 117.038395][ T5484] loop4: detected capacity change from 0 to 32768 [ 117.073724][ T5484] JBD2: Ignoring recovery information on journal [ 117.076298][ T5484] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 117.077973][ T5484] JBD2: bad block at offset 32 [ 117.085387][ T5484] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.120343][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 117.197592][ T27] audit: type=1326 audit(117.180:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5495 comm="syz.4.301" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb757a9a8 code=0x0 [ 117.433056][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.435427][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.126518][ T5554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.129466][ T5554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.217122][ T5550] loop4: detected capacity change from 0 to 32768 [ 118.260172][ T5550] JBD2: Ignoring recovery information on journal [ 118.266198][ T5550] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 118.267652][ T5550] JBD2: bad block at offset 32 [ 118.290331][ T5550] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 118.304486][ T5570] device syzkaller0 entered promiscuous mode [ 118.353532][ T5574] trusted_key: encrypted_key: insufficient parameters specified [ 118.355819][ T5574] trusted_key: encrypted_key: insufficient parameters specified [ 118.439840][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.441720][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 118.443331][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.024580][ T5580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 119.028319][ T5580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 119.074017][ T5580] device ip6gretap0 entered promiscuous mode [ 119.102794][ T5580] device syz_tun entered promiscuous mode [ 119.141987][ T5580] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 119.143498][ T5580] Cannot create hsr debugfs directory [ 119.161027][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 119.230673][ T27] audit: type=1326 audit(119.210:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5607 comm="syz.6.320" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffab37a9a8 code=0x0 [ 119.845377][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 120.262917][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.270438][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.272026][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.274127][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.276039][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.351137][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.370151][ T5648] trusted_key: encrypted_key: insufficient parameters specified [ 120.373211][ T5648] trusted_key: encrypted_key: insufficient parameters specified [ 120.811376][ T5659] loop5: detected capacity change from 0 to 256 [ 120.831540][ T5659] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 122.132501][ T27] audit: type=1326 audit(122.120:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5683 comm="syz.3.340" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x0 [ 123.024929][ T5695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.026751][ T5695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.099719][ T5032] team0 (unregistering): Port device team_slave_1 removed [ 124.333328][ T5032] team0 (unregistering): Port device team_slave_0 removed [ 124.492427][ T5032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.695464][ T5032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.744438][ T27] audit: type=1326 audit(125.730:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5725 comm="syz.6.353" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffab37a9a8 code=0x0 [ 125.934034][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935262][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.528701][ T5032] bond0 (unregistering): Released all slaves [ 126.950633][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.333'. [ 126.952469][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.333'. [ 126.954125][ T5664] netlink: 'syz.5.333': attribute type 15 has an invalid length. [ 126.955523][ T5664] netlink: 'syz.5.333': attribute type 18 has an invalid length. [ 127.554300][ T5745] loop5: detected capacity change from 0 to 32768 [ 127.567549][ T5745] JBD2: Ignoring recovery information on journal [ 127.569982][ T5745] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 127.571633][ T5745] JBD2: bad block at offset 32 [ 127.574737][ T5745] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 127.599189][ T5764] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.701096][ T5072] ocfs2: Unmounting device (7,5) on (node local) [ 128.120130][ T5786] syz.6.368 uses obsolete (PF_INET,SOCK_PACKET) [ 128.460150][ T5778] ceph: No mds server is up or the cluster is laggy [ 128.648669][ T5797] loop6: detected capacity change from 0 to 256 [ 128.678777][ T5797] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 128.875455][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.370'. [ 128.877546][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.370'. [ 128.879292][ T5814] netlink: 'syz.6.370': attribute type 15 has an invalid length. [ 128.880883][ T5814] netlink: 'syz.6.370': attribute type 18 has an invalid length. [ 129.687615][ T48] Bluetooth: hci6: command 0x0406 tx timeout [ 129.931796][ T5830] loop1: detected capacity change from 0 to 32768 [ 129.938722][ T5830] JBD2: Ignoring recovery information on journal [ 129.940901][ T5830] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 129.944453][ T5830] JBD2: bad block at offset 32 [ 129.962474][ T5830] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.991211][ T4328] ocfs2: Unmounting device (7,1) on (node local) [ 130.025382][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 130.079642][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 130.227634][ T5846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.376'. [ 130.248700][ T5863] FAULT_INJECTION: forcing a failure. [ 130.248700][ T5863] name failslab, interval 1, probability 0, space 0, times 0 [ 130.251623][ T5863] CPU: 0 PID: 5863 Comm: syz.3.378 Not tainted syzkaller #0 [ 130.253175][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 130.255089][ T5863] Call trace: [ 130.255739][ T5863] dump_backtrace+0x1c4/0x1f0 [ 130.256556][ T5863] show_stack+0x2c/0x3c [ 130.257340][ T5863] __dump_stack+0x30/0x40 [ 130.258132][ T5863] dump_stack_lvl+0xf4/0x15c [ 130.259074][ T5863] dump_stack+0x1c/0x5c [ 130.259837][ T5863] should_fail_ex+0x3cc/0x524 [ 130.260734][ T5863] __should_failslab+0xc0/0x11c [ 130.261663][ T5863] should_failslab+0x10/0x28 [ 130.262373][ T5863] __kmem_cache_alloc_node+0x7c/0x318 [ 130.263264][ T5863] kmalloc_trace+0x48/0x94 [ 130.264015][ T5863] ref_tracker_alloc+0x138/0x3f0 [ 130.264855][ T5863] dst_init+0xc0/0x3dc [ 130.265572][ T5863] dst_alloc+0x124/0x16c [ 130.266379][ T5863] ip_route_output_key_hash_rcu+0xfbc/0x1dfc [ 130.267462][ T5863] ip_route_output_key_hash+0x1b0/0x2fc [ 130.268410][ T5863] ip_route_output_flow+0x3c/0x158 [ 130.269314][ T5863] udp_sendmsg+0x10a8/0x1db0 [ 130.270127][ T5863] udpv6_sendmsg+0x8dc/0x20d0 [ 130.270926][ T5863] inet6_sendmsg+0xb4/0xd8 [ 130.271715][ T5863] sock_write_iter+0x268/0x368 [ 130.272520][ T5863] vfs_write+0x3c8/0x7c8 [ 130.273306][ T5863] ksys_write+0x12c/0x228 [ 130.274086][ T5863] __arm64_sys_write+0x7c/0x90 [ 130.274959][ T5863] invoke_syscall+0x98/0x290 [ 130.275738][ T5863] el0_svc_common+0x13c/0x258 [ 130.276554][ T5863] do_el0_svc+0x5c/0x134 [ 130.277319][ T5863] el0_svc+0x58/0x12c [ 130.278078][ T5863] el0t_64_sync_handler+0x84/0xf0 [ 130.279001][ T5863] el0t_64_sync+0x18c/0x190 [ 130.363525][ T5873] binder: tried to use weak ref as strong ref [ 130.365052][ T5873] binder: 5872:5873 Acquire 1 refcount change on invalid ref 0 ret -22 [ 130.368152][ T5873] binder: 5872:5873 got transaction to invalid handle, 1 [ 130.371850][ T5873] binder: 5873:5872 cannot find target node [ 130.377631][ T5873] binder: 5872:5873 transaction async to 0:0 failed 9/29201/-22, size 0-0 line 3062 [ 130.382375][ T5873] binder: 5872:5873 ioctl c0306201 0 returned -14 [ 131.503624][ T5886] loop6: detected capacity change from 0 to 32768 [ 131.548723][ T5886] JBD2: Ignoring recovery information on journal [ 131.550873][ T5886] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 131.556634][ T5886] JBD2: bad block at offset 32 [ 131.584985][ T5886] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 131.669473][ T5076] ocfs2: Unmounting device (7,6) on (node local) [ 132.184855][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.400'. [ 132.263699][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.269911][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.280824][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 132.642850][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.402'. [ 132.648163][ T27] audit: type=1326 audit(132.630:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.3.404" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8377a9a8 code=0x0 [ 132.655303][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.658354][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.667850][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.670655][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.842813][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'. [ 132.850786][ T5964] binder: 5963:5964 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 132.858121][ T5964] binder: 5963:5964 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 132.859760][ T5964] binder: 5963:5964 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 132.861008][ T5964] binder: 5963:5964 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.863840][ T5964] binder: 5964 RLIMIT_NICE not set [ 132.909978][ T5965] binder: 5963:5965 ERROR: BC_REGISTER_LOOPER called without request [ 132.911633][ T5965] binder: 5963:5965 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 133.176006][ T5969] loop4: detected capacity change from 0 to 32768 [ 133.199824][ T5969] JBD2: Ignoring recovery information on journal [ 133.208958][ T5969] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 133.214010][ T5969] JBD2: bad block at offset 32 [ 133.220621][ T5969] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 133.236589][ T5969] i2c i2c-0: new_device: Missing parameters [ 133.261645][ T4335] ocfs2: Unmounting device (7,4) on (node local) [ 133.466406][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.469466][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.386796][ T6023] nvmet: adding nsid 1 to subsystem testsubsys [ 134.691723][ T6023] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 134.711056][ T6034] FAULT_INJECTION: forcing a failure. [ 134.711056][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 134.716228][ T6034] CPU: 1 PID: 6034 Comm: syz.4.420 Not tainted syzkaller #0 [ 134.717585][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 134.719398][ T6034] Call trace: [ 134.720015][ T6034] dump_backtrace+0x1c4/0x1f0 [ 134.720929][ T6034] show_stack+0x2c/0x3c [ 134.721730][ T6034] __dump_stack+0x30/0x40 [ 134.722547][ T6034] dump_stack_lvl+0xf4/0x15c [ 134.723468][ T6034] dump_stack+0x1c/0x5c [ 134.724261][ T6034] should_fail_ex+0x3cc/0x524 [ 134.725098][ T6034] __should_failslab+0xc0/0x11c [ 134.726009][ T6034] should_failslab+0x10/0x28 [ 134.726884][ T6034] kmem_cache_alloc+0x88/0x310 [ 134.727770][ T6034] dst_alloc+0xfc/0x16c [ 134.728489][ T6034] ip_route_output_key_hash_rcu+0xfbc/0x1dfc [ 134.729562][ T6034] ip_route_output_key_hash+0x1b0/0x2fc [ 134.730554][ T6034] ip_route_output_flow+0x3c/0x158 [ 134.731551][ T6034] udp_sendmsg+0x10a8/0x1db0 [ 134.732430][ T6034] udpv6_sendmsg+0x8dc/0x20d0 [ 134.733363][ T6034] inet6_sendmsg+0xb4/0xd8 [ 134.734240][ T6034] sock_write_iter+0x268/0x368 [ 134.735138][ T6034] vfs_write+0x3c8/0x7c8 [ 134.735942][ T6034] ksys_write+0x12c/0x228 [ 134.736776][ T6034] __arm64_sys_write+0x7c/0x90 [ 134.737691][ T6034] invoke_syscall+0x98/0x290 [ 134.738568][ T6034] el0_svc_common+0x13c/0x258 [ 134.739458][ T6034] do_el0_svc+0x5c/0x134 [ 134.740267][ T6034] el0_svc+0x58/0x12c [ 134.741074][ T6034] el0t_64_sync_handler+0x84/0xf0 [ 134.742058][ T6034] el0t_64_sync+0x18c/0x190 [ 134.795966][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.797955][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.904547][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.907760][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.258388][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.430'. [ 136.285839][ T6075] binder: 6073:6075 tried to acquire reference to desc 0, got 1 instead [ 136.298200][ T5480] binder: undelivered transaction 14, process died. [ 137.293122][ T6092] capability: warning: `syz.6.437' uses deprecated v2 capabilities in a way that may be insecure [ 137.330797][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.335302][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.643753][ T6116] FAULT_INJECTION: forcing a failure. [ 137.643753][ T6116] name failslab, interval 1, probability 0, space 0, times 0 [ 137.648742][ T6116] CPU: 0 PID: 6116 Comm: syz.5.441 Not tainted syzkaller #0 [ 137.649901][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 137.651846][ T6116] Call trace: [ 137.652557][ T6116] dump_backtrace+0x1c4/0x1f0 [ 137.653512][ T6116] show_stack+0x2c/0x3c [ 137.654291][ T6116] __dump_stack+0x30/0x40 [ 137.655166][ T6116] dump_stack_lvl+0xf4/0x15c [ 137.656025][ T6116] dump_stack+0x1c/0x5c [ 137.656815][ T6116] should_fail_ex+0x3cc/0x524 [ 137.657683][ T6116] __should_failslab+0xc0/0x11c [ 137.658677][ T6116] should_failslab+0x10/0x28 [ 137.659545][ T6116] kmem_cache_alloc+0x88/0x310 [ 137.660520][ T6116] dst_alloc+0xfc/0x16c [ 137.661267][ T6116] ip_route_output_key_hash_rcu+0xfbc/0x1dfc [ 137.662379][ T6116] ip_route_output_key_hash+0x1b0/0x2fc [ 137.663416][ T6116] ip_route_output_flow+0x3c/0x158 [ 137.664349][ T6116] udp_sendmsg+0x10a8/0x1db0 [ 137.665229][ T6116] udpv6_sendmsg+0x8dc/0x20d0 [ 137.666165][ T6116] inet6_sendmsg+0xb4/0xd8 [ 137.667046][ T6116] sock_write_iter+0x268/0x368 [ 137.668042][ T6116] vfs_write+0x3c8/0x7c8 [ 137.668917][ T6116] ksys_write+0x12c/0x228 [ 137.669840][ T6116] __arm64_sys_write+0x7c/0x90 [ 137.670715][ T6116] invoke_syscall+0x98/0x290 [ 137.671567][ T6116] el0_svc_common+0x13c/0x258 [ 137.672347][ T6116] do_el0_svc+0x5c/0x134 [ 137.673093][ T6116] el0_svc+0x58/0x12c [ 137.673919][ T6116] el0t_64_sync_handler+0x84/0xf0 [ 137.674849][ T6116] el0t_64_sync+0x18c/0x190 [ 138.008645][ T6125] binder: 6121:6125 tried to acquire reference to desc 0, got 1 instead [ 138.027521][ T4628] binder: undelivered transaction 19, process died. [ 138.110846][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.117140][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.541238][ T6152] binder: 6151:6152 tried to acquire reference to desc 0, got 1 instead [ 138.695417][ T6158] binder: 6151:6158 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 138.697926][ T6158] binder: 6158 RLIMIT_NICE not set [ 138.699001][ T6158] binder: 6158 RLIMIT_NICE not set [ 138.701540][ T6158] binder: 6158 RLIMIT_NICE not set [ 139.036366][ T6175] binder: 6174:6175 tried to acquire reference to desc 0, got 1 instead [ 139.056904][ T4627] binder: undelivered transaction 30, process died. [ 139.078184][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.080023][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.106804][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.108835][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.114570][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'. [ 139.116575][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'. [ 139.311199][ T6194] loop3: detected capacity change from 0 to 32768 [ 139.333138][ T6194] JBD2: Ignoring recovery information on journal [ 139.335086][ T6194] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 139.336741][ T6194] JBD2: bad block at offset 32 [ 139.341577][ T6194] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 139.381502][ T24] binder: undelivered TRANSACTION_COMPLETE [ 139.389256][ T6194] i2c i2c-0: new_device: Extra parameters [ 139.458867][ T24] binder: undelivered TRANSACTION_COMPLETE [ 139.460053][ T24] binder: undelivered transaction 25, process died. [ 139.472127][ T4329] ocfs2: Unmounting device (7,3) on (node local) [ 140.099386][ T6215] binder: 6214:6215 tried to acquire reference to desc 0, got 1 instead [ 140.108988][ T4628] binder: undelivered transaction 35, process died. [ 141.077969][ T6233] FAULT_INJECTION: forcing a failure. [ 141.077969][ T6233] name fail_futex, interval 1, probability 0, space 0, times 0 [ 141.088033][ T6233] CPU: 0 PID: 6233 Comm: syz.3.478 Not tainted syzkaller #0 [ 141.089550][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 141.091713][ T6233] Call trace: [ 141.092377][ T6233] dump_backtrace+0x1c4/0x1f0 [ 141.093347][ T6233] show_stack+0x2c/0x3c [ 141.094094][ T6233] __dump_stack+0x30/0x40 [ 141.094981][ T6233] dump_stack_lvl+0xf4/0x15c [ 141.095801][ T6233] dump_stack+0x1c/0x5c [ 141.096560][ T6233] should_fail_ex+0x3cc/0x524 [ 141.097387][ T6233] should_fail+0x14/0x24 [ 141.098186][ T6233] get_futex_key+0x904/0xfb0 [ 141.099030][ T6233] futex_wake+0x10c/0x458 [ 141.099873][ T6233] do_futex+0x2c4/0x340 [ 141.100730][ T6233] mm_release+0x190/0x274 [ 141.101706][ T6233] exit_mm_release+0x30/0x40 [ 141.102656][ T6233] exit_mm+0x50/0x290 [ 141.103423][ T6233] do_exit+0x4d0/0x19ac [ 141.104217][ T6233] do_group_exit+0x198/0x238 [ 141.105163][ T6233] get_signal+0x11f4/0x133c [ 141.105963][ T6233] do_notify_resume+0x364/0x2c84 [ 141.106922][ T6233] el0_svc+0x9c/0x12c [ 141.107605][ T6233] el0t_64_sync_handler+0x84/0xf0 [ 141.108594][ T6233] el0t_64_sync+0x18c/0x190 [ 141.850399][ T27] audit: type=1326 audit(141.830:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6250 comm="syz.1.484" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb7a9a8 code=0x0 [ 142.287173][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 142.325349][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 142.929223][ T4342] Bluetooth: hci5: hcon 000000000164bd91 sent 1 < count 6 [ 142.963454][ T6320] nvmet: disable ns before setting buffered_io value. [ 142.975476][ T6320] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 143.818409][ T6348] device syzkaller0 entered promiscuous mode [ 143.971153][ T6368] nvmet: disable ns before setting buffered_io value. [ 143.975804][ T6369] FAULT_INJECTION: forcing a failure. [ 143.975804][ T6369] name fail_futex, interval 1, probability 0, space 0, times 0 [ 143.982298][ T6369] CPU: 1 PID: 6369 Comm: syz.6.508 Not tainted syzkaller #0 [ 143.983669][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 143.985633][ T6369] Call trace: [ 143.986306][ T6369] dump_backtrace+0x1c4/0x1f0 [ 143.987219][ T6369] show_stack+0x2c/0x3c [ 143.987972][ T6369] __dump_stack+0x30/0x40 [ 143.988788][ T6369] dump_stack_lvl+0xf4/0x15c [ 143.989718][ T6369] dump_stack+0x1c/0x5c [ 143.990512][ T6369] should_fail_ex+0x3cc/0x524 [ 143.991412][ T6369] should_fail+0x14/0x24 [ 143.992211][ T6369] get_futex_key+0x904/0xfb0 [ 143.993030][ T6369] futex_wake+0x10c/0x458 [ 143.993792][ T6369] do_futex+0x2c4/0x340 [ 143.994513][ T6369] __arm64_sys_futex+0x390/0x414 [ 143.995386][ T6369] invoke_syscall+0x98/0x290 [ 143.996193][ T6369] el0_svc_common+0x13c/0x258 [ 143.997019][ T6369] do_el0_svc+0x5c/0x134 [ 143.997784][ T6369] el0_svc+0x58/0x12c [ 143.998481][ T6369] el0t_64_sync_handler+0x84/0xf0 [ 143.999406][ T6369] el0t_64_sync+0x18c/0x190 [ 145.771181][ T6418] nvmet: disable ns before setting buffered_io value. [ 145.825981][ T6411] device syzkaller1 entered promiscuous mode [ 145.837374][ T6422] device syzkaller0 entered promiscuous mode [ 146.326126][ T6437] loop5: detected capacity change from 0 to 256 [ 146.355699][ T6437] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 146.569178][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.527'. [ 146.571056][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.527'. [ 146.572810][ T6442] netlink: 'syz.5.527': attribute type 15 has an invalid length. [ 146.574295][ T6442] netlink: 'syz.5.527': attribute type 18 has an invalid length. [ 146.808951][ T6440] Bluetooth: MGMT ver 1.22 [ 148.197075][ T27] audit: type=1326 audit(148.180:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.5.538" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f17a9a8 code=0x0 [ 148.987054][ T6500] syz.4.540: attempt to access beyond end of device [ 148.987054][ T6500] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 148.991021][ T6500] gfs2: error 10 reading superblock [ 149.222220][ T6503] Set syz1 is full, maxelem 1029 reached [ 149.246667][ T6507] binder: tried to use weak ref as strong ref [ 149.251858][ T6507] binder: 6506:6507 Acquire 1 refcount change on invalid ref 0 ret -22 [ 149.256244][ T6507] binder: 6506:6507 got transaction to invalid handle, 1 [ 149.257504][ T6507] binder: 6507:6506 cannot find target node [ 149.266190][ T6507] binder: 6506:6507 transaction async to 0:0 failed 38/29201/-22, size 0-0 line 3062 [ 151.451413][ T6602] nvmet: disable ns before setting buffered_io value. [ 151.461355][ T6602] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 152.086953][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.088942][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.099086][ T6653] nvmet: disable ns before setting buffered_io value. [ 152.100977][ T6653] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 152.113300][ T6653] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 152.824084][ T6693] FAULT_INJECTION: forcing a failure. [ 152.824084][ T6693] name failslab, interval 1, probability 5, space 0, times 10000 [ 152.827223][ T6693] CPU: 1 PID: 6693 Comm: syz.1.597 Not tainted syzkaller #0 [ 152.828752][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 152.830699][ T6693] Call trace: [ 152.831293][ T6693] dump_backtrace+0x1c4/0x1f0 [ 152.832187][ T6693] show_stack+0x2c/0x3c [ 152.832958][ T6693] __dump_stack+0x30/0x40 [ 152.833806][ T6693] dump_stack_lvl+0xf4/0x15c [ 152.834650][ T6693] dump_stack+0x1c/0x5c [ 152.835405][ T6693] should_fail_ex+0x3cc/0x524 [ 152.836276][ T6693] __should_failslab+0xc0/0x11c [ 152.837346][ T6693] should_failslab+0x10/0x28 [ 152.838278][ T6693] __kmem_cache_alloc_node+0x7c/0x318 [ 152.839330][ T6693] __kmalloc_node_track_caller+0xb8/0x174 [ 152.840474][ T6693] kstrdup+0x68/0xb0 [ 152.841219][ T6693] vidtv_psi_short_event_desc_init+0x160/0x558 [ 152.842374][ T6693] vidtv_channel_s302m_init+0x3c4/0x78c [ 152.843431][ T6693] vidtv_channels_init+0x4c/0x94 [ 152.844400][ T6693] vidtv_mux_init+0x38c/0x1554 [ 152.845367][ T6693] vidtv_start_feed+0x2e0/0x49c [ 152.846309][ T6693] dmx_ts_feed_start_filtering+0x124/0x1fc [ 152.847389][ T6693] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 152.848364][ T6693] dvb_demux_do_ioctl+0x438/0x4d8 [ 152.849312][ T6693] dvb_usercopy+0x248/0x45c [ 152.850082][ T6693] dvb_demux_ioctl+0x3c/0x54 [ 152.850908][ T6693] __arm64_sys_ioctl+0x14c/0x1c8 [ 152.851833][ T6693] invoke_syscall+0x98/0x290 [ 152.852672][ T6693] el0_svc_common+0x13c/0x258 [ 152.853471][ T6693] do_el0_svc+0x5c/0x134 [ 152.854220][ T6693] el0_svc+0x58/0x12c [ 152.854927][ T6693] el0t_64_sync_handler+0x84/0xf0 [ 152.855831][ T6693] el0t_64_sync+0x18c/0x190 [ 152.862452][ T6693] FAULT_INJECTION: forcing a failure. [ 152.862452][ T6693] name failslab, interval 1, probability 5, space 0, times 9999 [ 152.864779][ T6693] CPU: 1 PID: 6693 Comm: syz.1.597 Not tainted syzkaller #0 [ 152.866095][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 152.867874][ T6693] Call trace: [ 152.868487][ T6693] dump_backtrace+0x1c4/0x1f0 [ 152.869332][ T6693] show_stack+0x2c/0x3c [ 152.870136][ T6693] __dump_stack+0x30/0x40 [ 152.870902][ T6693] dump_stack_lvl+0xf4/0x15c [ 152.871876][ T6693] dump_stack+0x1c/0x5c [ 152.872710][ T6693] should_fail_ex+0x3cc/0x524 [ 152.873623][ T6693] __should_failslab+0xc0/0x11c [ 152.874608][ T6693] should_failslab+0x10/0x28 [ 152.875492][ T6693] __kmem_cache_alloc_node+0x7c/0x318 [ 152.876587][ T6693] kmalloc_trace+0x48/0x94 [ 152.877412][ T6693] vidtv_s302m_encoder_init+0x220/0x630 [ 152.878450][ T6693] vidtv_channel_s302m_init+0x334/0x78c [ 152.879529][ T6693] vidtv_channels_init+0x4c/0x94 [ 152.880389][ T6693] vidtv_mux_init+0x38c/0x1554 [ 152.881306][ T6693] vidtv_start_feed+0x2e0/0x49c [ 152.882182][ T6693] dmx_ts_feed_start_filtering+0x124/0x1fc [ 152.883326][ T6693] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 152.884359][ T6693] dvb_demux_do_ioctl+0x438/0x4d8 [ 152.885272][ T6693] dvb_usercopy+0x248/0x45c [ 152.886112][ T6693] dvb_demux_ioctl+0x3c/0x54 [ 152.886934][ T6693] __arm64_sys_ioctl+0x14c/0x1c8 [ 152.887844][ T6693] invoke_syscall+0x98/0x290 [ 152.888684][ T6693] el0_svc_common+0x13c/0x258 [ 152.889519][ T6693] do_el0_svc+0x5c/0x134 [ 152.890261][ T6693] el0_svc+0x58/0x12c [ 152.890992][ T6693] el0t_64_sync_handler+0x84/0xf0 [ 152.891890][ T6693] el0t_64_sync+0x18c/0x190 [ 152.897743][ T6693] FAULT_INJECTION: forcing a failure. [ 152.897743][ T6693] name failslab, interval 1, probability 5, space 0, times 9998 [ 152.900312][ T6693] CPU: 1 PID: 6693 Comm: syz.1.597 Not tainted syzkaller #0 [ 152.901581][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 152.903610][ T6693] Call trace: [ 152.904298][ T6693] dump_backtrace+0x1c4/0x1f0 [ 152.905301][ T6693] show_stack+0x2c/0x3c [ 152.906138][ T6693] __dump_stack+0x30/0x40 [ 152.906921][ T6693] dump_stack_lvl+0xf4/0x15c [ 152.907895][ T6693] dump_stack+0x1c/0x5c [ 152.908772][ T6693] should_fail_ex+0x3cc/0x524 [ 152.909650][ T6693] __should_failslab+0xc0/0x11c [ 152.910601][ T6693] should_failslab+0x10/0x28 [ 152.911411][ T6693] __kmem_cache_alloc_node+0x7c/0x318 [ 152.912393][ T6693] __kmalloc+0xc4/0x180 [ 152.913122][ T6693] tomoyo_realpath_from_path+0xc4/0x508 [ 152.914177][ T6693] tomoyo_path_number_perm+0x1c4/0x540 [ 152.915233][ T6693] tomoyo_file_ioctl+0x2c/0x3c [ 152.916178][ T6693] security_file_ioctl+0x80/0xbc [ 152.917097][ T6693] __arm64_sys_ioctl+0xa8/0x1c8 [ 152.918054][ T6693] invoke_syscall+0x98/0x290 [ 152.918936][ T6693] el0_svc_common+0x13c/0x258 [ 152.919877][ T6693] do_el0_svc+0x5c/0x134 [ 152.920681][ T6693] el0_svc+0x58/0x12c [ 152.921446][ T6693] el0t_64_sync_handler+0x84/0xf0 [ 152.922399][ T6693] el0t_64_sync+0x18c/0x190 [ 152.924697][ T6693] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.926766][ T6693] FAULT_INJECTION: forcing a failure. [ 152.926766][ T6693] name failslab, interval 1, probability 5, space 0, times 9997 [ 152.929497][ T6693] CPU: 1 PID: 6693 Comm: syz.1.597 Not tainted syzkaller #0 [ 152.930956][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 152.932889][ T6693] Call trace: [ 152.933537][ T6693] dump_backtrace+0x1c4/0x1f0 [ 152.934498][ T6693] show_stack+0x2c/0x3c [ 152.935248][ T6693] __dump_stack+0x30/0x40 [ 152.936042][ T6693] dump_stack_lvl+0xf4/0x15c [ 152.937023][ T6693] dump_stack+0x1c/0x5c [ 152.937878][ T6693] should_fail_ex+0x3cc/0x524 [ 152.938814][ T6693] __should_failslab+0xc0/0x11c [ 152.939720][ T6693] should_failslab+0x10/0x28 [ 152.940623][ T6693] __kmem_cache_alloc_node+0x7c/0x318 [ 152.941645][ T6693] __kmalloc_node_track_caller+0xb8/0x174 [ 152.942674][ T6693] kstrdup+0x68/0xb0 [ 152.943411][ T6693] vidtv_psi_short_event_desc_init+0x160/0x558 [ 152.944558][ T6693] vidtv_channel_s302m_init+0x3c4/0x78c [ 152.945678][ T6693] vidtv_channels_init+0x4c/0x94 [ 152.946681][ T6693] vidtv_mux_init+0x38c/0x1554 [ 152.947690][ T6693] vidtv_start_feed+0x2e0/0x49c [ 152.948746][ T6693] dmx_ts_feed_start_filtering+0x124/0x1fc [ 152.949927][ T6693] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 152.951056][ T6693] dvb_demux_do_ioctl+0x438/0x4d8 [ 152.952008][ T6693] dvb_usercopy+0x248/0x45c [ 152.952923][ T6693] dvb_demux_ioctl+0x3c/0x54 [ 152.953811][ T6693] __arm64_sys_ioctl+0x14c/0x1c8 [ 152.954764][ T6693] invoke_syscall+0x98/0x290 [ 152.955803][ T6693] el0_svc_common+0x13c/0x258 [ 152.956736][ T6693] do_el0_svc+0x5c/0x134 [ 152.957537][ T6693] el0_svc+0x58/0x12c [ 152.958308][ T6693] el0t_64_sync_handler+0x84/0xf0 [ 152.959210][ T6693] el0t_64_sync+0x18c/0x190 [ 152.972228][ T6693] FAULT_INJECTION: forcing a failure. [ 152.972228][ T6693] name failslab, interval 1, probability 5, space 0, times 9996 [ 152.985077][ T6693] CPU: 1 PID: 6693 Comm: syz.1.597 Not tainted syzkaller #0 [ 152.986565][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 152.988592][ T6693] Call trace: [ 152.989215][ T6693] dump_backtrace+0x1c4/0x1f0 [ 152.990044][ T6693] show_stack+0x2c/0x3c [ 152.990828][ T6693] __dump_stack+0x30/0x40 [ 152.991690][ T6693] dump_stack_lvl+0xf4/0x15c [ 152.992612][ T6693] dump_stack+0x1c/0x5c [ 152.993326][ T6693] should_fail_ex+0x3cc/0x524 [ 152.994159][ T6693] __should_failslab+0xc0/0x11c [ 152.995122][ T6693] should_failslab+0x10/0x28 [ 152.996019][ T6693] kmem_cache_alloc+0x88/0x310 [ 152.996893][ T6693] security_inode_alloc+0x38/0x11c [ 152.997851][ T6693] inode_init_always+0x6c8/0xb28 [ 152.998816][ T6693] new_inode_pseudo+0x7c/0x1cc [ 152.999755][ T6693] __sock_create+0x138/0x8a8 [ 153.000639][ T6693] __sys_socket+0xc0/0x1b0 [ 153.001448][ T6693] __arm64_sys_socket+0x7c/0x94 [ 153.002351][ T6693] invoke_syscall+0x98/0x290 [ 153.003243][ T6693] el0_svc_common+0x13c/0x258 [ 153.004162][ T6693] do_el0_svc+0x5c/0x134 [ 153.005017][ T6693] el0_svc+0x58/0x12c [ 153.005813][ T6693] el0t_64_sync_handler+0x84/0xf0 [ 153.006762][ T6693] el0t_64_sync+0x18c/0x190 [ 153.028393][ T6693] socket: no more sockets [ 153.227101][ T6737] netlink: 'syz.4.607': attribute type 10 has an invalid length. [ 153.253932][ T6737] team0: Port device netdevsim0 added [ 153.616804][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.618665][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.915506][ T6768] loop5: detected capacity change from 0 to 256 [ 153.921858][ T6768] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 154.360809][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.614'. [ 154.362612][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.614'. [ 154.364189][ T6780] netlink: 'syz.5.614': attribute type 15 has an invalid length. [ 154.365666][ T6780] netlink: 'syz.5.614': attribute type 18 has an invalid length. [ 154.390691][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.394578][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.521306][ T6799] nvmet: disable ns before setting buffered_io value. [ 154.524246][ T6799] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 154.526317][ T6799] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 154.732749][ T6806] capability: warning: `syz.6.628' uses 32-bit capabilities (legacy support in use) [ 155.475928][ T6818] FAULT_INJECTION: forcing a failure. [ 155.475928][ T6818] name failslab, interval 1, probability 5, space 0, times 10000 [ 155.491053][ T6818] CPU: 0 PID: 6818 Comm: syz.6.635 Not tainted syzkaller #0 [ 155.492558][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 155.494413][ T6818] Call trace: [ 155.495012][ T6818] dump_backtrace+0x1c4/0x1f0 [ 155.495879][ T6818] show_stack+0x2c/0x3c [ 155.496660][ T6818] __dump_stack+0x30/0x40 [ 155.497524][ T6818] dump_stack_lvl+0xf4/0x15c [ 155.498419][ T6818] dump_stack+0x1c/0x5c [ 155.499214][ T6818] should_fail_ex+0x3cc/0x524 [ 155.500137][ T6818] __should_failslab+0xc0/0x11c [ 155.501077][ T6818] should_failslab+0x10/0x28 [ 155.501932][ T6818] kmem_cache_alloc+0x88/0x310 [ 155.502814][ T6818] security_file_alloc+0x38/0x11c [ 155.503804][ T6818] __alloc_file+0xac/0x234 [ 155.504657][ T6818] alloc_empty_file+0xa0/0x184 [ 155.505551][ T6818] path_openat+0xe0/0x27a0 [ 155.506407][ T6818] do_filp_open+0x198/0x38c [ 155.507239][ T6818] do_sys_openat2+0x134/0x3fc [ 155.508119][ T6818] __arm64_sys_openat+0x11c/0x150 [ 155.509164][ T6818] invoke_syscall+0x98/0x290 [ 155.510048][ T6818] el0_svc_common+0x13c/0x258 [ 155.510903][ T6818] do_el0_svc+0x5c/0x134 [ 155.511676][ T6818] el0_svc+0x58/0x12c [ 155.512452][ T6818] el0t_64_sync_handler+0x84/0xf0 [ 155.513405][ T6818] el0t_64_sync+0x18c/0x190 [ 155.541773][ T6830] binder: tried to use weak ref as strong ref [ 155.544228][ T6830] binder: 6828:6830 Acquire 1 refcount change on invalid ref 0 ret -22 [ 155.546034][ T6830] binder: 6828:6830 got transaction to invalid handle, 1 [ 155.551261][ T6830] binder: 6830:6828 cannot find target node [ 155.552766][ T6830] binder: 6828:6830 transaction async to 0:0 failed 41/29201/-22, size 0-0 line 3062 [ 155.563904][ T6818] FAULT_INJECTION: forcing a failure. [ 155.563904][ T6818] name failslab, interval 1, probability 5, space 0, times 9999 [ 155.566845][ T6818] CPU: 0 PID: 6818 Comm: syz.6.635 Not tainted syzkaller #0 [ 155.568214][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 155.570078][ T6818] Call trace: [ 155.570724][ T6818] dump_backtrace+0x1c4/0x1f0 [ 155.571576][ T6818] show_stack+0x2c/0x3c [ 155.572277][ T6818] __dump_stack+0x30/0x40 [ 155.573018][ T6818] dump_stack_lvl+0xf4/0x15c [ 155.573834][ T6818] dump_stack+0x1c/0x5c [ 155.574564][ T6818] should_fail_ex+0x3cc/0x524 [ 155.575421][ T6818] __should_failslab+0xc0/0x11c [ 155.576281][ T6818] should_failslab+0x10/0x28 [ 155.577090][ T6818] slab_pre_alloc_hook+0x6c/0x31c [ 155.578002][ T6818] kmem_cache_alloc_lru+0x60/0x284 [ 155.578959][ T6818] sock_alloc_inode+0x2c/0xcc [ 155.579821][ T6818] new_inode_pseudo+0x68/0x1cc [ 155.580697][ T6818] __sock_create+0x138/0x8a8 [ 155.581576][ T6818] __sys_socket+0xc0/0x1b0 [ 155.582434][ T6818] __arm64_sys_socket+0x7c/0x94 [ 155.583307][ T6818] invoke_syscall+0x98/0x290 [ 155.584143][ T6818] el0_svc_common+0x13c/0x258 [ 155.585041][ T6818] do_el0_svc+0x5c/0x134 [ 155.585805][ T6818] el0_svc+0x58/0x12c [ 155.586462][ T6818] el0t_64_sync_handler+0x84/0xf0 [ 155.587355][ T6818] el0t_64_sync+0x18c/0x190 [ 155.606133][ T6818] socket: no more sockets [ 155.609133][ T6835] nvmet: disable ns before setting buffered_io value. [ 155.611556][ T6835] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 155.616749][ T6835] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 155.621488][ T6835] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 155.627388][ T6835] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 155.650388][ T6839] Set syz1 is full, maxelem 1029 reached [ 155.680339][ T6845] nvmet: disable ns before setting buffered_io value. [ 155.683037][ T6845] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 155.687444][ T6845] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 155.687531][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.691009][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.057511][ T6847] netlink: 84 bytes leftover after parsing attributes in process `syz.1.645'. [ 156.067980][ T6854] loop0: detected capacity change from 0 to 3904 [ 156.095059][ T6854] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 156.097087][ T6854] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 156.098615][ T6854] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 156.099995][ T6854] loop0: [ 157.948037][ T6927] device syzkaller1 entered promiscuous mode [ 158.157697][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.160389][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.194705][ T27] audit: type=1326 audit(158.180:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.672" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb7a9a8 code=0x0 [ 158.530667][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 158.532807][ T6961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.675'. [ 159.562934][ T3939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 159.565128][ T3939] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 159.566821][ T3939] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 159.568385][ T3939] loop0: [ 159.713744][ T27] audit: type=1326 audit(159.700:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.1.691" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb7a9a8 code=0x0 [ 159.736912][ T6998] loop5: detected capacity change from 0 to 256 [ 159.748927][ T6998] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 159.866569][ T7004] nvmet: disable ns before setting buffered_io value. [ 160.086230][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 160.087820][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.5.692'. [ 160.217842][ T7004] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 160.227318][ T7004] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 160.229893][ T7004] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 160.232417][ T7004] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 160.289946][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.292336][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.315626][ T7018] binder: 7017:7018 got transaction to invalid handle, 1 [ 160.317136][ T7018] binder: 7018:7017 cannot find target node [ 160.318438][ T7018] binder: 7017:7018 transaction async to 0:0 failed 45/29201/-22, size 0-0 line 3062 [ 160.440587][ T7032] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 161.208387][ T7044] nvmet: disable ns before setting buffered_io value. [ 161.258265][ T7047] binder: 7045:7047 got transaction to invalid handle, 1 [ 161.259925][ T7047] binder: 7047:7045 cannot find target node [ 161.261097][ T7047] binder: 7045:7047 transaction async to 0:0 failed 49/29201/-22, size 0-0 line 3062 [ 161.371194][ T7062] loop1: detected capacity change from 0 to 256 [ 161.372117][ T27] audit: type=1326 audit(161.350:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.4.717" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb757a9a8 code=0x0 [ 161.397796][ T7062] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 162.226771][ T3939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 162.234186][ T3939] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 162.241968][ T3939] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 162.249131][ T3939] loop0: [ 162.286782][ T7077] nvmet: disable ns before setting buffered_io value. [ 162.404093][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 162.405673][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.718'. [ 162.415433][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 162.740246][ T7089] device macvlan2 entered promiscuous mode [ 162.755456][ T7089] bond1: (slave macvlan2): Opening slave failed [ 162.786630][ T7087] device syzkaller1 entered promiscuous mode [ 162.829745][ T7098] binder: BINDER_SET_CONTEXT_MGR already set [ 162.832353][ T7098] binder: 7097:7098 ioctl 4018620d 20000640 returned -16 [ 162.836233][ T7098] binder: 7097:7098 got transaction to invalid handle, 1 [ 162.839894][ T7098] binder: 7098:7097 cannot find target node [ 162.846177][ T7098] binder: 7097:7098 transaction async to 0:0 failed 51/29201/-22, size 0-0 line 3062 [ 162.900316][ T27] audit: type=1326 audit(162.880:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.6.734" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffab37a9a8 code=0x0 [ 162.924485][ T3939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 162.926341][ T3939] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 162.927944][ T3939] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 162.929406][ T3939] loop0: [ 163.015159][ T7120] loop1: detected capacity change from 0 to 256 [ 163.028745][ T7120] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 163.387630][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 163.389278][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.738'. [ 163.524434][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.741'. [ 163.713250][ T7134] binder: BINDER_SET_CONTEXT_MGR already set [ 163.714625][ T7134] binder: 7133:7134 ioctl 4018620d 20000640 returned -16 [ 163.716369][ T7134] binder: 7133:7134 got transaction to invalid handle, 1 [ 163.717892][ T7134] binder: 7134:7133 cannot find target node [ 163.719044][ T7134] binder: 7133:7134 transaction async to 0:0 failed 53/29201/-22, size 0-0 line 3062 [ 163.794884][ T7138] device syzkaller1 entered promiscuous mode [ 163.843843][ T7142] nvmet: disable ns before setting buffered_io value. [ 163.909091][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.914587][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.186995][ T7160] binder: BINDER_SET_CONTEXT_MGR already set [ 164.189433][ T7155] nvmet: disable ns before setting buffered_io value. [ 164.191250][ T7160] binder: 7159:7160 ioctl 4018620d 20000640 returned -16 [ 164.193951][ T7160] binder: 7159:7160 got transaction to invalid handle, 1 [ 164.195384][ T7160] binder: 7160:7159 cannot find target node [ 164.196325][ T7160] binder: 7159:7160 transaction async to 0:0 failed 55/29201/-22, size 0-0 line 3062 [ 164.198200][ T7155] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 164.200312][ T7155] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 164.203972][ T7155] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 164.207015][ T7155] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 164.299637][ T7168] process 'syz.4.755' launched './file1' with NULL argv: empty string added [ 165.029160][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 165.031018][ T7187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.763'. [ 165.431400][ T7194] binder: 7193:7194 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 165.449331][ T7194] binder: 7193:7194 got transaction to invalid handle, 1 [ 165.457085][ T7194] binder: 7194:7193 cannot find target node [ 165.460904][ T7194] binder: 7193:7194 transaction async to 0:0 failed 58/29201/-22, size 0-0 line 3062 [ 165.960162][ T7207] nvmet: disable ns before setting buffered_io value. [ 166.020117][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 166.025862][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.028556][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.056118][ T7221] FAULT_INJECTION: forcing a failure. [ 166.056118][ T7221] name failslab, interval 1, probability 5, space 0, times 10000 [ 166.058583][ T7221] CPU: 0 PID: 7221 Comm: syz.5.778 Not tainted syzkaller #0 [ 166.059976][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.061855][ T7221] Call trace: [ 166.062469][ T7221] dump_backtrace+0x1c4/0x1f0 [ 166.063401][ T7221] show_stack+0x2c/0x3c [ 166.064214][ T7221] __dump_stack+0x30/0x40 [ 166.065110][ T7221] dump_stack_lvl+0xf4/0x15c [ 166.065871][ T7221] dump_stack+0x1c/0x5c [ 166.066680][ T7221] should_fail_ex+0x3cc/0x524 [ 166.067570][ T7221] __should_failslab+0xc0/0x11c [ 166.068432][ T7221] should_failslab+0x10/0x28 [ 166.069188][ T7221] __kmem_cache_alloc_node+0x7c/0x318 [ 166.070141][ T7221] __kmalloc+0xc4/0x180 [ 166.070907][ T7221] tomoyo_encode+0x260/0x484 [ 166.071712][ T7221] tomoyo_realpath_from_path+0x4b4/0x508 [ 166.072709][ T7221] tomoyo_path_number_perm+0x1c4/0x540 [ 166.073883][ T7221] tomoyo_file_ioctl+0x2c/0x3c [ 166.074713][ T7221] security_file_ioctl+0x80/0xbc [ 166.075567][ T7221] __arm64_sys_ioctl+0xa8/0x1c8 [ 166.076505][ T7221] invoke_syscall+0x98/0x290 [ 166.077309][ T7221] el0_svc_common+0x13c/0x258 [ 166.078107][ T7221] do_el0_svc+0x5c/0x134 [ 166.078917][ T7221] el0_svc+0x58/0x12c [ 166.079663][ T7221] el0t_64_sync_handler+0x84/0xf0 [ 166.080547][ T7221] el0t_64_sync+0x18c/0x190 [ 166.087437][ T7221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.088603][ T7221] FAULT_INJECTION: forcing a failure. [ 166.088603][ T7221] name failslab, interval 1, probability 5, space 0, times 9999 [ 166.090805][ T7221] CPU: 0 PID: 7221 Comm: syz.5.778 Not tainted syzkaller #0 [ 166.092043][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.093923][ T7221] Call trace: [ 166.094577][ T7221] dump_backtrace+0x1c4/0x1f0 [ 166.095397][ T7221] show_stack+0x2c/0x3c [ 166.096199][ T7221] __dump_stack+0x30/0x40 [ 166.097015][ T7221] dump_stack_lvl+0xf4/0x15c [ 166.097924][ T7221] dump_stack+0x1c/0x5c [ 166.098718][ T7221] should_fail_ex+0x3cc/0x524 [ 166.099649][ T7221] __should_failslab+0xc0/0x11c [ 166.100637][ T7221] should_failslab+0x10/0x28 [ 166.101505][ T7221] __kmem_cache_alloc_node+0x7c/0x318 [ 166.102547][ T7221] kmalloc_trace+0x48/0x94 [ 166.103431][ T7221] vidtv_mux_init+0x70/0x1554 [ 166.104348][ T7221] vidtv_start_feed+0x2e0/0x49c [ 166.105239][ T7221] dmx_ts_feed_start_filtering+0x124/0x1fc [ 166.106270][ T7221] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 166.107250][ T7221] dvb_demux_do_ioctl+0x438/0x4d8 [ 166.108162][ T7221] dvb_usercopy+0x248/0x45c [ 166.108974][ T7221] dvb_demux_ioctl+0x3c/0x54 [ 166.109821][ T7221] __arm64_sys_ioctl+0x14c/0x1c8 [ 166.110811][ T7221] invoke_syscall+0x98/0x290 [ 166.111755][ T7221] el0_svc_common+0x13c/0x258 [ 166.112708][ T7221] do_el0_svc+0x5c/0x134 [ 166.113548][ T7221] el0_svc+0x58/0x12c [ 166.114262][ T7221] el0t_64_sync_handler+0x84/0xf0 [ 166.115195][ T7221] el0t_64_sync+0x18c/0x190 [ 166.124721][ T7221] FAULT_INJECTION: forcing a failure. [ 166.124721][ T7221] name failslab, interval 1, probability 5, space 0, times 9998 [ 166.127291][ T7221] CPU: 0 PID: 7221 Comm: syz.5.778 Not tainted syzkaller #0 [ 166.128608][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.130275][ T7221] Call trace: [ 166.130842][ T7221] dump_backtrace+0x1c4/0x1f0 [ 166.131587][ T7221] show_stack+0x2c/0x3c [ 166.132337][ T7221] __dump_stack+0x30/0x40 [ 166.133207][ T7221] dump_stack_lvl+0xf4/0x15c [ 166.134035][ T7221] dump_stack+0x1c/0x5c [ 166.134770][ T7221] should_fail_ex+0x3cc/0x524 [ 166.135606][ T7221] __should_failslab+0xc0/0x11c [ 166.136479][ T7221] should_failslab+0x10/0x28 [ 166.137294][ T7221] __kmem_cache_alloc_node+0x7c/0x318 [ 166.138237][ T7221] __kmalloc_node_track_caller+0xb8/0x174 [ 166.139198][ T7221] kstrdup+0x68/0xb0 [ 166.139864][ T7221] vidtv_mux_init+0x2ac/0x1554 [ 166.140698][ T7221] vidtv_start_feed+0x2e0/0x49c [ 166.141564][ T7221] dmx_ts_feed_start_filtering+0x124/0x1fc [ 166.142585][ T7221] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 166.143553][ T7221] dvb_demux_do_ioctl+0x438/0x4d8 [ 166.144489][ T7221] dvb_usercopy+0x248/0x45c [ 166.145339][ T7221] dvb_demux_ioctl+0x3c/0x54 [ 166.146236][ T7221] __arm64_sys_ioctl+0x14c/0x1c8 [ 166.147229][ T7221] invoke_syscall+0x98/0x290 [ 166.148161][ T7221] el0_svc_common+0x13c/0x258 [ 166.149023][ T7221] do_el0_svc+0x5c/0x134 [ 166.149818][ T7221] el0_svc+0x58/0x12c [ 166.150620][ T7221] el0t_64_sync_handler+0x84/0xf0 [ 166.151688][ T7221] el0t_64_sync+0x18c/0x190 [ 166.153743][ T7221] FAULT_INJECTION: forcing a failure. [ 166.153743][ T7221] name failslab, interval 1, probability 5, space 0, times 9997 [ 166.155878][ T7221] CPU: 0 PID: 7221 Comm: syz.5.778 Not tainted syzkaller #0 [ 166.156992][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.158661][ T7221] Call trace: [ 166.159208][ T7221] dump_backtrace+0x1c4/0x1f0 [ 166.159969][ T7221] show_stack+0x2c/0x3c [ 166.160653][ T7221] __dump_stack+0x30/0x40 [ 166.161418][ T7221] dump_stack_lvl+0xf4/0x15c [ 166.162211][ T7221] dump_stack+0x1c/0x5c [ 166.162947][ T7221] should_fail_ex+0x3cc/0x524 [ 166.163861][ T7221] __should_failslab+0xc0/0x11c [ 166.164739][ T7221] should_failslab+0x10/0x28 [ 166.165601][ T7221] __kmem_cache_alloc_node+0x7c/0x318 [ 166.166572][ T7221] __kmalloc+0xc4/0x180 [ 166.167305][ T7221] tomoyo_encode+0x260/0x484 [ 166.168234][ T7221] tomoyo_realpath_from_path+0x4b4/0x508 [ 166.169225][ T7221] tomoyo_path_number_perm+0x1c4/0x540 [ 166.170216][ T7221] tomoyo_file_ioctl+0x2c/0x3c [ 166.171189][ T7221] security_file_ioctl+0x80/0xbc [ 166.172075][ T7221] __arm64_sys_ioctl+0xa8/0x1c8 [ 166.173038][ T7221] invoke_syscall+0x98/0x290 [ 166.173885][ T7221] el0_svc_common+0x13c/0x258 [ 166.174699][ T7221] do_el0_svc+0x5c/0x134 [ 166.175437][ T7221] el0_svc+0x58/0x12c [ 166.176173][ T7221] el0t_64_sync_handler+0x84/0xf0 [ 166.177155][ T7221] el0t_64_sync+0x18c/0x190 [ 166.178708][ T7221] FAULT_INJECTION: forcing a failure. [ 166.178708][ T7221] name failslab, interval 1, probability 5, space 0, times 9996 [ 166.180828][ T7221] CPU: 0 PID: 7221 Comm: syz.5.778 Not tainted syzkaller #0 [ 166.182222][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.184225][ T7221] Call trace: [ 166.184886][ T7221] dump_backtrace+0x1c4/0x1f0 [ 166.185872][ T7221] show_stack+0x2c/0x3c [ 166.186657][ T7221] __dump_stack+0x30/0x40 [ 166.187443][ T7221] dump_stack_lvl+0xf4/0x15c [ 166.188303][ T7221] dump_stack+0x1c/0x5c [ 166.189135][ T7221] should_fail_ex+0x3cc/0x524 [ 166.190027][ T7221] __should_failslab+0xc0/0x11c [ 166.191025][ T7221] should_failslab+0x10/0x28 [ 166.191981][ T7221] __kmem_cache_alloc_node+0x7c/0x318 [ 166.193168][ T7221] __kmalloc_node_track_caller+0xb8/0x174 [ 166.194256][ T7221] kstrdup+0x68/0xb0 [ 166.195014][ T7221] vidtv_channel_s302m_init+0xf4/0x78c [ 166.196154][ T7221] vidtv_channels_init+0x4c/0x94 [ 166.197244][ T7221] vidtv_mux_init+0x38c/0x1554 [ 166.198221][ T7221] vidtv_start_feed+0x2e0/0x49c [ 166.199151][ T7221] dmx_ts_feed_start_filtering+0x124/0x1fc [ 166.200247][ T7221] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 166.201260][ T7221] dvb_demux_do_ioctl+0x438/0x4d8 [ 166.202166][ T7221] dvb_usercopy+0x248/0x45c [ 166.203003][ T7221] dvb_demux_ioctl+0x3c/0x54 [ 166.203865][ T7221] __arm64_sys_ioctl+0x14c/0x1c8 [ 166.204766][ T7221] invoke_syscall+0x98/0x290 [ 166.205675][ T7221] el0_svc_common+0x13c/0x258 [ 166.206539][ T7221] do_el0_svc+0x5c/0x134 [ 166.207350][ T7221] el0_svc+0x58/0x12c [ 166.208062][ T7221] el0t_64_sync_handler+0x84/0xf0 [ 166.209007][ T7221] el0t_64_sync+0x18c/0x190 [ 166.212112][ T7221] FAULT_INJECTION: forcing a failure. [ 166.212112][ T7221] name failslab, interval 1, probability 5, space 0, times 9995 [ 166.215644][ T7221] CPU: 0 PID: 7221 Comm: syz.5.778 Not tainted syzkaller #0 [ 166.216854][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.218526][ T7221] Call trace: [ 166.219073][ T7221] dump_backtrace+0x1c4/0x1f0 [ 166.219869][ T7221] show_stack+0x2c/0x3c [ 166.220549][ T7221] __dump_stack+0x30/0x40 [ 166.221302][ T7221] dump_stack_lvl+0xf4/0x15c [ 166.222113][ T7221] dump_stack+0x1c/0x5c [ 166.222892][ T7221] should_fail_ex+0x3cc/0x524 [ 166.223751][ T7221] __should_failslab+0xc0/0x11c [ 166.224597][ T7221] should_failslab+0x10/0x28 [ 166.225413][ T7221] kmem_cache_alloc+0x88/0x310 [ 166.226351][ T7221] security_inode_alloc+0x38/0x11c [ 166.227246][ T7221] inode_init_always+0x6c8/0xb28 [ 166.228205][ T7221] new_inode_pseudo+0x7c/0x1cc [ 166.229035][ T7221] __sock_create+0x138/0x8a8 [ 166.229859][ T7221] __sys_socket+0xc0/0x1b0 [ 166.230680][ T7221] __arm64_sys_socket+0x7c/0x94 [ 166.231599][ T7221] invoke_syscall+0x98/0x290 [ 166.232440][ T7221] el0_svc_common+0x13c/0x258 [ 166.233260][ T7221] do_el0_svc+0x5c/0x134 [ 166.234024][ T7221] el0_svc+0x58/0x12c [ 166.234749][ T7221] el0t_64_sync_handler+0x84/0xf0 [ 166.235744][ T7221] el0t_64_sync+0x18c/0x190 [ 166.237262][ T7221] socket: no more sockets [ 166.286052][ T7230] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 166.717562][ T7239] FAULT_INJECTION: forcing a failure. [ 166.717562][ T7239] name failslab, interval 1, probability 5, space 0, times 9994 [ 166.720759][ T7239] CPU: 0 PID: 7239 Comm: syz.4.785 Not tainted syzkaller #0 [ 166.722238][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.724052][ T7239] Call trace: [ 166.724707][ T7239] dump_backtrace+0x1c4/0x1f0 [ 166.725596][ T7239] show_stack+0x2c/0x3c [ 166.726353][ T7239] __dump_stack+0x30/0x40 [ 166.727217][ T7239] dump_stack_lvl+0xf4/0x15c [ 166.728177][ T7239] dump_stack+0x1c/0x5c [ 166.729010][ T7239] should_fail_ex+0x3cc/0x524 [ 166.729915][ T7239] __should_failslab+0xc0/0x11c [ 166.730776][ T7239] should_failslab+0x10/0x28 [ 166.731571][ T7239] kmem_cache_alloc+0x88/0x310 [ 166.732514][ T7239] security_file_alloc+0x38/0x11c [ 166.733522][ T7239] __alloc_file+0xac/0x234 [ 166.734363][ T7239] alloc_empty_file+0xa0/0x184 [ 166.735264][ T7239] alloc_file+0x64/0x564 [ 166.736088][ T7239] alloc_file_pseudo+0x16c/0x1f4 [ 166.737001][ T7239] anon_inode_getfd+0xe8/0x1a8 [ 166.737958][ T7239] do_inotify_init+0x2d8/0x40c [ 166.738929][ T7239] __arm64_sys_inotify_init1+0x3c/0x50 [ 166.740032][ T7239] invoke_syscall+0x98/0x290 [ 166.740964][ T7239] el0_svc_common+0x13c/0x258 [ 166.741876][ T7239] do_el0_svc+0x5c/0x134 [ 166.742742][ T7239] el0_svc+0x58/0x12c [ 166.743521][ T7239] el0t_64_sync_handler+0x84/0xf0 [ 166.744454][ T7239] el0t_64_sync+0x18c/0x190 [ 166.765448][ T7242] nvmet: disable ns before setting buffered_io value. [ 166.839335][ T7248] binder: 7247:7248 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 166.843031][ T7248] binder: 7247:7248 got transaction to invalid handle, 1 [ 166.844468][ T7248] binder: 7248:7247 cannot find target node [ 166.847955][ T7248] binder: 7247:7248 transaction async to 0:0 failed 61/29201/-22, size 0-0 line 3062 [ 166.852161][ T7250] FAULT_INJECTION: forcing a failure. [ 166.852161][ T7250] name failslab, interval 1, probability 5, space 0, times 10000 [ 166.854578][ T7250] CPU: 0 PID: 7250 Comm: syz.4.791 Not tainted syzkaller #0 [ 166.855970][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.857731][ T7250] Call trace: [ 166.858305][ T7250] dump_backtrace+0x1c4/0x1f0 [ 166.859207][ T7250] show_stack+0x2c/0x3c [ 166.859981][ T7250] __dump_stack+0x30/0x40 [ 166.860733][ T7250] dump_stack_lvl+0xf4/0x15c [ 166.861555][ T7250] dump_stack+0x1c/0x5c [ 166.862249][ T7250] should_fail_ex+0x3cc/0x524 [ 166.863059][ T7250] __should_failslab+0xc0/0x11c [ 166.863918][ T7250] should_failslab+0x10/0x28 [ 166.864742][ T7250] __kmem_cache_alloc_node+0x7c/0x318 [ 166.865672][ T7250] __kmalloc+0xc4/0x180 [ 166.866440][ T7250] vidtv_psi_registration_desc_init+0x40/0x240 [ 166.867491][ T7250] vidtv_channel_s302m_init+0x288/0x78c [ 166.868576][ T7250] vidtv_channels_init+0x4c/0x94 [ 166.869466][ T7250] vidtv_mux_init+0x38c/0x1554 [ 166.870396][ T7250] vidtv_start_feed+0x2e0/0x49c [ 166.871282][ T7250] dmx_ts_feed_start_filtering+0x124/0x1fc [ 166.872285][ T7250] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 166.873328][ T7250] dvb_demux_do_ioctl+0x438/0x4d8 [ 166.874241][ T7250] dvb_usercopy+0x248/0x45c [ 166.875035][ T7250] dvb_demux_ioctl+0x3c/0x54 [ 166.875850][ T7250] __arm64_sys_ioctl+0x14c/0x1c8 [ 166.876740][ T7250] invoke_syscall+0x98/0x290 [ 166.877586][ T7250] el0_svc_common+0x13c/0x258 [ 166.878448][ T7250] do_el0_svc+0x5c/0x134 [ 166.879163][ T7250] el0_svc+0x58/0x12c [ 166.879876][ T7250] el0t_64_sync_handler+0x84/0xf0 [ 166.880720][ T7250] el0t_64_sync+0x18c/0x190 [ 166.887795][ T7250] FAULT_INJECTION: forcing a failure. [ 166.887795][ T7250] name failslab, interval 1, probability 5, space 0, times 9999 [ 166.889819][ T7250] CPU: 0 PID: 7250 Comm: syz.4.791 Not tainted syzkaller #0 [ 166.890959][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.892652][ T7250] Call trace: [ 166.892755][ T7253] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 166.893218][ T7250] dump_backtrace+0x1c4/0x1f0 [ 166.894620][ T7253] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 166.895427][ T7250] show_stack+0x2c/0x3c [ 166.897084][ T7255] vhci_hcd: xmit failed -107 [ 166.897643][ T7250] __dump_stack+0x30/0x40 [ 166.899331][ T7250] dump_stack_lvl+0xf4/0x15c [ 166.900247][ T7250] dump_stack+0x1c/0x5c [ 166.901045][ T7250] should_fail_ex+0x3cc/0x524 [ 166.901675][ T7253] vhci_hcd vhci_hcd.0: Device attached [ 166.901945][ T7250] __should_failslab+0xc0/0x11c [ 166.901963][ T7250] should_failslab+0x10/0x28 [ 166.901972][ T7250] __kmem_cache_alloc_node+0x7c/0x318 [ 166.901981][ T7250] kmalloc_trace+0x48/0x94 [ 166.901987][ T7250] vidtv_psi_eit_event_init+0xcc/0x3fc [ 166.901996][ T7250] vidtv_channel_s302m_init+0x37c/0x78c [ 166.902003][ T7250] vidtv_channels_init+0x4c/0x94 [ 166.902009][ T7250] vidtv_mux_init+0x38c/0x1554 [ 166.905189][ T4384] vhci_hcd: stop threads [ 166.905826][ T7250] vidtv_start_feed+0x2e0/0x49c [ 166.906822][ T4384] vhci_hcd: release socket [ 166.907833][ T7250] dmx_ts_feed_start_filtering+0x124/0x1fc [ 166.907851][ T7250] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 166.908991][ T4384] vhci_hcd: disconnect device [ 166.909730][ T7250] dvb_demux_do_ioctl+0x438/0x4d8 [ 166.916787][ T7250] dvb_usercopy+0x248/0x45c [ 166.917689][ T7250] dvb_demux_ioctl+0x3c/0x54 [ 166.918585][ T7250] __arm64_sys_ioctl+0x14c/0x1c8 [ 166.919497][ T7250] invoke_syscall+0x98/0x290 [ 166.920434][ T7250] el0_svc_common+0x13c/0x258 [ 166.921335][ T7250] do_el0_svc+0x5c/0x134 [ 166.922114][ T7250] el0_svc+0x58/0x12c [ 166.922890][ T7250] el0t_64_sync_handler+0x84/0xf0 [ 166.923741][ T7250] el0t_64_sync+0x18c/0x190 [ 166.929093][ T7250] FAULT_INJECTION: forcing a failure. [ 166.929093][ T7250] name failslab, interval 1, probability 5, space 0, times 9998 [ 166.931469][ T7250] CPU: 0 PID: 7250 Comm: syz.4.791 Not tainted syzkaller #0 [ 166.933004][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.935004][ T7250] Call trace: [ 166.935636][ T7250] dump_backtrace+0x1c4/0x1f0 [ 166.936503][ T7250] show_stack+0x2c/0x3c [ 166.937201][ T7250] __dump_stack+0x30/0x40 [ 166.938019][ T7250] dump_stack_lvl+0xf4/0x15c [ 166.938750][ T7250] dump_stack+0x1c/0x5c [ 166.939563][ T7250] should_fail_ex+0x3cc/0x524 [ 166.940578][ T7250] __should_failslab+0xc0/0x11c [ 166.941504][ T7250] should_failslab+0x10/0x28 [ 166.942337][ T7250] __kmem_cache_alloc_node+0x7c/0x318 [ 166.943248][ T7250] __kmalloc_node_track_caller+0xb8/0x174 [ 166.944371][ T7250] kstrdup+0x68/0xb0 [ 166.945046][ T7250] vidtv_psi_short_event_desc_init+0x214/0x558 [ 166.946120][ T7250] vidtv_psi_desc_clone+0x2f0/0x808 [ 166.947062][ T7250] vidtv_channel_si_init+0x738/0x124c [ 166.948012][ T7250] vidtv_mux_init+0x3ac/0x1554 [ 166.948957][ T7250] vidtv_start_feed+0x2e0/0x49c [ 166.949924][ T7250] dmx_ts_feed_start_filtering+0x124/0x1fc [ 166.951003][ T7250] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 166.951957][ T7250] dvb_demux_do_ioctl+0x438/0x4d8 [ 166.952810][ T7250] dvb_usercopy+0x248/0x45c [ 166.953608][ T7250] dvb_demux_ioctl+0x3c/0x54 [ 166.954502][ T7250] __arm64_sys_ioctl+0x14c/0x1c8 [ 166.955350][ T7250] invoke_syscall+0x98/0x290 [ 166.956176][ T7250] el0_svc_common+0x13c/0x258 [ 166.957001][ T7250] do_el0_svc+0x5c/0x134 [ 166.957748][ T7250] el0_svc+0x58/0x12c [ 166.958459][ T7250] el0t_64_sync_handler+0x84/0xf0 [ 166.959297][ T7250] el0t_64_sync+0x18c/0x190 [ 166.985465][ T7250] FAULT_INJECTION: forcing a failure. [ 166.985465][ T7250] name failslab, interval 1, probability 5, space 0, times 9997 [ 166.987755][ T7250] CPU: 0 PID: 7250 Comm: syz.4.791 Not tainted syzkaller #0 [ 166.988915][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 166.990800][ T7250] Call trace: [ 166.991478][ T7250] dump_backtrace+0x1c4/0x1f0 [ 166.992431][ T7250] show_stack+0x2c/0x3c [ 166.993158][ T7250] __dump_stack+0x30/0x40 [ 166.993949][ T7250] dump_stack_lvl+0xf4/0x15c [ 166.994710][ T7250] dump_stack+0x1c/0x5c [ 166.995507][ T7250] should_fail_ex+0x3cc/0x524 [ 166.996315][ T7250] __should_failslab+0xc0/0x11c [ 166.997247][ T7250] should_failslab+0x10/0x28 [ 166.998107][ T7250] __kmem_cache_alloc_node+0x7c/0x318 [ 166.999185][ T7250] __kmalloc_node_track_caller+0xb8/0x174 [ 167.000229][ T7250] kstrdup+0x68/0xb0 [ 167.000905][ T7250] vidtv_psi_service_desc_init+0x14c/0x46c [ 167.001899][ T7250] vidtv_channel_s302m_init+0x168/0x78c [ 167.002951][ T7250] vidtv_channels_init+0x4c/0x94 [ 167.003874][ T7250] vidtv_mux_init+0x38c/0x1554 [ 167.004825][ T7250] vidtv_start_feed+0x2e0/0x49c [ 167.005702][ T7250] dmx_ts_feed_start_filtering+0x124/0x1fc [ 167.006713][ T7250] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 167.007758][ T7250] dvb_demux_do_ioctl+0x438/0x4d8 [ 167.008649][ T7250] dvb_usercopy+0x248/0x45c [ 167.009441][ T7250] dvb_demux_ioctl+0x3c/0x54 [ 167.010351][ T7250] __arm64_sys_ioctl+0x14c/0x1c8 [ 167.011230][ T7250] invoke_syscall+0x98/0x290 [ 167.012109][ T7250] el0_svc_common+0x13c/0x258 [ 167.013039][ T7250] do_el0_svc+0x5c/0x134 [ 167.013881][ T7250] el0_svc+0x58/0x12c [ 167.014607][ T7250] el0t_64_sync_handler+0x84/0xf0 [ 167.015463][ T7250] el0t_64_sync+0x18c/0x190 [ 167.018424][ T7250] FAULT_INJECTION: forcing a failure. [ 167.018424][ T7250] name failslab, interval 1, probability 5, space 0, times 9996 [ 167.020415][ T7250] CPU: 0 PID: 7250 Comm: syz.4.791 Not tainted syzkaller #0 [ 167.021686][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 167.023548][ T7250] Call trace: [ 167.024134][ T7250] dump_backtrace+0x1c4/0x1f0 [ 167.025066][ T7250] show_stack+0x2c/0x3c [ 167.025828][ T7250] __dump_stack+0x30/0x40 [ 167.026647][ T7250] dump_stack_lvl+0xf4/0x15c [ 167.027544][ T7250] dump_stack+0x1c/0x5c [ 167.028356][ T7250] should_fail_ex+0x3cc/0x524 [ 167.029245][ T7250] __should_failslab+0xc0/0x11c [ 167.030110][ T7250] should_failslab+0x10/0x28 [ 167.030976][ T7250] __kmem_cache_alloc_node+0x7c/0x318 [ 167.031947][ T7250] __kmalloc+0xc4/0x180 [ 167.032764][ T7250] security_sk_alloc+0x54/0x140 [ 167.033653][ T7250] sk_prot_alloc+0xe0/0x1e8 [ 167.034534][ T7250] sk_alloc+0x44/0x3a0 [ 167.035345][ T7250] __netlink_create+0x80/0x2a8 [ 167.036300][ T7250] netlink_create+0x3b8/0x65c [ 167.037200][ T7250] __sock_create+0x448/0x8a8 [ 167.038039][ T7250] __sys_socket+0xc0/0x1b0 [ 167.038860][ T7250] __arm64_sys_socket+0x7c/0x94 [ 167.039004][ T3939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 167.039732][ T7250] invoke_syscall+0x98/0x290 [ 167.042559][ T7250] el0_svc_common+0x13c/0x258 [ 167.043335][ T3939] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 167.043432][ T7250] do_el0_svc+0x5c/0x134 [ 167.045639][ T7250] el0_svc+0x58/0x12c [ 167.045963][ T3939] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 167.046363][ T7250] el0t_64_sync_handler+0x84/0xf0 [ 167.048619][ T7250] el0t_64_sync+0x18c/0x190 [ 167.049277][ T3939] loop0: [ 167.150918][ T7267] netlink: 32 bytes leftover after parsing attributes in process `syz.6.797'. [ 167.178233][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.180058][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.508541][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 167.740407][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.805'. [ 167.742054][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.805'. [ 167.764469][ T7283] device syz_tun entered promiscuous mode [ 167.813500][ T7283] device syz_tun left promiscuous mode [ 167.954686][ T3939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 167.956554][ T3939] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 167.957981][ T3939] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 167.959247][ T3939] loop0: [ 168.094529][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.812'. [ 168.862466][ T7321] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 168.864735][ T7321] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 168.891338][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.895223][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.906670][ T3939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 168.908795][ T3939] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 168.910321][ T3939] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 168.911800][ T3939] loop0: [ 168.983568][ T7329] FAULT_INJECTION: forcing a failure. [ 168.983568][ T7329] name failslab, interval 1, probability 5, space 0, times 10000 [ 168.985895][ T7329] CPU: 0 PID: 7329 Comm: syz.4.824 Not tainted syzkaller #0 [ 168.987150][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 168.988959][ T7329] Call trace: [ 168.989588][ T7329] dump_backtrace+0x1c4/0x1f0 [ 168.990466][ T7329] show_stack+0x2c/0x3c [ 168.991273][ T7329] __dump_stack+0x30/0x40 [ 168.992141][ T7329] dump_stack_lvl+0xf4/0x15c [ 168.993044][ T7329] dump_stack+0x1c/0x5c [ 168.993852][ T7329] should_fail_ex+0x3cc/0x524 [ 168.994690][ T7329] __should_failslab+0xc0/0x11c [ 168.995557][ T7329] should_failslab+0x10/0x28 [ 168.996428][ T7329] __kmem_cache_alloc_node+0x7c/0x318 [ 168.997413][ T7329] __kmalloc+0xc4/0x180 [ 168.998197][ T7329] vidtv_psi_registration_desc_init+0x40/0x240 [ 168.999264][ T7329] vidtv_channel_s302m_init+0x288/0x78c [ 169.000300][ T7329] vidtv_channels_init+0x4c/0x94 [ 169.001227][ T7329] vidtv_mux_init+0x38c/0x1554 [ 169.002131][ T7329] vidtv_start_feed+0x2e0/0x49c [ 169.003015][ T7329] dmx_ts_feed_start_filtering+0x124/0x1fc [ 169.004078][ T7329] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 169.005160][ T7329] dvb_demux_do_ioctl+0x438/0x4d8 [ 169.006184][ T7329] dvb_usercopy+0x248/0x45c [ 169.007035][ T7329] dvb_demux_ioctl+0x3c/0x54 [ 169.007921][ T7329] __arm64_sys_ioctl+0x14c/0x1c8 [ 169.008825][ T7329] invoke_syscall+0x98/0x290 [ 169.009639][ T7329] el0_svc_common+0x13c/0x258 [ 169.010490][ T7329] do_el0_svc+0x5c/0x134 [ 169.011288][ T7329] el0_svc+0x58/0x12c [ 169.012010][ T7329] el0t_64_sync_handler+0x84/0xf0 [ 169.012927][ T7329] el0t_64_sync+0x18c/0x190 [ 169.019609][ T7329] FAULT_INJECTION: forcing a failure. [ 169.019609][ T7329] name failslab, interval 1, probability 5, space 0, times 9999 [ 169.022098][ T7329] CPU: 0 PID: 7329 Comm: syz.4.824 Not tainted syzkaller #0 [ 169.023597][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 169.025661][ T7329] Call trace: [ 169.026342][ T7329] dump_backtrace+0x1c4/0x1f0 [ 169.027106][ T7329] show_stack+0x2c/0x3c [ 169.027856][ T7329] __dump_stack+0x30/0x40 [ 169.028625][ T7329] dump_stack_lvl+0xf4/0x15c [ 169.029456][ T7329] dump_stack+0x1c/0x5c [ 169.030295][ T7329] should_fail_ex+0x3cc/0x524 [ 169.031175][ T7329] __should_failslab+0xc0/0x11c [ 169.032110][ T7329] should_failslab+0x10/0x28 [ 169.032967][ T7329] __kmem_cache_alloc_node+0x7c/0x318 [ 169.034915][ T7329] __kmalloc_node_track_caller+0xb8/0x174 [ 169.034929][ T7329] kstrdup+0x68/0xb0 [ 169.034937][ T7329] vidtv_psi_service_desc_init+0x14c/0x46c [ 169.034945][ T7329] vidtv_channel_s302m_init+0x168/0x78c [ 169.038763][ T7329] vidtv_channels_init+0x4c/0x94 [ 169.039719][ T7329] vidtv_mux_init+0x38c/0x1554 [ 169.040610][ T7329] vidtv_start_feed+0x2e0/0x49c [ 169.041661][ T7329] dmx_ts_feed_start_filtering+0x124/0x1fc [ 169.042818][ T7329] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 169.043923][ T7329] dvb_demux_do_ioctl+0x438/0x4d8 [ 169.044806][ T7329] dvb_usercopy+0x248/0x45c [ 169.045621][ T7329] dvb_demux_ioctl+0x3c/0x54 [ 169.046399][ T7329] __arm64_sys_ioctl+0x14c/0x1c8 [ 169.047365][ T7329] invoke_syscall+0x98/0x290 [ 169.048226][ T7329] el0_svc_common+0x13c/0x258 [ 169.049118][ T7329] do_el0_svc+0x5c/0x134 [ 169.049991][ T7329] el0_svc+0x58/0x12c [ 169.050835][ T7329] el0t_64_sync_handler+0x84/0xf0 [ 169.051837][ T7329] el0t_64_sync+0x18c/0x190 [ 169.087370][ T7329] FAULT_INJECTION: forcing a failure. [ 169.087370][ T7329] name failslab, interval 1, probability 5, space 0, times 9998 [ 169.089459][ T7329] CPU: 0 PID: 7329 Comm: syz.4.824 Not tainted syzkaller #0 [ 169.090739][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 169.092721][ T7329] Call trace: [ 169.093410][ T7329] dump_backtrace+0x1c4/0x1f0 [ 169.094300][ T7329] show_stack+0x2c/0x3c [ 169.095046][ T7329] __dump_stack+0x30/0x40 [ 169.095829][ T7329] dump_stack_lvl+0xf4/0x15c [ 169.096646][ T7329] dump_stack+0x1c/0x5c [ 169.097454][ T7329] should_fail_ex+0x3cc/0x524 [ 169.098391][ T7329] __should_failslab+0xc0/0x11c [ 169.099253][ T7329] should_failslab+0x10/0x28 [ 169.100057][ T7329] __kmem_cache_alloc_node+0x7c/0x318 [ 169.101012][ T7329] __kmalloc_node_track_caller+0xb8/0x174 [ 169.102176][ T7329] kstrdup+0x68/0xb0 [ 169.102969][ T7329] vidtv_psi_short_event_desc_init+0x1c8/0x558 [ 169.104218][ T7329] vidtv_psi_desc_clone+0x2f0/0x808 [ 169.105227][ T7329] vidtv_channel_si_init+0x738/0x124c [ 169.106356][ T7329] vidtv_mux_init+0x3ac/0x1554 [ 169.107326][ T7329] vidtv_start_feed+0x2e0/0x49c [ 169.108266][ T7329] dmx_ts_feed_start_filtering+0x124/0x1fc [ 169.109558][ T7329] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 169.110704][ T7329] dvb_demux_do_ioctl+0x438/0x4d8 [ 169.111677][ T7329] dvb_usercopy+0x248/0x45c [ 169.112553][ T7329] dvb_demux_ioctl+0x3c/0x54 [ 169.113469][ T7329] __arm64_sys_ioctl+0x14c/0x1c8 [ 169.114443][ T7329] invoke_syscall+0x98/0x290 [ 169.115324][ T7329] el0_svc_common+0x13c/0x258 [ 169.116142][ T7329] do_el0_svc+0x5c/0x134 [ 169.116896][ T7329] el0_svc+0x58/0x12c [ 169.117606][ T7329] el0t_64_sync_handler+0x84/0xf0 [ 169.118546][ T7329] el0t_64_sync+0x18c/0x190 [ 169.119943][ T27] audit: type=1326 audit(169.100:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.5.828" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f17a9a8 code=0x0 [ 169.121825][ T7329] FAULT_INJECTION: forcing a failure. [ 169.121825][ T7329] name failslab, interval 1, probability 5, space 0, times 9997 [ 169.126904][ T7329] CPU: 0 PID: 7329 Comm: syz.4.824 Not tainted syzkaller #0 [ 169.128266][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 169.129894][ T7329] Call trace: [ 169.130468][ T7329] dump_backtrace+0x1c4/0x1f0 [ 169.131345][ T7329] show_stack+0x2c/0x3c [ 169.132081][ T7329] __dump_stack+0x30/0x40 [ 169.132925][ T7329] dump_stack_lvl+0xf4/0x15c [ 169.133753][ T7329] dump_stack+0x1c/0x5c [ 169.134547][ T7329] should_fail_ex+0x3cc/0x524 [ 169.135327][ T7329] __should_failslab+0xc0/0x11c [ 169.136180][ T7329] should_failslab+0x10/0x28 [ 169.136979][ T7329] __kmem_cache_alloc_node+0x7c/0x318 [ 169.137909][ T7329] __kmalloc_node_track_caller+0xb8/0x174 [ 169.139023][ T7329] kmemdup+0x5c/0x98 [ 169.139807][ T7329] vidtv_psi_desc_clone+0x178/0x808 [ 169.140703][ T7329] vidtv_channel_pmt_match_sections+0x204/0x38c [ 169.141907][ T7329] vidtv_channel_si_init+0xf8c/0x124c [ 169.142949][ T7329] vidtv_mux_init+0x3ac/0x1554 [ 169.143880][ T7329] vidtv_start_feed+0x2e0/0x49c [ 169.144844][ T7329] dmx_ts_feed_start_filtering+0x124/0x1fc [ 169.145981][ T7329] dvb_dmxdev_filter_start+0x3b4/0xf10 [ 169.146949][ T7329] dvb_demux_do_ioctl+0x438/0x4d8 [ 169.147819][ T7329] dvb_usercopy+0x248/0x45c [ 169.148577][ T7329] dvb_demux_ioctl+0x3c/0x54 [ 169.149362][ T7329] __arm64_sys_ioctl+0x14c/0x1c8 [ 169.150134][ T7329] invoke_syscall+0x98/0x290 [ 169.150972][ T7329] el0_svc_common+0x13c/0x258 [ 169.151856][ T7329] do_el0_svc+0x5c/0x134 [ 169.152614][ T7329] el0_svc+0x58/0x12c [ 169.153362][ T7329] el0t_64_sync_handler+0x84/0xf0 [ 169.154309][ T7329] el0t_64_sync+0x18c/0x190 [ 169.178590][ T7329] FAULT_INJECTION: forcing a failure. [ 169.178590][ T7329] name failslab, interval 1, probability 5, space 0, times 9996 [ 169.181094][ T7329] CPU: 1 PID: 7329 Comm: syz.4.824 Not tainted syzkaller #0 [ 169.182394][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 169.184358][ T7329] Call trace: [ 169.185027][ T7329] dump_backtrace+0x1c4/0x1f0 [ 169.186133][ T7329] show_stack+0x2c/0x3c [ 169.186949][ T7329] __dump_stack+0x30/0x40 [ 169.187765][ T7329] dump_stack_lvl+0xf4/0x15c [ 169.188621][ T7329] dump_stack+0x1c/0x5c [ 169.189395][ T7329] should_fail_ex+0x3cc/0x524 [ 169.190257][ T7329] __should_failslab+0xc0/0x11c [ 169.191201][ T7329] should_failslab+0x10/0x28 [ 169.192051][ T7329] kmem_cache_alloc+0x88/0x310 [ 169.192893][ T7329] skb_clone+0x194/0x308 [ 169.193727][ T7329] __netlink_deliver_tap+0x364/0x6d8 [ 169.194687][ T7329] netlink_deliver_tap+0x1ac/0x1b0 [ 169.195643][ T7329] netlink_unicast+0x5e0/0x80c [ 169.196591][ T7329] netlink_sendmsg+0x6f0/0x9d8 [ 169.197452][ T7329] ____sys_sendmsg+0x588/0x90c [ 169.198316][ T7329] __sys_sendmsg+0x288/0x374 [ 169.199115][ T7329] __arm64_sys_sendmsg+0x80/0x94 [ 169.200043][ T7329] invoke_syscall+0x98/0x290 [ 169.200923][ T7329] el0_svc_common+0x13c/0x258 [ 169.201852][ T7329] do_el0_svc+0x5c/0x134 [ 169.202697][ T7329] el0_svc+0x58/0x12c [ 169.203515][ T7329] el0t_64_sync_handler+0x84/0xf0 [ 169.204429][ T7329] el0t_64_sync+0x18c/0x190 [ 169.476043][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.831'. [ 169.477971][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.831'. [ 169.506922][ T7346] device syz_tun entered promiscuous mode [ 169.522652][ T7346] device syz_tun left promiscuous mode [ 170.248401][ T3939] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 170.252006][ T3939] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 170.253837][ T3939] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 170.255848][ T3939] loop0: [ 170.272501][ T7370] nvmet: disable ns before setting buffered_io value. [ 170.275581][ T7370] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 170.278918][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 170.279155][ T7370] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 170.290815][ T7370] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 170.295211][ T7370] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 170.328436][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.336599][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.767945][ T7390] loop6: detected capacity change from 0 to 256 [ 170.807218][ T7390] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 171.486782][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.845'. [ 171.488911][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.845'. [ 171.740770][ T7412] nvmet: disable ns before setting buffered_io value. [ 171.746721][ T7412] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 171.755836][ T7412] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 171.757539][ T7412] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 171.765639][ T7412] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 172.264964][ T7421] binder: 7420:7421 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 172.293091][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.296139][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.589193][ T7442] loop4: detected capacity change from 0 to 256 [ 172.598557][ T7444] nvmet: disable ns before setting buffered_io value. [ 172.600905][ T7444] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 172.603775][ T7444] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 172.605505][ T7444] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 172.607744][ T7444] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 172.623214][ T7446] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 172.624298][ T7442] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 172.717029][ T7448] binder: 7447:7448 ioctl 4018620d 0 returned -22 [ 172.719088][ T7448] binder: 7447:7448 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 172.723328][ T7448] binder: 7447:7448 got transaction to invalid handle, 1 [ 172.725100][ T7448] binder: 7448:7447 cannot find target node [ 172.726265][ T7448] binder: 7447:7448 transaction async to 0:0 failed 65/29201/-22, size 0-0 line 3062 [ 173.227711][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 173.229290][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.864'. [ 173.728946][ T27] audit: type=1326 audit(173.710:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.1.876" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9eb7a9a8 code=0x0 [ 173.784917][ T7477] nvmet: disable ns before setting buffered_io value. [ 173.793882][ T7477] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 173.799299][ T7477] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 173.803080][ T7477] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 173.807179][ T7477] nvmet: Disable port '1' before changing attribute in nvmet_param_inline_data_size_store [ 173.861827][ T7482] binder: 7481:7482 ioctl 4018620d 0 returned -22 [ 173.865560][ T7482] binder: 7481:7482 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 173.870084][ T7482] binder: 7481:7482 got transaction to invalid handle, 1 [ 173.877058][ T7482] binder: 7482:7481 cannot find target node [ 173.884142][ T7482] binder: 7481:7482 transaction async to 0:0 failed 68/29201/-22, size 0-0 line 3062 [ 173.946797][ T7488] [ 173.947308][ T7488] ====================================================== [ 173.948675][ T7488] WARNING: possible circular locking dependency detected [ 173.949867][ T7488] syzkaller #0 Not tainted [ 173.950655][ T7488] ------------------------------------------------------ [ 173.952009][ T7488] syz.4.880/7488 is trying to acquire lock: [ 173.953079][ T7488] ffff0000c6b264c0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x128/0x434 [ 173.955187][ T7488] [ 173.955187][ T7488] but task is already holding lock: [ 173.956610][ T7488] ffff8000180105a8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x100/0x4ac [ 173.958315][ T7488] [ 173.958315][ T7488] which lock already depends on the new lock. [ 173.958315][ T7488] [ 173.960079][ T7488] [ 173.960079][ T7488] the existing dependency chain (in reverse order) is: [ 173.961774][ T7488] [ 173.961774][ T7488] -> #3 (tpg_instances_lock){+.+.}-{3:3}: [ 173.963257][ T7488] __mutex_lock_common+0x1a0/0x1f3c [ 173.964365][ T7488] mutex_lock_nested+0x38/0x44 [ 173.965494][ T7488] tcm_alloc_inst+0x6c/0x190 [ 173.966399][ T7488] usb_get_function_instance+0xe8/0x2dc [ 173.967470][ T7488] function_make+0x108/0x2f8 [ 173.968412][ T7488] configfs_mkdir+0x3e0/0x884 [ 173.969376][ T7488] vfs_mkdir+0x314/0x4d8 [ 173.970263][ T7488] do_mkdirat+0x1b8/0x3ec [ 173.971140][ T7488] __arm64_sys_mkdirat+0x90/0xa8 [ 173.972115][ T7488] invoke_syscall+0x98/0x290 [ 173.973062][ T7488] el0_svc_common+0x13c/0x258 [ 173.973960][ T7488] do_el0_svc+0x5c/0x134 [ 173.974811][ T7488] el0_svc+0x58/0x12c [ 173.975646][ T7488] el0t_64_sync_handler+0x84/0xf0 [ 173.976756][ T7488] el0t_64_sync+0x18c/0x190 [ 173.977640][ T7488] [ 173.977640][ T7488] -> #2 (func_lock){+.+.}-{3:3}: [ 173.978954][ T7488] __mutex_lock_common+0x1a0/0x1f3c [ 173.979994][ T7488] mutex_lock_nested+0x38/0x44 [ 173.981006][ T7488] usb_get_function_instance+0x3c/0x2dc [ 173.982190][ T7488] function_make+0x108/0x2f8 [ 173.983172][ T7488] configfs_mkdir+0x3e0/0x884 [ 173.984085][ T7488] vfs_mkdir+0x314/0x4d8 [ 173.984989][ T7488] do_mkdirat+0x1b8/0x3ec [ 173.985919][ T7488] __arm64_sys_mkdirat+0x90/0xa8 [ 173.986983][ T7488] invoke_syscall+0x98/0x290 [ 173.988051][ T7488] el0_svc_common+0x13c/0x258 [ 173.989092][ T7488] do_el0_svc+0x5c/0x134 [ 173.990016][ T7488] el0_svc+0x58/0x12c [ 173.990891][ T7488] el0t_64_sync_handler+0x84/0xf0 [ 173.991976][ T7488] el0t_64_sync+0x18c/0x190 [ 173.992884][ T7488] [ 173.992884][ T7488] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 173.994390][ T7488] __mutex_lock_common+0x1a0/0x1f3c [ 173.995426][ T7488] mutex_lock_nested+0x38/0x44 [ 173.996435][ T7488] uvcg_streaming_header_allow_link+0x78/0x488 [ 173.997771][ T7488] configfs_symlink+0x468/0xee0 [ 173.998806][ T7488] vfs_symlink+0x238/0x3b0 [ 173.999729][ T7488] do_symlinkat+0x178/0x35c [ 174.000654][ T7488] __arm64_sys_symlinkat+0xa4/0xbc [ 174.001759][ T7488] invoke_syscall+0x98/0x290 [ 174.002725][ T7488] el0_svc_common+0x13c/0x258 [ 174.003697][ T7488] do_el0_svc+0x5c/0x134 [ 174.004531][ T7488] el0_svc+0x58/0x12c [ 174.005379][ T7488] el0t_64_sync_handler+0x84/0xf0 [ 174.006371][ T7488] el0t_64_sync+0x18c/0x190 [ 174.007295][ T7488] [ 174.007295][ T7488] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 174.008958][ T7488] __lock_acquire+0x3504/0x7280 [ 174.010001][ T7488] lock_acquire+0x210/0x63c [ 174.010863][ T7488] down_write+0x5c/0x88 [ 174.011776][ T7488] configfs_depend_item_unlocked+0x128/0x434 [ 174.013045][ T7488] usbg_make_tpg+0x1c4/0x4ac [ 174.014038][ T7488] target_fabric_make_tpg+0x98/0x518 [ 174.015212][ T7488] configfs_mkdir+0x3e0/0x884 [ 174.016101][ T7488] vfs_mkdir+0x314/0x4d8 [ 174.016898][ T7488] do_mkdirat+0x1b8/0x3ec [ 174.017765][ T7488] __arm64_sys_mkdirat+0x90/0xa8 [ 174.018803][ T7488] invoke_syscall+0x98/0x290 [ 174.019783][ T7488] el0_svc_common+0x13c/0x258 [ 174.020696][ T7488] do_el0_svc+0x5c/0x134 [ 174.021516][ T7488] el0_svc+0x58/0x12c [ 174.022246][ T7488] el0t_64_sync_handler+0x84/0xf0 [ 174.023229][ T7488] el0t_64_sync+0x18c/0x190 [ 174.024166][ T7488] [ 174.024166][ T7488] other info that might help us debug this: [ 174.024166][ T7488] [ 174.025893][ T7488] Chain exists of: [ 174.025893][ T7488] &sb->s_type->i_mutex_key#22 --> func_lock --> tpg_instances_lock [ 174.025893][ T7488] [ 174.028254][ T7488] Possible unsafe locking scenario: [ 174.028254][ T7488] [ 174.029579][ T7488] CPU0 CPU1 [ 174.030573][ T7488] ---- ---- [ 174.031555][ T7488] lock(tpg_instances_lock); [ 174.032375][ T7488] lock(func_lock); [ 174.033597][ T7488] lock(tpg_instances_lock); [ 174.034862][ T7488] lock(&sb->s_type->i_mutex_key#22); [ 174.035929][ T7488] [ 174.035929][ T7488] *** DEADLOCK *** [ 174.035929][ T7488] [ 174.037333][ T7488] 4 locks held by syz.4.880/7488: [ 174.038228][ T7488] #0: ffff0000c76b6460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 174.039778][ T7488] #1: ffff0000e1e3a4c0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x1b0/0x3a8 [ 174.041904][ T7488] #2: ffff800017bad030 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x3a0/0x884 [ 174.043779][ T7488] #3: ffff8000180105a8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x100/0x4ac [ 174.045593][ T7488] [ 174.045593][ T7488] stack backtrace: [ 174.046640][ T7488] CPU: 1 PID: 7488 Comm: syz.4.880 Not tainted syzkaller #0 [ 174.048023][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 174.049720][ T7488] Call trace: [ 174.050388][ T7488] dump_backtrace+0x1c4/0x1f0 [ 174.051275][ T7488] show_stack+0x2c/0x3c [ 174.052071][ T7488] __dump_stack+0x30/0x40 [ 174.052869][ T7488] dump_stack_lvl+0xf4/0x15c [ 174.053726][ T7488] dump_stack+0x1c/0x5c [ 174.054581][ T7488] print_circular_bug+0x148/0x1b0 [ 174.055556][ T7488] check_noncircular+0x290/0x370 [ 174.056440][ T7488] __lock_acquire+0x3504/0x7280 [ 174.057346][ T7488] lock_acquire+0x210/0x63c [ 174.058118][ T7488] down_write+0x5c/0x88 [ 174.058869][ T7488] configfs_depend_item_unlocked+0x128/0x434 [ 174.059881][ T7488] usbg_make_tpg+0x1c4/0x4ac [ 174.060710][ T7488] target_fabric_make_tpg+0x98/0x518 [ 174.061705][ T7488] configfs_mkdir+0x3e0/0x884 [ 174.062555][ T7488] vfs_mkdir+0x314/0x4d8 [ 174.063294][ T7488] do_mkdirat+0x1b8/0x3ec [ 174.064053][ T7488] __arm64_sys_mkdirat+0x90/0xa8 [ 174.064979][ T7488] invoke_syscall+0x98/0x290 [ 174.065768][ T7488] el0_svc_common+0x13c/0x258 [ 174.066539][ T7488] do_el0_svc+0x5c/0x134 [ 174.067335][ T7488] el0_svc+0x58/0x12c [ 174.068068][ T7488] el0t_64_sync_handler+0x84/0xf0 [ 174.068937][ T7488] el0t_64_sync+0x18c/0x190