last executing test programs: 6m53.63011914s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 6m52.238025482s ago: executing program 1 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6}) keyctl$clear(0x3, 0xfffffffffffffffd) 6m50.911935879s ago: executing program 1 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) ioprio_set$pid(0x3, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x5e7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) 6m47.89118958s ago: executing program 1 (id=43): r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x1, 0x0, 0x4}}, 0x2e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r4, &(0x7f0000000700)="b068", 0x2) 6m46.980413204s ago: executing program 1 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) 6m46.213256629s ago: executing program 1 (id=50): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c75000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000e14000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 6m43.614560518s ago: executing program 2 (id=53): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mkdir(0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 6m42.106708081s ago: executing program 3 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 6m40.771712506s ago: executing program 3 (id=59): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, 0x0, 0x4009004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @empty, @private2, 0x1, 0x0, 0x0, 0x1}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0) 6m38.735061564s ago: executing program 2 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m37.471800732s ago: executing program 2 (id=64): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r2, &(0x7f0000001080)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24018000}], 0x1, 0x404c0d1) 6m37.441896254s ago: executing program 3 (id=66): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 6m36.862055496s ago: executing program 3 (id=67): socket$inet6(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m36.740835767s ago: executing program 2 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6}) 6m36.436381917s ago: executing program 3 (id=69): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r1, 0x26, &(0x7f0000000180)) 6m36.19164834s ago: executing program 2 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m34.45798495s ago: executing program 2 (id=73): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2460e6"], 0x64) 6m34.265832393s ago: executing program 3 (id=75): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c900170b7a9193e7afcf279884796568c88e13de4ae4b05108"], 0x10) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010425bd", @ANYRES32=0x0, @ANYBLOB="0b5600000000e82224001280f20b63c967652202031b40e16e657665000014000280060005004e23000005000800000000080800"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000) 6m31.100529841s ago: executing program 32 (id=50): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c75000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000e14000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 6m31.089730587s ago: executing program 4 (id=78): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m30.810931021s ago: executing program 0 (id=79): socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10103c, 0x140) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x80, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6m30.016249391s ago: executing program 4 (id=80): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) r0 = socket$inet6(0xa, 0x800000000000802, 0x0) sendmmsg$inet(r0, &(0x7f0000005fc0)=[{{&(0x7f0000001040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}, {{&(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x2, 0x20004004) mkdir(&(0x7f0000000440)='./file0\x00', 0x88) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0x7, 0x3) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 6m29.887485648s ago: executing program 4 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20044060) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m29.656018434s ago: executing program 0 (id=82): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) 6m28.581744553s ago: executing program 0 (id=83): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6m28.566924181s ago: executing program 4 (id=84): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x8, 0x6, 0x6, 0x0, 0x0}) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 6m28.000716634s ago: executing program 0 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 6m27.941160265s ago: executing program 4 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) 6m26.703130897s ago: executing program 0 (id=87): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x2143, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x26, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) 6m26.255127147s ago: executing program 4 (id=88): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x24040800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000001cc0)={@multicast, @remote, @void, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x28, 0x4, 0x0, 0x0, "b8a0ac7d2b92ccb85411e1372652f2bdb88cfbda82b9580b46442908a5142b2e1e67ccbaf81087d48223b6397ef8d2f38acf57546d29ee81f1f586b5f254bfbc"}}}}, 0x0) 6m25.601661341s ago: executing program 0 (id=89): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x3c, r3, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='k'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x0) 6m19.04585362s ago: executing program 33 (id=73): openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2460e6"], 0x64) 6m19.011775091s ago: executing program 34 (id=75): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c900170b7a9193e7afcf279884796568c88e13de4ae4b05108"], 0x10) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010425bd", @ANYRES32=0x0, @ANYBLOB="0b5600000000e82224001280f20b63c967652202031b40e16e657665000014000280060005004e23000005000800000000080800"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000) 6m11.038440145s ago: executing program 35 (id=88): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x24040800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000001cc0)={@multicast, @remote, @void, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x28, 0x4, 0x0, 0x0, "b8a0ac7d2b92ccb85411e1372652f2bdb88cfbda82b9580b46442908a5142b2e1e67ccbaf81087d48223b6397ef8d2f38acf57546d29ee81f1f586b5f254bfbc"}}}}, 0x0) 6m10.531702217s ago: executing program 36 (id=89): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x3c, r3, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='k'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x0) 2m0.311580527s ago: executing program 7 (id=546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1c02, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) r2 = epoll_create1(0x80000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) eventfd2(0x0, 0x80001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xcc26, 0xffb, 0x5, 0xb69, 0xc1, 0x7f, 0x1, 0x3, 0x80000001, 0xa1, 0xff9, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x8000004, 0x6, 0x9, 0x12000004, 0x7, 0x5, 0x5, 0x762, 0x3, 0xe, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0xbb6a, 0x79b, 0x2, 0x1, 0xa, 0x4, 0x7, 0x7, 0x10, 0x57df5d5f, 0xdb, 0x1fa08608, 0x7, 0x2a, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x4, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x3, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfe000000, 0x1, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x15, 0x20006, 0x4005, 0x2, 0x9, 0x2, 0xd9a, 0x9, 0x5, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x7, 0x4, 0x2, 0x40, 0x8, 0x4, 0x7, 0x1000, 0x66cd, 0x8, 0x8000, 0x2008d9f, 0x1fc, 0x3, 0x4]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) setregid(0xee00, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ppoll(&(0x7f0000000040)=[{r2, 0x614}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xe000000f}) 1m58.712330275s ago: executing program 7 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000700)=""/4086, 0xff6}], 0x273) 1m57.498540953s ago: executing program 7 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a2c0)=""/102368, 0x18fe0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x0, 0x5bb, 0x3}) 1m56.018870065s ago: executing program 7 (id=554): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) ioprio_get$pid(0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r4 = open(&(0x7f0000000280)='.\x00', 0x8400, 0x0) futimesat(r4, 0x0, 0x0) 1m43.879620325s ago: executing program 7 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x300000b, 0x80010, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020) preadv(r6, &(0x7f0000000800)=[{&(0x7f00000009c0)=""/194, 0xc2}], 0x1, 0xfffffffe, 0x80000001) read$FUSE(r6, &(0x7f00000027c0)={0x2020}, 0x2020) syz_usb_connect$uac2(0x5, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x7, 0x60, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0x9, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x5d, 0x2, 0x0, 0x8b, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfa, 0x4, "f4"}, @as_header={0x10, 0x24, 0x1, 0x5, 0xc2, 0x3, 0x3, 0x3, 0xd, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0x1d, {0x8, 0x25, 0x1, 0x83, 0x33, 0x8, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x5, 0xf2, {0x8, 0x25, 0x1, 0x82, 0xc, 0x0, 0x7}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1m42.638164344s ago: executing program 7 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 26.35725125s ago: executing program 8 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102400, 0x19000) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) 24.839670142s ago: executing program 8 (id=729): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket(0x5, 0xa, 0xfffffeff) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x400}, 0xe) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x3000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)={0x38, r2, 0x1, 0xfffffffd, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xffffff22, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0x0, 0x5, 0xd}, @NL802154_KEY_ID_ATTR_MODE]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x7400}, @exit, @map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x94) 21.6604406s ago: executing program 6 (id=733): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180)=0x8003, 0x4) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) fchdir(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x5) bind$inet(r2, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 17.241991011s ago: executing program 6 (id=739): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x142, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) 16.719674567s ago: executing program 8 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0) 15.448644177s ago: executing program 8 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r3 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x400261f2, 0x0) 12.17009765s ago: executing program 9 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(r1, 0xa, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) sysinfo(&(0x7f00000001c0)=""/86) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 12.04459689s ago: executing program 6 (id=746): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="b1e4e04c972506bea864bb694241b5fc01335a61f8985040a8393767db21e22b7c8c1d3adfc15bb7ce154d2769e57256619e9125c6006effb561dc605abc926f7b096c", 0x43}], 0x1}}], 0x1, 0x24008094) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) close(0x4) close(0x3) 11.411591005s ago: executing program 9 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x10) 10.530711552s ago: executing program 9 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x2d, 0x1001, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1e, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x8, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}]}]}, 0x68}}, 0x20040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048855}, 0x0) 8.538684888s ago: executing program 9 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x44c}}, 0x0) 8.505462094s ago: executing program 5 (id=751): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x40000002) r1 = fsopen(&(0x7f0000002b00)='nfsd\x00', 0x0) fsmount(r1, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r2 = fanotify_init(0x2, 0x0) readahead(r2, 0x3, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x200000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7.1191894s ago: executing program 9 (id=752): syz_emit_ethernet(0x5e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f0000000180)='./file0/../file0\x00', 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) 6.848743778s ago: executing program 5 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a01"], 0xfc}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 5.469552512s ago: executing program 5 (id=754): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={r9}, 0x4) 5.25436174s ago: executing program 8 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r4, 0x0, 0x0, 0x0) getpeername(r4, 0x0, 0x0) 5.143395568s ago: executing program 9 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100180012800b000100697036746e6c000008000280040013"], 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r6, r5, 0x0, 0x1000000000000a) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 3.863452466s ago: executing program 8 (id=757): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) shutdown(r0, 0x1) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200c8) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000ffff0800010001"], 0x1c}}, 0x0) close(0x3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 3.854469491s ago: executing program 5 (id=758): r0 = socket(0x28, 0x801, 0x0) r1 = semget(0x3, 0x2, 0x601) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000000)=""/4) r2 = semget$private(0x0, 0x4, 0x80) semctl$IPC_RMID(r2, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.447146919s ago: executing program 6 (id=759): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x3, 0x1}, 0x50) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 1.981965848s ago: executing program 6 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000db4d0c59695020c51fd4bafcffffff00"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000001600)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.972756138s ago: executing program 5 (id=761): pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xa26}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x800, 0x0) 369.289036ms ago: executing program 5 (id=762): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=763): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) kernel console output (not intermixed with test programs): mode [ 90.581980][ T5597] veth0_vlan: entered promiscuous mode [ 90.717612][ T5597] veth1_vlan: entered promiscuous mode [ 90.751566][ T5594] veth0_macvtap: entered promiscuous mode [ 90.778608][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.791415][ T5594] veth1_macvtap: entered promiscuous mode [ 90.915617][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.920904][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.966280][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.987963][ T5597] veth0_macvtap: entered promiscuous mode [ 91.029896][ T5597] veth1_macvtap: entered promiscuous mode [ 91.121138][ T5600] veth0_vlan: entered promiscuous mode [ 91.218240][ T5596] veth0_vlan: entered promiscuous mode [ 91.263184][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.321315][ T5600] veth1_vlan: entered promiscuous mode [ 91.391674][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.428504][ T5596] veth1_vlan: entered promiscuous mode [ 91.473948][ T5598] veth0_vlan: entered promiscuous mode [ 91.623081][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.623107][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.629480][ T5598] veth1_vlan: entered promiscuous mode [ 91.919970][ T5600] veth0_macvtap: entered promiscuous mode [ 91.961368][ T5600] veth1_macvtap: entered promiscuous mode [ 91.980004][ T5596] veth0_macvtap: entered promiscuous mode [ 91.989652][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.989670][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.086260][ T5596] veth1_macvtap: entered promiscuous mode [ 92.138054][ T1547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.138075][ T1547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.282680][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.285325][ T5598] veth0_macvtap: entered promiscuous mode [ 92.334406][ T1557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.334426][ T1557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.336673][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.341550][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.342066][ T5598] veth1_macvtap: entered promiscuous mode [ 92.445622][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.496259][ T5594] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.527072][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.574108][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.936994][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.937015][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.609998][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.610018][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.986360][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.986380][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.207665][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.207685][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.319274][ T5735] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.553927][ T5735] usb 4-1: Using ep0 maxpacket: 32 [ 95.557175][ T5735] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 95.604149][ T5735] usb 4-1: config 0 has no interfaces? [ 95.631458][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.631482][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.671812][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.671839][ T5735] usb 4-1: Product: syz [ 95.671852][ T5735] usb 4-1: Manufacturer: syz [ 95.671865][ T5735] usb 4-1: SerialNumber: syz [ 95.681686][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.760832][ T5735] usb 4-1: config 0 descriptor?? [ 96.351061][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.351081][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.511930][ T37] audit: type=1326 audit(1789529914.794:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5811 comm="syz.0.10" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce1258e159 code=0x0 [ 97.288453][ T3437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.288849][ T3437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.309154][ T5817] binder: 5816:5817 ioctl c0306201 2000000001c0 returned -14 [ 97.311993][ T5817] binder: 5816:5817 ioctl c0306201 200000000180 returned -14 [ 97.356722][ T987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.357115][ T987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.357560][ T987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.357929][ T987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.402489][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.403112][ T1042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.403315][ T1042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.403501][ T1042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.404641][ T1042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.572700][ T987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.584203][ T1547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.586670][ T3431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.586992][ T3431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.587212][ T3431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.588875][ T3431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.627073][ T3435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.100826][ T3435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.188565][ T5796] usb 4-1: USB disconnect, device number 2 [ 99.317804][ T5829] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 102.320393][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.499032][ T5874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25'. [ 103.593745][ T5876] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25'. [ 103.976006][ T982] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.159641][ T982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.164109][ T982] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.164142][ T982] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.164166][ T982] usb 1-1: config 1 interface 0 has no altsetting 0 [ 104.172791][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.172815][ T982] usb 1-1: SerialNumber: syz [ 104.837876][ T982] hub 1-1:1.0: bad descriptor, ignoring hub [ 104.856278][ T982] hub 1-1:1.0: probe with driver hub failed with error -5 [ 104.975844][ T982] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 105.436367][ T982] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 106.117926][ T982] usb 1-1: USB disconnect, device number 2 [ 111.604398][ T42] IPVS: starting estimator thread 0... [ 111.717565][ T5931] IPVS: using max 9 ests per chain, 21600 per kthread [ 112.307876][ T5939] FAULT_INJECTION: forcing a failure. [ 112.307876][ T5939] name failslab, interval 1, probability 0, space 0, times 1 [ 112.307936][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.4.42 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.307958][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.307973][ T5939] Call Trace: [ 112.307981][ T5939] [ 112.307990][ T5939] dump_stack_lvl+0xe8/0x150 [ 112.308033][ T5939] should_fail_ex+0x46b/0x600 [ 112.308063][ T5939] should_failslab+0xa8/0x100 [ 112.308093][ T5939] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 112.308121][ T5939] ? __kasan_kmalloc+0x93/0xb0 [ 112.308146][ T5939] ? __request_module+0x2ec/0x630 [ 112.308172][ T5939] ? __request_module+0x2ec/0x630 [ 112.308204][ T5939] kstrdup+0x42/0x100 [ 112.308224][ T5939] __request_module+0x2ec/0x630 [ 112.308257][ T5939] ? __pfx___request_module+0x10/0x10 [ 112.308297][ T5939] ? up_read+0x34/0x180 [ 112.308321][ T5939] crypto_alg_mod_lookup+0xe8/0x5d0 [ 112.308350][ T5939] crypto_alloc_tfm_node+0x135/0x3e0 [ 112.308385][ T5939] esp6_init_state+0x615/0x1220 [ 112.308406][ T5939] ? pfkey_sendmsg+0xceb/0x11d0 [ 112.308424][ T5939] ? sock_sendmsg_nosec+0x13a/0x180 [ 112.308447][ T5939] ? ____sys_sendmsg+0x565/0x870 [ 112.308474][ T5939] ? __pfx_esp6_init_state+0x10/0x10 [ 112.308512][ T5939] ? lock_acquire+0x115/0x350 [ 112.308546][ T5939] ? __xfrm_init_state+0x745/0x1320 [ 112.308568][ T5939] __xfrm_init_state+0x9dd/0x1320 [ 112.308585][ T5939] ? __xfrm_init_state+0x745/0x1320 [ 112.308606][ T5939] xfrm_init_state+0x1e/0xa0 [ 112.308631][ T5939] pfkey_add+0x1d71/0x2e50 [ 112.308670][ T5939] ? __pfx_pfkey_add+0x10/0x10 [ 112.308702][ T5939] pfkey_sendmsg+0xceb/0x11d0 [ 112.308735][ T5939] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 112.308753][ T5939] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 112.308801][ T5939] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 112.308831][ T5939] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 112.308855][ T5939] sock_sendmsg_nosec+0x13a/0x180 [ 112.308880][ T5939] ____sys_sendmsg+0x565/0x870 [ 112.308908][ T5939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.308937][ T5939] ? import_iovec+0x73/0xa0 [ 112.308965][ T5939] ___sys_sendmsg+0x2a5/0x360 [ 112.308984][ T5939] ? __lock_acquire+0x747/0x2de0 [ 112.309029][ T5939] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.309053][ T5939] ? futex_wait+0x2a2/0x390 [ 112.309105][ T5939] ? __fget_files+0x2a/0x420 [ 112.309124][ T5939] ? __fget_files+0x3a8/0x420 [ 112.309154][ T5939] __x64_sys_sendmsg+0x1b7/0x290 [ 112.309177][ T5939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.309218][ T5939] do_syscall_64+0x166/0x520 [ 112.309243][ T5939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.309262][ T5939] ? clear_bhb_loop+0x70/0xc0 [ 112.309285][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.309304][ T5939] RIP: 0033:0x7ffabfcce159 [ 112.309329][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.309345][ T5939] RSP: 002b:00007ffabdf26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.309370][ T5939] RAX: ffffffffffffffda RBX: 00007ffabff55fa0 RCX: 00007ffabfcce159 [ 112.309384][ T5939] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 112.309396][ T5939] RBP: 00007ffabfd6506b R08: 0000000000000000 R09: 0000000000000000 [ 112.309408][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.309420][ T5939] R13: 00007ffabff56038 R14: 00007ffabff55fa0 R15: 00007ffc3e7080f8 [ 112.309451][ T5939] [ 113.097472][ T5949] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.448694][ T5951] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 115.783873][ T5970] FAULT_INJECTION: forcing a failure. [ 115.783873][ T5970] name failslab, interval 1, probability 0, space 0, times 0 [ 115.783945][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: syz.4.51 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.783968][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.783980][ T5970] Call Trace: [ 115.783988][ T5970] [ 115.783997][ T5970] dump_stack_lvl+0xe8/0x150 [ 115.784038][ T5970] should_fail_ex+0x46b/0x600 [ 115.784065][ T5970] ? bpf_fs_alloc_inode+0x2c/0x120 [ 115.784086][ T5970] should_failslab+0xa8/0x100 [ 115.784118][ T5970] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 115.784142][ T5970] ? __raw_spin_lock_init+0x45/0x100 [ 115.784164][ T5970] ? bpf_fs_alloc_inode+0x2c/0x120 [ 115.784191][ T5970] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 115.784211][ T5970] bpf_fs_alloc_inode+0x2c/0x120 [ 115.784233][ T5970] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 115.784252][ T5970] alloc_inode+0x6a/0x1b0 [ 115.784283][ T5970] new_inode+0x1f/0x170 [ 115.784306][ T5970] bpf_fill_super+0x1e9/0xce0 [ 115.784330][ T5970] ? __pfx_set_anon_super_fc+0x10/0x10 [ 115.784354][ T5970] ? __pfx_bpf_fill_super+0x10/0x10 [ 115.784383][ T5970] ? rcu_is_watching+0x16/0xb0 [ 115.784410][ T5970] ? cap_capable+0x123/0x460 [ 115.784432][ T5970] ? __pfx_bpf_fill_super+0x10/0x10 [ 115.784459][ T5970] get_tree_nodev+0xbb/0x150 [ 115.784483][ T5970] vfs_get_tree+0x92/0x2a0 [ 115.784509][ T5970] vfs_cmd_create+0xa2/0x200 [ 115.784538][ T5970] __se_sys_fsconfig+0x6bf/0x810 [ 115.784570][ T5970] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 115.784599][ T5970] ? rcu_is_watching+0x16/0xb0 [ 115.784632][ T5970] ? __x64_sys_fsconfig+0x20/0xc0 [ 115.784659][ T5970] do_syscall_64+0x166/0x520 [ 115.784684][ T5970] ? trace_irq_disable+0x3b/0x140 [ 115.784707][ T5970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.784726][ T5970] ? clear_bhb_loop+0x70/0xc0 [ 115.784749][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.784768][ T5970] RIP: 0033:0x7ffabfcce159 [ 115.784790][ T5970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.784806][ T5970] RSP: 002b:00007ffabdf26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 115.784834][ T5970] RAX: ffffffffffffffda RBX: 00007ffabff55fa0 RCX: 00007ffabfcce159 [ 115.784848][ T5970] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 115.784860][ T5970] RBP: 00007ffabfd6506b R08: 0000000000000000 R09: 0000000000000000 [ 115.784878][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.784890][ T5970] R13: 00007ffabff56038 R14: 00007ffabff55fa0 R15: 00007ffc3e7080f8 [ 115.784922][ T5970] [ 119.426707][ T5609] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 119.845254][ T5609] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 119.848345][ T5609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 119.852938][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.852961][ T5609] usb 4-1: Product: syz [ 119.852974][ T5609] usb 4-1: Manufacturer: syz [ 119.852988][ T5609] usb 4-1: SerialNumber: syz [ 120.148547][ T5609] usb 4-1: config 0 descriptor?? [ 120.149842][ T6002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.149980][ T6002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.196908][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 120.237478][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 120.238446][ T5609] port100 4-1:0.0: NFC: Could not get supported command types [ 120.445298][ T5733] usb 4-1: USB disconnect, device number 3 [ 120.625826][ T5609] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.805753][ T5609] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.830578][ T5609] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.830605][ T5609] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 120.830622][ T5609] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.830665][ T5609] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.889321][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.889349][ T5609] usb 1-1: Product: syz [ 120.889363][ T5609] usb 1-1: Manufacturer: syz [ 121.041331][ T5609] cdc_wdm 1-1:1.0: skipping garbage [ 121.041374][ T5609] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 122.548863][ T5608] usb 1-1: USB disconnect, device number 3 [ 123.125283][ T6041] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 123.189324][ T6043] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 123.793759][ T6054] netlink: 56 bytes leftover after parsing attributes in process `syz.0.72'. [ 125.677089][ T6065] Bluetooth: MGMT ver 1.23 [ 125.707499][ T6065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.75'. [ 129.035391][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.063845][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.067052][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.098303][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.111288][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.822226][ T6085] cgroup: Unknown subsys name 'cpuset' [ 131.211378][ T4912] Bluetooth: hci5: command tx timeout [ 133.324525][ T4912] Bluetooth: hci5: command tx timeout [ 133.387029][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.397310][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.367527][ T4912] Bluetooth: hci5: command tx timeout [ 137.445189][ T4912] Bluetooth: hci5: command tx timeout [ 140.892863][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.942492][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.949644][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.950922][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.951569][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.020441][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.039311][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.095555][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 141.096833][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 141.100527][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.045277][ T5606] Bluetooth: hci3: command tx timeout [ 143.202352][ T5606] Bluetooth: hci6: command tx timeout [ 145.121461][ T5606] Bluetooth: hci3: command tx timeout [ 145.281362][ T5606] Bluetooth: hci6: command tx timeout [ 147.201535][ T5606] Bluetooth: hci3: command tx timeout [ 147.360405][ T5606] Bluetooth: hci6: command tx timeout [ 148.797351][ T5603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.824954][ T5603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.830027][ T5603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.832424][ T5603] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.833097][ T5603] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.289165][ T5606] Bluetooth: hci3: command tx timeout [ 149.324421][ T5603] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 149.328418][ T5603] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 149.330842][ T5603] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 149.331902][ T5603] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 149.332575][ T5603] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 149.439409][ T5603] Bluetooth: hci6: command tx timeout [ 150.878716][ T5603] Bluetooth: hci7: command tx timeout [ 151.358664][ T5603] Bluetooth: hci8: command tx timeout [ 152.957417][ T5603] Bluetooth: hci7: command tx timeout [ 153.437282][ T5603] Bluetooth: hci8: command tx timeout [ 155.036419][ T5603] Bluetooth: hci7: command tx timeout [ 155.517514][ T5603] Bluetooth: hci8: command tx timeout [ 156.694478][ T1398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.115974][ T5603] Bluetooth: hci7: command tx timeout [ 157.595114][ T5606] Bluetooth: hci8: command tx timeout [ 157.900888][ T1398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.218626][ T1398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.533163][ T1398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.765127][ T1398] bridge_slave_1: left allmulticast mode [ 159.765239][ T1398] bridge_slave_1: left promiscuous mode [ 159.773483][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.897912][ T1398] bridge_slave_0: left allmulticast mode [ 159.897941][ T1398] bridge_slave_0: left promiscuous mode [ 159.898099][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.654003][ T1398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.714049][ T1398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.755648][ T1398] bond0 (unregistering): Released all slaves [ 161.028151][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.028358][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.028518][ T6074] bridge_slave_0: entered allmulticast mode [ 161.030237][ T6074] bridge_slave_0: entered promiscuous mode [ 161.072573][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.072672][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.072793][ T6132] bridge_slave_0: entered allmulticast mode [ 161.075291][ T6132] bridge_slave_0: entered promiscuous mode [ 161.093503][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.093620][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.093830][ T6074] bridge_slave_1: entered allmulticast mode [ 161.096842][ T6074] bridge_slave_1: entered promiscuous mode [ 161.189967][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.190099][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.190284][ T6132] bridge_slave_1: entered allmulticast mode [ 161.197292][ T6132] bridge_slave_1: entered promiscuous mode [ 161.219676][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.219810][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.219970][ T6124] bridge_slave_0: entered allmulticast mode [ 161.222491][ T6124] bridge_slave_0: entered promiscuous mode [ 161.297240][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.297369][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.297525][ T6124] bridge_slave_1: entered allmulticast mode [ 161.299227][ T6124] bridge_slave_1: entered promiscuous mode [ 161.608913][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.627317][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.627506][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.627691][ T6121] bridge_slave_0: entered allmulticast mode [ 161.631373][ T6121] bridge_slave_0: entered promiscuous mode [ 161.663931][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.684185][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.735041][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.735151][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.735340][ T6121] bridge_slave_1: entered allmulticast mode [ 161.737532][ T6121] bridge_slave_1: entered promiscuous mode [ 161.756126][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.756241][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.756409][ T6139] bridge_slave_0: entered allmulticast mode [ 161.759106][ T6139] bridge_slave_0: entered promiscuous mode [ 161.772115][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.830915][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.869613][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.869729][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.869833][ T6139] bridge_slave_1: entered allmulticast mode [ 161.871267][ T6139] bridge_slave_1: entered promiscuous mode [ 161.998311][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.175011][ T6074] team0: Port device team_slave_0 added [ 162.212420][ T6121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.228712][ T6132] team0: Port device team_slave_0 added [ 162.283654][ T6074] team0: Port device team_slave_1 added [ 162.310695][ T6121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.324722][ T6132] team0: Port device team_slave_1 added [ 162.656242][ T6139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.676207][ T6124] team0: Port device team_slave_0 added [ 162.719034][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 162.722228][ T6139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.750395][ T6124] team0: Port device team_slave_1 added [ 162.845898][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.845916][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.845929][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.863954][ T6121] team0: Port device team_slave_0 added [ 162.877442][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.877458][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.877482][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.906256][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.906273][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.906297][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.934002][ T6121] team0: Port device team_slave_1 added [ 162.936792][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.936809][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.936832][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.940029][ T6139] team0: Port device team_slave_0 added [ 162.960421][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.960437][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.960460][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.016192][ T6139] team0: Port device team_slave_1 added [ 163.264498][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.264509][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.264522][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.432123][ T1398] hsr_slave_0: left promiscuous mode [ 163.472141][ T1398] hsr_slave_1: left promiscuous mode [ 163.473085][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.473166][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.515804][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.515827][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.606127][ T1398] veth1_macvtap: left promiscuous mode [ 163.606297][ T1398] veth0_macvtap: left promiscuous mode [ 163.606467][ T1398] veth1_vlan: left promiscuous mode [ 163.606666][ T1398] veth0_vlan: left promiscuous mode [ 164.408123][ T1398] team0 (unregistering): Port device team_slave_1 removed [ 164.462184][ T1398] team0 (unregistering): Port device team_slave_0 removed [ 164.672263][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.672290][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.672312][ T6121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.721743][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.721760][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.721791][ T6121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.762556][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.762573][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.762596][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.816078][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.816095][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.816118][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.900832][ T6074] hsr_slave_0: entered promiscuous mode [ 164.905095][ T6074] hsr_slave_1: entered promiscuous mode [ 164.907549][ T6074] debugfs: 'hsr0' already exists in 'hsr' [ 164.926105][ T6074] Cannot create hsr debugfs directory [ 164.956217][ T6132] hsr_slave_0: entered promiscuous mode [ 164.957615][ T6132] hsr_slave_1: entered promiscuous mode [ 164.958412][ T6132] debugfs: 'hsr0' already exists in 'hsr' [ 164.958431][ T6132] Cannot create hsr debugfs directory [ 165.043600][ T6124] hsr_slave_0: entered promiscuous mode [ 165.044364][ T6124] hsr_slave_1: entered promiscuous mode [ 165.044872][ T6124] debugfs: 'hsr0' already exists in 'hsr' [ 165.044892][ T6124] Cannot create hsr debugfs directory [ 165.189922][ T6121] hsr_slave_0: entered promiscuous mode [ 165.191737][ T6121] hsr_slave_1: entered promiscuous mode [ 165.192599][ T6121] debugfs: 'hsr0' already exists in 'hsr' [ 165.192621][ T6121] Cannot create hsr debugfs directory [ 165.424068][ T6139] hsr_slave_0: entered promiscuous mode [ 165.425377][ T6139] hsr_slave_1: entered promiscuous mode [ 165.426292][ T6139] debugfs: 'hsr0' already exists in 'hsr' [ 165.426316][ T6139] Cannot create hsr debugfs directory [ 166.136928][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 167.057012][ T6132] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.117633][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.119397][ T6132] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.288754][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.303732][ T6132] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.371391][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.391271][ T6132] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.423502][ T6132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.428672][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 167.646213][ T1398] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.027193][ T1398] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.075345][ T6074] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.116768][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.123556][ T6074] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.165878][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 168.180942][ T6074] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.237327][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 168.446138][ T1398] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.472518][ T6074] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.528592][ T6074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.539064][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 168.758115][ T1398] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.940306][ T6121] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.974363][ T6121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 168.986065][ T6121] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.035371][ T6121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.062452][ T6121] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 169.097836][ T6121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.153684][ T6121] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.201364][ T6121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.559529][ T6124] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.593553][ T6124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.604670][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.642382][ T6124] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.692105][ T6124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.698545][ T6124] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 169.747191][ T6124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.800652][ T6124] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 169.841860][ T6124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.057258][ T1398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.161384][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.226783][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.226900][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.248228][ T6139] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 170.285945][ T6139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.412095][ T1398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.465068][ T6139] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 170.513193][ T6139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.584550][ T6139] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 170.635533][ T6139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.641806][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.642075][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.690225][ T6139] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 170.787312][ T6139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.983874][ T1398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.087927][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.115464][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 171.286807][ T1398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.401473][ T6074] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.446545][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.446754][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.494344][ T6121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.509068][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.509213][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.843863][ T6121] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.042587][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.102544][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.102709][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.221332][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.221551][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.459973][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.492402][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6 [ 172.534452][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.536040][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.724243][ T1398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.778973][ T6139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.798702][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.831363][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.123592][ T1398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.189520][ T6139] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.280824][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.281034][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.630685][ T1398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.716456][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.716706][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.797673][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.142098][ T1398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.185318][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7 [ 174.509172][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.357318][ T6132] veth0_vlan: entered promiscuous mode [ 175.644206][ T6132] veth1_vlan: entered promiscuous mode [ 176.101828][ T1398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.175365][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8 [ 176.315453][ T6121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.600275][ T1398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.647306][ T6132] veth0_macvtap: entered promiscuous mode [ 176.650158][ T6074] veth0_vlan: entered promiscuous mode [ 176.657354][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.666012][ T6132] veth1_macvtap: entered promiscuous mode [ 176.715091][ T6074] veth1_vlan: entered promiscuous mode [ 176.807351][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.852135][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.134125][ T1398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.397237][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.429088][ T6074] veth0_macvtap: entered promiscuous mode [ 177.839045][ T1398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.890177][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9 [ 177.898170][ T6074] veth1_macvtap: entered promiscuous mode [ 178.343467][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.343487][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.348465][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.406264][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.519912][ T1547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.519932][ T1547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.818443][ T6124] veth0_vlan: entered promiscuous mode [ 178.909834][ T6121] veth0_vlan: entered promiscuous mode [ 179.421098][ T6124] veth1_vlan: entered promiscuous mode [ 179.495808][ T6121] veth1_vlan: entered promiscuous mode [ 179.739628][ T1398] bridge_slave_1: left allmulticast mode [ 179.739662][ T1398] bridge_slave_1: left promiscuous mode [ 179.739919][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.905842][ T6484] netlink: 'syz.8.96': attribute type 4 has an invalid length. [ 179.935717][ T1398] bridge_slave_0: left allmulticast mode [ 179.935744][ T1398] bridge_slave_0: left promiscuous mode [ 179.937621][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.233376][ T1398] bridge_slave_1: left allmulticast mode [ 180.233408][ T1398] bridge_slave_1: left promiscuous mode [ 180.245231][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.426511][ T1398] bridge_slave_0: left allmulticast mode [ 180.426539][ T1398] bridge_slave_0: left promiscuous mode [ 180.426693][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.643783][ T1398] bridge_slave_1: left allmulticast mode [ 180.643808][ T1398] bridge_slave_1: left promiscuous mode [ 180.643964][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.755171][ T1398] bridge_slave_0: left allmulticast mode [ 180.755196][ T1398] bridge_slave_0: left promiscuous mode [ 180.755343][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.004107][ T1398] bridge_slave_1: left allmulticast mode [ 181.004144][ T1398] bridge_slave_1: left promiscuous mode [ 181.004439][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.105380][ T1398] bridge_slave_0: left allmulticast mode [ 181.105407][ T1398] bridge_slave_0: left promiscuous mode [ 181.105590][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.146816][ T1398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.223598][ T1398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.266077][ T1398] bond0 (unregistering): Released all slaves [ 182.804606][ T1398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.883653][ T1398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.906858][ T1398] bond0 (unregistering): Released all slaves [ 183.412980][ T1398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.492758][ T1398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.514360][ T1398] bond0 (unregistering): Released all slaves [ 183.992561][ T1398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.052617][ T1398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.094391][ T1398] bond0 (unregistering): Released all slaves [ 184.133644][ T6139] veth0_vlan: entered promiscuous mode [ 184.136961][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10 [ 184.604110][ T6139] veth1_vlan: entered promiscuous mode [ 184.667349][ T1547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.667368][ T1547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.936001][ T6121] veth0_macvtap: entered promiscuous mode [ 185.060687][ T6121] veth1_macvtap: entered promiscuous mode [ 185.073213][ T6124] veth0_macvtap: entered promiscuous mode [ 185.130789][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.130811][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.210194][ T6124] veth1_macvtap: entered promiscuous mode [ 185.431675][ T6139] veth0_macvtap: entered promiscuous mode [ 185.561818][ T6139] veth1_macvtap: entered promiscuous mode [ 185.610702][ T6121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.766416][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.347395][ T6121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.384146][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.479764][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11 [ 187.877824][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.958945][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.299036][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.299059][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.103850][ T1547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.103873][ T1547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.171459][ T68] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.220560][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.220628][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.151080][ T6592] hub 1-0:1.0: USB hub found [ 195.156133][ T6592] hub 1-0:1.0: 1 port detected [ 196.387651][ T1457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.387672][ T1457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.486436][ T1457] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.664144][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.664164][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.894218][ T6615] FAULT_INJECTION: forcing a failure. [ 196.894218][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 196.894257][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.5.113 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.894281][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.894294][ T6615] Call Trace: [ 196.894301][ T6615] [ 196.894311][ T6615] dump_stack_lvl+0xe8/0x150 [ 196.894353][ T6615] should_fail_ex+0x46b/0x600 [ 196.894384][ T6615] should_failslab+0xa8/0x100 [ 196.894418][ T6615] __kmalloc_cache_node_noprof+0xac/0x670 [ 196.894445][ T6615] ? __alloc_workqueue+0x746/0x1fe0 [ 196.894463][ T6615] ? __alloc_workqueue+0x746/0x1fe0 [ 196.894489][ T6615] __alloc_workqueue+0x746/0x1fe0 [ 196.894514][ T6615] ? vsnprintf+0xe42/0xef0 [ 196.894548][ T6615] alloc_workqueue_noprof+0xe3/0x210 [ 196.894574][ T6615] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 196.894600][ T6615] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 196.894632][ T6615] nci_register_device+0x22b/0x9a0 [ 196.894659][ T6615] ? __pfx_nci_register_device+0x10/0x10 [ 196.894683][ T6615] ? __rt_spin_lock_init+0x3e/0x50 [ 196.894706][ T6615] ? __init_waitqueue_head+0xad/0x160 [ 196.894732][ T6615] virtual_ncidev_open+0x129/0x190 [ 196.894754][ T6615] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 196.894772][ T6615] misc_open+0x2de/0x350 [ 196.894795][ T6615] chrdev_open+0x4dc/0x600 [ 196.894825][ T6615] ? __pfx_chrdev_open+0x10/0x10 [ 196.894855][ T6615] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 196.894886][ T6615] ? __pfx_chrdev_open+0x10/0x10 [ 196.894909][ T6615] do_dentry_open+0x849/0x1420 [ 196.894949][ T6615] vfs_open+0x3b/0x350 [ 196.894976][ T6615] ? path_openat+0x142d/0x1d60 [ 196.895004][ T6615] path_openat+0x1448/0x1d60 [ 196.895046][ T6615] do_file_open+0x23e/0x4a0 [ 196.895078][ T6615] ? __pfx_do_file_open+0x10/0x10 [ 196.895123][ T6615] ? alloc_fd+0x654/0x6d0 [ 196.895151][ T6615] do_sys_openat2+0x115/0x200 [ 196.895183][ T6615] ? __se_sys_futex+0x3a8/0x450 [ 196.895208][ T6615] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.895241][ T6615] ? rcu_is_watching+0x16/0xb0 [ 196.895274][ T6615] __x64_sys_openat+0x138/0x170 [ 196.895307][ T6615] do_syscall_64+0x166/0x520 [ 196.895343][ T6615] ? trace_irq_disable+0x3b/0x140 [ 196.895370][ T6615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.895392][ T6615] ? clear_bhb_loop+0x70/0xc0 [ 196.895416][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.895435][ T6615] RIP: 0033:0x7f68764ee159 [ 196.895454][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.895473][ T6615] RSP: 002b:00007f6874746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.895496][ T6615] RAX: ffffffffffffffda RBX: 00007f6876775fa0 RCX: 00007f68764ee159 [ 196.895512][ T6615] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 196.895525][ T6615] RBP: 00007f687658506b R08: 0000000000000000 R09: 0000000000000000 [ 196.895537][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.895549][ T6615] R13: 00007f6876776038 R14: 00007f6876775fa0 R15: 00007ffe05672078 [ 196.895580][ T6615] [ 196.992949][ T6619] netlink: 168 bytes leftover after parsing attributes in process `syz.8.114'. [ 198.729955][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.729977][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.154488][ T3437] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154533][ T3437] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154563][ T3437] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154591][ T3437] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154617][ T3437] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154643][ T3437] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154672][ T3437] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154702][ T3437] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154732][ T3437] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154764][ T3437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154794][ T3437] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154824][ T3437] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154852][ T3437] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154875][ T3437] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154899][ T3437] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154922][ T3437] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154946][ T3437] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.154970][ T3437] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.178605][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.178626][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.170204][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.127'. [ 205.071075][ T37] audit: type=1326 audit(1789530023.479:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6730 comm="syz.8.131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28e18e159 code=0x7ffc0000 [ 205.181575][ T37] audit: type=1326 audit(1789530023.489:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6730 comm="syz.8.131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28e18e159 code=0x7ffc0000 [ 205.181639][ T37] audit: type=1326 audit(1789530023.589:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6730 comm="syz.8.131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7ff28e18e159 code=0x7ffc0000 [ 205.181677][ T37] audit: type=1326 audit(1789530023.589:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6730 comm="syz.8.131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28e18e159 code=0x7ffc0000 [ 205.189781][ T37] audit: type=1326 audit(1789530023.599:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6730 comm="syz.8.131" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28e18e159 code=0x7ffc0000 [ 206.609463][ T1398] hsr_slave_0: left promiscuous mode [ 207.561588][ T1398] hsr_slave_1: left promiscuous mode [ 207.575544][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.575581][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.720013][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.720042][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.591110][ T6773] Zero length message leads to an empty skb [ 208.792113][ T1398] hsr_slave_0: left promiscuous mode [ 208.850170][ T1398] hsr_slave_1: left promiscuous mode [ 208.851408][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.851431][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.907847][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.907873][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.253821][ T1398] hsr_slave_0: left promiscuous mode [ 209.300386][ T1398] hsr_slave_1: left promiscuous mode [ 209.303592][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.303621][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.412372][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.412400][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.736642][ T1398] hsr_slave_0: left promiscuous mode [ 209.837691][ T1398] hsr_slave_1: left promiscuous mode [ 209.844617][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.844644][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.043752][ T1398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.043778][ T1398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.176644][ T1398] veth1_macvtap: left promiscuous mode [ 213.176749][ T1398] veth0_macvtap: left promiscuous mode [ 213.176947][ T1398] veth1_vlan: left promiscuous mode [ 213.185452][ T1398] veth0_vlan: left promiscuous mode [ 213.291000][ T6823] hub 8-0:1.0: USB hub found [ 213.317241][ T6823] hub 8-0:1.0: 1 port detected [ 213.581005][ T1398] veth1_macvtap: left promiscuous mode [ 213.581097][ T1398] veth0_macvtap: left promiscuous mode [ 213.581309][ T1398] veth1_vlan: left promiscuous mode [ 213.581458][ T1398] veth0_vlan: left promiscuous mode [ 213.968056][ T1398] veth1_macvtap: left promiscuous mode [ 213.968162][ T1398] veth0_macvtap: left promiscuous mode [ 213.968415][ T1398] veth1_vlan: left promiscuous mode [ 213.968601][ T1398] veth0_vlan: left promiscuous mode [ 214.385487][ T1398] veth1_macvtap: left promiscuous mode [ 214.385591][ T1398] veth0_macvtap: left promiscuous mode [ 214.385850][ T1398] veth1_vlan: left promiscuous mode [ 214.386025][ T1398] veth0_vlan: left promiscuous mode [ 217.007134][ T1398] team0 (unregistering): Port device team_slave_1 removed [ 217.091716][ T1398] team0 (unregistering): Port device team_slave_0 removed [ 217.900947][ T1398] team0 (unregistering): Port device team_slave_1 removed [ 217.984943][ T1398] team0 (unregistering): Port device team_slave_0 removed [ 218.704944][ T1398] team0 (unregistering): Port device team_slave_1 removed [ 218.756073][ T1398] team0 (unregistering): Port device team_slave_0 removed [ 219.326284][ T1398] team0 (unregistering): Port device team_slave_1 removed [ 219.387416][ T1398] team0 (unregistering): Port device team_slave_0 removed [ 219.743584][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12 [ 219.765133][ T6831] tipc: Started in network mode [ 219.765167][ T6831] tipc: Node identity 528fe8bdda0e, cluster identity 4711 [ 219.765846][ T6831] tipc: Enabled bearer , priority 0 [ 219.766243][ T6829] syzkaller0: entered promiscuous mode [ 219.766264][ T6829] syzkaller0: entered allmulticast mode [ 219.850247][ T6818] tipc: Resetting bearer [ 220.190447][ T5606] Bluetooth: hci8: link tx timeout [ 220.256516][ T5606] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.317086][ T5603] Bluetooth: hci8: link tx timeout [ 220.317110][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.345531][ T5603] Bluetooth: hci8: link tx timeout [ 220.345551][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.357651][ T5603] Bluetooth: hci8: link tx timeout [ 220.357709][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.362687][ T5603] Bluetooth: hci8: link tx timeout [ 220.362755][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.367416][ T5603] Bluetooth: hci8: link tx timeout [ 220.367540][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.371027][ T5603] Bluetooth: hci8: link tx timeout [ 220.371043][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.372813][ T5603] Bluetooth: hci8: link tx timeout [ 220.372878][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.375160][ T5603] Bluetooth: hci8: link tx timeout [ 220.375174][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.375574][ T5603] Bluetooth: hci8: link tx timeout [ 220.375586][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.376210][ T5603] Bluetooth: hci8: link tx timeout [ 220.376258][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.376755][ T5603] Bluetooth: hci8: link tx timeout [ 220.376816][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.377442][ T5603] Bluetooth: hci8: link tx timeout [ 220.377489][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.377910][ T5603] Bluetooth: hci8: link tx timeout [ 220.377977][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.409747][ T5603] Bluetooth: hci8: link tx timeout [ 220.409813][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.410145][ T5603] Bluetooth: hci8: link tx timeout [ 220.410207][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.410862][ T5603] Bluetooth: hci8: link tx timeout [ 220.410875][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.411192][ T5603] Bluetooth: hci8: link tx timeout [ 220.411204][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.411622][ T5603] Bluetooth: hci8: link tx timeout [ 220.411668][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.412481][ T5603] Bluetooth: hci8: link tx timeout [ 220.413670][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.413850][ T5603] Bluetooth: hci8: link tx timeout [ 220.413862][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.414532][ T5603] Bluetooth: hci8: link tx timeout [ 220.414544][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.417822][ T5603] Bluetooth: hci8: link tx timeout [ 220.417871][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.420461][ T5603] Bluetooth: hci8: link tx timeout [ 220.420511][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.421932][ T5603] Bluetooth: hci8: link tx timeout [ 220.421995][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.424510][ T5603] Bluetooth: hci8: link tx timeout [ 220.424587][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.425011][ T5603] Bluetooth: hci8: link tx timeout [ 220.425321][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.428061][ T5603] Bluetooth: hci8: link tx timeout [ 220.428113][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.428224][ T5603] Bluetooth: hci8: link tx timeout [ 220.428236][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.433651][ T5603] Bluetooth: hci8: link tx timeout [ 220.433667][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.433886][ T5603] Bluetooth: hci8: link tx timeout [ 220.433936][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.435769][ T5603] Bluetooth: hci8: link tx timeout [ 220.435823][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.436231][ T5603] Bluetooth: hci8: link tx timeout [ 220.436243][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.456962][ T5603] Bluetooth: hci8: link tx timeout [ 220.457024][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.457059][ T5603] Bluetooth: hci8: link tx timeout [ 220.457103][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.457531][ T5603] Bluetooth: hci8: link tx timeout [ 220.457582][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.458031][ T5603] Bluetooth: hci8: link tx timeout [ 220.458110][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.458658][ T5603] Bluetooth: hci8: link tx timeout [ 220.458715][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.459618][ T5603] Bluetooth: hci8: link tx timeout [ 220.459632][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.461139][ T5603] Bluetooth: hci8: link tx timeout [ 220.461190][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.461267][ T5603] Bluetooth: hci8: link tx timeout [ 220.461278][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.461762][ T5603] Bluetooth: hci8: link tx timeout [ 220.461808][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.462218][ T5603] Bluetooth: hci8: link tx timeout [ 220.462279][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.462653][ T5603] Bluetooth: hci8: link tx timeout [ 220.462858][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.463159][ T5603] Bluetooth: hci8: link tx timeout [ 220.463172][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.464544][ T5603] Bluetooth: hci8: link tx timeout [ 220.464604][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.464897][ T5603] Bluetooth: hci8: link tx timeout [ 220.464943][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.465577][ T5603] Bluetooth: hci8: link tx timeout [ 220.465589][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.465933][ T5603] Bluetooth: hci8: link tx timeout [ 220.465979][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.466578][ T5603] Bluetooth: hci8: link tx timeout [ 220.466635][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.467101][ T5603] Bluetooth: hci8: link tx timeout [ 220.467113][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.483779][ T5603] Bluetooth: hci8: link tx timeout [ 220.483837][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.484263][ T5603] Bluetooth: hci8: link tx timeout [ 220.484310][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.484936][ T5603] Bluetooth: hci8: link tx timeout [ 220.484990][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.487073][ T5603] Bluetooth: hci8: link tx timeout [ 220.487087][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.487392][ T5603] Bluetooth: hci8: link tx timeout [ 220.487404][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.487961][ T5603] Bluetooth: hci8: link tx timeout [ 220.488011][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.488356][ T5603] Bluetooth: hci8: link tx timeout [ 220.488368][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.490487][ T5603] Bluetooth: hci8: link tx timeout [ 220.490542][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.490616][ T5603] Bluetooth: hci8: link tx timeout [ 220.490687][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.491016][ T5603] Bluetooth: hci8: link tx timeout [ 220.491027][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.491638][ T5603] Bluetooth: hci8: link tx timeout [ 220.491700][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.503044][ T5603] Bluetooth: hci8: link tx timeout [ 220.503061][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.503760][ T5603] Bluetooth: hci8: link tx timeout [ 220.503774][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.504386][ T5603] Bluetooth: hci8: link tx timeout [ 220.504398][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.506367][ T5603] Bluetooth: hci8: link tx timeout [ 220.506419][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.509312][ T5603] Bluetooth: hci8: link tx timeout [ 220.509370][ T5603] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 222.455998][ T5603] Bluetooth: hci8: command 0x0406 tx timeout [ 222.949865][ T6818] tipc: Disabling bearer [ 223.315769][ T5855] tipc: Node number set to 2290215101 [ 227.055554][ T6918] sctp: [Deprecated]: syz.5.173 (pid 6918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.055554][ T6918] Use struct sctp_sack_info instead [ 229.219093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.877401][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13 [ 232.290438][ T6964] lo: entered promiscuous mode [ 232.330125][ T6964] lo: left promiscuous mode [ 235.437377][ T5258] 8021q: adding VLAN 0 to HW filter on device eth14 [ 238.490866][ T7037] FAULT_INJECTION: forcing a failure. [ 238.490866][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 238.490902][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.8.201 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 238.490923][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.490935][ T7037] Call Trace: [ 238.490943][ T7037] [ 238.490952][ T7037] dump_stack_lvl+0xe8/0x150 [ 238.490987][ T7037] should_fail_ex+0x46b/0x600 [ 238.491017][ T7037] should_failslab+0xa8/0x100 [ 238.491047][ T7037] __kmalloc_noprof+0xfb/0x790 [ 238.491071][ T7037] ? x509_note_OID+0x134/0x210 [ 238.491097][ T7037] ? asymmetric_key_generate_id+0x60/0x170 [ 238.491120][ T7037] ? asymmetric_key_generate_id+0x60/0x170 [ 238.491151][ T7037] asymmetric_key_generate_id+0x60/0x170 [ 238.491179][ T7037] x509_process_extension+0x23c/0xab0 [ 238.491204][ T7037] asn1_ber_decoder+0xed5/0x2590 [ 238.491258][ T7037] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 238.491299][ T7037] ? __kmalloc_noprof+0x740/0x790 [ 238.491323][ T7037] ? x509_cert_parse+0x16a/0x7a0 [ 238.491356][ T7037] x509_cert_parse+0x1ba/0x7a0 [ 238.491381][ T7037] ? __pfx_down_read+0x10/0x10 [ 238.491412][ T7037] x509_key_preparse+0x64/0x6d0 [ 238.491432][ T7037] ? __pfx_smack_key_permission+0x10/0x10 [ 238.491461][ T7037] asymmetric_key_preparse+0xb9/0x1b0 [ 238.491493][ T7037] __key_create_or_update+0x3a9/0xa80 [ 238.491530][ T7037] ? __pfx___key_create_or_update+0x10/0x10 [ 238.491559][ T7037] ? lookup_user_key+0xb68/0x1150 [ 238.491594][ T7037] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 238.491628][ T7037] key_create_or_update+0x42/0x60 [ 238.491656][ T7037] __se_sys_add_key+0x349/0x420 [ 238.491680][ T7037] ? __pfx___se_sys_add_key+0x10/0x10 [ 238.491710][ T7037] ? __x64_sys_add_key+0x20/0xc0 [ 238.491732][ T7037] do_syscall_64+0x166/0x520 [ 238.491756][ T7037] ? trace_irq_disable+0x3b/0x140 [ 238.491778][ T7037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.491796][ T7037] ? clear_bhb_loop+0x70/0xc0 [ 238.491819][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.491838][ T7037] RIP: 0033:0x7ff28e18e159 [ 238.491855][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.491870][ T7037] RSP: 002b:00007ff28c3e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 238.491891][ T7037] RAX: ffffffffffffffda RBX: 00007ff28e415fa0 RCX: 00007ff28e18e159 [ 238.491904][ T7037] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 238.491917][ T7037] RBP: 00007ff28e22506b R08: ffffffffffffffff R09: 0000000000000000 [ 238.491930][ T7037] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 238.491942][ T7037] R13: 00007ff28e416038 R14: 00007ff28e415fa0 R15: 00007ffd172e9fc8 [ 238.491974][ T7037] [ 240.111479][ T7058] syzkaller0: entered promiscuous mode [ 240.111504][ T7058] syzkaller0: entered allmulticast mode [ 240.144253][ T7055] tipc: Started in network mode [ 240.144283][ T7055] tipc: Node identity 7ed201cc939e, cluster identity 4711 [ 240.209528][ T7055] tipc: Enabled bearer , priority 0 [ 240.404412][ T7053] tipc: Resetting bearer [ 241.775515][ T7053] tipc: Disabling bearer [ 242.036908][ T5258] 8021q: adding VLAN 0 to HW filter on device eth15 [ 242.037288][ T5707] tipc: Node number set to 3981181388 [ 243.920263][ T1398] IPVS: stop unused estimator thread 0... [ 245.370992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.390997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.400987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.410985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.420984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.430971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.780774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 245.936947][ T7133] fuse: Bad value for 'fd' [ 251.343610][ T5258] 8021q: adding VLAN 0 to HW filter on device eth16 [ 253.470112][ T5606] Bluetooth: hci5: command 0x0406 tx timeout [ 253.859172][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.238'. [ 253.964105][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.238'. [ 255.320017][ T37] audit: type=1326 audit(1789530073.614:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 255.320648][ T37] audit: type=1326 audit(1789530073.654:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 255.510194][ T37] audit: type=1326 audit(1789530073.904:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68764ae98e code=0x7ffc0000 [ 255.510246][ T37] audit: type=1326 audit(1789530073.904:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 255.510285][ T37] audit: type=1326 audit(1789530073.904:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68764ae98e code=0x7ffc0000 [ 255.599936][ T37] audit: type=1326 audit(1789530074.034:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68764ae98e code=0x7ffc0000 [ 255.756631][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756700][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.844064][ T37] audit: type=1326 audit(1789530074.274:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68764ae98e code=0x7ffc0000 [ 255.944359][ T37] audit: type=1326 audit(1789530074.374:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68764ae98e code=0x7ffc0000 [ 256.016436][ T7218] ./file0: Can't lookup blockdev [ 256.046429][ T37] audit: type=1326 audit(1789530074.484:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68764ae98e code=0x7ffc0000 [ 256.323795][ T37] audit: type=1326 audit(1789530074.745:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.5.242" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 259.000595][ T5258] 8021q: adding VLAN 0 to HW filter on device eth17 [ 260.829002][ T7262] usbip-vudc usbip-vudc.0: gadget not bound [ 261.693467][ T7266] process 'syz.9.252' launched '/dev/fd/4' with NULL argv: empty string added [ 263.650227][ T5258] 8021q: adding VLAN 0 to HW filter on device eth18 [ 268.031741][ T4912] Bluetooth: hci3: command 0x0406 tx timeout [ 268.039084][ T5606] Bluetooth: hci6: command 0x0406 tx timeout [ 269.295012][ T7324] syz.6.265 (7324) used greatest stack depth: 19360 bytes left [ 272.045057][ T5258] 8021q: adding VLAN 0 to HW filter on device eth19 [ 273.437102][ T5734] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 273.619119][ T5734] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 273.620666][ T5734] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.620695][ T5734] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.620732][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.804602][ T5610] Bluetooth: hci7: command 0x0406 tx timeout [ 275.130913][ T5734] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x6 [ 275.130951][ T5734] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x0 [ 275.130976][ T5734] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x0 [ 275.139676][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.140304][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.427400][ T5734] hid-picolcd 0003:04D8:C002.0001: unsupported KEY_STATE report [ 275.431762][ T5734] hid-picolcd 0003:04D8:C002.0001: probe with driver hid-picolcd failed with error -22 [ 275.444059][ T5734] usb 7-1: USB disconnect, device number 2 [ 276.720005][ T7420] warning: `syz.9.288' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 276.871269][ T5258] 8021q: adding VLAN 0 to HW filter on device eth20 [ 278.578591][ T7447] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 7 (only 8 groups) [ 278.624386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 278.634350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 286.528856][ T37] audit: type=1326 audit(1789530104.980:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 286.530538][ T37] audit: type=1326 audit(1789530104.980:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 286.590943][ T37] audit: type=1326 audit(1789530105.050:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 286.590995][ T37] audit: type=1326 audit(1789530105.050:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 286.623474][ T37] audit: type=1326 audit(1789530105.080:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 286.623520][ T37] audit: type=1326 audit(1789530105.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a7e9c7ed7 code=0x7ffc0000 [ 286.623556][ T37] audit: type=1326 audit(1789530105.080:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a7e96f4d9 code=0x7ffc0000 [ 286.623590][ T37] audit: type=1326 audit(1789530105.080:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a7e9c7ed7 code=0x7ffc0000 [ 286.623627][ T37] audit: type=1326 audit(1789530105.080:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a7e96f4d9 code=0x7ffc0000 [ 286.623662][ T37] audit: type=1326 audit(1789530105.080:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7529 comm="syz.6.308" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a7e9c7ed7 code=0x7ffc0000 [ 286.909330][ T7541] Bluetooth: ISO socket layer initialized [ 286.961873][ T5603] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 287.324937][ T7552] netlink: 'syz.8.314': attribute type 23 has an invalid length. [ 287.439937][ T7554] syz.8.314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 293.839659][ T7623] futex_wake_op: syz.7.328 tries to shift op by 144; fix this program [ 297.803324][ T5855] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 298.049804][ T5855] usb 10-1: device descriptor read/all, error -71 [ 303.204153][ T7707] futex_wake_op: syz.9.347 tries to shift op by 144; fix this program [ 306.397722][ T7739] netlink: 'syz.9.354': attribute type 10 has an invalid length. [ 306.832381][ T7747] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 306.855615][ T7747] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 314.753693][ T37] kauditd_printk_skb: 543 callbacks suppressed [ 314.753712][ T37] audit: type=1326 audit(1789530133.214:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.812069][ T37] audit: type=1326 audit(1789530133.214:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.836612][ T37] audit: type=1326 audit(1789530133.294:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.836656][ T37] audit: type=1326 audit(1789530133.294:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.837849][ T37] audit: type=1326 audit(1789530133.304:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.845682][ T37] audit: type=1326 audit(1789530133.304:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.856216][ T37] audit: type=1326 audit(1789530133.314:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.879014][ T37] audit: type=1326 audit(1789530133.344:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.879060][ T37] audit: type=1326 audit(1789530133.344:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 314.882651][ T37] audit: type=1326 audit(1789530133.344:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7831 comm="syz.6.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5a7e9ce159 code=0x7ffc0000 [ 316.377713][ T7837] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 316.806406][ T7851] 9pnet: p9_errstr2errno: server reported unknown error ¶ [ 317.637134][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.637203][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.872809][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 321.872825][ T37] audit: type=1326 audit(1789530140.337:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7869 comm="syz.9.381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda6c9de159 code=0x0 [ 323.192832][ T6432] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 323.422940][ T6432] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.424765][ T6432] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.424790][ T6432] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.486443][ T6432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.486473][ T6432] usb 8-1: Product: syz [ 323.486486][ T6432] usb 8-1: Manufacturer: syz [ 323.486500][ T6432] usb 8-1: SerialNumber: syz [ 324.252117][ T6432] usb 8-1: 0:2 : does not exist [ 324.252217][ T6432] usb 8-1: unit 9 not found! [ 329.873686][ T6432] usb 8-1: USB disconnect, device number 2 [ 330.085097][ T7917] udevd[7917]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.823917][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.6.404'. [ 332.934934][ T8001] capability: warning: `syz.9.407' uses deprecated v2 capabilities in a way that may be insecure [ 333.909546][ T5733] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 334.088795][ T5733] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 334.294879][ T5733] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.294916][ T5733] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.294954][ T5733] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.235066][ T5733] usb 10-1: can't set config #1, error -71 [ 336.303258][ T5733] usb 10-1: USB disconnect, device number 4 [ 339.173930][ T8040] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 344.503703][ T8085] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 349.690353][ T8123] tipc: New replicast peer: 172.20.20.187 [ 349.782746][ T8123] tipc: Enabled bearer , priority 10 [ 349.865937][ T8137] pimreg: entered allmulticast mode [ 350.401071][ T8155] netlink: 1335 bytes leftover after parsing attributes in process `syz.8.445'. [ 350.891788][ T8161] binder: 8158:8161 ioctl 4018620d 0 returned -22 [ 354.695425][ T8189] No source specified [ 354.712256][ T8184] syz_tun: entered allmulticast mode [ 355.195951][ T8199] netlink: 'syz.5.455': attribute type 83 has an invalid length. [ 355.355009][ T8203] syz_tun: entered allmulticast mode [ 355.372922][ T5855] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 356.175647][ T5855] usb 9-1: Using ep0 maxpacket: 16 [ 356.176474][ T5855] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 356.199158][ T5855] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 356.199186][ T5855] usb 9-1: config 0 has no interface number 0 [ 356.199233][ T5855] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 356.199257][ T5855] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 356.270554][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.270589][ T5855] usb 9-1: Product: syz [ 356.270603][ T5855] usb 9-1: Manufacturer: syz [ 356.270616][ T5855] usb 9-1: SerialNumber: syz [ 356.394076][ T5855] usb 9-1: config 0 descriptor?? [ 356.415154][ T8197] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 356.425555][ T8197] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 356.452009][ T5603] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 356.811533][ T8197] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 356.811713][ T8197] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 357.611022][ T5855] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 359.433105][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 359.433132][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 360.262321][ T5855] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 360.271643][ T5855] asix 9-1:0.34: probe with driver asix failed with error -71 [ 360.456056][ T5855] usb 9-1: USB disconnect, device number 2 [ 361.175600][ T5610] Bluetooth: hci6: command 0x0406 tx timeout [ 365.677883][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.475'. [ 365.722424][ T8280] binder: 8279:8280 ioctl c018620c 200000000180 returned -22 [ 372.639031][ T8336] fuse: Bad value for 'fd' [ 373.012699][ T5734] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 373.117655][ T8353] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 373.982542][ T5734] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 373.997853][ T5734] usb 9-1: config index 0 descriptor too short (expected 281, got 18) [ 373.997880][ T5734] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.997898][ T5734] usb 9-1: config 0 has no interfaces? [ 374.000739][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.000764][ T5734] usb 9-1: Product: syz [ 374.000777][ T5734] usb 9-1: Manufacturer: syz [ 374.000789][ T5734] usb 9-1: SerialNumber: syz [ 374.076314][ T5734] usb 9-1: config 0 descriptor?? [ 374.694256][ T37] audit: type=1326 audit(1789530193.184:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.7.491" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa55ebae159 code=0x0 [ 375.805487][ T5734] usb 9-1: USB disconnect, device number 3 [ 375.832338][ T8375] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 376.433579][ T8375] bond1 (unregistering): Released all slaves [ 376.691662][ T8396] »»»»»»: renamed from vlan0 (while UP) [ 377.842667][ T8407] MTD: Couldn't look up './dev/mtdblock0': -2 [ 378.047484][ T8406] jffs2: notice: (8406) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 378.461929][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.461986][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.723320][ T3437] IPVS: starting estimator thread 0... [ 380.925033][ T8457] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 381.004335][ T8454] IPVS: using max 11 ests per chain, 26400 per kthread [ 381.067285][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.508'. [ 381.067311][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.508'. [ 381.358802][ T8473] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 381.371362][ T8469] IPVS: stopping master sync thread 8473 ... [ 385.738390][ T5603] Bluetooth: hci8: command 0x0406 tx timeout [ 389.095677][ T8539] netlink: 180 bytes leftover after parsing attributes in process `syz.7.523'. [ 389.176399][ T8539] netlink: 40 bytes leftover after parsing attributes in process `syz.7.523'. [ 391.843187][ T8558] binder: 8548:8558 ioctl 7a8 2000000000c0 returned -22 [ 391.853062][ T8558] binder: 8548:8558 ioctl c0306201 2000000004c0 returned -14 [ 395.494631][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.536'. [ 397.984766][ T5734] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 398.120228][ T8609] binder: 8608:8609 ioctl c0306201 200000000040 returned -22 [ 398.151800][ T5734] usb 8-1: Using ep0 maxpacket: 32 [ 398.152787][ T5734] usb 8-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 398.154289][ T5734] usb 8-1: config 0 has an invalid interface number: 20 but max is 0 [ 398.154312][ T5734] usb 8-1: config 0 has no interface number 0 [ 398.154361][ T5734] usb 8-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 398.154375][ T5734] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.154385][ T5734] usb 8-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 398.172320][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.172420][ T5734] usb 8-1: Product: syz [ 398.172434][ T5734] usb 8-1: Manufacturer: syz [ 398.172446][ T5734] usb 8-1: SerialNumber: syz [ 398.290255][ T5734] usb 8-1: config 0 descriptor?? [ 398.303039][ T8593] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 398.384657][ T982] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 398.437678][ T5610] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 398.468551][ T5610] Bluetooth: hci6: Injecting HCI hardware error event [ 398.469548][ T5610] Bluetooth: hci6: hardware error 0x00 [ 398.537122][ T5734] usb-storage 8-1:0.20: USB Mass Storage device detected [ 398.557882][ T982] usb 10-1: not running at top speed; connect to a high speed hub [ 398.557918][ T982] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 398.589346][ T982] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.589434][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.731873][ T982] uvcvideo 10-1:1.0: Found UVC 1.00 device (046d:0825) [ 398.954442][ T5734] usb-storage 8-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 398.971734][ T5734] scsi host1: usb-storage 8-1:0.20 [ 399.088016][ T982] uvcvideo 10-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 399.266121][ T982] videodev: could not get a free minor [ 399.266141][ T982] uvcvideo 10-1:1.1: Failed to register meta-cap device (-23). [ 399.439002][ T5734] usb 8-1: USB disconnect, device number 3 [ 399.619039][ T982] usb 10-1: USB disconnect, device number 5 [ 400.603485][ T5610] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 401.964914][ T982] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 402.214774][ T982] usb 10-1: Using ep0 maxpacket: 16 [ 402.215754][ T982] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 402.217769][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.217797][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.217817][ T982] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.217855][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.301130][ T982] usb 10-1: config 0 descriptor?? [ 403.891461][ T982] usbhid 10-1:0.0: can't add hid device: -71 [ 403.891589][ T982] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 405.142810][ T982] usb 10-1: USB disconnect, device number 6 [ 407.179584][ T8680] loop0: detected capacity change from 0 to 32768 [ 408.116162][ T8680] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:0": -EINTR [ 411.173842][ T8712] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8711] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8712] [ 416.434560][ T6124] syz_tun (unregistering): left allmulticast mode [ 416.686968][ T8746] FAULT_INJECTION: forcing a failure. [ 416.686968][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 416.687022][ T8746] CPU: 1 UID: 0 PID: 8746 Comm: syz.6.577 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 416.687044][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.687059][ T8746] Call Trace: [ 416.687067][ T8746] [ 416.687075][ T8746] dump_stack_lvl+0xe8/0x150 [ 416.687107][ T8746] should_fail_ex+0x46b/0x600 [ 416.687137][ T8746] should_failslab+0xa8/0x100 [ 416.687166][ T8746] __kmalloc_cache_noprof+0xa1/0x680 [ 416.687193][ T8746] ? syslog_print_all+0xf8/0x450 [ 416.687218][ T8746] ? syslog_print_all+0xf8/0x450 [ 416.687243][ T8746] ? futex_hash+0x275/0x2b0 [ 416.687271][ T8746] syslog_print_all+0xf8/0x450 [ 416.687302][ T8746] ? __pfx_syslog_print_all+0x10/0x10 [ 416.687326][ T8746] ? smack_privileged_cred+0xb6/0x380 [ 416.687353][ T8746] ? smack_privileged_cred+0xb6/0x380 [ 416.687372][ T8746] ? smack_privileged_cred+0xb6/0x380 [ 416.687389][ T8746] ? smack_privileged_cred+0xb6/0x380 [ 416.687408][ T8746] ? smack_privileged_cred+0x33c/0x380 [ 416.687428][ T8746] ? smack_syslog+0x95/0xf0 [ 416.687447][ T8746] do_syslog+0x3b4/0x7d0 [ 416.687473][ T8746] ? __pfx_do_syslog+0x10/0x10 [ 416.687501][ T8746] ? __se_sys_futex+0x3a8/0x450 [ 416.687527][ T8746] ? rcu_is_watching+0x16/0xb0 [ 416.687558][ T8746] __x64_sys_syslog+0x7c/0x90 [ 416.687585][ T8746] do_syscall_64+0x166/0x520 [ 416.687610][ T8746] ? trace_irq_disable+0x3b/0x140 [ 416.687631][ T8746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.687647][ T8746] ? clear_bhb_loop+0x70/0xc0 [ 416.687670][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.687694][ T8746] RIP: 0033:0x7f5a7e9ce159 [ 416.687712][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.687726][ T8746] RSP: 002b:00007f5a7cc26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 416.687746][ T8746] RAX: ffffffffffffffda RBX: 00007f5a7ec55fa0 RCX: 00007f5a7e9ce159 [ 416.687759][ T8746] RDX: 0000000000000063 RSI: 00002000000001c0 RDI: 0000000000000004 [ 416.687771][ T8746] RBP: 00007f5a7ea6506b R08: 0000000000000000 R09: 0000000000000000 [ 416.687783][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.687794][ T8746] R13: 00007f5a7ec56038 R14: 00007f5a7ec55fa0 R15: 00007ffcdb95e9c8 [ 416.687821][ T8746] [ 421.910195][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.967822][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.972073][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.056268][ T3437] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.144001][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.150394][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.392249][ T8775] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 424.736727][ T8804] syz.9.591 (8804): /proc/8801/oom_adj is deprecated, please use /proc/8801/oom_score_adj instead. [ 425.614162][ T5610] Bluetooth: hci0: command tx timeout [ 426.030447][ T8798] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 426.181695][ T5855] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 426.322318][ T3437] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.333297][ T5855] usb 7-1: Using ep0 maxpacket: 8 [ 426.345057][ T5855] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 426.346410][ T5855] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 426.346433][ T5855] usb 7-1: config 0 has no interface number 0 [ 426.403631][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.403658][ T5855] usb 7-1: Product: syz [ 426.403743][ T5855] usb 7-1: Manufacturer: syz [ 426.403756][ T5855] usb 7-1: SerialNumber: syz [ 426.558533][ T5855] usb 7-1: config 0 descriptor?? [ 427.022940][ T5610] Bluetooth: hci5: Unknown advertising packet type: 0x18 [ 427.022966][ T5610] Bluetooth: hci5: Unknown advertising packet type: 0x1e [ 427.046332][ T5855] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 427.087264][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.595'. [ 427.088158][ T8820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.308398][ T5734] usb 7-1: USB disconnect, device number 3 [ 427.704786][ T5610] Bluetooth: hci0: command tx timeout [ 430.111097][ T5610] Bluetooth: hci0: command tx timeout [ 430.332509][ T3437] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.182657][ T5603] Bluetooth: hci0: command tx timeout [ 432.203904][ T8858] 9pnet_fd: p9_fd_create_unix (8858): problem connecting socket: ./file0: -111 [ 433.666874][ T3437] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.817437][ T8875] jffs2: notice: (8875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 439.921642][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.921710][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.850309][ T8942] dlm: no local IP address has been set [ 444.850324][ T8942] dlm: cannot start dlm midcomms -107 [ 445.118252][ T3437] bridge_slave_1: left allmulticast mode [ 445.118287][ T3437] bridge_slave_1: left promiscuous mode [ 445.118534][ T3437] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.231607][ T5707] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 445.437810][ T3437] bridge_slave_0: left allmulticast mode [ 445.437835][ T3437] bridge_slave_0: left promiscuous mode [ 445.438017][ T3437] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.330967][ T5707] usb 10-1: not running at top speed; connect to a high speed hub [ 446.331008][ T5707] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 446.355151][ T5707] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.355220][ T5707] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.570556][ T5707] uvcvideo 10-1:1.0: Found UVC 1.00 device (046d:0825) [ 446.613207][ T5707] uvcvideo 10-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 446.617382][ T5707] uvcvideo 10-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 446.617434][ T5707] uvcvideo 10-1:1.1: Failed to initialize the device (-71). [ 446.662038][ T5707] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -71 [ 446.668940][ T5707] usb 10-1: USB disconnect, device number 7 [ 454.840852][ T9036] tipc: Failed to remove unknown binding: 66,0,0/3981181388:1437155997/1437155999 [ 454.840891][ T9036] tipc: Failed to remove unknown binding: 66,0,0/3981181388:1437155997/1437155998 [ 454.848007][ T9036] tipc: Failed to remove unknown binding: 66,0,0/3981181388:1437155997/1437155999 [ 454.848046][ T9036] tipc: Failed to remove unknown binding: 66,0,0/3981181388:1437155997/1437155998 [ 455.323791][ T9044] overlayfs: overlapping lowerdir path [ 456.222097][ T9042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.347666][ T3437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.442312][ T3437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.552160][ T3437] bond0 (unregistering): Released all slaves [ 458.159443][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 459.500028][ T8781] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.514829][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.515059][ T8781] bridge_slave_0: entered allmulticast mode [ 459.517739][ T8781] bridge_slave_0: entered promiscuous mode [ 459.534543][ T8781] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.535880][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.536076][ T8781] bridge_slave_1: entered allmulticast mode [ 459.539053][ T8781] bridge_slave_1: entered promiscuous mode [ 459.835019][ T8781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.838422][ T8781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.913157][ T8781] team0: Port device team_slave_0 added [ 459.916610][ T8781] team0: Port device team_slave_1 added [ 459.974879][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.974896][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.974919][ T8781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.977266][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.977278][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.977301][ T8781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.143881][ T8781] hsr_slave_0: entered promiscuous mode [ 460.145188][ T8781] hsr_slave_1: entered promiscuous mode [ 461.406304][ T37] audit: type=1800 audit(2000000037.190:632): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.663" name="cpuset.effective_cpus" dev="sda1" ino=2060 res=0 errno=0 [ 468.312127][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22 [ 468.951081][ T9164] trusted_key: encrypted_key: insufficient parameters specified [ 474.163269][ T9198] binder: 9197:9198 ioctl c0306201 200000000680 returned -14 [ 475.491886][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.8.691'. [ 475.491928][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.8.691'. [ 475.921617][ T3437] hsr_slave_0: left promiscuous mode [ 475.953055][ T3437] hsr_slave_1: left promiscuous mode [ 475.955844][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.955934][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.855386][ T3437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.855415][ T3437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.212862][ T9232] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.695: No space for directory leaf checksum. Please run e2fsck -D. [ 478.212926][ T9232] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.695: checksumming directory block 0 [ 478.216548][ T9232] netdevsim netdevsim8: loading /lib/firmware/updates/syzkaller// failed with error -74 [ 478.216748][ T9232] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.695: No space for directory leaf checksum. Please run e2fsck -D. [ 478.216774][ T9232] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.695: checksumming directory block 0 [ 478.217058][ T9232] netdevsim netdevsim8: loading /lib/firmware/updates// failed with error -74 [ 478.217247][ T9232] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.8.695: No space for directory leaf checksum. Please run e2fsck -D. [ 478.217271][ T9232] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.8.695: checksumming directory block 0 [ 478.217462][ T9232] netdevsim netdevsim8: loading /lib/firmware/syzkaller// failed with error -74 [ 478.218520][ T9232] netdevsim netdevsim8: loading /lib/firmware// failed with error -22 [ 478.218609][ T9232] netdevsim netdevsim8: Direct firmware load for / failed with error -22 [ 478.218642][ T9232] netdevsim netdevsim8: Falling back to sysfs fallback for: / [ 478.886166][ T3437] veth1_macvtap: left promiscuous mode [ 478.886275][ T3437] veth0_macvtap: left promiscuous mode [ 478.886530][ T3437] veth1_vlan: left promiscuous mode [ 478.886724][ T3437] veth0_vlan: left promiscuous mode [ 481.060555][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.697'. [ 481.196033][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.245151][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.270389][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.280126][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.297812][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 483.382065][ T5603] Bluetooth: hci1: command tx timeout [ 484.730279][ T9262] FAULT_INJECTION: forcing a failure. [ 484.730279][ T9262] name failslab, interval 1, probability 0, space 0, times 0 [ 484.730323][ T9262] CPU: 1 UID: 0 PID: 9262 Comm: syz.9.702 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 484.730351][ T9262] Tainted: [L]=SOFTLOCKUP [ 484.730358][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.730370][ T9262] Call Trace: [ 484.730379][ T9262] [ 484.730387][ T9262] dump_stack_lvl+0xe8/0x150 [ 484.730424][ T9262] should_fail_ex+0x46b/0x600 [ 484.730454][ T9262] should_failslab+0xa8/0x100 [ 484.730481][ T9262] ? ceph_msg_new2+0x3b/0x4d0 [ 484.730510][ T9262] kmem_cache_alloc_noprof+0x9e/0x690 [ 484.730535][ T9262] ? ceph_msg_new2+0x3b/0x4d0 [ 484.730569][ T9262] ceph_msg_new2+0x3b/0x4d0 [ 484.730600][ T9262] ceph_monc_init+0x691/0xb10 [ 484.730641][ T9262] ceph_create_client+0x225/0x310 [ 484.730669][ T9262] ceph_get_tree+0x1ca/0x1a40 [ 484.730688][ T9262] ? cap_capable+0x123/0x460 [ 484.730706][ T9262] ? safesetid_security_capable+0xa9/0x1a0 [ 484.730728][ T9262] vfs_get_tree+0x92/0x2a0 [ 484.730749][ T9262] vfs_cmd_create+0xa2/0x200 [ 484.730771][ T9262] __se_sys_fsconfig+0x6bf/0x810 [ 484.730797][ T9262] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 484.730822][ T9262] ? rcu_is_watching+0x16/0xb0 [ 484.730853][ T9262] ? __x64_sys_fsconfig+0x20/0xc0 [ 484.730878][ T9262] do_syscall_64+0x166/0x520 [ 484.730900][ T9262] ? trace_irq_disable+0x3b/0x140 [ 484.730919][ T9262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.730937][ T9262] ? clear_bhb_loop+0x70/0xc0 [ 484.730959][ T9262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.730978][ T9262] RIP: 0033:0x7fda6c9de159 [ 484.730998][ T9262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.731014][ T9262] RSP: 002b:00007fda6ac36028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 484.731036][ T9262] RAX: ffffffffffffffda RBX: 00007fda6cc65fa0 RCX: 00007fda6c9de159 [ 484.731049][ T9262] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 484.731061][ T9262] RBP: 00007fda6ca7506b R08: 0000000000000000 R09: 0000000000000000 [ 484.731073][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.731085][ T9262] R13: 00007fda6cc66038 R14: 00007fda6cc65fa0 R15: 00007fff74d45708 [ 484.731116][ T9262] [ 485.118399][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.8.703'. [ 485.462118][ T5603] Bluetooth: hci1: command tx timeout [ 485.563649][ T3437] team0 (unregistering): Port device team_slave_1 removed [ 485.685488][ T3437] team0 (unregistering): Port device team_slave_0 removed [ 485.971612][ T982] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 486.182382][ T982] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 486.183669][ T982] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.183718][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.242480][ T982] usb 10-1: config 0 descriptor?? [ 486.257328][ T982] pwc: Askey VC010 type 2 USB webcam detected. [ 486.280533][ T5258] 8021q: adding VLAN 0 to HW filter on device eth23 [ 486.856646][ T982] pwc: recv_control_msg error -32 req 02 val 2b00 [ 486.953876][ T982] pwc: recv_control_msg error -32 req 02 val 2700 [ 486.955569][ T982] pwc: recv_control_msg error -32 req 02 val 2c00 [ 486.956614][ T982] pwc: recv_control_msg error -32 req 04 val 1000 [ 487.033407][ T982] pwc: recv_control_msg error -32 req 04 val 1300 [ 487.038457][ T982] pwc: recv_control_msg error -32 req 04 val 1400 [ 487.064711][ T9274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.107220][ T9274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.135388][ T9293] binder: 9291:9293 ioctl c0306201 200000004a40 returned -14 [ 487.697758][ T5603] Bluetooth: hci1: command tx timeout [ 488.646683][ T982] pwc: recv_control_msg error -71 req 02 val 2000 [ 488.707313][ T982] pwc: recv_control_msg error -71 req 02 val 2100 [ 488.853741][ T982] pwc: recv_control_msg error -71 req 04 val 1500 [ 488.854851][ T982] pwc: recv_control_msg error -71 req 02 val 2500 [ 488.855331][ T982] pwc: recv_control_msg error -71 req 02 val 2400 [ 488.857341][ T982] pwc: recv_control_msg error -71 req 02 val 2600 [ 488.858666][ T982] pwc: recv_control_msg error -71 req 02 val 2900 [ 488.859372][ T982] pwc: recv_control_msg error -71 req 02 val 2800 [ 488.860119][ T982] pwc: recv_control_msg error -71 req 04 val 1100 [ 488.860837][ T982] pwc: recv_control_msg error -71 req 04 val 1200 [ 488.989892][ T9308] CIFS: Attempting to mount //::1/share [ 489.075922][ T982] pwc: Registered as video103. [ 489.268520][ T9312] openvswitch: netlink: IP tunnel dst address not specified [ 489.345174][ T982] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input7 [ 489.790708][ T5603] Bluetooth: hci1: command tx timeout [ 491.001799][ T982] usb 10-1: USB disconnect, device number 8 [ 491.283353][ T9308] CIFS: VFS: Error connecting to socket. Aborting operation. [ 491.283665][ T9308] CIFS: VFS: cifs_mount failed w/return code = -4 [ 491.598144][ T37] audit: type=1800 audit(2000000067.390:633): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.722" name=08 dev="sda1" ino=2065 res=0 errno=0 [ 492.091579][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 492.274473][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.277437][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.279777][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.279802][ T10] usb 7-1: Product: syz [ 492.279815][ T10] usb 7-1: Manufacturer: syz [ 492.279829][ T10] usb 7-1: SerialNumber: syz [ 492.960483][ T9354] fuse: fd is not a fuse device [ 494.919442][ T10] cdc_ncm 7-1:1.0: bind() failure [ 495.021262][ T10] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 496.458241][ T10] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 496.481953][ T10] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 496.638120][ T10] usb 7-1: USB disconnect, device number 4 [ 500.655623][ T3437] IPVS: stop unused estimator thread 0... [ 501.452240][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.454084][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.454287][ T9247] bridge_slave_0: entered allmulticast mode [ 501.494865][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.494962][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.562746][ T9247] bridge_slave_0: entered promiscuous mode [ 501.616975][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.617188][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.617375][ T9247] bridge_slave_1: entered allmulticast mode [ 501.619943][ T9247] bridge_slave_1: entered promiscuous mode [ 501.696377][ T37] audit: type=1326 audit(2000000077.490:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.696425][ T37] audit: type=1326 audit(2000000077.490:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.697281][ T9247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.760534][ T37] audit: type=1326 audit(2000000077.550:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.760585][ T37] audit: type=1326 audit(2000000077.550:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.765861][ T37] audit: type=1326 audit(2000000077.550:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.786311][ T37] audit: type=1326 audit(2000000077.580:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.786371][ T37] audit: type=1326 audit(2000000077.580:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.786409][ T37] audit: type=1326 audit(2000000077.580:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.829346][ T37] audit: type=1326 audit(2000000077.620:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.836279][ T37] audit: type=1326 audit(2000000077.630:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.5.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68764ee159 code=0x7ffc0000 [ 501.963176][ T9247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.038275][ T9247] team0: Port device team_slave_0 added [ 502.062571][ T9247] team0: Port device team_slave_1 added [ 502.390478][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.390496][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.390522][ T9247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.410339][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.410357][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.410382][ T9247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.624493][ T9247] hsr_slave_0: entered promiscuous mode [ 512.627901][ T9247] hsr_slave_1: entered promiscuous mode [ 512.630437][ T9247] debugfs: 'hsr0' already exists in 'hsr' [ 512.630463][ T9247] Cannot create hsr debugfs directory [ 514.301323][ T6708] bridge_slave_1: left allmulticast mode [ 514.301361][ T6708] bridge_slave_1: left promiscuous mode [ 514.302045][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.851647][ T6708] bridge_slave_0: left allmulticast mode [ 515.851684][ T6708] bridge_slave_0: left promiscuous mode [ 515.851944][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.499704][ T9516] syz.9.756 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 516.499762][ T9516] CPU: 0 UID: 0 PID: 9516 Comm: syz.9.756 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 516.499790][ T9516] Tainted: [L]=SOFTLOCKUP [ 516.499797][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.499809][ T9516] Call Trace: [ 516.499818][ T9516] [ 516.499828][ T9516] dump_stack_lvl+0xe8/0x150 [ 516.499863][ T9516] dump_header+0xd3/0x4b0 [ 516.499892][ T9516] oom_kill_process+0x3ab/0x9e0 [ 516.499917][ T9516] out_of_memory+0x1064/0x1480 [ 516.499958][ T9516] ? __pfx_out_of_memory+0x10/0x10 [ 516.499985][ T9516] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 516.500012][ T9516] ? _mutex_lock_killable+0x152/0x1d0 [ 516.500033][ T9516] ? try_charge_memcg+0xcc3/0x16f0 [ 516.500064][ T9516] try_charge_memcg+0xd82/0x16f0 [ 516.500112][ T9516] ? __pfx_try_charge_memcg+0x10/0x10 [ 516.500145][ T9516] ? percpu_ref_tryget+0x15/0x180 [ 516.500186][ T9516] ? __obj_cgroup_charge+0x36/0x2c0 [ 516.500215][ T9516] __obj_cgroup_charge+0x1fd/0x2c0 [ 516.500241][ T9516] ? __obj_cgroup_charge+0x36/0x2c0 [ 516.500269][ T9516] __memcg_slab_post_alloc_hook+0x7a2/0xde0 [ 516.500313][ T9516] ? alloc_inode+0x6a/0x1b0 [ 516.500341][ T9516] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 516.500366][ T9516] ? alloc_inode+0x6a/0x1b0 [ 516.500393][ T9516] ? alloc_inode+0x6a/0x1b0 [ 516.500425][ T9516] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 516.500448][ T9516] alloc_inode+0x6a/0x1b0 [ 516.500478][ T9516] new_inode+0x1f/0x170 [ 516.500501][ T9516] __debugfs_create_file+0xb8/0x400 [ 516.500529][ T9516] debugfs_create_file_full+0x3f/0x60 [ 516.500556][ T9516] kvm_arch_create_vcpu_debugfs+0x62/0x150 [ 516.500580][ T9516] kvm_create_vcpu_debugfs+0x146/0x1c0 [ 516.500600][ T9516] ? __pfx_kvm_create_vcpu_debugfs+0x10/0x10 [ 516.500627][ T9516] ? kvm_vm_ioctl_create_vcpu+0x453/0x720 [ 516.500660][ T9516] kvm_vm_ioctl_create_vcpu+0x45b/0x720 [ 516.500696][ T9516] kvm_vm_ioctl+0x889/0xd30 [ 516.500730][ T9516] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 516.500778][ T9516] ? kasan_quarantine_put+0xbb/0x1f0 [ 516.500812][ T9516] ? tomoyo_path_number_perm+0x219/0x5f0 [ 516.500838][ T9516] ? tomoyo_path_number_perm+0x219/0x5f0 [ 516.500865][ T9516] ? do_vfs_ioctl+0x1184/0x1550 [ 516.500892][ T9516] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 516.500931][ T9516] ? hook_file_ioctl+0x1f5/0x610 [ 516.500953][ T9516] ? __asan_memset+0x22/0x50 [ 516.500976][ T9516] ? smack_file_ioctl+0x335/0x370 [ 516.501000][ T9516] ? __pfx_smack_file_ioctl+0x10/0x10 [ 516.501033][ T9516] ? __fget_files+0x2a/0x420 [ 516.501051][ T9516] ? __fget_files+0x3a8/0x420 [ 516.501070][ T9516] ? __fget_files+0x2a/0x420 [ 516.501093][ T9516] ? bpf_lsm_file_ioctl+0x9/0x20 [ 516.501114][ T9516] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 516.501141][ T9516] __se_sys_ioctl+0xff/0x170 [ 516.501175][ T9516] do_syscall_64+0x166/0x520 [ 516.501202][ T9516] ? trace_irq_disable+0x3b/0x140 [ 516.501225][ T9516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.501246][ T9516] ? clear_bhb_loop+0x70/0xc0 [ 516.501269][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.501289][ T9516] RIP: 0033:0x7fda6c9de159 [ 516.501308][ T9516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.501324][ T9516] RSP: 002b:00007fda6ac15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.501346][ T9516] RAX: ffffffffffffffda RBX: 00007fda6cc66090 RCX: 00007fda6c9de159 [ 516.501360][ T9516] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000004 [ 516.501372][ T9516] RBP: 00007fda6ca7506b R08: 0000000000000000 R09: 0000000000000000 [ 516.501401][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.501411][ T9516] R13: 00007fda6cc66128 R14: 00007fda6cc66090 R15: 00007fff74d45708 [ 516.501439][ T9516] [ 516.520870][ T9516] memory: usage 96kB, limit 96kB, failcnt 44 [ 516.520890][ T9516] memory+swap: usage 104kB, limit 9007199254740988kB, failcnt 0 [ 516.520903][ T9516] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 516.520915][ T9516] Memory cgroup stats for /syz9/test: [ 517.667879][ T9516] cache 0 [ 517.667890][ T9516] rss 8192 [ 517.667898][ T9516] shmem 0 [ 517.667904][ T9516] mapped_file 0 [ 517.667911][ T9516] dirty 0 [ 517.667917][ T9516] writeback 0 [ 517.667924][ T9516] workingset_refault_anon 0 [ 517.667932][ T9516] workingset_refault_file 0 [ 517.667939][ T9516] swap 0 [ 517.667945][ T9516] swapcached 4096 [ 517.667952][ T9516] pgpgin 2 [ 517.667959][ T9516] pgpgout 0 [ 517.667965][ T9516] pgfault 8 [ 517.667972][ T9516] pgmajfault 0 [ 517.667978][ T9516] inactive_anon 0 [ 517.667985][ T9516] active_anon 0 [ 517.667991][ T9516] inactive_file 0 [ 517.668007][ T9516] active_file 0 [ 517.668014][ T9516] unevictable 0 [ 517.668021][ T9516] hierarchical_memory_limit 98304 [ 517.668029][ T9516] hierarchical_memsw_limit 9223372036854771712 [ 517.668036][ T9516] total_cache 0 [ 517.668043][ T9516] total_rss 8192 [ 517.668050][ T9516] total_shmem 0 [ 517.668057][ T9516] total_mapped_file 0 [ 517.668064][ T9516] total_dirty 0 [ 517.668070][ T9516] total_writeback 0 [ 517.668077][ T9516] total_workingset_refault_anon 0 [ 517.668084][ T9516] total_workingset_refault_file 0 [ 517.668092][ T9516] total_swap 0 [ 517.668098][ T9516] total_swapcached 4096 [ 517.668105][ T9516] total_pgpgin 2 [ 517.668112][ T9516] total_pgpgout 0 [ 517.668119][ T9516] total_pgfault 8 [ 517.668126][ T9516] total_pgmajfault 0 [ 517.668133][ T9516] total_inactive_anon 0 [ 517.668141][ T9516] total_active_anon 0 [ 517.668148][ T9516] total_inactive_file 0 [ 517.668156][ T9516] total_active_file 0 [ 517.668162][ T9516] total_unevictable 0 [ 517.668169][ T9516] anon_cost 0 [ 517.668176][ T9516] file_cost 0 [ 517.668184][ T9516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9/test,task_memcg=/syz9/test,task=syz.9.756,pid=9509,uid=0 [ 517.668755][ T9516] Memory cgroup out of memory: Killed process 9509 (syz.9.756) total-vm:104432kB, anon-rss:1432kB, file-rss:23056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 517.795400][ T9516] debugfs: out of free dentries, can not create file 'tsc-offset' [ 519.722843][ T39] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 519.722866][ T39] in_atomic(): 0, irqs_disabled(): 0, non_block: 1, pid: 39, name: oom_reaper [ 519.722881][ T39] preempt_count: 0, expected: 0 [ 519.722890][ T39] RCU nest depth: 0, expected: 0 [ 519.722907][ T39] locks held by oom_reaper/39: 4, last CPU#0: [ 519.722921][ T39] #0: ffff88803b24c7b0 (&mm->mmap_lock){++++}-{4:4}, at: oom_reaper+0x2b4/0xc10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 519.722998][ T39] #1: ffffffff8e30af80 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: zap_vma_for_reaping+0x193/0x380 [ 519.723055][ T39] #2: ffffffff8e30afd8 (srcu){.+.+}-{0:0}, at: __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 519.723113][ T39] #3: ffff88803b82d560 (&kvm->mn_invalidate_lock){+.+.}-{3:3}, at: kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 519.723173][ T39] CPU: 0 UID: 0 PID: 39 Comm: oom_reaper Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 519.723198][ T39] Tainted: [L]=SOFTLOCKUP [ 519.723204][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.723215][ T39] Call Trace: [ 519.723223][ T39] [ 519.723231][ T39] dump_stack_lvl+0xe8/0x150 [ 519.723259][ T39] __might_resched+0x31b/0x470 [ 519.723292][ T39] rt_spin_lock+0xc2/0x400 [ 519.723314][ T39] ? __pfx_rt_spin_lock+0x10/0x10 [ 519.723337][ T39] ? __lock_acquire+0x747/0x2de0 [ 519.723364][ T39] kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 519.723406][ T39] ? __pfx_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 519.723444][ T39] __mmu_notifier_invalidate_range_start+0x709/0xb80 [ 519.723477][ T39] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 519.723502][ T39] ? __pfx___mmu_notifier_invalidate_range_start+0x10/0x10 [ 519.723534][ T39] ? zap_vma_for_reaping+0x193/0x380 [ 519.723563][ T39] zap_vma_for_reaping+0x1f7/0x380 [ 519.723590][ T39] ? __pfx_zap_vma_for_reaping+0x10/0x10 [ 519.723645][ T39] oom_reaper+0x519/0xc10 [ 519.723662][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.723700][ T39] ? __pfx_oom_reaper+0x10/0x10 [ 519.723727][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 519.723748][ T39] ? __kthread_parkme+0x71/0x1f0 [ 519.723774][ T39] ? __kthread_parkme+0x199/0x1f0 [ 519.723805][ T39] kthread+0x38b/0x470 [ 519.723824][ T39] ? __pfx_oom_reaper+0x10/0x10 [ 519.723840][ T39] ? __pfx_kthread+0x10/0x10 [ 519.723861][ T39] ret_from_fork+0x514/0xb70 [ 519.723884][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 519.723903][ T39] ? __switch_to+0xc89/0x1420 [ 519.723930][ T39] ? __pfx_kthread+0x10/0x10 [ 519.723959][ T39] ret_from_fork_asm+0x1a/0x30 [ 519.723991][ T39] [ 520.641189][ T39] oom_reaper: reaped process 9509 (syz.9.756), now anon-rss:0kB, file-rss:21956kB, shmem-rss:0kB [ 522.019285][ T6708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.281175][ T6708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.365174][ T6708] bond0 (unregistering): Released all slaves [ 523.853072][ T6708] hsr_slave_0: left promiscuous mode [ 523.912102][ T6708] hsr_slave_1: left promiscuous mode [ 523.913311][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.993080][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.472013][ T6708] team0 (unregistering): Port device team_slave_1 removed [ 524.492051][ T6708] team0 (unregistering): Port device team_slave_0 removed [ 524.812450][ T9512] syz_tun (unregistering): left allmulticast mode [ 526.551716][ T6708] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.807335][ T6708] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.097026][ T6708] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.344558][ T6708] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.206349][ T6708] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.279548][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 528.661527][ T6708] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.786468][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22 [ 529.068381][ T6708] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.437875][ T6708] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.468839][ T5258] 8021q: adding VLAN 0 to HW filter on device eth23