last executing test programs: 12m19.208229491s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) 12m18.020417307s ago: executing program 2 (id=7): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000300)=0xfffffd7c, 0x4) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) io_uring_setup(0x66a4, &(0x7f0000000380)={0x0, 0x417c, 0x2, 0x1, 0x2b8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c814) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) 12m1.153905607s ago: executing program 32 (id=7): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000300)=0xfffffd7c, 0x4) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) io_uring_setup(0x66a4, &(0x7f0000000380)={0x0, 0x417c, 0x2, 0x1, 0x2b8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c814) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) 4m18.926407168s ago: executing program 5 (id=1406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/cgroup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004884}, 0x240400d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m15.205662802s ago: executing program 5 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/cgroup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004884}, 0x240400d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m11.139301622s ago: executing program 5 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') socket$inet6_udp(0xa, 0x2, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/cgroup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004884}, 0x240400d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 4m9.504135629s ago: executing program 5 (id=1419): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004081}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r4, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) syz_init_net_socket$rose(0xb, 0x5, 0x0) 4m7.883039534s ago: executing program 5 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, 0x0}, 0x20) fallocate(r4, 0x0, 0x1, 0x2000402) 4m4.458040335s ago: executing program 5 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') socket$inet6_udp(0xa, 0x2, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/cgroup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004884}, 0x240400d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m48.142145238s ago: executing program 33 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') socket$inet6_udp(0xa, 0x2, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/cgroup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004884}, 0x240400d4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m24.635311439s ago: executing program 1 (id=1472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x1000, 0x5}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000033c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) sendto$inet(r4, 0x0, 0x0, 0xc1, 0x0, 0x0) 3m19.197819994s ago: executing program 1 (id=1479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, 0x0}, 0x20) fallocate(r4, 0x0, 0x1, 0x2000402) 3m13.400076345s ago: executing program 1 (id=1482): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x40, 0x200) kcmp(r0, r0, 0x4, r2, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4ef, &(0x7f00000016c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x63, 0x0, 0x3007, 0x5, 0x2, 0x80000000, 0x9, 0x1}) finit_module(r6, 0x0, 0x1) 3m10.73574348s ago: executing program 1 (id=1484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b000000050000000100010009000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, 0x0}, 0x20) fallocate(r4, 0x0, 0x1, 0x2000402) 3m8.413599349s ago: executing program 1 (id=1487): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000040)="8c03fa92b5f384c8021b0a08ae03bcaa0db2fbc3"}) listen(r2, 0x7) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m56.745161395s ago: executing program 1 (id=1499): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5434, 0x0) munlockall() 2m41.563172676s ago: executing program 34 (id=1499): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5434, 0x0) munlockall() 5.075030602s ago: executing program 0 (id=2148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.943460088s ago: executing program 0 (id=2152): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56330400000000000000d6e747033a0093b837dc6cc01e32efaec8c7f9010e6e1902a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b", 0x89}], 0x1}, 0x4040) 4.89885497s ago: executing program 6 (id=2153): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0x8000005}], 0x1, 0x2, 0x0) 4.801950775s ago: executing program 6 (id=2154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 4.801513355s ago: executing program 0 (id=2156): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000000) socket$xdp(0x2c, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x74, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x966}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.587524435s ago: executing program 6 (id=2158): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0xcd79, 0x141000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x5e202329, @empty, 0x4000005}, 0x1c) 4.206030873s ago: executing program 6 (id=2159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1c7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[], 0x0) 3.895133907s ago: executing program 3 (id=2162): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 3.750013224s ago: executing program 0 (id=2163): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x3) 3.457695048s ago: executing program 0 (id=2167): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x40400) read$hidraw(r1, 0x0, 0x60) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000100)='B@\x00') 2.943681772s ago: executing program 3 (id=2172): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x28000600) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000140)={0xffffffff00000001, 0x375}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000010c0)=ANY=[], 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000d00)="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", 0x9f8, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550a, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r0, 0x0, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.228680255s ago: executing program 3 (id=2181): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102400000070501024000000705"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.042285464s ago: executing program 4 (id=2183): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+bond1\n\x00', 0x7) write(0xffffffffffffffff, &(0x7f0000000180)='balance-alb\n\x00', 0xc) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond1/bonding/slaves\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='+dummy0\n\x00', 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'dummy0\x00', 0x1}) ioctl(r0, 0x8914, &(0x7f0000000280)="626f6e643100000000000000000000000100") ioctl(r0, 0x8983, &(0x7f0000000300)="00000000626f6e6431000000000000000000000000000000000000000100"/54) ioctl(r0, 0x8914, &(0x7f0000000340)="626f6e64312e310000000000000000000100") 1.867108162s ago: executing program 4 (id=2187): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x800) 1.834794464s ago: executing program 4 (id=2188): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000500), &(0x7f0000000600)={'syz', 0x1}, &(0x7f00000006c0)='0', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) 1.798044225s ago: executing program 4 (id=2189): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x4a320) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000001c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x71, 0x7ffe, "7f2c00", 0x1, 0x52, 0x1, 0xfa, 0x9, 0x1}) 1.721991229s ago: executing program 4 (id=2190): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f00000000c0)='mnt\x00', 0x1ab) mount(0x0, &(0x7f0000000280)='mnt\x00', &(0x7f0000000300)='devtmpfs\x00', 0x440, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x2) 1.7035061s ago: executing program 7 (id=2192): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$sock(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='z\\r', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="8e", 0x1}], 0x1}}], 0x2, 0x840) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000001000)=0x3, 0x4) 1.657674252s ago: executing program 7 (id=2193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x408c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1.553502697s ago: executing program 7 (id=2194): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xff, 0x5ebe, 0xc43d, 0x0, 0x8}, 0x14) 1.553280827s ago: executing program 7 (id=2195): add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fba000010324d770b40102fd"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x2, 0x3, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.239452702s ago: executing program 7 (id=2196): ftruncate(0xffffffffffffffff, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 1.215691013s ago: executing program 6 (id=2197): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001}, {}, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 1.181606115s ago: executing program 7 (id=2198): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0) r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000000)="96", 0x1}], 0x1) 1.045986051s ago: executing program 6 (id=2199): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c000101008032090400"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x181102, 0x0) 230.587379ms ago: executing program 3 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") write(r0, &(0x7f0000000438)="0000000000000000008000000000000000000000000000006361636865", 0x1d) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000007c0100003801000001") 166.034392ms ago: executing program 3 (id=2201): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x100000000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 22.048869ms ago: executing program 0 (id=2202): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./file0\n', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800), 0x0) 17.335389ms ago: executing program 3 (id=2203): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi0\x00', 0x40440, 0x0) 0s ago: executing program 4 (id=2204): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$9p_rdma(&(0x7f0000000040), &(0x7f00000000c0)='./proc\x00', &(0x7f0000000180), 0x1000000, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}}) kernel console output (not intermixed with test programs): a fully working HSR network [ 618.724896][ T9971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.103722][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 619.561758][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 619.572925][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.580012][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.591872][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 619.602319][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 619.622970][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.630126][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.529232][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 620.615362][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 620.627367][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 620.660700][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.675090][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.687248][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.695848][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.704223][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.713897][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 620.722220][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.730744][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 620.825826][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 620.848339][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.251345][T10261] binder: BINDER_SET_CONTEXT_MGR already set [ 624.257381][T10261] binder: 10254:10261 ioctl 4018620d 200000000040 returned -16 [ 624.266183][T10261] binder: 10254:10261 ioctl c0306201 0 returned -14 [ 624.273613][T10261] binder: 10254:10261 ioctl c0306201 0 returned -14 [ 624.433673][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.440521][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.969881][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.986411][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.042224][ T9971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.565052][T10300] binder: BINDER_SET_CONTEXT_MGR already set [ 633.571104][T10300] binder: 10295:10300 ioctl 4018620d 200000000040 returned -16 [ 633.585164][T10300] binder: 10295:10300 ioctl c0306201 0 returned -14 [ 633.597667][T10300] binder: 10295:10300 ioctl c0306201 0 returned -14 [ 636.698860][ T4231] Bluetooth: hci3: command 0x0409 tx timeout [ 638.772539][ T4308] Bluetooth: hci3: command 0x041b tx timeout [ 639.230784][T10333] binder: BINDER_SET_CONTEXT_MGR already set [ 639.236875][T10333] binder: 10324:10333 ioctl 4018620d 200000000040 returned -16 [ 639.246213][T10333] binder: 10324:10333 ioctl c0306201 0 returned -14 [ 639.253821][T10333] binder: 10324:10333 ioctl c0306201 0 returned -14 [ 641.694306][T10026] Bluetooth: hci3: command 0x040f tx timeout [ 642.215598][T10308] chnl_net:caif_netlink_parms(): no params data found [ 643.231539][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.250607][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.298605][T10308] device bridge_slave_0 entered promiscuous mode [ 643.306817][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.313904][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.323170][T10308] device bridge_slave_1 entered promiscuous mode [ 643.439157][T10367] process 'syz.0.1522' launched './file1' with NULL argv: empty string added [ 644.003592][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 644.044825][T10308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.104606][T10308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.137743][T10308] team0: Port device team_slave_0 added [ 644.164976][T10328] chnl_net:caif_netlink_parms(): no params data found [ 644.192792][T10308] team0: Port device team_slave_1 added [ 644.212539][ T4308] Bluetooth: hci5: command 0x0409 tx timeout [ 644.409415][T10308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.904835][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.400960][T10308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.550175][T10308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.625525][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.842761][T10308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.762057][ T4227] Bluetooth: hci5: command 0x041b tx timeout [ 647.971877][T10308] device hsr_slave_0 entered promiscuous mode [ 647.990528][T10308] device hsr_slave_1 entered promiscuous mode [ 647.999177][T10308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.011660][T10308] Cannot create hsr debugfs directory [ 648.550990][T10328] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.571976][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.608443][T10328] device bridge_slave_0 entered promiscuous mode [ 648.664073][T10328] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.671687][T10328] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.679710][T10328] device bridge_slave_1 entered promiscuous mode [ 648.701913][T10328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.792480][T10328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.287204][ T6923] Bluetooth: hci5: command 0x040f tx timeout [ 650.385731][T10328] team0: Port device team_slave_0 added [ 650.465021][T10328] team0: Port device team_slave_1 added [ 651.332422][ T4228] Bluetooth: hci5: command 0x0419 tx timeout [ 651.369245][T10328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.402462][T10328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.097214][T10328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.149006][T10328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.370055][T10328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.754192][T10328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.296373][T10328] device hsr_slave_0 entered promiscuous mode [ 653.352899][T10328] device hsr_slave_1 entered promiscuous mode [ 653.409972][T10328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.452497][T10328] Cannot create hsr debugfs directory [ 654.487971][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.684246][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.390996][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.457784][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.049934][T10328] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 660.063872][T10328] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 660.091122][T10328] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 660.105599][T10328] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 661.517745][T10308] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 661.611937][T10308] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 661.646872][T10328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.733689][T10308] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 661.743106][T10308] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 661.924371][T10328] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.946919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.959022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.255092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.269915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.279949][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.287074][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.304400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.316469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.327682][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.334817][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.353784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.389708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.621284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.664458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.786102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 663.290037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 663.316734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 663.351707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.440058][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 663.458513][T10655] o2cb: Local heartbeat has not been started. [ 663.602558][T10655] o2cb: Cluster check failed. Fix errors before retrying. [ 663.648759][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.715854][T10655] (syz.4.1579,10655,1):user_dlm_register:675 ERROR: status = -22 [ 663.777416][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 663.849320][T10655] (syz.4.1579,10655,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 663.900322][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 664.047705][T10328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 664.228802][T10308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.937247][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 664.959816][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 664.999863][T10308] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.920417][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 665.941777][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.099255][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.106434][ T4253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.114515][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.124586][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.142827][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.149938][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.233854][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.258369][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.269629][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.286337][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.344075][T10328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.357699][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.369661][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 666.400168][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 666.446839][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 666.469428][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 666.481211][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 666.491024][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 666.501028][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.513047][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 666.521667][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 666.650388][T10308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 666.719372][ T144] device hsr_slave_0 left promiscuous mode [ 666.730154][ T144] device hsr_slave_1 left promiscuous mode [ 666.755710][ T144] device hsr_slave_0 left promiscuous mode [ 666.762790][ T144] device hsr_slave_1 left promiscuous mode [ 666.853066][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.864240][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.614395][ T144] device bridge_slave_1 left promiscuous mode [ 667.634283][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.665903][ T144] device bridge_slave_0 left promiscuous mode [ 667.905714][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.976663][ T144] device veth1_macvtap left promiscuous mode [ 667.986355][ T144] device veth0_macvtap left promiscuous mode [ 669.394347][ T144] device veth1_vlan left promiscuous mode [ 669.400163][ T144] device veth0_vlan left promiscuous mode [ 673.714009][ T144] bond0 (unregistering): Released all slaves [ 675.572700][ T144] team0 (unregistering): Port device team_slave_1 removed [ 675.586474][ T144] team0 (unregistering): Port device team_slave_0 removed [ 675.948385][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.196585][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.273984][ T144] bond0 (unregistering): Released all slaves [ 678.063056][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 678.077083][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 678.098375][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 678.107361][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 678.124999][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 678.133293][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 678.213561][T10804] device syzkaller0 entered promiscuous mode [ 678.309964][T10328] device veth0_vlan entered promiscuous mode [ 678.349822][T10328] device veth1_vlan entered promiscuous mode [ 678.619938][T10328] device veth0_macvtap entered promiscuous mode [ 678.650178][T10328] device veth1_macvtap entered promiscuous mode [ 678.701134][T10328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.732188][T10328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.760797][T10328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.513411][T10821] o2cb: Local heartbeat has not been started. [ 679.519519][T10821] o2cb: Cluster check failed. Fix errors before retrying. [ 679.531593][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 679.551992][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 679.579048][T10821] (syz.4.1609,10821,1):user_dlm_register:675 ERROR: status = -22 [ 679.586920][T10821] (syz.4.1609,10821,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 679.599477][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 679.610781][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 679.624013][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 679.632282][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 679.648800][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 679.660905][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 679.668825][T10826] o2cb: Local heartbeat has not been started. [ 679.674984][T10826] o2cb: Cluster check failed. Fix errors before retrying. [ 679.682128][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 679.682251][T10826] (syz.4.1610,10826,0):user_dlm_register:675 ERROR: status = -22 [ 679.698295][T10826] (syz.4.1610,10826,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 679.707833][T10328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.729153][T10328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.758555][T10328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.768649][T10328] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.780186][T10328] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.789414][T10328] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.800454][T10328] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.882883][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 679.903412][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 680.096567][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 681.152687][T10308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.288720][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.309675][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.324457][T10847] o2cb: Local heartbeat has not been started. [ 681.783135][T10847] o2cb: Cluster check failed. Fix errors before retrying. [ 682.046777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 682.104000][T10847] (syz.0.1614,10847,0):user_dlm_register:675 ERROR: status = -22 [ 682.138159][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.157343][T10847] (syz.0.1614,10847,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 682.172098][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.190119][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 683.028917][T10869] o2cb: Local heartbeat has not been started. [ 683.038770][T10869] o2cb: Cluster check failed. Fix errors before retrying. [ 683.050688][T10869] (syz.0.1617,10869,1):user_dlm_register:675 ERROR: status = -22 [ 683.060487][T10869] (syz.0.1617,10869,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 683.829021][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 683.857636][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.257352][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 685.273783][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.302053][T10900] o2cb: Local heartbeat has not been started. [ 686.149310][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.167131][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.685094][T10308] device veth0_vlan entered promiscuous mode [ 686.696792][T10900] o2cb: Cluster check failed. Fix errors before retrying. [ 686.701614][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 686.703987][T10900] (syz.3.1622,10900,0):user_dlm_register:675 ERROR: status = -22 [ 686.718996][T10900] (syz.3.1622,10900,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 686.723107][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 686.760053][T10308] device veth1_vlan entered promiscuous mode [ 686.865822][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 686.911943][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 687.461753][T10308] device veth0_macvtap entered promiscuous mode [ 687.812550][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 687.937578][T10308] device veth1_macvtap entered promiscuous mode [ 689.273958][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.353893][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.390836][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.411804][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.470515][T10308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.532199][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 689.584538][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 689.599113][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.690028][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.760958][T10308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.228760][T10308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.300775][T10308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.336570][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 690.603100][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 691.165469][T10979] device syzkaller0 entered promiscuous mode [ 694.643873][ T4227] Bluetooth: hci0: command 0x0409 tx timeout [ 695.708559][T11040] o2cb: Local heartbeat has not been started. [ 695.717254][T11043] o2cb: Local heartbeat has not been started. [ 695.765577][T10987] chnl_net:caif_netlink_parms(): no params data found [ 695.771780][T11040] o2cb: Cluster check failed. Fix errors before retrying. [ 695.779530][T11040] (syz.7.1648,11040,0):user_dlm_register:675 ERROR: status = -22 [ 695.787338][T11040] (syz.7.1648,11040,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 695.796526][T11043] o2cb: Cluster check failed. Fix errors before retrying. [ 695.945409][T11043] (syz.3.1650,11043,0):user_dlm_register:675 ERROR: status = -22 [ 695.955626][T11043] (syz.3.1650,11043,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 696.560228][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.608169][T11064] o2cb: Local heartbeat has not been started. [ 696.614640][T10987] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.709277][T11064] o2cb: Cluster check failed. Fix errors before retrying. [ 696.732548][T11064] (syz.4.1655,11064,0):user_dlm_register:675 ERROR: status = -22 [ 696.750591][T10987] device bridge_slave_0 entered promiscuous mode [ 696.769837][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 696.849075][T11064] (syz.4.1655,11064,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 696.861721][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.884032][T10987] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.947307][T11072] o2cb: Local heartbeat has not been started. [ 696.973796][T11072] o2cb: Cluster check failed. Fix errors before retrying. [ 696.985378][T10987] device bridge_slave_1 entered promiscuous mode [ 696.993278][T11072] (syz.0.1656,11072,1):user_dlm_register:675 ERROR: status = -22 [ 697.091896][T11072] (syz.0.1656,11072,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 698.074599][T10987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.087377][T10987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.776188][T10987] team0: Port device team_slave_0 added [ 698.784412][T10987] team0: Port device team_slave_1 added [ 698.908006][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 699.005501][T10987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.242743][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.612910][T10987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.659671][T10987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.740363][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.441027][T10987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.526643][T10987] device hsr_slave_0 entered promiscuous mode [ 700.545916][T10987] device hsr_slave_1 entered promiscuous mode [ 700.559966][T10987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.575192][T10987] Cannot create hsr debugfs directory [ 701.206267][T11113] device syzkaller0 entered promiscuous mode [ 702.181485][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 702.240449][T11129] o2cb: Local heartbeat has not been started. [ 702.307487][T11129] o2cb: Cluster check failed. Fix errors before retrying. [ 702.337795][T11129] (syz.7.1668,11129,0):user_dlm_register:675 ERROR: status = -22 [ 702.365346][T11129] (syz.7.1668,11129,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 703.653186][T10987] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 704.201738][T10987] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 704.217449][T10987] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 704.230371][T10987] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 704.320810][T10987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.865826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 705.308694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 705.321281][T10987] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.530377][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 705.549865][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 706.155525][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.162653][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.170651][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 706.352548][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 707.646718][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 707.676152][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.683390][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.714587][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 707.724029][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 707.733356][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 707.820660][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 707.829623][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 707.839284][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 707.848191][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 707.858011][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 707.866715][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 707.883629][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 707.892039][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.776266][ T144] device hsr_slave_0 left promiscuous mode [ 709.138927][ T144] device hsr_slave_1 left promiscuous mode [ 709.150260][T11234] o2cb: Local heartbeat has not been started. [ 709.157183][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.352649][T11234] o2cb: Cluster check failed. Fix errors before retrying. [ 709.372480][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.379802][T11234] (syz.7.1692,11234,0):user_dlm_register:675 ERROR: status = -22 [ 709.393270][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.402488][T11234] (syz.7.1692,11234,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 709.463041][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.533545][ T144] device bridge_slave_1 left promiscuous mode [ 709.539764][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.551742][ T144] device bridge_slave_0 left promiscuous mode [ 709.591568][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.621618][ T144] device veth1_macvtap left promiscuous mode [ 710.076057][ T144] device veth0_macvtap left promiscuous mode [ 710.082235][ T144] device veth1_vlan left promiscuous mode [ 710.088496][ T144] device veth0_vlan left promiscuous mode [ 712.459491][ T144] team0 (unregistering): Port device team_slave_1 removed [ 712.476028][ T144] team0 (unregistering): Port device team_slave_0 removed [ 712.489929][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.089873][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.130619][T11302] o2cb: Local heartbeat has not been started. [ 713.156292][T11302] o2cb: Cluster check failed. Fix errors before retrying. [ 713.168517][T11302] (syz.7.1705,11302,1):user_dlm_register:675 ERROR: status = -22 [ 713.180988][T11302] (syz.7.1705,11302,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 713.198836][ T144] bond0 (unregistering): Released all slaves [ 714.020215][T11318] o2cb: Local heartbeat has not been started. [ 714.026426][T11318] o2cb: Cluster check failed. Fix errors before retrying. [ 714.033936][T11318] (syz.4.1710,11318,0):user_dlm_register:675 ERROR: status = -22 [ 714.041670][T11318] (syz.4.1710,11318,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 714.067770][T11319] o2cb: Local heartbeat has not been started. [ 714.074860][T11319] o2cb: Cluster check failed. Fix errors before retrying. [ 714.082748][T11319] (syz.7.1709,11319,1):user_dlm_register:675 ERROR: status = -22 [ 714.090506][T11319] (syz.7.1709,11319,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 714.090753][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 714.127530][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 714.366423][T10987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.882245][T11331] o2cb: Local heartbeat has not been started. [ 714.894956][T11331] o2cb: Cluster check failed. Fix errors before retrying. [ 714.944466][T11331] (syz.0.1716,11331,0):user_dlm_register:675 ERROR: status = -22 [ 714.967667][T11331] (syz.0.1716,11331,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 717.260391][T11372] o2cb: Local heartbeat has not been started. [ 717.932652][T11372] o2cb: Cluster check failed. Fix errors before retrying. [ 717.939999][T11372] (syz.4.1722,11372,0):user_dlm_register:675 ERROR: status = -22 [ 717.982480][T11372] (syz.4.1722,11372,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 718.138389][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 718.193212][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.830021][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 718.903968][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 719.049017][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 719.057368][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 719.082885][T10987] device veth0_vlan entered promiscuous mode [ 719.112343][T11387] o2cb: Local heartbeat has not been started. [ 719.168600][T11387] o2cb: Cluster check failed. Fix errors before retrying. [ 719.187556][T11387] (syz.7.1725,11387,1):user_dlm_register:675 ERROR: status = -22 [ 719.200588][T10987] device veth1_vlan entered promiscuous mode [ 719.392675][T11387] (syz.7.1725,11387,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 719.944572][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 720.845558][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 720.864578][T11407] o2cb: Local heartbeat has not been started. [ 720.870674][T11407] o2cb: Cluster check failed. Fix errors before retrying. [ 720.915850][T10987] device veth0_macvtap entered promiscuous mode [ 720.943543][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 721.001737][T11407] (syz.7.1729,11407,0):user_dlm_register:675 ERROR: status = -22 [ 721.009569][T11407] (syz.7.1729,11407,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 721.139878][T10987] device veth1_macvtap entered promiscuous mode [ 721.856591][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.193969][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.225934][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.236740][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.248644][T10987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.258879][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.269372][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.279343][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.300108][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.688529][T10987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.947218][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 723.968623][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.076478][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 724.090439][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.143842][T10987] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.166833][T10987] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.195460][T11452] o2cb: Local heartbeat has not been started. [ 724.199462][T10987] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.217780][T11452] o2cb: Cluster check failed. Fix errors before retrying. [ 724.466888][T10987] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.485160][T11452] (syz.4.1740,11452,1):user_dlm_register:675 ERROR: status = -22 [ 724.537445][T11452] (syz.4.1740,11452,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 724.552963][T11457] o2cb: Local heartbeat has not been started. [ 724.595642][T11457] o2cb: Cluster check failed. Fix errors before retrying. [ 724.669474][T11457] (syz.7.1741,11457,1):user_dlm_register:675 ERROR: status = -22 [ 724.705468][T11457] (syz.7.1741,11457,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 724.721273][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.736709][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.779225][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 724.810734][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.819612][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.846585][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 725.778648][T11475] o2cb: Local heartbeat has not been started. [ 725.795567][T11475] o2cb: Cluster check failed. Fix errors before retrying. [ 726.647956][T11475] (syz.7.1746,11475,1):user_dlm_register:675 ERROR: status = -22 [ 726.844824][T11475] (syz.7.1746,11475,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 727.614427][T11513] o2cb: Local heartbeat has not been started. [ 727.621220][T11513] o2cb: Cluster check failed. Fix errors before retrying. [ 727.628590][T11513] (syz.6.1751,11513,1):user_dlm_register:675 ERROR: status = -22 [ 727.637570][T11513] (syz.6.1751,11513,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 730.990021][T11559] o2cb: Local heartbeat has not been started. [ 731.034426][T11559] o2cb: Cluster check failed. Fix errors before retrying. [ 731.127040][T11559] (syz.7.1767,11559,0):user_dlm_register:675 ERROR: status = -22 [ 731.215587][T11557] o2cb: Local heartbeat has not been started. [ 731.244480][T11559] (syz.7.1767,11559,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 731.474221][T11557] o2cb: Cluster check failed. Fix errors before retrying. [ 731.482734][T11557] (syz.6.1764,11557,1):user_dlm_register:675 ERROR: status = -22 [ 731.490942][T11557] (syz.6.1764,11557,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 732.091155][T11594] o2cb: Local heartbeat has not been started. [ 732.098772][T11594] o2cb: Cluster check failed. Fix errors before retrying. [ 732.115144][T11594] (syz.4.1777,11594,0):user_dlm_register:675 ERROR: status = -22 [ 732.162409][T11594] (syz.4.1777,11594,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 735.235077][T11654] IPVS: dh: FWM 3 0x00000003 - no destination available [ 736.916796][T11672] o2cb: Local heartbeat has not been started. [ 736.976644][T11672] o2cb: Cluster check failed. Fix errors before retrying. [ 736.984650][T11672] (syz.6.1796,11672,1):user_dlm_register:675 ERROR: status = -22 [ 736.993451][T11672] (syz.6.1796,11672,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 739.758719][T11731] o2cb: Local heartbeat has not been started. [ 739.882501][T11731] o2cb: Cluster check failed. Fix errors before retrying. [ 739.889855][T11731] (syz.4.1808,11731,0):user_dlm_register:675 ERROR: status = -22 [ 739.912905][T11731] (syz.4.1808,11731,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 742.579825][T11771] o2cb: Local heartbeat has not been started. [ 742.592479][T11771] o2cb: Cluster check failed. Fix errors before retrying. [ 742.606819][T11771] (syz.7.1822,11771,1):user_dlm_register:675 ERROR: status = -22 [ 743.293244][T11771] (syz.7.1822,11771,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 747.540167][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.547307][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.275262][T11900] FAULT_INJECTION: forcing a failure. [ 754.275262][T11900] name failslab, interval 1, probability 0, space 0, times 1 [ 754.392425][T11900] CPU: 1 PID: 11900 Comm: syz.3.1855 Not tainted syzkaller #0 [ 754.399925][T11900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 754.410050][T11900] Call Trace: [ 754.413368][T11900] [ 754.416379][T11900] dump_stack_lvl+0x188/0x250 [ 754.421219][T11900] ? show_regs_print_info+0x20/0x20 [ 754.426419][T11900] ? load_image+0x410/0x410 [ 754.431008][T11900] ? __lock_acquire+0x7b50/0x7b50 [ 754.436141][T11900] should_fail+0x383/0x4b0 [ 754.440663][T11900] should_failslab+0x5/0x20 [ 754.445205][T11900] slab_pre_alloc_hook+0x51/0xc0 [ 754.450189][T11900] __kmalloc+0x6b/0x340 [ 754.454347][T11900] ? __se_sys_memfd_create+0x142/0x450 [ 754.459885][T11900] ? strnlen_user+0x19b/0x250 [ 754.464572][T11900] __se_sys_memfd_create+0x142/0x450 [ 754.469864][T11900] ? lock_chain_count+0x20/0x20 [ 754.474721][T11900] ? __x64_sys_memfd_create+0x60/0x60 [ 754.480101][T11900] ? lockdep_hardirqs_on+0x94/0x140 [ 754.485383][T11900] do_syscall_64+0x4c/0xa0 [ 754.489804][T11900] ? clear_bhb_loop+0x30/0x80 [ 754.494591][T11900] ? clear_bhb_loop+0x30/0x80 [ 754.499272][T11900] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 754.505194][T11900] RIP: 0033:0x7fd1faf58159 [ 754.509661][T11900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.529320][T11900] RSP: 002b:00007fd1f91afe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 754.537752][T11900] RAX: ffffffffffffffda RBX: 0000000000005554 RCX: 00007fd1faf58159 [ 754.545732][T11900] RDX: 00007fd1f91afee0 RSI: 0000000000000000 RDI: 00007fd1fafef24b [ 754.553707][T11900] RBP: 000020000000c100 R08: 00000000ffffffff R09: 0000000000000000 [ 754.561683][T11900] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 754.569660][T11900] R13: 00007fd1f91afee0 R14: 00007fd1f91afea0 R15: 0000200000000380 [ 754.577650][T11900] [ 754.990128][T11918] o2cb: Local heartbeat has not been started. [ 755.032928][T11918] o2cb: Cluster check failed. Fix errors before retrying. [ 755.101806][T11918] (syz.6.1858,11918,1):user_dlm_register:675 ERROR: status = -22 [ 755.211022][T11918] (syz.6.1858,11918,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 757.908539][T11961] FAULT_INJECTION: forcing a failure. [ 757.908539][T11961] name failslab, interval 1, probability 0, space 0, times 0 [ 757.926047][T11961] CPU: 1 PID: 11961 Comm: syz.6.1869 Not tainted syzkaller #0 [ 757.933550][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 757.943451][T11963] tipc: Started in network mode [ 757.943612][T11961] Call Trace: [ 757.943621][T11961] [ 757.943632][T11961] dump_stack_lvl+0x188/0x250 [ 757.943653][T11961] ? show_regs_print_info+0x20/0x20 [ 757.943666][T11961] ? load_image+0x410/0x410 [ 757.969286][T11963] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 757.969730][T11961] ? __lock_acquire+0x7b50/0x7b50 [ 757.981857][T11961] should_fail+0x383/0x4b0 [ 757.986310][T11961] should_failslab+0x5/0x20 [ 757.990829][T11961] slab_pre_alloc_hook+0x51/0xc0 [ 757.995777][T11961] __kmalloc+0x6b/0x340 [ 757.999938][T11961] ? __se_sys_memfd_create+0x142/0x450 [ 758.005446][T11961] ? strnlen_user+0x19b/0x250 [ 758.010136][T11961] __se_sys_memfd_create+0x142/0x450 [ 758.012395][T11963] tipc: Enabled bearer , priority 0 [ 758.015460][T11961] ? lock_chain_count+0x20/0x20 [ 758.026606][T11961] ? __x64_sys_memfd_create+0x60/0x60 [ 758.031996][T11961] ? lockdep_hardirqs_on+0x94/0x140 [ 758.037205][T11961] do_syscall_64+0x4c/0xa0 [ 758.041629][T11961] ? clear_bhb_loop+0x30/0x80 [ 758.046314][T11961] ? clear_bhb_loop+0x30/0x80 [ 758.050997][T11961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 758.056897][T11961] RIP: 0033:0x7f544edc8159 [ 758.061321][T11961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.080935][T11961] RSP: 002b:00007f544d01fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 758.089360][T11961] RAX: ffffffffffffffda RBX: 0000000000000142 RCX: 00007f544edc8159 [ 758.097340][T11961] RDX: 00007f544d01fee0 RSI: 0000000000000000 RDI: 00007f544ee5f24b [ 758.105318][T11961] RBP: 0000200000000240 R08: 00000000ffffffff R09: 0000000000000000 [ 758.113291][T11961] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000001c0 [ 758.121267][T11961] R13: 00007f544d01fee0 R14: 00007f544d01fea0 R15: 0000200000000200 [ 758.129263][T11961] [ 759.196241][ T4308] tipc: Node number set to 43690 [ 759.262412][T10026] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 759.572773][T12002] IPVS: dh: FWM 3 0x00000003 - no destination available [ 760.616445][T12018] FAULT_INJECTION: forcing a failure. [ 760.616445][T12018] name fail_futex, interval 1, probability 0, space 0, times 1 [ 760.905828][T12018] CPU: 1 PID: 12018 Comm: syz.7.1881 Not tainted syzkaller #0 [ 760.913324][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 760.923377][T12018] Call Trace: [ 760.926651][T12018] [ 760.929580][T12018] dump_stack_lvl+0x188/0x250 [ 760.934262][T12018] ? show_regs_print_info+0x20/0x20 [ 760.939457][T12018] ? load_image+0x410/0x410 [ 760.943955][T12018] ? mark_lock+0x94/0x320 [ 760.948281][T12018] ? __lock_acquire+0x13dc/0x7b50 [ 760.953303][T12018] should_fail+0x383/0x4b0 [ 760.957726][T12018] get_futex_key+0x1a1/0x12d0 [ 760.962523][T12018] ? futex_wait_restart+0x250/0x250 [ 760.967722][T12018] ? verify_lock_unused+0x140/0x140 [ 760.972930][T12018] do_futex+0x236/0x12b0 [ 760.977173][T12018] ? vfs_write+0xaa6/0xd70 [ 760.981660][T12018] ? futex_exit_release+0x1c0/0x1c0 [ 760.986856][T12018] ? __context_tracking_exit+0x4c/0x80 [ 760.992326][T12018] __se_sys_futex+0x389/0x420 [ 760.997016][T12018] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 761.003003][T12018] ? __x64_sys_futex+0xf0/0xf0 [ 761.007775][T12018] ? __x64_sys_futex+0x1d/0xf0 [ 761.012546][T12018] do_syscall_64+0x4c/0xa0 [ 761.016961][T12018] ? clear_bhb_loop+0x30/0x80 [ 761.021638][T12018] ? clear_bhb_loop+0x30/0x80 [ 761.026315][T12018] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 761.032207][T12018] RIP: 0033:0x7fd705740159 [ 761.036796][T12018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.056409][T12018] RSP: 002b:00007fd703977028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 761.064828][T12018] RAX: ffffffffffffffda RBX: 00007fd7059c8090 RCX: 00007fd705740159 [ 761.072800][T12018] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000020000000cffc [ 761.080769][T12018] RBP: 00007fd703977090 R08: 0000200000000040 R09: 0000000042fffffe [ 761.088736][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.096708][T12018] R13: 00007fd7059c8128 R14: 00007fd7059c8090 R15: 00007ffd72609868 [ 761.104687][T12018] [ 761.113118][T10026] usb 1-1: Using ep0 maxpacket: 16 [ 761.222545][T10026] usb 1-1: device descriptor read/all, error -71 [ 761.225374][T12028] FAULT_INJECTION: forcing a failure. [ 761.225374][T12028] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 761.243779][T12029] FAULT_INJECTION: forcing a failure. [ 761.243779][T12029] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 761.261327][T12029] CPU: 1 PID: 12029 Comm: syz.6.1884 Not tainted syzkaller #0 [ 761.268806][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 761.278871][T12029] Call Trace: [ 761.282155][T12029] [ 761.285093][T12029] dump_stack_lvl+0x188/0x250 [ 761.289784][T12029] ? show_regs_print_info+0x20/0x20 [ 761.294988][T12029] ? load_image+0x410/0x410 [ 761.299498][T12029] ? __lock_acquire+0x7b50/0x7b50 [ 761.304535][T12029] should_fail+0x383/0x4b0 [ 761.308963][T12029] _copy_from_user+0x2e/0x170 [ 761.313720][T12029] __copy_msghdr_from_user+0xc9/0x630 [ 761.319182][T12029] ? verify_lock_unused+0x140/0x140 [ 761.324408][T12029] ? mark_lock+0x94/0x320 [ 761.328743][T12029] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 761.334031][T12029] ? __lock_acquire+0x13dc/0x7b50 [ 761.339075][T12029] ___sys_sendmsg+0x19a/0x2e0 [ 761.343851][T12029] ? __sys_sendmsg+0x290/0x290 [ 761.348651][T12029] __se_sys_sendmsg+0x1b7/0x2a0 [ 761.353509][T12029] ? __x64_sys_sendmsg+0x80/0x80 [ 761.358449][T12029] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 761.364446][T12029] ? lockdep_hardirqs_on+0x94/0x140 [ 761.369653][T12029] do_syscall_64+0x4c/0xa0 [ 761.374072][T12029] ? clear_bhb_loop+0x30/0x80 [ 761.378761][T12029] ? clear_bhb_loop+0x30/0x80 [ 761.383444][T12029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 761.389340][T12029] RIP: 0033:0x7f544edc8159 [ 761.393757][T12029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.413373][T12029] RSP: 002b:00007f544d020028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.421796][T12029] RAX: ffffffffffffffda RBX: 00007f544f04ffa0 RCX: 00007f544edc8159 [ 761.429779][T12029] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 761.437755][T12029] RBP: 00007f544d020090 R08: 0000000000000000 R09: 0000000000000000 [ 761.445735][T12029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.453713][T12029] R13: 00007f544f050038 R14: 00007f544f04ffa0 R15: 00007ffdb08339a8 [ 761.461702][T12029] [ 761.532366][T12028] CPU: 1 PID: 12028 Comm: syz.0.1883 Not tainted syzkaller #0 [ 761.539864][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 761.549920][T12028] Call Trace: [ 761.553206][T12028] [ 761.556144][T12028] dump_stack_lvl+0x188/0x250 [ 761.560831][T12028] ? show_regs_print_info+0x20/0x20 [ 761.566031][T12028] ? load_image+0x410/0x410 [ 761.570541][T12028] ? __lock_acquire+0x7b50/0x7b50 [ 761.575585][T12028] should_fail+0x383/0x4b0 [ 761.580011][T12028] _copy_from_user+0x2e/0x170 [ 761.584700][T12028] __sys_bpf+0x26d/0x6f0 [ 761.589044][T12028] ? bpf_link_show_fdinfo+0x380/0x380 [ 761.594440][T12028] __x64_sys_bpf+0x78/0x90 [ 761.598864][T12028] do_syscall_64+0x4c/0xa0 [ 761.603286][T12028] ? clear_bhb_loop+0x30/0x80 [ 761.607971][T12028] ? clear_bhb_loop+0x30/0x80 [ 761.612657][T12028] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 761.618552][T12028] RIP: 0033:0x7ff681046159 [ 761.622970][T12028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.642580][T12028] RSP: 002b:00007ff67f29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 761.651004][T12028] RAX: ffffffffffffffda RBX: 00007ff6812cdfa0 RCX: 00007ff681046159 [ 761.658979][T12028] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 761.666954][T12028] RBP: 00007ff67f29e090 R08: 0000000000000000 R09: 0000000000000000 [ 761.674930][T12028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.682911][T12028] R13: 00007ff6812ce038 R14: 00007ff6812cdfa0 R15: 00007ffd54a13ea8 [ 761.690898][T12028] [ 761.828720][T12071] qrtr: Invalid version 6 [ 762.159933][T12100] FAULT_INJECTION: forcing a failure. [ 762.159933][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 762.242639][T11867] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 762.432887][T11867] usb 4-1: device descriptor read/64, error -71 [ 762.597887][T12100] CPU: 1 PID: 12100 Comm: syz.6.1893 Not tainted syzkaller #0 [ 762.605385][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 762.615447][T12100] Call Trace: [ 762.618728][T12100] [ 762.621654][T12100] dump_stack_lvl+0x188/0x250 [ 762.626334][T12100] ? show_regs_print_info+0x20/0x20 [ 762.631536][T12100] ? load_image+0x410/0x410 [ 762.636038][T12100] ? __might_sleep+0xf0/0xf0 [ 762.640723][T12100] ? __lock_acquire+0x7b50/0x7b50 [ 762.645750][T12100] should_fail+0x383/0x4b0 [ 762.650176][T12100] should_failslab+0x5/0x20 [ 762.654679][T12100] slab_pre_alloc_hook+0x51/0xc0 [ 762.659621][T12100] __kmalloc+0x6b/0x340 [ 762.663771][T12100] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 762.669646][T12100] tomoyo_realpath_from_path+0xed/0x5e0 [ 762.675202][T12100] tomoyo_path_number_perm+0x251/0x6b0 [ 762.680661][T12100] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 762.686117][T12100] ? ksys_write+0x1d4/0x260 [ 762.690661][T12100] security_file_ioctl+0x6c/0xa0 [ 762.695666][T12100] __se_sys_ioctl+0x48/0x170 [ 762.700281][T12100] do_syscall_64+0x4c/0xa0 [ 762.704707][T12100] ? clear_bhb_loop+0x30/0x80 [ 762.709399][T12100] ? clear_bhb_loop+0x30/0x80 [ 762.714082][T12100] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 762.719979][T12100] RIP: 0033:0x7f544edc8159 [ 762.724396][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.744006][T12100] RSP: 002b:00007f544d020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.752432][T12100] RAX: ffffffffffffffda RBX: 00007f544f04ffa0 RCX: 00007f544edc8159 [ 762.760413][T12100] RDX: 0000200000000100 RSI: 00000000000089f6 RDI: 0000000000000003 [ 762.768393][T12100] RBP: 00007f544d020090 R08: 0000000000000000 R09: 0000000000000000 [ 762.776368][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.784349][T12100] R13: 00007f544f050038 R14: 00007f544f04ffa0 R15: 00007ffdb08339a8 [ 762.792349][T12100] [ 762.795474][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.826270][T12100] ERROR: Out of memory at tomoyo_realpath_from_path. [ 762.872413][T11867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 762.979840][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 762.989270][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 762.990396][T12109] binder: 12108:12109 ioctl 80089418 0 returned -22 [ 762.999187][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 763.014603][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 763.024162][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 763.040943][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 763.051729][T12112] FAULT_INJECTION: forcing a failure. [ 763.051729][T12112] name failslab, interval 1, probability 0, space 0, times 0 [ 763.067280][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 763.072419][T11867] usb 4-1: device descriptor read/64, error -71 [ 763.083316][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 763.102765][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 763.122966][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1898'. [ 763.132568][T12112] CPU: 0 PID: 12112 Comm: syz.6.1897 Not tainted syzkaller #0 [ 763.140049][T12112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 763.150114][T12112] Call Trace: [ 763.153397][T12112] [ 763.156328][T12112] dump_stack_lvl+0x188/0x250 [ 763.161017][T12112] ? show_regs_print_info+0x20/0x20 [ 763.166218][T12112] ? load_image+0x410/0x410 [ 763.170728][T12112] ? __might_sleep+0xf0/0xf0 [ 763.175320][T12112] ? __lock_acquire+0x7b50/0x7b50 [ 763.180353][T12112] should_fail+0x383/0x4b0 [ 763.184777][T12112] should_failslab+0x5/0x20 [ 763.189279][T12112] slab_pre_alloc_hook+0x51/0xc0 [ 763.194225][T12112] __kmalloc+0x6b/0x340 [ 763.198377][T12112] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 763.204107][T12112] tomoyo_realpath_from_path+0xed/0x5e0 [ 763.207130][T11867] usb usb4-port1: attempt power cycle [ 763.209662][T12112] tomoyo_path_number_perm+0x251/0x6b0 [ 763.209696][T12112] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 763.209714][T12112] ? ksys_write+0x1d4/0x260 [ 763.209764][T12112] security_file_ioctl+0x6c/0xa0 [ 763.235394][T12112] __se_sys_ioctl+0x48/0x170 [ 763.239999][T12112] do_syscall_64+0x4c/0xa0 [ 763.244430][T12112] ? clear_bhb_loop+0x30/0x80 [ 763.249202][T12112] ? clear_bhb_loop+0x30/0x80 [ 763.253892][T12112] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.259795][T12112] RIP: 0033:0x7f544edc8159 [ 763.264223][T12112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.284015][T12112] RSP: 002b:00007f544cfff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.292442][T12112] RAX: ffffffffffffffda RBX: 00007f544f050090 RCX: 00007f544edc8159 [ 763.300424][T12112] RDX: 0100000000000000 RSI: 00000000c0046209 RDI: 0000000000000003 [ 763.308402][T12112] RBP: 00007f544cfff090 R08: 0000000000000000 R09: 0000000000000000 [ 763.316377][T12112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.324348][T12112] R13: 00007f544f050128 R14: 00007f544f050090 R15: 00007ffdb08339a8 [ 763.332345][T12112] [ 763.340109][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 763.349861][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 763.359963][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 763.380392][T12112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 763.408219][T12112] binder: 12108:12112 ioctl c0046209 100000000000000 returned -22 [ 763.457228][T12116] o2cb: Local heartbeat has not been started. [ 763.467216][T12117] o2cb: Local heartbeat has not been started. [ 763.472382][T12116] o2cb: Cluster check failed. Fix errors before retrying. [ 763.481451][T12117] o2cb: Cluster check failed. Fix errors before retrying. [ 763.491007][T12117] (syz.4.1900,12117,0):user_dlm_register:675 ERROR: status = -22 [ 763.502440][T12116] (syz.0.1899,12116,1):user_dlm_register:675 ERROR: status = -22 [ 763.507104][T12117] (syz.4.1900,12117,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 763.527145][T12116] (syz.0.1899,12116,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 763.568504][T12121] FAULT_INJECTION: forcing a failure. [ 763.568504][T12121] name failslab, interval 1, probability 0, space 0, times 0 [ 763.622496][T11867] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 763.637063][T12124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.654840][T12124] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 763.654840][T12124] verification time 190 usec [ 763.654840][T12124] stack depth 0 [ 763.654840][T12124] processed 2 insns (limit 1000000) max_states_¤" or missing value [ 763.688219][T12127] netlink: 'syz.7.1905': attribute type 29 has an invalid length. [ 763.690377][T12121] CPU: 0 PID: 12121 Comm: syz.6.1902 Not tainted syzkaller #0 [ 763.704297][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 763.712580][T11867] usb 4-1: device descriptor read/8, error -71 [ 763.714358][T12121] Call Trace: [ 763.714367][T12121] [ 763.726689][T12121] dump_stack_lvl+0x188/0x250 [ 763.730419][T12127] netlink: 'syz.7.1905': attribute type 29 has an invalid length. [ 763.731372][T12121] ? show_regs_print_info+0x20/0x20 [ 763.731393][T12121] ? load_image+0x410/0x410 [ 763.731411][T12121] ? __lock_acquire+0x7b50/0x7b50 [ 763.731435][T12121] should_fail+0x383/0x4b0 [ 763.758485][T12121] should_failslab+0x5/0x20 [ 763.763000][T12121] slab_pre_alloc_hook+0x51/0xc0 [ 763.764209][T12129] netlink: 'syz.7.1905': attribute type 29 has an invalid length. [ 763.767940][T12121] __kmalloc+0x6b/0x340 [ 763.767960][T12121] ? __se_sys_memfd_create+0x142/0x450 [ 763.785329][T12121] ? strnlen_user+0x19b/0x250 [ 763.790021][T12121] __se_sys_memfd_create+0x142/0x450 [ 763.795318][T12121] ? lock_chain_count+0x20/0x20 [ 763.800176][T12121] ? __x64_sys_memfd_create+0x60/0x60 [ 763.805559][T12121] ? lockdep_hardirqs_on+0x94/0x140 [ 763.810768][T12121] do_syscall_64+0x4c/0xa0 [ 763.815186][T12121] ? clear_bhb_loop+0x30/0x80 [ 763.819866][T12121] ? clear_bhb_loop+0x30/0x80 [ 763.824548][T12121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.830448][T12121] RIP: 0033:0x7f544edc8159 [ 763.834868][T12121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.854475][T12121] RSP: 002b:00007f544d01fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 763.862898][T12121] RAX: ffffffffffffffda RBX: 0000000000000a02 RCX: 00007f544edc8159 [ 763.870882][T12121] RDX: 00007f544d01fee0 RSI: 0000000000000000 RDI: 00007f544ee5f24b [ 763.878862][T12121] RBP: 0000200000001ec0 R08: 00000000ffffffff R09: 0000000000000000 [ 763.886839][T12121] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000a40 [ 763.894812][T12121] R13: 00007f544d01fee0 R14: 00007f544d01fea0 R15: 0000200000000340 [ 763.902805][T12121] [ 763.918705][T12143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.938251][T12145] overlayfs: unrecognized mount option "\t access off=176 size=4 [ 763.938251][T12145] verification time 190 usec [ 763.938251][T12145] stack depth 0 [ 763.938251][T12145] processed 2 insns (limit 1000000) max_states_¤" or missing value [ 764.112423][T11867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 764.202899][T11867] usb 4-1: device descriptor read/8, error -71 [ 764.333291][T11867] usb usb4-port1: unable to enumerate USB device [ 764.452635][T11867] Bluetooth: hci5: command 0x0406 tx timeout [ 764.962445][ T4308] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 765.377367][ T4308] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 765.395071][ T4308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.434721][ T4308] usb 8-1: config 0 descriptor?? [ 765.575532][T12192] o2cb: Local heartbeat has not been started. [ 765.591842][T12192] o2cb: Cluster check failed. Fix errors before retrying. [ 765.607643][T12192] (syz.0.1914,12192,0):user_dlm_register:675 ERROR: status = -22 [ 765.632465][T12192] (syz.0.1914,12192,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 765.820247][T12204] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 766.050528][T12182] FAULT_INJECTION: forcing a failure. [ 766.050528][T12182] name failslab, interval 1, probability 0, space 0, times 0 [ 766.100242][T12182] CPU: 0 PID: 12182 Comm: syz.4.1913 Not tainted syzkaller #0 [ 766.107742][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 766.117799][T12182] Call Trace: [ 766.121081][T12182] [ 766.124012][T12182] dump_stack_lvl+0x188/0x250 [ 766.128693][T12182] ? show_regs_print_info+0x20/0x20 [ 766.133888][T12182] ? load_image+0x410/0x410 [ 766.138395][T12182] ? __might_sleep+0xf0/0xf0 [ 766.142987][T12182] ? __lock_acquire+0x7b50/0x7b50 [ 766.148016][T12182] should_fail+0x383/0x4b0 [ 766.152443][T12182] should_failslab+0x5/0x20 [ 766.156956][T12182] slab_pre_alloc_hook+0x51/0xc0 [ 766.161896][T12182] ? getname_flags+0xb7/0x4f0 [ 766.166581][T12182] kmem_cache_alloc+0x3d/0x280 [ 766.171352][T12182] getname_flags+0xb7/0x4f0 [ 766.175864][T12182] __x64_sys_mknodat+0x94/0xc0 [ 766.180632][T12182] do_syscall_64+0x4c/0xa0 [ 766.185054][T12182] ? clear_bhb_loop+0x30/0x80 [ 766.189732][T12182] ? clear_bhb_loop+0x30/0x80 [ 766.194416][T12182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 766.200318][T12182] RIP: 0033:0x7ff07bcf9159 [ 766.204735][T12182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.224342][T12182] RSP: 002b:00007ff079f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 766.232772][T12182] RAX: ffffffffffffffda RBX: 00007ff07bf80fa0 RCX: 00007ff07bcf9159 [ 766.240750][T12182] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 766.248729][T12182] RBP: 00007ff079f51090 R08: 0000000000000000 R09: 0000000000000000 [ 766.256707][T12182] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 766.264686][T12182] R13: 00007ff07bf81038 R14: 00007ff07bf80fa0 R15: 00007fffdfd41e88 [ 766.272678][T12182] [ 766.332429][ T4308] usb 8-1: Cannot set MAC address [ 766.338579][ T4308] MOSCHIP usb-ethernet driver: probe of 8-1:0.0 failed with error -71 [ 766.357654][ T4308] usb 8-1: USB disconnect, device number 2 [ 767.016039][T12227] program syz.4.1921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 767.188756][T12235] FAULT_INJECTION: forcing a failure. [ 767.188756][T12235] name failslab, interval 1, probability 0, space 0, times 0 [ 767.305358][T12235] CPU: 1 PID: 12235 Comm: syz.3.1923 Not tainted syzkaller #0 [ 767.312855][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 767.322910][T12235] Call Trace: [ 767.326186][T12235] [ 767.329117][T12235] dump_stack_lvl+0x188/0x250 [ 767.333800][T12235] ? show_regs_print_info+0x20/0x20 [ 767.338996][T12235] ? load_image+0x410/0x410 [ 767.343551][T12235] ? __lock_acquire+0x7b50/0x7b50 [ 767.348593][T12235] ? ksys_write+0x1d4/0x260 [ 767.353101][T12235] should_fail+0x383/0x4b0 [ 767.357614][T12235] should_failslab+0x5/0x20 [ 767.362121][T12235] slab_pre_alloc_hook+0x51/0xc0 [ 767.367067][T12235] ? getname_flags+0xb7/0x4f0 [ 767.371751][T12235] kmem_cache_alloc+0x3d/0x280 [ 767.376525][T12235] getname_flags+0xb7/0x4f0 [ 767.381040][T12235] do_sys_openat2+0xdd/0x500 [ 767.385629][T12235] ? __lock_acquire+0x7b50/0x7b50 [ 767.390660][T12235] ? do_sys_open+0xe0/0xe0 [ 767.395084][T12235] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 767.401069][T12235] ? lock_chain_count+0x20/0x20 [ 767.405929][T12235] __x64_sys_openat+0x135/0x160 [ 767.410789][T12235] do_syscall_64+0x4c/0xa0 [ 767.415203][T12235] ? clear_bhb_loop+0x30/0x80 [ 767.419889][T12235] ? clear_bhb_loop+0x30/0x80 [ 767.424574][T12235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 767.430479][T12235] RIP: 0033:0x7fd1faf1898e [ 767.434902][T12235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 767.454517][T12235] RSP: 002b:00007fd1f91afb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 767.462944][T12235] RAX: ffffffffffffffda RBX: 00007fd1f91b06c0 RCX: 00007fd1faf1898e [ 767.470928][T12235] RDX: 0000000000000002 RSI: 00007fd1f91afc00 RDI: ffffffffffffff9c [ 767.478910][T12235] RBP: 00007fd1f91b0090 R08: 0000000000000000 R09: 0000000000000000 [ 767.486892][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.494871][T12235] R13: 00007fd1fb1e0038 R14: 00007fd1fb1dffa0 R15: 00007ffe34f336b8 [ 767.502865][T12235] [ 767.606065][T12245] o2cb: Local heartbeat has not been started. [ 767.640532][T12245] o2cb: Cluster check failed. Fix errors before retrying. [ 767.671013][T12245] (syz.4.1926,12245,0):user_dlm_register:675 ERROR: status = -22 [ 767.702321][T12245] (syz.4.1926,12245,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain0" [ 767.799553][T12258] FAULT_INJECTION: forcing a failure. [ 767.799553][T12258] name failslab, interval 1, probability 0, space 0, times 0 [ 767.826836][T12258] CPU: 1 PID: 12258 Comm: syz.4.1930 Not tainted syzkaller #0 [ 767.834331][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 767.844397][T12258] Call Trace: [ 767.847685][T12258] [ 767.850616][T12258] dump_stack_lvl+0x188/0x250 [ 767.855307][T12258] ? show_regs_print_info+0x20/0x20 [ 767.860516][T12258] ? load_image+0x410/0x410 [ 767.865034][T12258] ? __lock_acquire+0x7b50/0x7b50 [ 767.870073][T12258] should_fail+0x383/0x4b0 [ 767.874499][T12258] should_failslab+0x5/0x20 [ 767.879008][T12258] slab_pre_alloc_hook+0x51/0xc0 [ 767.883954][T12258] __kmalloc+0x6b/0x340 [ 767.888114][T12258] ? __se_sys_memfd_create+0x142/0x450 [ 767.893579][T12258] ? strnlen_user+0x19b/0x250 [ 767.898266][T12258] __se_sys_memfd_create+0x142/0x450 [ 767.903557][T12258] ? lock_chain_count+0x20/0x20 [ 767.908413][T12258] ? __x64_sys_memfd_create+0x60/0x60 [ 767.913792][T12258] ? lockdep_hardirqs_on+0x94/0x140 [ 767.918998][T12258] do_syscall_64+0x4c/0xa0 [ 767.923416][T12258] ? clear_bhb_loop+0x30/0x80 [ 767.928102][T12258] ? clear_bhb_loop+0x30/0x80 [ 767.932790][T12258] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 767.938689][T12258] RIP: 0033:0x7ff07bcf9159 [ 767.943107][T12258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.962808][T12258] RSP: 002b:00007ff079f50e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 767.971233][T12258] RAX: ffffffffffffffda RBX: 0000000000009768 RCX: 00007ff07bcf9159 [ 767.979221][T12258] RDX: 00007ff079f50ee0 RSI: 0000000000000000 RDI: 00007ff07bd9024b [ 767.987203][T12258] RBP: 0000200000012f40 R08: 00000000ffffffff R09: 0000000000000000 [ 767.995179][T12258] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000009780 [ 768.003210][T12258] R13: 00007ff079f50ee0 R14: 00007ff079f50ea0 R15: 0000200000000300 [ 768.011203][T12258] [ 768.298533][T12247] FAULT_INJECTION: forcing a failure. [ 768.298533][T12247] name failslab, interval 1, probability 0, space 0, times 0 [ 768.343526][T12247] CPU: 1 PID: 12247 Comm: syz.0.1927 Not tainted syzkaller #0 [ 768.351024][T12247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 768.361083][T12247] Call Trace: [ 768.364361][T12247] [ 768.367297][T12247] dump_stack_lvl+0x188/0x250 [ 768.371988][T12247] ? show_regs_print_info+0x20/0x20 [ 768.377191][T12247] ? load_image+0x410/0x410 [ 768.381702][T12247] ? __lock_acquire+0x7b50/0x7b50 [ 768.386735][T12247] ? ksys_write+0x1d4/0x260 [ 768.391245][T12247] should_fail+0x383/0x4b0 [ 768.395675][T12247] should_failslab+0x5/0x20 [ 768.400179][T12247] slab_pre_alloc_hook+0x51/0xc0 [ 768.405126][T12247] ? getname_flags+0xb7/0x4f0 [ 768.409842][T12247] kmem_cache_alloc+0x3d/0x280 [ 768.414615][T12247] getname_flags+0xb7/0x4f0 [ 768.419126][T12247] do_sys_openat2+0xdd/0x500 [ 768.423719][T12247] ? __lock_acquire+0x7b50/0x7b50 [ 768.428750][T12247] ? do_sys_open+0xe0/0xe0 [ 768.433168][T12247] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 768.439157][T12247] ? lock_chain_count+0x20/0x20 [ 768.444018][T12247] __x64_sys_openat+0x135/0x160 [ 768.448876][T12247] do_syscall_64+0x4c/0xa0 [ 768.453296][T12247] ? clear_bhb_loop+0x30/0x80 [ 768.457982][T12247] ? clear_bhb_loop+0x30/0x80 [ 768.462657][T12247] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 768.468554][T12247] RIP: 0033:0x7ff681046159 [ 768.472968][T12247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.492573][T12247] RSP: 002b:00007ff67f29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 768.500992][T12247] RAX: ffffffffffffffda RBX: 00007ff6812cdfa0 RCX: 00007ff681046159 [ 768.508965][T12247] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 768.516934][T12247] RBP: 00007ff67f29e090 R08: 0000000000000000 R09: 0000000000000000 [ 768.524904][T12247] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 768.532875][T12247] R13: 00007ff6812ce038 R14: 00007ff6812cdfa0 R15: 00007ffd54a13ea8 [ 768.540862][T12247] [ 768.697237][T12284] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 769.127853][T12306] __nla_validate_parse: 62 callbacks suppressed [ 769.127897][T12306] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1934'. [ 769.151001][T12270] FAULT_INJECTION: forcing a failure. [ 769.151001][T12270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.198028][T12270] CPU: 1 PID: 12270 Comm: syz.3.1931 Not tainted syzkaller #0 [ 769.205532][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 769.215601][T12270] Call Trace: [ 769.218890][T12270] [ 769.221827][T12270] dump_stack_lvl+0x188/0x250 [ 769.226516][T12270] ? show_regs_print_info+0x20/0x20 [ 769.231724][T12270] ? load_image+0x410/0x410 [ 769.236243][T12270] ? __lock_acquire+0x7b50/0x7b50 [ 769.241279][T12270] should_fail+0x383/0x4b0 [ 769.245708][T12270] _copy_from_user+0x2e/0x170 [ 769.250390][T12270] __se_sys_copy_file_range+0x1d0/0x470 [ 769.255955][T12270] ? __x64_sys_copy_file_range+0xf0/0xf0 [ 769.261633][T12270] ? __x64_sys_copy_file_range+0x1d/0xf0 [ 769.267288][T12270] do_syscall_64+0x4c/0xa0 [ 769.271712][T12270] ? clear_bhb_loop+0x30/0x80 [ 769.276404][T12270] ? clear_bhb_loop+0x30/0x80 [ 769.281095][T12270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 769.286994][T12270] RIP: 0033:0x7fd1faf58159 [ 769.291412][T12270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.311023][T12270] RSP: 002b:00007fd1f91b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 769.319618][T12270] RAX: ffffffffffffffda RBX: 00007fd1fb1dffa0 RCX: 00007fd1faf58159 [ 769.327606][T12270] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 769.335584][T12270] RBP: 00007fd1f91b0090 R08: 0000000000000009 R09: 0000000000000000 [ 769.343566][T12270] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 769.351543][T12270] R13: 00007fd1fb1e0038 R14: 00007fd1fb1dffa0 R15: 00007ffe34f336b8 [ 769.359540][T12270] [ 769.470531][T12317] FAULT_INJECTION: forcing a failure. [ 769.470531][T12317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.520400][T12317] CPU: 1 PID: 12317 Comm: syz.0.1935 Not tainted syzkaller #0 [ 769.527895][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 769.538042][T12317] Call Trace: [ 769.541332][T12317] [ 769.544275][T12317] dump_stack_lvl+0x188/0x250 [ 769.548969][T12317] ? show_regs_print_info+0x20/0x20 [ 769.554171][T12317] ? load_image+0x410/0x410 [ 769.558743][T12317] ? __lock_acquire+0x7b50/0x7b50 [ 769.564079][T12317] should_fail+0x383/0x4b0 [ 769.568505][T12317] _copy_from_user+0x2e/0x170 [ 769.573180][T12317] __sys_bpf+0x26d/0x6f0 [ 769.577428][T12317] ? bpf_link_show_fdinfo+0x380/0x380 [ 769.582819][T12317] __x64_sys_bpf+0x78/0x90 [ 769.587245][T12317] do_syscall_64+0x4c/0xa0 [ 769.591672][T12317] ? clear_bhb_loop+0x30/0x80 [ 769.596350][T12317] ? clear_bhb_loop+0x30/0x80 [ 769.601068][T12317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 769.606964][T12317] RIP: 0033:0x7ff681046159 [ 769.611379][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.630987][T12317] RSP: 002b:00007ff67f29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 769.639413][T12317] RAX: ffffffffffffffda RBX: 00007ff6812cdfa0 RCX: 00007ff681046159 [ 769.647396][T12317] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 769.655375][T12317] RBP: 00007ff67f29e090 R08: 0000000000000000 R09: 0000000000000000 [ 769.663352][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.671330][T12317] R13: 00007ff6812ce038 R14: 00007ff6812cdfa0 R15: 00007ffd54a13ea8 [ 769.679323][T12317] [ 769.910661][T12331] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 770.038563][T12348] jffs2: notice: (12348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 770.067964][T12348] FAULT_INJECTION: forcing a failure. [ 770.067964][T12348] name failslab, interval 1, probability 0, space 0, times 0 [ 770.080866][T12348] CPU: 0 PID: 12348 Comm: syz.7.1943 Not tainted syzkaller #0 [ 770.088311][T12348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 770.098350][T12348] Call Trace: [ 770.101629][T12348] [ 770.104541][T12348] dump_stack_lvl+0x188/0x250 [ 770.109224][T12348] ? show_regs_print_info+0x20/0x20 [ 770.114404][T12348] ? load_image+0x410/0x410 [ 770.118894][T12348] ? __lock_acquire+0x7b50/0x7b50 [ 770.123909][T12348] ? ksys_write+0x1d4/0x260 [ 770.128415][T12348] should_fail+0x383/0x4b0 [ 770.132825][T12348] should_failslab+0x5/0x20 [ 770.137327][T12348] slab_pre_alloc_hook+0x51/0xc0 [ 770.142275][T12348] ? getname_flags+0xb7/0x4f0 [ 770.146945][T12348] kmem_cache_alloc+0x3d/0x280 [ 770.151693][T12348] getname_flags+0xb7/0x4f0 [ 770.156180][T12348] do_sys_openat2+0xdd/0x500 [ 770.160773][T12348] ? __lock_acquire+0x7b50/0x7b50 [ 770.165783][T12348] ? do_sys_open+0xe0/0xe0 [ 770.170181][T12348] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 770.176158][T12348] ? lock_chain_count+0x20/0x20 [ 770.180988][T12348] __x64_sys_openat+0x135/0x160 [ 770.185818][T12348] do_syscall_64+0x4c/0xa0 [ 770.190230][T12348] ? clear_bhb_loop+0x30/0x80 [ 770.194885][T12348] ? clear_bhb_loop+0x30/0x80 [ 770.199548][T12348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 770.205421][T12348] RIP: 0033:0x7fd705740159 [ 770.209821][T12348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.229423][T12348] RSP: 002b:00007fd703998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 770.237834][T12348] RAX: ffffffffffffffda RBX: 00007fd7059c7fa0 RCX: 00007fd705740159 [ 770.245789][T12348] RDX: 000000000000275a RSI: 0000200000000200 RDI: ffffffffffffff9c [ 770.253744][T12348] RBP: 00007fd703998090 R08: 0000000000000000 R09: 0000000000000000 [ 770.261712][T12348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.269663][T12348] R13: 00007fd7059c8038 R14: 00007fd7059c7fa0 R15: 00007ffd72609868 [ 770.277632][T12348] [ 770.671230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 771.205923][T12370] FAULT_INJECTION: forcing a failure. [ 771.205923][T12370] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 771.253540][T12370] CPU: 0 PID: 12370 Comm: syz.0.1947 Not tainted syzkaller #0 [ 771.261040][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 771.271101][T12370] Call Trace: [ 771.274382][T12370] [ 771.277311][T12370] dump_stack_lvl+0x188/0x250 [ 771.281995][T12370] ? show_regs_print_info+0x20/0x20 [ 771.287201][T12370] ? load_image+0x410/0x410 [ 771.291707][T12370] ? __lock_acquire+0x7b50/0x7b50 [ 771.296735][T12370] ? __lock_acquire+0x1305/0x7b50 [ 771.301772][T12370] should_fail+0x383/0x4b0 [ 771.306200][T12370] prepare_alloc_pages+0x1e3/0x5b0 [ 771.311355][T12370] __alloc_pages+0x11b/0x480 [ 771.315952][T12370] ? zone_statistics+0x170/0x170 [ 771.320900][T12370] ? count_memcg_event_mm+0x324/0x370 [ 771.326346][T12370] ? remove_device_exclusive_entry+0xac0/0xac0 [ 771.332509][T12370] alloc_pages_vma+0x2bc/0x790 [ 771.337348][T12370] handle_mm_fault+0x23be/0x4440 [ 771.342298][T12370] ? get_page+0xe0/0xe0 [ 771.346464][T12370] ? vmacache_find+0x238/0x590 [ 771.351231][T12370] ? find_vma+0xd2/0x230 [ 771.355480][T12370] do_user_addr_fault+0x494/0xc90 [ 771.360621][T12370] exc_page_fault+0x60/0x100 [ 771.365216][T12370] ? clear_bhb_loop+0x30/0x80 [ 771.369900][T12370] asm_exc_page_fault+0x22/0x30 [ 771.374758][T12370] RIP: 0033:0x7ff680f0d9e6 [ 771.379171][T12370] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 58 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc ca fe ff 4d 85 ed 0f 84 2b 0a 00 [ 771.398777][T12370] RSP: 002b:00007ff67f29bf60 EFLAGS: 00010206 [ 771.404849][T12370] RAX: 0000000000000000 RBX: 00007ff6812cdfa0 RCX: 0000000000000000 [ 771.412823][T12370] RDX: 0000200000001000 RSI: 0000200000001000 RDI: 00007ff6810ddb28 [ 771.420794][T12370] RBP: 00007ff67f29e090 R08: 00007ff680efa850 R09: 0000000000000000 [ 771.428763][T12370] R10: 0000000000000000 R11: 0000200000001000 R12: 0000000000000032 [ 771.436734][T12370] R13: 0000200000001000 R14: 0000000000000000 R15: 00007ffd54a13ea8 [ 771.444719][T12370] [ 771.551295][T12378] capability: warning: `syz.4.1950' uses 32-bit capabilities (legacy support in use) [ 771.584914][T12370] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 771.639301][T12383] trusted_key: encrypted_key: insufficient parameters specified [ 771.675091][T12383] trusted_key: encrypted_key: insufficient parameters specified [ 771.762373][ T4308] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 771.882474][ T4232] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 772.142746][ T4308] usb 7-1: config 0 has no interfaces? [ 772.148254][ T4308] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 772.167724][ T4308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.192516][T10026] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 772.202527][ T4308] usb 7-1: config 0 descriptor?? [ 772.282414][ T4232] usb 1-1: config 0 has no interfaces? [ 772.287930][ T4232] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 772.312635][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.334412][ T4232] usb 1-1: config 0 descriptor?? [ 772.561407][T12408] FAULT_INJECTION: forcing a failure. [ 772.561407][T12408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.576708][T12408] CPU: 1 PID: 12408 Comm: syz.4.1954 Not tainted syzkaller #0 [ 772.584187][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 772.594241][T12408] Call Trace: [ 772.597506][T12408] [ 772.600558][T12408] dump_stack_lvl+0x188/0x250 [ 772.605254][T12408] ? show_regs_print_info+0x20/0x20 [ 772.610458][T12408] ? load_image+0x410/0x410 [ 772.615070][T12408] ? __lock_acquire+0x7b50/0x7b50 [ 772.620087][T12408] should_fail+0x383/0x4b0 [ 772.624500][T12408] _copy_to_user+0x2e/0x130 [ 772.629014][T12408] simple_read_from_buffer+0xe3/0x150 [ 772.636058][T12408] proc_fail_nth_read+0x1a6/0x220 [ 772.641142][T12408] ? proc_fault_inject_write+0x310/0x310 [ 772.646934][T12408] ? fsnotify_perm+0x254/0x560 [ 772.651687][T12408] ? proc_fault_inject_write+0x310/0x310 [ 772.657322][T12408] vfs_read+0x2ff/0xd50 [ 772.661465][T12408] ? __lock_acquire+0x7b50/0x7b50 [ 772.666477][T12408] ? kernel_read+0x1e0/0x1e0 [ 772.671069][T12408] ? mutex_lock_nested+0x17/0x20 [ 772.676126][T12408] ? __fdget_pos+0x2bf/0x370 [ 772.680706][T12408] ? ksys_read+0x70/0x260 [ 772.685025][T12408] ksys_read+0x153/0x260 [ 772.689270][T12408] ? vfs_write+0xd70/0xd70 [ 772.693671][T12408] ? lockdep_hardirqs_on+0x94/0x140 [ 772.698854][T12408] do_syscall_64+0x4c/0xa0 [ 772.703255][T12408] ? clear_bhb_loop+0x30/0x80 [ 772.707920][T12408] ? clear_bhb_loop+0x30/0x80 [ 772.712588][T12408] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 772.718479][T12408] RIP: 0033:0x7ff07bcb998e [ 772.722902][T12408] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 772.742488][T12408] RSP: 002b:00007ff079f50fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 772.750884][T12408] RAX: ffffffffffffffda RBX: 00007ff079f516c0 RCX: 00007ff07bcb998e [ 772.758862][T12408] RDX: 000000000000000f RSI: 00007ff079f510a0 RDI: 0000000000000003 [ 772.766881][T12408] RBP: 00007ff079f51090 R08: 0000000000000000 R09: 0000000000000000 [ 772.774844][T12408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.782816][T12408] R13: 00007ff07bf81038 R14: 00007ff07bf80fa0 R15: 00007fffdfd41e88 [ 772.785536][T10026] usb 4-1: config 0 has no interfaces? [ 772.790801][T12408] [ 772.799805][T10026] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 772.809525][T10026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.824037][T10026] usb 4-1: config 0 descriptor?? [ 772.840379][ T25] kauditd_printk_skb: 358 callbacks suppressed [ 772.840406][ T25] audit: type=1800 audit(1790182362.468:7999): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1955" name="out_ports" dev="configfs" ino=59430 res=0 errno=0 [ 773.015735][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 773.780468][T12437] FAULT_INJECTION: forcing a failure. [ 773.780468][T12437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.807408][T12437] CPU: 1 PID: 12437 Comm: syz.3.1951 Not tainted syzkaller #0 [ 773.814905][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 773.824971][T12437] Call Trace: [ 773.828253][T12437] [ 773.831179][T12437] dump_stack_lvl+0x188/0x250 [ 773.835861][T12437] ? show_regs_print_info+0x20/0x20 [ 773.841060][T12437] ? load_image+0x410/0x410 [ 773.845563][T12437] ? __lock_acquire+0x7b50/0x7b50 [ 773.850596][T12437] should_fail+0x383/0x4b0 [ 773.855025][T12437] _copy_from_user+0x2e/0x170 [ 773.859719][T12437] __copy_msghdr_from_user+0xc9/0x630 [ 773.865100][T12437] ? verify_lock_unused+0x140/0x140 [ 773.870304][T12437] ? mark_lock+0x94/0x320 [ 773.874639][T12437] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 773.879929][T12437] ? __lock_acquire+0x13dc/0x7b50 [ 773.884969][T12437] ___sys_sendmsg+0x19a/0x2e0 [ 773.889657][T12437] ? __sys_sendmsg+0x290/0x290 [ 773.894452][T12437] __se_sys_sendmsg+0x1b7/0x2a0 [ 773.899307][T12437] ? __x64_sys_sendmsg+0x80/0x80 [ 773.904248][T12437] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 773.910245][T12437] ? lockdep_hardirqs_on+0x94/0x140 [ 773.915454][T12437] do_syscall_64+0x4c/0xa0 [ 773.919874][T12437] ? clear_bhb_loop+0x30/0x80 [ 773.924554][T12437] ? clear_bhb_loop+0x30/0x80 [ 773.929234][T12437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.935128][T12437] RIP: 0033:0x7fd1faf58159 [ 773.939550][T12437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.959153][T12437] RSP: 002b:00007fd1f916e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.967573][T12437] RAX: ffffffffffffffda RBX: 00007fd1fb1e0180 RCX: 00007fd1faf58159 [ 773.975550][T12437] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 773.983762][T12437] RBP: 00007fd1f916e090 R08: 0000000000000000 R09: 0000000000000000 [ 773.991739][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.999712][T12437] R13: 00007fd1fb1e0218 R14: 00007fd1fb1e0180 R15: 00007ffe34f336b8 [ 774.007702][T12437] [ 774.301291][ T4232] usb 1-1: USB disconnect, device number 7 [ 774.384211][T12444] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 775.111956][ T4308] usb 4-1: USB disconnect, device number 8 [ 775.163019][ T4232] usb 7-1: USB disconnect, device number 2 [ 775.377176][T10026] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 775.609943][T12474] netlink: 'syz.6.1974': attribute type 4 has an invalid length. [ 775.669591][T12480] netlink: 'syz.6.1974': attribute type 4 has an invalid length. [ 775.677513][T10026] usb 8-1: Using ep0 maxpacket: 8 [ 775.740721][T12468] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 775.769986][T12468] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 775.824821][T10026] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 775.842427][T10026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.869609][T10026] usb 8-1: config 0 descriptor?? [ 776.760515][T12497] FAULT_INJECTION: forcing a failure. [ 776.760515][T12497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.959767][T12497] CPU: 1 PID: 12497 Comm: syz.3.1978 Not tainted syzkaller #0 [ 776.967268][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 776.977327][T12497] Call Trace: [ 776.980781][T12497] [ 776.983710][T12497] dump_stack_lvl+0x188/0x250 [ 776.988401][T12497] ? show_regs_print_info+0x20/0x20 [ 776.993618][T12497] ? load_image+0x410/0x410 [ 776.998129][T12497] ? __lock_acquire+0x7b50/0x7b50 [ 777.003181][T12497] should_fail+0x383/0x4b0 [ 777.007607][T12497] _copy_from_user+0x2e/0x170 [ 777.012286][T12497] __se_sys_memfd_create+0x189/0x450 [ 777.017569][T12497] ? __x64_sys_memfd_create+0x60/0x60 [ 777.022943][T12497] ? lockdep_hardirqs_on+0x94/0x140 [ 777.028150][T12497] do_syscall_64+0x4c/0xa0 [ 777.032624][T12497] ? clear_bhb_loop+0x30/0x80 [ 777.037306][T12497] ? clear_bhb_loop+0x30/0x80 [ 777.041990][T12497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 777.047889][T12497] RIP: 0033:0x7fd1faf58159 [ 777.052312][T12497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.071923][T12497] RSP: 002b:00007fd1f91afe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 777.080341][T12497] RAX: ffffffffffffffda RBX: 0000000000005554 RCX: 00007fd1faf58159 [ 777.088309][T12497] RDX: 00007fd1f91afee0 RSI: 0000000000000000 RDI: 00007fd1fafef24b [ 777.096285][T12497] RBP: 000020000000c100 R08: 00000000ffffffff R09: 0000000000000000 [ 777.104397][T12497] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 777.112382][T12497] R13: 00007fd1f91afee0 R14: 00007fd1f91afea0 R15: 0000200000000380 [ 777.120375][T12497] [ 778.738715][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 778.911071][T12537] loop0: detected capacity change from 0 to 4096 [ 778.934318][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1986'. [ 779.452421][T10026] usb 8-1: string descriptor 0 read error: -71 [ 779.998548][T10026] uvcvideo 8-1:0.0: Found multiple Units with ID 1 [ 780.007552][T10026] usb 8-1: Found UVC 0.00 device (2833:0201) [ 780.014765][T10026] usb 8-1: No valid video chain found. [ 780.025709][T10026] usb 8-1: USB disconnect, device number 3 [ 781.633397][T12555] FAULT_INJECTION: forcing a failure. [ 781.633397][T12555] name fail_futex, interval 1, probability 0, space 0, times 0 [ 781.679158][T12555] CPU: 1 PID: 12555 Comm: syz.6.1991 Not tainted syzkaller #0 [ 781.686659][T12555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 781.696724][T12555] Call Trace: [ 781.700010][T12555] [ 781.702943][T12555] dump_stack_lvl+0x188/0x250 [ 781.707628][T12555] ? show_regs_print_info+0x20/0x20 [ 781.712828][T12555] ? load_image+0x410/0x410 [ 781.717334][T12555] ? mark_lock+0x94/0x320 [ 781.721678][T12555] ? __lock_acquire+0x13dc/0x7b50 [ 781.726715][T12555] should_fail+0x383/0x4b0 [ 781.731136][T12555] get_futex_key+0x1cf/0x12d0 [ 781.735821][T12555] ? futex_wait_restart+0x250/0x250 [ 781.741024][T12555] ? verify_lock_unused+0x140/0x140 [ 781.746236][T12555] do_futex+0x236/0x12b0 [ 781.750496][T12555] ? vfs_write+0xaa6/0xd70 [ 781.754928][T12555] ? futex_exit_release+0x1c0/0x1c0 [ 781.760132][T12555] ? __context_tracking_exit+0x4c/0x80 [ 781.765607][T12555] __se_sys_futex+0x389/0x420 [ 781.770290][T12555] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 781.776284][T12555] ? __x64_sys_futex+0xf0/0xf0 [ 781.781125][T12555] ? __x64_sys_futex+0x1d/0xf0 [ 781.786043][T12555] do_syscall_64+0x4c/0xa0 [ 781.790471][T12555] ? clear_bhb_loop+0x30/0x80 [ 781.795156][T12555] ? clear_bhb_loop+0x30/0x80 [ 781.799844][T12555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 781.805749][T12555] RIP: 0033:0x7f544edc8159 [ 781.810174][T12555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.829873][T12555] RSP: 002b:00007f544cfff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 781.838296][T12555] RAX: ffffffffffffffda RBX: 00007f544f050090 RCX: 00007f544edc8159 [ 781.846277][T12555] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000020000000cffc [ 781.854259][T12555] RBP: 00007f544cfff090 R08: 0000200000000040 R09: 0000000042fffffe [ 781.862238][T12555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.870214][T12555] R13: 00007f544f050128 R14: 00007f544f050090 R15: 00007ffdb08339a8 [ 781.876967][ T25] audit: type=1800 audit(1790182371.398:8000): pid=12561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1994" name="out_ports" dev="configfs" ino=59761 res=0 errno=0 [ 781.878203][T12555] [ 781.950209][T12563] ci_hdrc pcspkr: platform data missing [ 782.407147][T12559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1993'. [ 783.002821][T12572] capability: warning: `syz.3.1999' uses deprecated v2 capabilities in a way that may be insecure [ 783.021480][ T25] audit: type=1807 audit(1790182372.658:8001): action=measure res=1 [ 783.259765][T12571] ima: policy update completed [ 783.288707][ T25] audit: type=1802 audit(1790182372.918:8002): pid=12571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.1999" res=1 errno=0 [ 784.185536][ T25] audit: type=1800 audit(1790182373.818:8003): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 784.252561][ T25] audit: type=1800 audit(1790182373.878:8004): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 784.321948][ T25] audit: type=1800 audit(1790182373.938:8005): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 784.430585][T12578] udc-core: couldn't find an available UDC or it's busy [ 784.437804][ T25] audit: type=1800 audit(1790182374.058:8006): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50902 res=0 errno=0 [ 784.458119][T12578] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 784.712398][ T4231] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 784.912498][ T4231] usb 7-1: device descriptor read/64, error -71 [ 784.977836][ T25] audit: type=1800 audit(1790182374.608:8007): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169544 res=0 errno=0 [ 785.022123][T11867] hid-generic 0005:10CF:0A0E.0001: unknown main item tag 0x0 [ 785.070540][ T25] audit: type=1800 audit(1790182374.688:8008): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169559 res=0 errno=0 [ 785.109360][T11867] hid-generic 0005:10CF:0A0E.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 785.163489][ T25] audit: type=1800 audit(1790182374.788:8009): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=169546 res=0 errno=0 [ 785.212422][ T4231] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 785.402435][ T4231] usb 7-1: device descriptor read/64, error -71 [ 785.469236][T12648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2022'. [ 785.552676][ T4231] usb usb7-port1: attempt power cycle [ 785.682226][T12664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 785.705781][T12666] device syzkaller1 entered promiscuous mode [ 785.988533][ T4231] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 786.087026][ T4231] usb 7-1: device descriptor read/8, error -71 [ 786.248576][T12700] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2036'. [ 786.267486][T12648] syz.4.2022 (12648) used greatest stack depth: 20400 bytes left [ 786.546477][T12720] tipc: Started in network mode [ 786.563618][T12720] tipc: Node identity b6e830bf6e52, cluster identity 4711 [ 786.574802][T12720] tipc: Enabled bearer , priority 0 [ 786.583388][T12722] batman_adv: batadv0: Adding interface: syzkaller0 [ 786.589992][T12722] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.637240][T12722] batman_adv: batadv0: Interface activated: syzkaller0 [ 786.666671][T12720] device syzkaller0 entered promiscuous mode [ 786.676693][T12721] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 786.720931][T12721] batman_adv: batadv0: Removing interface: syzkaller0 [ 786.739494][T12719] tipc: Resetting bearer [ 786.766000][T12719] tipc: Disabling bearer [ 786.916091][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2059'. [ 787.018459][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 787.018470][ T25] audit: type=1800 audit(1790182376.648:8015): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170092 res=0 errno=0 [ 787.045836][ T25] audit: type=1800 audit(1790182376.658:8016): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170102 res=0 errno=0 [ 787.105087][T12763] device syzkaller0 entered promiscuous mode [ 787.115311][ T25] audit: type=1800 audit(1790182376.748:8017): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 787.254782][ T25] audit: type=1800 audit(1790182376.888:8018): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 787.305971][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 787.343696][ T25] audit: type=1800 audit(1790182376.978:8019): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 787.367921][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2074'. [ 787.415459][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2076'. [ 787.585391][ T25] audit: type=1800 audit(1790182377.218:8020): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 787.687941][T12810] device syzkaller1 entered promiscuous mode [ 787.719608][ T25] audit: type=1800 audit(1790182377.348:8021): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 787.864652][T12829] device syzkaller0 entered promiscuous mode [ 788.290796][ T25] audit: type=1800 audit(1790182377.918:8022): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 788.359907][ T25] audit: type=1800 audit(1790182377.988:8023): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 788.411380][T12877] tun0: tun_chr_ioctl cmd 1074025672 [ 788.420140][T12877] tun0: ignored: set checksum enabled [ 788.479649][T12873] device syzkaller0 entered promiscuous mode [ 788.572172][ T25] audit: type=1800 audit(1790182378.198:8024): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 788.667599][T12898] FAULT_INJECTION: forcing a failure. [ 788.667599][T12898] name failslab, interval 1, probability 1, space 0, times 0 [ 788.690128][T12898] CPU: 1 PID: 12898 Comm: syz.3.2118 Not tainted syzkaller #0 [ 788.697629][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 788.707729][T12898] Call Trace: [ 788.711018][T12898] [ 788.713952][T12898] dump_stack_lvl+0x188/0x250 [ 788.718634][T12898] ? show_regs_print_info+0x20/0x20 [ 788.724001][T12898] ? load_image+0x410/0x410 [ 788.728498][T12898] ? __might_sleep+0xf0/0xf0 [ 788.733076][T12898] ? __lock_acquire+0x7b50/0x7b50 [ 788.738094][T12898] should_fail+0x383/0x4b0 [ 788.742504][T12898] should_failslab+0x5/0x20 [ 788.747003][T12898] slab_pre_alloc_hook+0x51/0xc0 [ 788.751931][T12898] kmem_cache_alloc_trace+0x47/0x290 [ 788.757212][T12898] ? rdma_create_trans+0x480/0x1590 [ 788.762579][T12898] rdma_create_trans+0x480/0x1590 [ 788.767618][T12898] ? pack_sg_list_p+0x4b0/0x4b0 [ 788.772455][T12898] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 788.778444][T12898] ? lock_chain_count+0x20/0x20 [ 788.783301][T12898] ? lockdep_hardirqs_on+0x94/0x140 [ 788.788493][T12898] ? p9_client_create+0x750/0x1020 [ 788.793618][T12898] ? kfree+0xef/0x2a0 [ 788.797600][T12898] p9_client_create+0x7e7/0x1020 [ 788.802533][T12898] ? p9_parse_header+0x3e0/0x3e0 [ 788.807468][T12898] ? lockdep_softirqs_off+0x430/0x430 [ 788.812842][T12898] ? __raw_spin_lock_init+0x41/0x100 [ 788.818644][T12898] v9fs_session_init+0x1bd/0x1770 [ 788.823770][T12898] ? v9fs_show_options+0x610/0x610 [ 788.828913][T12898] v9fs_mount+0x72/0x850 [ 788.833324][T12898] legacy_get_tree+0xe6/0x180 [ 788.838058][T12898] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 788.843868][T12898] vfs_get_tree+0x88/0x270 [ 788.848285][T12898] do_new_mount+0x247/0xa40 [ 788.852782][T12898] __se_sys_mount+0x2e3/0x3d0 [ 788.857459][T12898] ? __x64_sys_mount+0xc0/0xc0 [ 788.862208][T12898] ? lockdep_hardirqs_on+0x94/0x140 [ 788.867393][T12898] ? __x64_sys_mount+0x1c/0xc0 [ 788.872167][T12898] do_syscall_64+0x4c/0xa0 [ 788.876568][T12898] ? clear_bhb_loop+0x30/0x80 [ 788.881234][T12898] ? clear_bhb_loop+0x30/0x80 [ 788.885899][T12898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 788.891781][T12898] RIP: 0033:0x7fd1faf58159 [ 788.896187][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.915783][T12898] RSP: 002b:00007fd1f91b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 788.924190][T12898] RAX: ffffffffffffffda RBX: 00007fd1fb1dffa0 RCX: 00007fd1faf58159 [ 788.932148][T12898] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000200000000040 [ 788.940106][T12898] RBP: 00007fd1fafef06b R08: 00002000000001c0 R09: 0000000000000000 [ 788.948061][T12898] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.956025][T12898] R13: 00007fd1fb1e0038 R14: 00007fd1fb1dffa0 R15: 00007ffe34f336b8 [ 788.964009][T12898] [ 789.159024][T12912] netlink: 'syz.4.2123': attribute type 4 has an invalid length. [ 789.192485][T12912] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2123'. [ 789.236437][T12912] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 789.261354][T12923] netlink: 'syz.3.2127': attribute type 10 has an invalid length. [ 789.329530][T12932] jffs2: notice: (12932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 789.334709][T12923] team0: Port device netdevsim0 added [ 789.376028][T12928] netlink: 'syz.3.2127': attribute type 10 has an invalid length. [ 790.271047][T12966] FAULT_INJECTION: forcing a failure. [ 790.271047][T12966] name failslab, interval 1, probability 1, space 0, times 0 [ 790.280966][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2140'. [ 790.322678][T12969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2140'. [ 790.334090][T12966] CPU: 0 PID: 12966 Comm: syz.6.2138 Not tainted syzkaller #0 [ 790.341577][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 790.351668][T12966] Call Trace: [ 790.354958][T12966] [ 790.357888][T12966] dump_stack_lvl+0x188/0x250 [ 790.362576][T12966] ? show_regs_print_info+0x20/0x20 [ 790.367929][T12966] ? load_image+0x410/0x410 [ 790.372439][T12966] ? __might_sleep+0xf0/0xf0 [ 790.377027][T12966] ? __lock_acquire+0x7b50/0x7b50 [ 790.382053][T12966] should_fail+0x383/0x4b0 [ 790.386474][T12966] should_failslab+0x5/0x20 [ 790.390982][T12966] slab_pre_alloc_hook+0x51/0xc0 [ 790.395911][T12966] kmem_cache_alloc_trace+0x47/0x290 [ 790.401181][T12966] ? __io_uring_add_tctx_node+0x15d/0x500 [ 790.406979][T12966] __io_uring_add_tctx_node+0x15d/0x500 [ 790.412518][T12966] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 790.418398][T12966] ? _raw_spin_unlock+0x24/0x40 [ 790.423237][T12966] ? alloc_fd+0x59e/0x650 [ 790.427698][T12966] io_uring_install_fd+0xc0/0xf0 [ 790.432646][T12966] __se_sys_io_uring_setup+0x2303/0x2900 [ 790.438321][T12966] ? __x64_sys_io_uring_setup+0x60/0x60 [ 790.443879][T12966] ? lockdep_hardirqs_on+0x94/0x140 [ 790.449073][T12966] do_syscall_64+0x4c/0xa0 [ 790.453480][T12966] ? clear_bhb_loop+0x30/0x80 [ 790.458238][T12966] ? clear_bhb_loop+0x30/0x80 [ 790.462915][T12966] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 790.468807][T12966] RIP: 0033:0x7f544edc8159 [ 790.473225][T12966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.493095][T12966] RSP: 002b:00007f544d01ffb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 790.501505][T12966] RAX: ffffffffffffffda RBX: 0000200000000500 RCX: 00007f544edc8159 [ 790.509470][T12966] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 000000000000126b [ 790.517432][T12966] RBP: 00007f544ee5f06b R08: 0000000000000000 R09: 0000000000000000 [ 790.525680][T12966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 790.533652][T12966] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdb08339a8 [ 790.541635][T12966] [ 790.578224][T12972] device syzkaller0 entered promiscuous mode [ 790.879575][T12990] FAULT_INJECTION: forcing a failure. [ 790.879575][T12990] name failslab, interval 1, probability 1, space 0, times 0 [ 790.937389][T12990] CPU: 0 PID: 12990 Comm: syz.3.2149 Not tainted syzkaller #0 [ 790.944894][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 790.954955][T12990] Call Trace: [ 790.958241][T12990] [ 790.961178][T12990] dump_stack_lvl+0x188/0x250 [ 790.965878][T12990] ? show_regs_print_info+0x20/0x20 [ 790.971083][T12990] ? load_image+0x410/0x410 [ 790.975608][T12990] ? __might_sleep+0xf0/0xf0 [ 790.980221][T12990] ? __lock_acquire+0x7b50/0x7b50 [ 790.985274][T12990] should_fail+0x383/0x4b0 [ 790.989711][T12990] should_failslab+0x5/0x20 [ 790.994241][T12990] slab_pre_alloc_hook+0x51/0xc0 [ 790.999193][T12990] kmem_cache_alloc_trace+0x47/0x290 [ 791.004503][T12990] ? raw_ioctl+0x18cd/0x3750 [ 791.009256][T12990] raw_ioctl+0x18cd/0x3750 [ 791.013698][T12990] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 791.016803][T12999] Config c/1 of g1 needs at least one function. [ 791.019358][T12990] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 791.019388][T12990] ? make_qualifier+0x3b0/0x3b0 [ 791.036317][T12990] ? bpf_lsm_file_ioctl+0x5/0x10 [ 791.040490][T12999] udc usbip-vudc.0: failed to start g1: -22 [ 791.041367][T12990] ? security_file_ioctl+0x7c/0xa0 [ 791.052371][T12990] ? make_qualifier+0x3b0/0x3b0 [ 791.057763][T12990] __se_sys_ioctl+0xfa/0x170 [ 791.062381][T12990] do_syscall_64+0x4c/0xa0 [ 791.066798][T12990] ? clear_bhb_loop+0x30/0x80 [ 791.071476][T12990] ? clear_bhb_loop+0x30/0x80 [ 791.076156][T12990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 791.082046][T12990] RIP: 0033:0x7fd1faf57deb [ 791.086454][T12990] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 791.106047][T12990] RSP: 002b:00007fd1f91adf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.114452][T12990] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd1faf57deb [ 791.122412][T12990] RDX: 00007fd1f91aefd0 RSI: 0000000041015500 RDI: 0000000000000006 [ 791.130370][T12990] RBP: 00007fd1f91aefd0 R08: 0000000000000001 R09: 00000000ffffffff [ 791.138323][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1f91adfa0 [ 791.146276][T12990] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000 [ 791.154252][T12990] [ 791.243333][T13006] FAULT_INJECTION: forcing a failure. [ 791.243333][T13006] name failslab, interval 1, probability 1, space 0, times 0 [ 791.259359][T13006] CPU: 1 PID: 13006 Comm: syz.4.2155 Not tainted syzkaller #0 [ 791.266859][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 791.276939][T13006] Call Trace: [ 791.280229][T13006] [ 791.283171][T13006] dump_stack_lvl+0x188/0x250 [ 791.287952][T13006] ? show_regs_print_info+0x20/0x20 [ 791.293158][T13006] ? load_image+0x410/0x410 [ 791.297673][T13006] ? __lock_acquire+0x7b50/0x7b50 [ 791.302714][T13006] should_fail+0x383/0x4b0 [ 791.307159][T13006] should_failslab+0x5/0x20 [ 791.311677][T13006] slab_pre_alloc_hook+0x51/0xc0 [ 791.316635][T13006] kmem_cache_alloc_trace+0x47/0x290 [ 791.321948][T13006] ? x509_cert_parse+0x97/0x7a0 [ 791.326926][T13006] x509_cert_parse+0x97/0x7a0 [ 791.331630][T13006] x509_key_preparse+0x60/0x5d0 [ 791.336503][T13006] ? down_read+0x1aa/0x2e0 [ 791.340948][T13006] asymmetric_key_preparse+0xa5/0x140 [ 791.346349][T13006] key_create_or_update+0x432/0xa40 [ 791.351664][T13006] ? security_key_permission+0x7c/0xa0 [ 791.357172][T13006] ? key_type_put+0x20/0x20 [ 791.361712][T13006] ? lookup_user_key_possessed+0x40/0x40 [ 791.367417][T13006] ? __might_fault+0xb3/0x110 [ 791.372132][T13006] __se_sys_add_key+0x34b/0x410 [ 791.377023][T13006] ? __x64_sys_add_key+0xc0/0xc0 [ 791.381995][T13006] ? lockdep_hardirqs_on+0x94/0x140 [ 791.387238][T13006] ? __x64_sys_add_key+0x1c/0xc0 [ 791.392208][T13006] do_syscall_64+0x4c/0xa0 [ 791.396652][T13006] ? clear_bhb_loop+0x30/0x80 [ 791.401353][T13006] ? clear_bhb_loop+0x30/0x80 [ 791.406058][T13006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 791.411982][T13006] RIP: 0033:0x7ff07bcf9159 [ 791.416416][T13006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.436034][T13006] RSP: 002b:00007ff079f51028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 791.444468][T13006] RAX: ffffffffffffffda RBX: 00007ff07bf80fa0 RCX: 00007ff07bcf9159 [ 791.452457][T13006] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 791.460445][T13006] RBP: 00007ff07bd9006b R08: ffffffffffffffff R09: 0000000000000000 [ 791.468436][T13006] R10: 00000000000003eb R11: 0000000000000246 R12: 0000000000000000 [ 791.476424][T13006] R13: 00007ff07bf81038 R14: 00007ff07bf80fa0 R15: 00007fffdfd41e88 [ 791.484438][T13006] [ 791.636607][T13016] FAULT_INJECTION: forcing a failure. [ 791.636607][T13016] name failslab, interval 1, probability 1, space 0, times 0 [ 791.675259][T13016] CPU: 0 PID: 13016 Comm: syz.6.2159 Not tainted syzkaller #0 [ 791.682763][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 791.692827][T13016] Call Trace: [ 791.696115][T13016] [ 791.699047][T13016] dump_stack_lvl+0x188/0x250 [ 791.703743][T13016] ? show_regs_print_info+0x20/0x20 [ 791.708955][T13016] ? load_image+0x410/0x410 [ 791.713467][T13016] ? __might_sleep+0xf0/0xf0 [ 791.718078][T13016] ? __lock_acquire+0x7b50/0x7b50 [ 791.723120][T13016] should_fail+0x383/0x4b0 [ 791.727883][T13016] should_failslab+0x5/0x20 [ 791.732405][T13016] slab_pre_alloc_hook+0x51/0xc0 [ 791.737362][T13016] __kmalloc+0x6b/0x340 [ 791.741525][T13016] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 791.747291][T13016] tomoyo_realpath_from_path+0xed/0x5e0 [ 791.752867][T13016] tomoyo_path_number_perm+0x251/0x6b0 [ 791.758351][T13016] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 791.763824][T13016] ? make_qualifier+0x3b0/0x3b0 [ 791.768736][T13016] security_file_ioctl+0x6c/0xa0 [ 791.773687][T13016] __se_sys_ioctl+0x48/0x170 [ 791.778291][T13016] do_syscall_64+0x4c/0xa0 [ 791.782716][T13016] ? clear_bhb_loop+0x30/0x80 [ 791.787403][T13016] ? clear_bhb_loop+0x30/0x80 [ 791.792090][T13016] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 791.797986][T13016] RIP: 0033:0x7f544edc7deb [ 791.802409][T13016] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 791.822274][T13016] RSP: 002b:00007f544d01df00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.830710][T13016] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f544edc7deb [ 791.838706][T13016] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 791.846694][T13016] RBP: 00007f544d01efd0 R08: 0000000000000001 R09: 00000000ffffffff [ 791.854683][T13016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.862645][T13016] R13: 0000200000000580 R14: 0000000000000000 R15: 0000000000000000 [ 791.871200][T13016] [ 791.879464][T13016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 792.057762][ T25] kauditd_printk_skb: 14 callbacks suppressed [ 792.057776][ T25] audit: type=1800 audit(1790182381.688:8039): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 792.130932][ T25] audit: type=1800 audit(1790182381.758:8040): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171291 res=0 errno=0 [ 792.130967][ T25] audit: type=1800 audit(1790182381.758:8041): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171303 res=0 errno=0 [ 792.138204][ T25] audit: type=1800 audit(1790182381.758:8042): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171315 res=0 errno=0 [ 792.187388][ T1108] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 792.283829][T13027] sg_write: data in/out 491484/136 bytes for SCSI command 0x0-- guessing data in; [ 792.283829][T13027] program syz.4.2165 not setting count and/or reply_len properly [ 792.350718][ T25] audit: type=1800 audit(1790182381.978:8043): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0 [ 792.392468][ T1108] usb 7-1: device descriptor read/64, error -71 [ 792.491299][ T25] audit: type=1800 audit(1790182382.118:8044): pid=13036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2168" name="UDC" dev="configfs" ino=61009 res=0 errno=0 [ 792.491908][T13036] Config c/1 of g1 needs at least one function. [ 792.560851][T13036] udc usbip-vudc.0: failed to start g1: -22 [ 792.600467][ T25] audit: type=1800 audit(1790182382.228:8045): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50620 res=0 errno=0 [ 792.694699][T13044] FAULT_INJECTION: forcing a failure. [ 792.694699][T13044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.708602][ T1108] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 792.720607][T13044] CPU: 1 PID: 13044 Comm: syz.4.2171 Not tainted syzkaller #0 [ 792.728100][T13044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 792.738159][T13044] Call Trace: [ 792.741437][T13044] [ 792.744366][T13044] dump_stack_lvl+0x188/0x250 [ 792.749058][T13044] ? show_regs_print_info+0x20/0x20 [ 792.754265][T13044] ? load_image+0x410/0x410 [ 792.758943][T13044] ? __lock_acquire+0x7b50/0x7b50 [ 792.763993][T13044] should_fail+0x383/0x4b0 [ 792.768530][T13044] _copy_to_user+0x2e/0x130 [ 792.773042][T13044] ucma_create_id+0x2ce/0x370 [ 792.777822][T13044] ? __lock_acquire+0x7b50/0x7b50 [ 792.787609][T13044] ? ucma_close+0x170/0x170 [ 792.792183][T13044] ? __might_fault+0xb3/0x110 [ 792.796879][T13044] ? _copy_from_user+0x111/0x170 [ 792.801834][T13044] ucma_write+0x24e/0x2f0 [ 792.806210][T13044] ? ucma_get_global_nl_info+0x70/0x70 [ 792.811678][T13044] ? common_file_perm+0x171/0x1c0 [ 792.816802][T13044] ? fsnotify_perm+0x5d/0x560 [ 792.821482][T13044] ? security_file_permission+0x75/0xa0 [ 792.827474][T13044] ? ucma_get_global_nl_info+0x70/0x70 [ 792.832951][T13044] vfs_write+0x304/0xd70 [ 792.837573][T13044] ? file_end_write+0x250/0x250 [ 792.842528][T13044] ? __fget_files+0x402/0x470 [ 792.847224][T13044] ? __fdget_pos+0x1e2/0x370 [ 792.851831][T13044] ? ksys_write+0x70/0x260 [ 792.856262][T13044] ksys_write+0x153/0x260 [ 792.860609][T13044] ? __ia32_sys_read+0x80/0x80 [ 792.865388][T13044] ? lockdep_hardirqs_on+0x94/0x140 [ 792.870598][T13044] do_syscall_64+0x4c/0xa0 [ 792.875276][T13044] ? clear_bhb_loop+0x30/0x80 [ 792.880047][T13044] ? clear_bhb_loop+0x30/0x80 [ 792.884745][T13044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 792.890654][T13044] RIP: 0033:0x7ff07bcf9159 [ 792.895079][T13044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.919642][T13044] RSP: 002b:00007ff079f51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.928084][T13044] RAX: ffffffffffffffda RBX: 00007ff07bf80fa0 RCX: 00007ff07bcf9159 [ 792.936071][T13044] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000003 [ 792.944059][T13044] RBP: 00007ff07bd9006b R08: 0000000000000000 R09: 0000000000000000 [ 792.952059][T13044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.960074][T13044] R13: 00007ff07bf81038 R14: 00007ff07bf80fa0 R15: 00007fffdfd41e88 [ 792.968073][T13044] [ 793.071305][ T25] audit: type=1800 audit(1790182382.698:8046): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2173" name="arp_ip_target" dev="sysfs" ino=86420 res=0 errno=0 [ 793.123782][ T25] audit: type=1800 audit(1790182382.738:8047): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2173" name="arp_interval" dev="sysfs" ino=86419 res=0 errno=0 [ 793.159733][T13050] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 793.170586][ T9] bond0: (slave dummy0): interface is now down [ 793.177434][T11741] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 793.190136][ T1108] usb 7-1: device descriptor read/64, error -71 [ 793.199925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 793.212352][ T25] audit: type=1800 audit(1790182382.738:8048): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2173" name="slaves" dev="sysfs" ino=86414 res=0 errno=0 [ 793.252564][ T4325] bond0: (slave dummy0): interface is now down [ 793.289672][ T4325] bond0: now running without any active interface! [ 793.335094][ T1108] usb usb7-port1: attempt power cycle [ 793.632559][T11741] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.647538][T11741] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 793.659343][T11741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.681224][T11741] usb 1-1: config 0 descriptor?? [ 793.745906][T13070] loop0: detected capacity change from 0 to 65536 [ 793.772483][ T1108] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 793.862553][ T1108] usb 7-1: device descriptor read/8, error -71 [ 793.902714][ T4228] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 794.053164][T11867] Bluetooth: hci0: command 0x0407 tx timeout [ 794.142545][ T1108] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 794.168246][T11741] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 794.187639][T11741] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input6 [ 794.242498][ T1108] usb 7-1: device descriptor read/8, error -71 [ 794.302765][ T4228] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.313669][T11741] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 794.327410][ T4228] usb 4-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 794.345960][ T4228] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 794.372826][ T1108] usb usb7-port1: unable to enumerate USB device [ 794.392551][T11867] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 794.452890][ C1] keytouch 0003:0926:3333.0002: Event data for report 0 was too short (8 vs 3) [ 794.552906][ T4228] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 794.567111][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.575840][ T4228] usb 4-1: Product: syz [ 794.580024][ T4228] usb 4-1: Manufacturer: syz [ 794.590967][ T4228] usb 4-1: SerialNumber: syz [ 794.812518][T11867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.823318][T11867] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 794.833967][T11867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.902470][ T4230] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 794.910166][T11867] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 794.917906][T11867] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 794.925661][T11867] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 794.936899][T11867] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 794.944778][T11867] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 794.958262][T11867] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 794.968247][T11867] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 794.976203][T11867] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 794.986404][T11867] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 795.012478][T10026] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 795.082471][ C1] usb 4-1: received EP1 urb->status = -71 [ 795.088685][ T4228] usb 4-1: unable to init card! (ret=-71) [ 795.096728][ T4228] snd-usb-caiaq: probe of 4-1:1.0 failed with error -71 [ 795.107447][ T4228] usb 4-1: USB disconnect, device number 9 [ 795.272627][ T4230] usb 8-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 795.283598][ T4230] usb 8-1: config 0 interface 0 has no altsetting 0 [ 795.372520][T10026] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.385982][T10026] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 795.395382][T10026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.442550][ T4230] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 795.455749][T10026] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 795.464344][ T4230] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 795.475724][T10026] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 795.483571][ T4230] usb 8-1: Product: syz [ 795.488542][ T4230] usb 8-1: Manufacturer: syz [ 795.495971][T10026] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 795.503709][ T4230] usb 8-1: SerialNumber: syz [ 795.511646][T10026] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 795.521140][ T4230] usb 8-1: config 0 descriptor?? [ 795.526430][T10026] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 795.536329][T10026] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 795.546601][T10026] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 795.554338][T10026] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 795.570460][T10026] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 795.616189][ T4230] snd-usb-audio: probe of 8-1:0.0 failed with error -22 [ 795.684070][T11970] udevd[11970]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.744017][ T4228] usb 1-1: USB disconnect, device number 8 [ 795.778057][T10026] usb 8-1: USB disconnect, device number 4 [ 795.801808][ T4230] usb 5-1: USB disconnect, device number 2 [ 795.910977][T13122] nvmet: adding nsid 1 to subsystem testsubsys [ 795.913073][T13126] FAULT_INJECTION: forcing a failure. [ 795.913073][T13126] name failslab, interval 1, probability 1, space 0, times 0 [ 795.932163][T13126] CPU: 0 PID: 13126 Comm: syz.4.2204 Not tainted syzkaller #0 [ 795.934569][T13122] [ 795.939636][T13126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 795.941953][T13122] ====================================================== [ 795.941961][T13122] WARNING: possible circular locking dependency detected [ 795.951992][T13126] Call Trace: [ 795.952004][T13126] [ 795.959067][T13122] syzkaller #0 Not tainted [ 795.966010][T13126] dump_stack_lvl+0x188/0x250 [ 795.969273][T13122] ------------------------------------------------------ [ 795.972187][T13126] ? show_regs_print_info+0x20/0x20 [ 795.976573][T13122] syz.0.2202/13122 is trying to acquire lock: [ 795.981222][T13126] ? load_image+0x410/0x410 [ 795.988216][T13122] ffff88801ef463f8 [ 795.993390][T13126] should_fail+0x383/0x4b0 [ 795.999437][T13122] (&iint_mutex_key[depth] [ 796.003937][T13126] should_failslab+0x5/0x20 [ 796.007632][T13122] ){+.+.}-{3:3} [ 796.012023][T13126] slab_pre_alloc_hook+0x51/0xc0 [ 796.016428][T13122] , at: process_measurement+0x724/0x1c20 [ 796.020907][T13126] ? xas_create+0x1047/0x15a0 [ 796.024350][T13122] [ 796.024350][T13122] but task is already holding lock: [ 796.024357][T13122] ffff88802606e070 [ 796.029262][T13126] kmem_cache_alloc+0x3d/0x280 [ 796.034867][T13122] (&subsys->lock [ 796.039523][T13126] ? xas_descend+0x210/0x3b0 [ 796.046868][T13122] ){+.+.}-{3:3} [ 796.050571][T13126] xas_create+0x1047/0x15a0 [ 796.055303][T13122] , at: nvmet_ns_enable+0x49/0x8c0 [ 796.058919][T13126] ? rdma_resolve_addr+0x723/0x2060 [ 796.063480][T13122] [ 796.063480][T13122] which lock already depends on the new lock. [ 796.063480][T13122] [ 796.063486][T13122] [ 796.063486][T13122] the existing dependency chain (in reverse order) is: [ 796.066918][T13126] xas_store+0x9f/0x1a00 [ 796.071387][T13122] [ 796.071387][T13122] -> #2 ( [ 796.076482][T13126] ? xas_descend+0x210/0x3b0 [ 796.081652][T13122] &subsys->lock){+.+.}-{3:3} [ 796.092043][T13126] __xa_insert+0x1b4/0x290 [ 796.101047][T13122] : [ 796.101053][T13122] __mutex_lock_common+0x1e5/0x2400 [ 796.105278][T13126] cma_alloc_port+0x1b1/0x5f0 [ 796.110360][T13122] mutex_lock_nested+0x17/0x20 [ 796.114925][T13126] rdma_bind_addr+0xe27/0x37e0 [ 796.119490][T13122] nvmet_ns_buffered_io_store+0xde/0x200 [ 796.123914][T13126] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 796.127126][T13122] configfs_write_iter+0x30b/0x400 [ 796.132831][T13126] ? rdma_listen+0xde0/0xde0 [ 796.137483][T13122] vfs_write+0x748/0xd70 [ 796.142766][T13126] rdma_resolve_addr+0x723/0x2060 [ 796.147587][T13122] ksys_write+0x153/0x260 [ 796.153732][T13126] ? lockdep_softirqs_off+0x430/0x430 [ 796.159600][T13122] do_syscall_64+0x4c/0xa0 [ 796.165379][T13126] ? lockdep_init_map_type+0x98/0x900 [ 796.169940][T13122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.174697][T13126] ? rdma_resolve_route+0x2910/0x2910 [ 796.179816][T13122] [ 796.179816][T13122] -> #1 ( [ 796.184650][T13126] ? in_aton+0x3a4/0x440 [ 796.190012][T13122] &p->frag_sem [ 796.194926][T13126] rdma_create_trans+0xc77/0x1590 [ 796.200269][T13122] ){.+.+}-{3:3} [ 796.206661][T13126] ? pack_sg_list_p+0x4b0/0x4b0 [ 796.212012][T13122] : [ 796.212018][T13122] down_read+0x44/0x2e0 [ 796.217108][T13126] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 796.221327][T13122] __configfs_open_file+0xd5/0x7d0 [ 796.224902][T13126] ? lock_chain_count+0x20/0x20 [ 796.229911][T13122] do_dentry_open+0x7f7/0xf90 [ 796.233351][T13126] ? lockdep_hardirqs_on+0x94/0x140 [ 796.238200][T13122] dentry_open+0xc6/0x120 [ 796.240598][T13126] ? p9_client_create+0x750/0x1020 [ 796.245245][T13122] ima_calc_file_hash+0x18c/0x1940 [ 796.251218][T13126] ? kfree+0xef/0x2a0 [ 796.256836][T13122] ima_collect_measurement+0x335/0x7e0 [ 796.261676][T13126] p9_client_create+0x7e7/0x1020 [ 796.266844][T13122] process_measurement+0x1185/0x1c20 [ 796.272022][T13126] ? p9_parse_header+0x3e0/0x3e0 [ 796.276837][T13122] ima_file_check+0xc7/0x110 [ 796.281933][T13126] ? lockdep_softirqs_off+0x430/0x430 [ 796.287538][T13122] path_openat+0x27cf/0x2fb0 [ 796.291498][T13126] ? __raw_spin_lock_init+0x41/0x100 [ 796.297444][T13122] do_filp_open+0x1df/0x400 [ 796.302362][T13126] v9fs_session_init+0x1bd/0x1770 [ 796.308135][T13122] do_sys_openat2+0x14b/0x500 [ 796.313050][T13126] ? v9fs_show_options+0x610/0x610 [ 796.318140][T13122] __x64_sys_openat+0x135/0x160 [ 796.323505][T13126] v9fs_mount+0x72/0x850 [ 796.328585][T13122] do_syscall_64+0x4c/0xa0 [ 796.333849][T13126] legacy_get_tree+0xe6/0x180 [ 796.338842][T13122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.343838][T13126] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 796.349029][T13122] [ 796.349029][T13122] -> #0 ( [ 796.354113][T13126] vfs_get_tree+0x88/0x270 [ 796.359454][T13122] &iint_mutex_key[depth] [ 796.363686][T13126] do_new_mount+0x247/0xa40 [ 796.368593][T13122] ){+.+.}-{3:3} [ 796.373248][T13126] __se_sys_mount+0x2e3/0x3d0 [ 796.379628][T13122] : [ 796.379633][T13122] __lock_acquire+0x2c66/0x7b50 [ 796.385416][T13126] ? __x64_sys_mount+0xc0/0xc0 [ 796.390495][T13122] lock_acquire+0x19e/0x400 [ 796.394889][T13126] ? lockdep_hardirqs_on+0x94/0x140 [ 796.399104][T13122] __mutex_lock_common+0x1e5/0x2400 [ 796.403598][T13126] ? __x64_sys_mount+0x1c/0xc0 [ 796.407036][T13122] mutex_lock_nested+0x17/0x20 [ 796.411688][T13126] do_syscall_64+0x4c/0xa0 [ 796.414077][T13122] process_measurement+0x724/0x1c20 [ 796.419420][T13126] ? clear_bhb_loop+0x30/0x80 [ 796.424156][T13122] ima_file_check+0xc7/0x110 [ 796.429364][T13126] ? clear_bhb_loop+0x30/0x80 [ 796.434544][T13122] path_openat+0x27cf/0x2fb0 [ 796.440245][T13126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.444983][T13122] do_filp_open+0x1df/0x400 [ 796.450255][T13126] RIP: 0033:0x7ff07bcf9159 [ 796.454662][T13122] filp_open+0x17c/0x1e0 [ 796.460355][T13126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.465001][T13122] nvmet_file_ns_enable+0x70/0x330 [ 796.470086][T13126] RSP: 002b:00007ff079f51028 EFLAGS: 00000246 [ 796.474734][T13122] nvmet_ns_enable+0xf0/0x8c0 [ 796.479822][T13126] ORIG_RAX: 00000000000000a5 [ 796.485776][T13122] nvmet_ns_enable_store+0xd4/0x170 [ 796.490776][T13126] RAX: ffffffffffffffda RBX: 00007ff07bf80fa0 RCX: 00007ff07bcf9159 [ 796.495163][T13122] configfs_write_iter+0x30b/0x400 [ 796.499923][T13126] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000200000000040 [ 796.519506][T13122] vfs_write+0x748/0xd70 [ 796.525113][T13126] RBP: 00007ff07bd9006b R08: 00002000000001c0 R09: 0000000000000000 [ 796.531151][T13122] ksys_write+0x153/0x260 [ 796.536323][T13126] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.540974][T13122] do_syscall_64+0x4c/0xa0 [ 796.546667][T13126] R13: 00007ff07bf81038 R14: 00007ff07bf80fa0 R15: 00007fffdfd41e88 [ 796.554619][T13122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.560236][T13126] [ 796.568175][T13122] [ 796.568175][T13122] other info that might help us debug this: [ 796.568175][T13122] [ 796.568182][T13122] Chain exists of: [ 796.568182][T13122] &iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock [ 796.568182][T13122] [ 796.639486][T13122] Possible unsafe locking scenario: [ 796.639486][T13122] [ 796.647063][T13122] CPU0 CPU1 [ 796.651363][T10026] usb 7-1: USB disconnect, device number 11 [ 796.652420][T13122] ---- ---- [ 796.652426][T13122] lock(&subsys->lock); [ 796.652438][T13122] lock(&p->frag_sem); [ 796.652449][T13122] lock(&subsys->lock); [ 796.652459][T13122] lock(&iint_mutex_key[depth]); [ 796.652469][T13122] [ 796.652469][T13122] *** DEADLOCK *** [ 796.652469][T13122] [ 796.652472][T13122] 6 locks held by syz.0.2202/13122: [ 796.652483][T13122] #0: ffff8880515b2d70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 796.705107][T10026] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 796.708888][T13122] #1: ffff888140df2460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 796.718906][ T4230] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 796.727222][T13122] #2: ffff888072096a88 (&buffer->mutex){+.+.}-{3:3}, at: configfs_write_iter+0x7d/0x400 [ 796.740020][T10026] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 796.746399][T13122] #3: ffff88801d81e778 (&p->frag_sem){.+.+}-{3:3}, at: configfs_write_iter+0x20e/0x400 [ 796.746456][T13122] #4: ffffffff8cbf15f0 [ 796.759513][ T4230] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 796.765522][T13122] (nvmet_config_sem){+.+.}-{3:3}, at: nvmet_ns_enable_store+0xc5/0x170 [ 796.765570][T13122] #5: ffff88802606e070 (&subsys->lock){+.+.}-{3:3}, at: nvmet_ns_enable+0x49/0x8c0 [ 796.765604][T13122] [ 796.765604][T13122] stack backtrace: [ 796.765609][T13122] CPU: 1 PID: 13122 Comm: syz.0.2202 Not tainted syzkaller #0 [ 796.770577][ T4230] keyspan 5-1:1.0: device disconnected [ 796.779099][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 796.779114][T13122] Call Trace: [ 796.779122][T13122] [ 796.779128][T13122] dump_stack_lvl+0x188/0x250 [ 796.779150][T13122] ? load_image+0x410/0x410 [ 796.779162][T13122] ? show_regs_print_info+0x20/0x20 [ 796.779178][T13122] ? print_circular_bug+0x12b/0x1a0 [ 796.779194][T13122] check_noncircular+0x296/0x330 [ 796.779208][T13122] ? add_chain_block+0x9b0/0x9b0 [ 796.779221][T13122] ? lockdep_lock+0xf1/0x1f0 [ 796.779240][T13122] ? hlock_conflict+0x59/0x1f0 [ 796.779254][T13122] ? mark_lock+0x94/0x320 [ 796.779265][T13122] ? _find_first_zero_bit+0xd1/0xf0 [ 796.779283][T13122] __lock_acquire+0x2c66/0x7b50 [ 796.779305][T13122] ? add_chain_block+0x9b0/0x9b0 [ 796.779321][T13122] ? lockdep_unlock+0x143/0x2e0 [ 796.779337][T13122] ? lockdep_lock+0x1f0/0x1f0 [ 796.790540][T10026] keyspan 7-1:1.0: device disconnected [ 796.797000][T13122] ? verify_lock_unused+0x140/0x140 [ 796.797027][T13122] ? __lock_acquire+0x2844/0x7b50 [ 796.797047][T13122] lock_acquire+0x19e/0x400 [ 796.797062][T13122] ? process_measurement+0x724/0x1c20 [ 796.797080][T13122] ? __might_sleep+0xf0/0xf0 [ 796.797096][T13122] ? read_lock_is_recursive+0x10/0x10 [ 796.797118][T13122] __mutex_lock_common+0x1e5/0x2400 [ 796.797132][T13122] ? process_measurement+0x724/0x1c20 [ 796.797147][T13122] ? integrity_inode_get+0x44a/0x560 [ 796.950781][T13122] ? process_measurement+0x724/0x1c20 [ 796.956163][T13122] ? process_measurement+0x70c/0x1c20 [ 796.961547][T13122] ? mutex_lock_io_nested+0x60/0x60 [ 796.966753][T13122] ? clear_nonspinnable+0x60/0x60 [ 796.971926][T13122] ? up_write+0x1b6/0x410 [ 796.976277][T13122] mutex_lock_nested+0x17/0x20 [ 796.981050][T13122] process_measurement+0x724/0x1c20 [ 796.986488][T13122] ? ima_file_mmap+0x140/0x140 [ 796.991366][T13122] ? tomoyo_check_path_number_acl+0x280/0x280 [ 796.997466][T13122] ima_file_check+0xc7/0x110 [ 797.002214][T13122] ? ima_bprm_check+0x200/0x200 [ 797.007086][T13122] ? vfs_open+0x2b/0x80 [ 797.011254][T13122] path_openat+0x27cf/0x2fb0 [ 797.015871][T13122] ? slab_post_alloc_hook+0x4c/0x380 [ 797.021170][T13122] ? do_filp_open+0x400/0x400 [ 797.025865][T13122] ? do_syscall_64+0x4c/0xa0 [ 797.030467][T13122] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 797.036555][T13122] do_filp_open+0x1df/0x400 [ 797.041076][T13122] ? vfs_tmpfile+0x300/0x300 [ 797.045684][T13122] ? getname_kernel+0x56/0x2e0 [ 797.050461][T13122] ? getname_kernel+0x142/0x2e0 [ 797.055323][T13122] ? memcpy+0x3c/0x60 [ 797.059399][T13122] ? build_open_flags+0x459/0x5c0 [ 797.064432][T13122] filp_open+0x17c/0x1e0 [ 797.068683][T13122] ? file_open_name+0x1b0/0x1b0 [ 797.074269][T13122] nvmet_file_ns_enable+0x70/0x330 [ 797.079948][T13122] nvmet_ns_enable+0xf0/0x8c0 [ 797.084649][T13122] nvmet_ns_enable_store+0xd4/0x170 [ 797.089864][T13122] ? nvmet_ns_enable_show+0x60/0x60 [ 797.095109][T13122] ? down_read+0x1aa/0x2e0 [ 797.099540][T13122] configfs_write_iter+0x30b/0x400 [ 797.104685][T13122] ? nvmet_ns_enable_show+0x60/0x60 [ 797.109900][T13122] vfs_write+0x748/0xd70 [ 797.114156][T13122] ? file_end_write+0x250/0x250 [ 797.119377][T13122] ? mutex_lock_nested+0x17/0x20 [ 797.124336][T13122] ? __fdget_pos+0x2bf/0x370 [ 797.128935][T13122] ? ksys_write+0x70/0x260 [ 797.133362][T13122] ksys_write+0x153/0x260 [ 797.137698][T13122] ? __ia32_sys_read+0x80/0x80 [ 797.142473][T13122] ? lockdep_hardirqs_on+0x94/0x140 [ 797.147680][T13122] do_syscall_64+0x4c/0xa0 [ 797.152101][T13122] ? clear_bhb_loop+0x30/0x80 [ 797.156810][T13122] ? clear_bhb_loop+0x30/0x80 [ 797.161489][T13122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 797.167396][T13122] RIP: 0033:0x7ff681046159 [ 797.171817][T13122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.191440][T13122] RSP: 002b:00007ff67f29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 797.200043][T13122] RAX: ffffffffffffffda RBX: 00007ff6812cdfa0 RCX: 00007ff681046159 [ 797.208032][T13122] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000005 [ 797.216022][T13122] RBP: 00007ff6810dd06b R08: 0000000000000000 R09: 0000000000000000 [ 797.224098][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.232057][T13122] R13: 00007ff6812ce038 R14: 00007ff6812cdfa0 R15: 00007ffd54a13ea8 [ 797.240028][T13122] [ 797.308622][ T25] kauditd_printk_skb: 77 callbacks suppressed [ 797.308636][ T25] audit: type=1800 audit(1790182386.938:8126): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2202" name="addr_trtype" dev="configfs" ino=61676 res=0 errno=0 [ 797.347406][ T25] audit: type=1800 audit(1790182386.978:8127): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169157 res=0 errno=0