last executing test programs: 8m51.064373204s ago: executing program 4 (id=68): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000193c0)=0x410000002) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019440), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019480)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f0000019500)=@filename='mtd0\x00', &(0x7f0000019540)='./file0\x00', &(0x7f0000019580)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f00000195c0)='./file0\x00') creat(&(0x7f0000019600)='./file0\x00', 0x40) 8m50.184367085s ago: executing program 4 (id=69): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x118}}, 0x0) pselect6(0x40, &(0x7f0000000300)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000340)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) 8m47.60075357s ago: executing program 4 (id=72): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000193c0)=0x410000002) mount(0x0, 0x0, 0x0, 0x100054, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000019480)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f0000019500)=@filename='mtd0\x00', &(0x7f0000019540)='./file0\x00', &(0x7f0000019580)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f00000195c0)='./file0\x00') creat(&(0x7f0000019600)='./file0\x00', 0x40) 8m46.983956013s ago: executing program 4 (id=75): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000800)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d", 0x68}, {&(0x7f0000000880)="3bcab867990dafd48a38aa5c3e5078b40f6939f90b68fb7ea320958d4d64836e07", 0x21}, {&(0x7f00000008c0)="7ea229968456cc1d273939b7eaaaf05b3e95c220a05dfec9deedcff57f4337977785bc5532e5d07a8ccd0bbe9ca7c342b821efd28821b4b3993cc7a9cfa514552e371060b3c74d9ad72ddd7c8d0a2ad86262c6582d5da2894f9cbeef46b8a4017be35490301c70b310c1fa63a9c4770e7ce7163b13f9cdd81ae4009a071d0209e3a41890d2943d15ad4a", 0x8a}, {&(0x7f0000000980)="c45d5115e5374f6fef7f2f36aa65c7d43d1a282d095234e7c7387a3fa4a89cf1ee7228bb05d139383ce8a2197e705c9fb3cbbe69978007e76b108b6833b9cb03672f82956f192da9f131d69c127412277674ff4b96ddc3e62b1da4558352a61e636903a6d5c779c89f12b18a0ebec4bb4fcba25ba5f39e411b76c23f2f1ab9f7ca0c38a061b69e5a170a679b49d3d2029a1ebcf22212cd34a8d72d5a149b0955f354a9a9218d4ed1e3fdf02ed0d4f965f3d4a3fcc8a40bc604", 0xb9}, {0x0}, {&(0x7f0000002a40)="b7d77122ff0e4e10075f1aea20a1dd71fd9685bfad6d382d971ef3d62a2a012f7d06f00576a349d7f5e806512101a1ab500915f3f907550ba9d8071279004ff65644851c526604972b086716368cd6cf777c582bc523f87ee79f9ba6b58d65d1eb742691c9a11d2523141a94b874f6f178d76742b442232d1fd588c4a67c143b7d7120884217465d7d0662c65e21b2359a9170e32921892046124cb01b710352c20a09e5a3d1a5cfc0b6", 0xaa}, {&(0x7f0000002b00)="ae7699a27663725e496a1d4477a33f7192b4f8e619e529bd414590fedcedebd3a74ae4f3ecb6aa6866c924ab79cfdf3e941ed1ddfdcd66fda02c78f37d6d9b719769616417f76edd2db964ff309cd95275033746f1120afcb4230f790de61e7713e1181c041cebdcdc8fd423a2e88d598e714e94c8a03438fad42ffecf0b8438fcdbdf2621f8fd9fd57ea9971c4e0b099bd2f5e1f5b7f7a716f59d33ac5c4af92c6e84694ffeb550ec8708c4c12638776c342bc5ab188a", 0xb7}, {&(0x7f0000002bc0)="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", 0xccb}], 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003b40)={0x38, r1, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10}]}, 0x38}}, 0x24000000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003b80)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000003bc0)={0x2020}, 0x2020) pread64(r2, &(0x7f0000005c00)=""/208, 0xd0, 0x8d35) read$FUSE(r2, &(0x7f0000005d00)={0x2020}, 0x2020) r3 = memfd_create(&(0x7f0000000380)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf9\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xccd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4hi\v\x00\x00\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xeb\x05\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x\x004]PZ\x9e\xd5Y\xf0L\xa4\xbc\x86\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x01\x04\x00\x00\x00\x00\x00\x00h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2\x05\x00\x00\x00\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\xbc\x8d\xed\xf3\x98\x96\x84\xd7\xc2\x88\b\xcc6\xa44\xd7\xed\xc1\x8f\xa7K\xc9KeEk\xd1\xb7\xfb\x88\x12\xd0i\xef(\xddUP\xee;Dk\x84\xfcD\xf0\xd6\xe9\x96B!\x8c\xb8\xc6\'~\x99\x1d2\xdb\xfd=\xa7\x86\x06\x03\xc6Y\xc6\x87\xd13\xd0Y\x90\xe9*~$jQ\xb9\x84\xec\xe9{\xa8%}/\xcaP\xb1a\xa6\xd9\xb2\xe9\xa7\x1b\x00\xb8\x9d\xb0\x01\x04Y6\xcb\xaa\xa9\vE\xd0Q\xcd/#%J\x0f\x97\x96\xa0\xeeb\xe2R\xf5\x16\x1f\xe554q\xbdp\x0f)\x99\xec\xe4\xf9~\x91\x00[B$p\x92\x03i\x7f\x1c\xaf\x06\t\xda\xff\xb8\xf1\xc9\xd7\xc3\xfaN\xeel 40XJ\xe1\xe4Hv=\x81\xdaZ\xd6\aT\x86\xf5\x13+\xa9\x14x\xe7\x19?\xa9#2\xba\x7f1\xf2\xb8$\xa2\xb5*\xef\xd3\x8d\xe4Q\xe6C\xb3AU\xcb\xae\xdcN\xb7Mp\xc8\x04]\x84\x7f\x19\xd3#\x8b@\x9d\x1a\xc5\xc8n^e\xeak\xea9\x15\x9b\x1d\xb7\xe8\xca\xac;\n\\\xa9{B&uO\xb6\xd8\xa6\xb8\xfaA\x1f\xfb\xdcm)}q\x17\x7f\x86b\x1bq\xcb\x81\r\xc2\bb\xd9\xc7t\x88Y\f/\x0f_\x0e\xae\x92\x91\xf8B{\x16\x8a\xa7\xed\x01\x8c\xe9%', 0x7) execveat(r3, &(0x7f0000000680)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000006c0)={0xa, 0x4e22}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x60000526) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000100)="b9ae", 0x0, 0xe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f00000001c0)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x22, 0x2}]}, 0x140}}, 0x844) r7 = syz_open_dev$video(&(0x7f0000000240), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000700)={0x9, @raw_data="a45f3965c1f5db4eb184c560dfa68ab28458412ec1a2e2b4fb3cb8c21e70b825e6433a25159390f5494451841288a07a24de1d2a40e5665f9f6110eedb50aea614a751937f1c77b29ee9e40da962d4fbe20c0d48d406e668551974eff9a148c3cc9727dfeb8deb0d01665ea470148ea009f975d4f3a8e3b392f7f6d62f92a761d61f8b574d17418e5fea5510e61594520f9ef18a4fc28ae2020e2128006c16c97237ad256ab62b81b5f51614d183de9e6923224f3fe874541c934c3e517d941973d1781417350071"}) 8m45.213233536s ago: executing program 4 (id=77): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002880)=""/102392, 0x18ff8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x0) 8m43.652264492s ago: executing program 4 (id=80): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs(0x0, 0x0) epoll_create(0x3fc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) fsopen(&(0x7f00000003c0)='nilfs2\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x181403, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000440)=""/238, 0xee}], 0x1, 0x81, 0x0) write$UHID_INPUT(r1, &(0x7f0000000580)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3e0a8b089b3f32356c030890e0879b0a4cc6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07732f0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973725b36d5b1b7ddd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fde70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe090064f11e4fe852c3f7c4239963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632bcfaaa5ae6c07a236d9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79ca389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e55fc4a41ea4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb0600f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180610117a13638e9a14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0036327bd1f4108b7807fb33b72685ec37a2d3f766413a60459516247e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7d78aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e9fbfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c675879c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885594ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff68}}, 0xb76) 8m28.171163037s ago: executing program 32 (id=80): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs(0x0, 0x0) epoll_create(0x3fc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) fsopen(&(0x7f00000003c0)='nilfs2\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x181403, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000440)=""/238, 0xee}], 0x1, 0x81, 0x0) write$UHID_INPUT(r1, &(0x7f0000000580)={0xfc, {"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", 0xffffffffffffff68}}, 0xb76) 4m52.547831797s ago: executing program 2 (id=342): epoll_create1(0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 4m52.125647049s ago: executing program 2 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) socket(0x1f, 0x5, 0x6) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_async', 0x1a1081, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='fd\x00') io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f0000000600)=""/74, 0x33e000, 0x1000}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x18, 0x30, 0xb, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240418d0}, 0x20006094) 4m50.561974103s ago: executing program 2 (id=344): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000005c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000600)={&(0x7f0000000640)=[{0x6, 0x8000, 0x18, &(0x7f00000006c0)="e8b487730508a2705d63800e779850ab24f96d781cd82003"}], 0x1}) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000380)={0x763bf26aa405d86c, 0x100000, 0xfffffffd, 0x1, 0x9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$packet(0x11, 0x2, 0x300) syz_open_dev$evdev(0x0, 0x2, 0x842) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m45.915570742s ago: executing program 2 (id=350): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, 0x0}) 4m44.537199799s ago: executing program 2 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000800)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r3, &(0x7f00000008c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='cifs\x00', 0x2008004, 0x0) 4m42.80061812s ago: executing program 2 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0) 4m26.574570478s ago: executing program 33 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f00000001c0)=""/102392, 0x18ff8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0) 14.745939422s ago: executing program 3 (id=771): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000240)=""/168, &(0x7f0000000400)=0xa8) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='atkbd', 0x5) 10.513024755s ago: executing program 0 (id=775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)) 8.963402451s ago: executing program 0 (id=776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x4001}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f000000000000"], 0x6a) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000037000701f3ffff83edb00fc4af7d800008000480"], 0x1c}, 0x1, 0x0, 0x0, 0x40080d1}, 0x8050) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x1a2) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) write(r2, &(0x7f0000000640)='270', 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x19a8, &(0x7f0000000680)={0x0, 0xc46e, 0x10, 0x20001, 0x180003}) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r3, &(0x7f0000000880)='lz4', 0x3) 8.730120391s ago: executing program 1 (id=777): syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000500, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='1:1\n', 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.673888524s ago: executing program 1 (id=778): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) close(r0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vimc1(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000780)={0x0, @reserved}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffc, 0x800, 0x2000, 0x1d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b54, 0x1, 0x0, 0x1c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2b4, 0x8200, 0x3, 0x38e}}], 0x1, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000900)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000007f00000000000000c2beb2e1"], &(0x7f0000000980)=0x2c) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f00000071c0)={0x18, {"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", 0x1000}}, 0x1006) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x800, 0x3, 0x9, 0x7f}, {0x8, 0x2, 0x3, 0x7}, {0x1c, 0x1, 0x80, 0x3}, {0x40, 0xeb, 0x3, 0xe}, {0x0, 0x0, 0x7, 0x306}, {0x3, 0xf7, 0x2, 0x8}]}, 0x8) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 5.47214606s ago: executing program 1 (id=779): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000900)={0x1, 0x0, 0x0, &(0x7f0000000a80)=""/63, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000b40)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000b80)={0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000c80)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000cc0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/4096}) connect$vsock_stream(r2, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) open(0x0, 0x4c27e, 0x130) truncate(&(0x7f00000008c0)='./file0\x00', 0x3) 5.257611634s ago: executing program 0 (id=780): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000300)=':', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000003c0), 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143142) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0x42, 0x42, "03", "00404000000062cf004ab77f8437"}}}}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000020305000000000100001100000000000000000000dc84edda19c5bfba406a0bc29f710f1f29ca07c32dbc3b09bbebca48db928eacbb8902009616d1e2d9f59727616176b922d16a6b5ee448a1dc846e8d522bb44865cfc85d7568cd52464c1f6d8af0650d2b76bcc15a91e99bee1145a6d374e5157d7e294ee49729cd1c1a972ee3e293053e4ca3ad7461fb8fc00a7b4042bbd1193c7e2bf164e2c6684c64b6afd29b011e"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c9d1}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 5.116850155s ago: executing program 1 (id=781): socket$netlink(0x10, 0x3, 0xb) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f00000001c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x700, 0xf951, 0x7, 0x5, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x65, 0x0, 0xf6, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, {@loopback, 0x296}, {@broadcast, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xd2, [@private=0xa010101]}]}}}}}) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0xd4, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2404c0c0}, 0x20000000) openat(r1, 0x0, 0x9850c1, 0x182) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./gadget/ep1in-bulk\x00', 0x2, 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge0\x00'}) close(0x3) 5.028709275s ago: executing program 3 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) r4 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000080)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) 3.788501696s ago: executing program 3 (id=783): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20a02, 0x0) r1 = dup(r0) sendmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0x10, &(0x7f0000000240)={&(0x7f0000000200)=@can={{0x2, 0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "ee41d9fb5a0c2f3c"}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x20000080) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r2 = syz_io_uring_setup(0x368b, &(0x7f00000000c0)={0x0, 0x4885, 0x800, 0x0, 0x1d}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000400)={0x0, 0x2, 0xf}, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000440), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000480)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000004c0)={0x0, @bt={0x500, 0x2d3, 0x1, 0x0, 0xdd9fc3, 0x1, 0x9, 0x1d, 0x2, 0x4, 0x721, 0x13, 0x6, 0x7f, 0x3b, 0x4, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x1c3902, 0x0) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x7ff, r6}, 0x38) sendfile(r5, r5, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x6, 0x8, 0x3, 0x0, 0x912a, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_open_dev$media(&(0x7f0000000980), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000ac0)={{0x80000000, 0x0, 0x3, [0x0, 0x10000]}, {0x80000000, 0x0, 0x4, [0x81, 0x7]}, 0x1, [0x80004, 0x200008]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc01c7c02, &(0x7f0000000b00)={0x80000000, 0x0, 0x0}) mount(0x0, &(0x7f0000000c40)='./sec\x00', &(0x7f0000000c80)='securityfs\x00', 0x0, 0x0) 2.562609567s ago: executing program 0 (id=784): socket$netlink(0x10, 0x3, 0xb) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f00000001c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x700, 0xf951, 0x7, 0x5, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x65, 0x0, 0xf6, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, {@loopback, 0x296}, {@broadcast, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xd2, [@private=0xa010101]}]}}}}}) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0xd4, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2404c0c0}, 0x20000000) openat(r1, 0x0, 0x9850c1, 0x182) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./gadget/ep1in-bulk\x00', 0x2, 0x24) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24603, 0x1141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) close(0x3) 2.290564774s ago: executing program 1 (id=785): syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x7ffc0001}]}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400022208000200050001002c000000eab556a705251e61c9c100000000000ffed000032e301bb4d89b4af300ffffc6c9533e7d873c5397", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c880) 717.44761ms ago: executing program 0 (id=786): socket$netlink(0x10, 0x3, 0xb) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./gadget\x00', 0x1ef) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r0, &(0x7f00000001c0)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x700, 0xf951, 0x7, 0x5, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x65, 0x0, 0xf6, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x4}, {@loopback, 0x296}, {@broadcast, 0x7fff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xd2, [@private=0xa010101]}]}}}}}) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) close(0x3) 279.690044ms ago: executing program 0 (id=787): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) close(r0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0x1f}, 0x48, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000780)={0x0, @reserved}) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffc, 0x800, 0x2000, 0x1d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b54, 0x1, 0x0, 0x1c5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2b4, 0x8200, 0x3, 0x38e}}], 0x1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f00000071c0)={0x18, {"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", 0x1000}}, 0x1006) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x800, 0x3, 0x9, 0x7f}, {0x8, 0x2, 0x3, 0x7}, {0x1c, 0x1, 0x80, 0x3}, {0x40, 0xeb, 0x3, 0xe}, {0x0, 0x0, 0x7, 0x306}, {0x3, 0xf7, 0x2, 0x8}]}, 0x8) 226.709395ms ago: executing program 1 (id=788): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3631, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002000500010003000000", 0x38) write(r6, 0x0, 0x0) write(r6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) sendto$inet6(r5, &(0x7f0000000140)='J', 0x1, 0x4800, 0x0, 0x0) shutdown(r5, 0x1) dup(0xffffffffffffffff) unshare(0x8040480) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000002c0)=0x18, 0x4) 137.355386ms ago: executing program 3 (id=789): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000006c0)={0xa50, 0x33, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7}, [@nested={0xa39, 0x160, 0x0, 0x1, [@generic="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"]}]}, 0xa50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 61.762952ms ago: executing program 3 (id=790): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000540)={r0, r0, 0xc, 0x1, &(0x7f0000000600)='\x00', 0xb, 0x7, 0x4c4a, 0x4158, 0x8, 0x2, 0x1, 'syz0\x00'}) 0s ago: executing program 3 (id=791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dcdf1525d366fb4b78fd6292b710a7a11bf055cd998f3f582303ca"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): ] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 358.473142][ T7277] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 358.474208][ T7277] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 358.474219][ T7277] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 359.679361][ T7297] ubi0: attaching mtd0 [ 359.686785][ T7297] ubi0: scanning is finished [ 359.686924][ T7297] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 360.757157][ T7297] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 361.141799][ T7307] jffs2: notice: (7307) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 361.684875][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.726870][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.740016][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.756366][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.757537][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.607616][ T7315] jffs2: notice: (7315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 363.833723][ T5623] Bluetooth: hci4: command tx timeout [ 365.922175][ T5623] Bluetooth: hci4: command tx timeout [ 366.320372][ T7332] jffs2: notice: (7332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 367.024217][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 367.025822][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 367.987601][ T5623] Bluetooth: hci4: command tx timeout [ 368.837193][ T7356] jffs2: notice: (7356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 370.065603][ T5623] Bluetooth: hci4: command tx timeout [ 370.091318][ T7369] jffs2: notice: (7369) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 372.219744][ T7383] jffs2: notice: (7383) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 373.212275][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 373.212337][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 374.591219][ T7408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.130816][ T7305] rxe_eth0 speed is unknown, defaulting to 1000 [ 375.281268][ T7407] jffs2: notice: (7407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 375.932015][ T7414] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 375.932659][ T7414] CIFS: Attempting to mount //127.0.0.1/share [ 376.095591][ T7414] CIFS: VFS: Error connecting to socket. Aborting operation. [ 378.629101][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.629145][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.989930][ T7432] jffs2: notice: (7432) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 383.289326][ T7451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.421691][ T7457] jffs2: notice: (7457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 385.137023][ T7464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.190001][ T7469] ALSA: mixer_oss: invalid OSS volume ' €' [ 386.190023][ T7469] ALSA: mixer_oss: invalid OSS volume 'f’ÑU=;ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 386.190042][ T7469] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT�0p³Áúc©' [ 386.190060][ T7469] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 386.190074][ T7469] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 386.190099][ T7469] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 386.190114][ T7469] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 386.190126][ T7469] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 386.190382][ T7469] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 386.190393][ T7469] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 386.315349][ T49] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 386.500431][ T49] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 386.516632][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.516658][ T49] usb 4-1: config 0 has no interface number 0 [ 386.522622][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.522646][ T49] usb 4-1: Product: syz [ 386.522654][ T49] usb 4-1: Manufacturer: syz [ 386.522665][ T49] usb 4-1: SerialNumber: syz [ 386.589505][ T49] usb 4-1: config 0 descriptor?? [ 386.839299][ T49] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 386.893618][ T49] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 386.902103][ T49] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 386.902158][ T49] usb 4-1: media controller created [ 387.283909][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.338514][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.615807][ T49] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 390.033340][ T7497] syz.3.339 uses obsolete (PF_INET,SOCK_PACKET) [ 390.075355][ T49] usb 4-1: USB disconnect, device number 13 [ 390.094178][ T7460] udevd[7460]: setting mode of /dev/bus/usb/004/013 to 020664 failed: No such file or directory [ 390.094279][ T7460] udevd[7460]: setting owner of /dev/bus/usb/004/013 to uid=0, gid=0 failed: No such file or directory [ 390.211652][ T714] bridge_slave_1: left allmulticast mode [ 390.211676][ T714] bridge_slave_1: left promiscuous mode [ 390.211856][ T714] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.346362][ T7501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.551401][ T714] bridge_slave_0: left allmulticast mode [ 390.551427][ T714] bridge_slave_0: left promiscuous mode [ 390.551574][ T714] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.589405][ T49] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 390.738906][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 390.743120][ T49] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 390.763114][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 390.763132][ T49] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 390.805697][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.805728][ T49] usb 4-1: Product: syz [ 390.805742][ T49] usb 4-1: Manufacturer: syz [ 390.805757][ T49] usb 4-1: SerialNumber: syz [ 391.617788][ T7502] netlink: 80 bytes leftover after parsing attributes in process `syz.0.337'. [ 395.170818][ T714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.249925][ T714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.304535][ T714] bond0 (unregistering): Released all slaves [ 396.467382][ T49] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 396.467421][ T49] cdc_ncm 4-1:1.0: bind() failure [ 396.729384][ T49] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 396.729414][ T49] cdc_ncm 4-1:1.1: bind() failure [ 396.976456][ T30] usb 4-1: USB disconnect, device number 14 [ 397.095306][ T49] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 397.783002][ T7530] CIFS: Attempting to mount //127.0.0.1/share [ 397.877787][ T7530] CIFS: VFS: Error connecting to socket. Aborting operation. [ 398.341951][ T49] usb 3-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 398.347566][ T49] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.347583][ T49] usb 3-1: config 0 has no interface number 0 [ 398.349733][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.349758][ T49] usb 3-1: Product: syz [ 398.349773][ T49] usb 3-1: Manufacturer: syz [ 398.349787][ T49] usb 3-1: SerialNumber: syz [ 398.353169][ T49] usb 3-1: config 0 descriptor?? [ 399.103808][ T49] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 399.188936][ T49] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 399.193622][ T49] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 399.193680][ T49] usb 3-1: media controller created [ 399.292676][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.158495][ T7544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.910719][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.910843][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.911037][ T7305] bridge_slave_0: entered allmulticast mode [ 400.947182][ T7305] bridge_slave_0: entered promiscuous mode [ 400.995804][ T49] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 401.149033][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.149216][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.149411][ T7305] bridge_slave_1: entered allmulticast mode [ 401.289432][ T7305] bridge_slave_1: entered promiscuous mode [ 401.470391][ T7549] jffs2: notice: (7549) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 402.079847][ T49] usb 3-1: USB disconnect, device number 6 [ 402.316800][ T7557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.919547][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.551428][ T7571] CIFS: Attempting to mount //127.0.0.1/share [ 403.626590][ T7571] CIFS: VFS: Error connecting to socket. Aborting operation. [ 404.519894][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.643442][ T714] hsr_slave_0: left promiscuous mode [ 410.691137][ T714] hsr_slave_1: left promiscuous mode [ 410.691928][ T714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.788062][ T714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.343848][ T7610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.778112][ T7617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.530316][ T714] team0 (unregistering): Port device team_slave_1 removed [ 414.620506][ T714] team0 (unregistering): Port device team_slave_0 removed [ 418.247777][ T7305] team0: Port device team_slave_0 added [ 418.288931][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 418.308673][ T7305] team0: Port device team_slave_1 added [ 418.361725][ T7642] jffs2: notice: (7642) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 418.529991][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.530009][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.530034][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.564591][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.564610][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.564635][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.745381][ T30] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 418.999885][ T7305] hsr_slave_0: entered promiscuous mode [ 419.010015][ T7305] hsr_slave_1: entered promiscuous mode [ 419.018983][ T7305] debugfs: 'hsr0' already exists in 'hsr' [ 419.019737][ T7305] Cannot create hsr debugfs directory [ 419.066157][ T30] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 419.067889][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.067941][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 419.067963][ T30] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 419.067986][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.068128][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.665726][ T30] gud 2-1:1.0: probe with driver gud failed with error -5 [ 420.899341][ T5741] usb 2-1: USB disconnect, device number 10 [ 421.187014][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 421.229346][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 421.238813][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 421.249836][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 421.259790][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.425307][ T5623] Bluetooth: hci5: command tx timeout [ 423.768221][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.821119][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.843345][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.849850][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.850805][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.319610][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 424.887655][ T7705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.510952][ T5624] Bluetooth: hci5: command tx timeout [ 425.996426][ T5624] Bluetooth: hci2: command tx timeout [ 427.677743][ T1825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.763268][ T5624] Bluetooth: hci5: command tx timeout [ 428.329972][ T5624] Bluetooth: hci2: command tx timeout [ 428.733258][ T7667] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.004255][ T7738] jffs2: notice: (7738) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 429.825440][ T5624] Bluetooth: hci5: command tx timeout [ 430.385309][ T5624] Bluetooth: hci2: command tx timeout [ 430.571531][ T1825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.676136][ T7751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.001161][ T7755] jffs2: notice: (7755) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 432.220174][ T7765] jffs2: notice: (7765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 432.471204][ T5624] Bluetooth: hci2: command tx timeout [ 433.073824][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 433.153400][ T7689] rxe_eth0 speed is unknown, defaulting to 1000 [ 433.533286][ T7780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.169314][ T1825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.512908][ T1825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.527626][ T5741] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 436.688061][ T5741] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 436.691516][ T5741] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.691568][ T5741] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 436.691590][ T5741] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 436.691613][ T5741] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.691651][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.278908][ T5741] gud 4-1:1.0: No supported pixel formats found [ 437.278950][ T5741] gud 4-1:1.0: probe with driver gud failed with error -22 [ 438.594029][ T7808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.649714][ T49] usb 4-1: USB disconnect, device number 15 [ 440.085857][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.085922][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.630114][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 444.967133][ T1825] bridge_slave_1: left allmulticast mode [ 444.967169][ T1825] bridge_slave_1: left promiscuous mode [ 444.967507][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.573693][ T1825] bridge_slave_0: left allmulticast mode [ 445.573731][ T1825] bridge_slave_0: left promiscuous mode [ 445.574002][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.966978][ T1825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.246666][ T1825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.387992][ T1825] bond0 (unregistering): Released all slaves [ 449.684794][ T7871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.181801][ T7890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.250703][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.250833][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.250993][ T7667] bridge_slave_0: entered allmulticast mode [ 455.412596][ T7667] bridge_slave_0: entered promiscuous mode [ 455.498401][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.498508][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.499812][ T7689] bridge_slave_0: entered allmulticast mode [ 455.528539][ T7689] bridge_slave_0: entered promiscuous mode [ 455.989372][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.989498][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.989685][ T7667] bridge_slave_1: entered allmulticast mode [ 456.032426][ T7667] bridge_slave_1: entered promiscuous mode [ 456.454953][ T7918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.766048][ T202] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 457.863406][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.863540][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.863735][ T7689] bridge_slave_1: entered allmulticast mode [ 457.896214][ T7689] bridge_slave_1: entered promiscuous mode [ 457.965369][ T202] usb 1-1: Using ep0 maxpacket: 16 [ 457.982296][ T202] usb 1-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 458.004042][ T202] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.004098][ T202] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.004123][ T202] usb 1-1: config 0 interface 0 has no altsetting 0 [ 458.004155][ T202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.062676][ T202] usb 1-1: config 0 descriptor?? [ 458.182554][ T202] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 458.583571][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.618373][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.648532][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.651477][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.664418][ T30] usb 1-1: USB disconnect, device number 6 [ 461.841763][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 461.860912][ T7667] team0: Port device team_slave_0 added [ 461.877654][ T7689] team0: Port device team_slave_0 added [ 461.887918][ T7667] team0: Port device team_slave_1 added [ 461.946050][ T7689] team0: Port device team_slave_1 added [ 463.167719][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.167737][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.169989][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.174451][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.174463][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.174477][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.236709][ T1825] hsr_slave_0: left promiscuous mode [ 464.265478][ T1825] hsr_slave_1: left promiscuous mode [ 464.306128][ T1825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.306206][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.909280][ T1825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.909308][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.314627][ T1825] veth1_macvtap: left promiscuous mode [ 466.383389][ T1825] veth0_macvtap: left promiscuous mode [ 466.401148][ T1825] veth1_vlan: left promiscuous mode [ 466.424111][ T1825] veth0_vlan: left promiscuous mode [ 470.766235][ T1825] team0 (unregistering): Port device team_slave_1 removed [ 470.805921][ T1825] team0 (unregistering): Port device team_slave_0 removed [ 470.968738][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.968756][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.968781][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.970004][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.970020][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.970045][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.344835][ T7667] hsr_slave_0: entered promiscuous mode [ 471.353414][ T7667] hsr_slave_1: entered promiscuous mode [ 471.354443][ T7667] debugfs: 'hsr0' already exists in 'hsr' [ 471.354469][ T7667] Cannot create hsr debugfs directory [ 471.406771][ T7689] hsr_slave_0: entered promiscuous mode [ 471.408118][ T7689] hsr_slave_1: entered promiscuous mode [ 471.409227][ T7689] debugfs: 'hsr0' already exists in 'hsr' [ 471.409252][ T7689] Cannot create hsr debugfs directory [ 471.676962][ T5340] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 472.715379][ T5340] usb 2-1: Using ep0 maxpacket: 16 [ 472.716477][ T5340] usb 2-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 472.717623][ T5340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.717675][ T5340] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.717692][ T5340] usb 2-1: config 0 interface 0 has no altsetting 0 [ 472.717734][ T5340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.721423][ T5340] usb 2-1: config 0 descriptor?? [ 472.791015][ T5340] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 474.497375][ T5876] usb 2-1: USB disconnect, device number 11 [ 476.346783][ T202] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 476.619191][ T202] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 476.620668][ T202] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.620816][ T202] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 476.620842][ T202] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 476.620866][ T202] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.620909][ T202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.475916][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 477.538601][ T202] gud 4-1:1.0: Failed to get connectors (error=-5) [ 477.538647][ T202] gud 4-1:1.0: probe with driver gud failed with error -5 [ 477.775773][ T7667] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 478.230781][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.265885][ T7667] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 478.697436][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.738719][ T7667] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 478.801920][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.851263][ T5876] usb 4-1: USB disconnect, device number 16 [ 478.991232][ T1825] bridge_slave_1: left allmulticast mode [ 478.991268][ T1825] bridge_slave_1: left promiscuous mode [ 478.991532][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.648551][ T8052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.125387][ T1825] bridge_slave_0: left allmulticast mode [ 481.125424][ T1825] bridge_slave_0: left promiscuous mode [ 481.125674][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.539490][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.612865][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.625531][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.627187][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.627997][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.428133][ T1825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.607910][ T1825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.685951][ T8087] jffs2: notice: (8087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 484.705304][ T5623] Bluetooth: hci4: command tx timeout [ 485.097388][ T1825] bond0 (unregistering): Released all slaves [ 485.142418][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 485.173146][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 485.174424][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 485.202140][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 485.204838][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 485.224095][ T7667] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 485.356421][ T7667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.577471][ T49] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 485.777152][ T49] usb 1-1: not running at top speed; connect to a high speed hub [ 485.777195][ T49] usb 1-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 485.778612][ T49] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 485.781397][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.781423][ T49] usb 1-1: Product: syz [ 485.781438][ T49] usb 1-1: Manufacturer: syz [ 485.781452][ T49] usb 1-1: SerialNumber: syz [ 485.916545][ T49] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 485.940221][ T49] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 486.771864][ T49] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 486.939294][ T49] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 486.955830][ T5623] Bluetooth: hci4: command tx timeout [ 487.036581][ T49] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 487.086089][ T49] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 487.346869][ T5623] Bluetooth: hci6: command tx timeout [ 487.509609][ T8107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.576340][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 489.025203][ T5623] Bluetooth: hci4: command tx timeout [ 489.425684][ T5623] Bluetooth: hci6: command tx timeout [ 490.112943][ T8103] Set syz1 is full, maxelem 6117 reached [ 490.315661][ T5876] usb 1-1: USB disconnect, device number 7 [ 491.127505][ T5623] Bluetooth: hci4: command tx timeout [ 491.202649][ T5876] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 491.432011][ T5876] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 491.460511][ T5876] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 491.493763][ T5876] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 491.508926][ T5876] keyspan 1-1:1.0: device disconnected [ 491.590092][ T5623] Bluetooth: hci6: command tx timeout [ 492.516754][ T8147] ALSA: mixer_oss: invalid OSS volume ' €' [ 492.516781][ T8147] ALSA: mixer_oss: invalid OSS volume 'f’ÑU=;ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 492.516796][ T8147] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 492.516821][ T8147] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 492.516838][ T8147] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 492.516864][ T8147] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 492.517134][ T8147] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 492.517144][ T8147] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 492.726912][ T1825] hsr_slave_0: left promiscuous mode [ 492.762232][ T1825] hsr_slave_1: left promiscuous mode [ 492.764120][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.813487][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.665445][ T5623] Bluetooth: hci6: command tx timeout [ 495.681472][ T1825] team0 (unregistering): Port device team_slave_1 removed [ 495.767929][ T1825] team0 (unregistering): Port device team_slave_0 removed [ 499.733712][ T8073] rxe_eth0 speed is unknown, defaulting to 1000 [ 500.206319][ T8206] jffs2: notice: (8206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 501.204132][ T8216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.284074][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.287878][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.199691][ T8090] rxe_eth0 speed is unknown, defaulting to 1000 [ 503.442563][ T5612] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 503.915333][ T5612] usb 1-1: Using ep0 maxpacket: 16 [ 503.916425][ T5612] usb 1-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 503.920165][ T5612] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.920204][ T5612] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.920219][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0 [ 503.920239][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.922926][ T5612] usb 1-1: config 0 descriptor?? [ 503.992847][ T5612] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 504.525769][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 505.002399][ T8236] input: syz1 as /devices/virtual/input/input9 [ 505.343382][ T8250] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 505.343400][ T8250] netlink: 3 bytes leftover after parsing attributes in process `syz.1.469'. [ 505.853685][ T8082] usb 1-1: USB disconnect, device number 8 [ 514.617627][ T8330] netlink: 'syz.0.485': attribute type 3 has an invalid length. [ 514.617645][ T8330] netlink: 3 bytes leftover after parsing attributes in process `syz.0.485'. [ 515.171800][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.171928][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.172143][ T8073] bridge_slave_0: entered allmulticast mode [ 515.174840][ T8073] bridge_slave_0: entered promiscuous mode [ 515.239523][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.240044][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.240232][ T8073] bridge_slave_1: entered allmulticast mode [ 515.275357][ T8073] bridge_slave_1: entered promiscuous mode [ 515.680183][ T8342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.442602][ T8073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.608475][ T8073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.173901][ T8073] team0: Port device team_slave_0 added [ 517.257855][ T8073] team0: Port device team_slave_1 added [ 517.385329][ T202] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 517.555375][ T202] usb 2-1: Using ep0 maxpacket: 16 [ 517.556212][ T202] usb 2-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 517.558724][ T202] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.558775][ T202] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.558803][ T202] usb 2-1: config 0 interface 0 has no altsetting 0 [ 517.558839][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.576810][ T202] usb 2-1: config 0 descriptor?? [ 517.594906][ T202] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 517.748586][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.748604][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.748627][ T8073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.826716][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.826735][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.826760][ T8073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.083113][ T8385] loop8: detected capacity change from 0 to 16384 [ 518.359404][ T8356] input: syz1 as /devices/virtual/input/input10 [ 518.367801][ T1825] bridge_slave_1: left allmulticast mode [ 518.367837][ T1825] bridge_slave_1: left promiscuous mode [ 518.368093][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.588758][ T1825] bridge_slave_0: left allmulticast mode [ 518.588795][ T1825] bridge_slave_0: left promiscuous mode [ 518.589034][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.685323][ T8082] usb 2-1: USB disconnect, device number 12 [ 518.772101][ T8390] loop8: detected capacity change from 16384 to 16383 [ 520.876561][ T1825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.037973][ T1825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.164224][ T1825] bond0 (unregistering): Released all slaves [ 521.611685][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.611788][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.611918][ T8090] bridge_slave_0: entered allmulticast mode [ 521.613499][ T8090] bridge_slave_0: entered promiscuous mode [ 521.681364][ T8073] hsr_slave_0: entered promiscuous mode [ 521.682482][ T8073] hsr_slave_1: entered promiscuous mode [ 521.683227][ T8073] debugfs: 'hsr0' already exists in 'hsr' [ 521.683250][ T8073] Cannot create hsr debugfs directory [ 521.707909][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.708112][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.708322][ T8090] bridge_slave_1: entered allmulticast mode [ 521.712323][ T8090] bridge_slave_1: entered promiscuous mode [ 522.150734][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.304402][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.025265][ T202] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 524.175208][ T202] usb 2-1: Using ep0 maxpacket: 16 [ 524.175773][ T202] usb 2-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 524.184560][ T202] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.184616][ T202] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.184644][ T202] usb 2-1: config 0 interface 0 has no altsetting 0 [ 524.184677][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.253099][ T202] usb 2-1: config 0 descriptor?? [ 524.282371][ T202] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 524.342926][ T8090] team0: Port device team_slave_0 added [ 524.518392][ T1825] hsr_slave_0: left promiscuous mode [ 524.545379][ T1825] hsr_slave_1: left promiscuous mode [ 524.546625][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.588506][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.013726][ T8454] input: syz1 as /devices/virtual/input/input11 [ 525.237167][ T8480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.028915][ T202] usb 2-1: USB disconnect, device number 13 [ 530.136699][ T1825] team0 (unregistering): Port device team_slave_1 removed [ 530.400892][ T1825] team0 (unregistering): Port device team_slave_0 removed [ 530.623871][ T8519] jffs2: notice: (8519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 531.307067][ T8090] team0: Port device team_slave_1 added [ 531.505374][ T5876] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 531.634701][ T202] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 531.666579][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.666596][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.666616][ T8090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.668726][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.668740][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.668761][ T8090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.706040][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 531.706925][ T5876] usb 2-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 531.714588][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.714643][ T5876] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.714669][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 531.714702][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.722135][ T5876] usb 2-1: config 0 descriptor?? [ 531.814229][ T202] usb 4-1: Using ep0 maxpacket: 16 [ 531.815281][ T202] usb 4-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 531.816890][ T202] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.816940][ T202] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.816967][ T202] usb 4-1: config 0 interface 0 has no altsetting 0 [ 531.817001][ T202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.831619][ T5876] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 531.843297][ T202] usb 4-1: config 0 descriptor?? [ 531.900402][ T202] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 532.263278][ T8090] hsr_slave_0: entered promiscuous mode [ 532.291625][ T8090] hsr_slave_1: entered promiscuous mode [ 532.292157][ T8090] debugfs: 'hsr0' already exists in 'hsr' [ 532.292181][ T8090] Cannot create hsr debugfs directory [ 532.497156][ T8523] input: syz1 as /devices/virtual/input/input12 [ 532.792199][ T8526] input: syz1 as /devices/virtual/input/input13 [ 533.178711][ T202] usb 2-1: USB disconnect, device number 14 [ 533.391397][ T5741] usb 4-1: USB disconnect, device number 17 [ 533.713692][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 533.957031][ T1825] bridge_slave_1: left allmulticast mode [ 533.957065][ T1825] bridge_slave_1: left promiscuous mode [ 533.957313][ T1825] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.061220][ T8563] FAULT_INJECTION: forcing a failure. [ 534.061220][ T8563] name fail_futex, interval 1, probability 0, space 0, times 1 [ 534.061277][ T8563] CPU: 1 UID: 0 PID: 8563 Comm: syz.0.526 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.061306][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 534.061327][ T8563] Call Trace: [ 534.061339][ T8563] [ 534.061348][ T8563] dump_stack_lvl+0xe8/0x150 [ 534.061388][ T8563] should_fail_ex+0x46b/0x600 [ 534.061504][ T8563] get_futex_key+0x1ab/0x1410 [ 534.061536][ T8563] ? __lock_acquire+0x747/0x2de0 [ 534.061571][ T8563] ? __pfx_get_futex_key+0x10/0x10 [ 534.061595][ T8563] ? lock_acquire+0x115/0x350 [ 534.061625][ T8563] ? futex_unqueue+0x22/0x240 [ 534.061652][ T8563] futex_wait_setup+0x4a/0x590 [ 534.061688][ T8563] ? __futex_wait+0xdd/0x480 [ 534.061722][ T8563] __futex_wait+0x177/0x480 [ 534.061761][ T8563] ? __pfx___futex_wait+0x10/0x10 [ 534.061796][ T8563] ? __pfx_futex_wake_mark+0x10/0x10 [ 534.061832][ T8563] ? futex_hash+0x4e/0x2b0 [ 534.061855][ T8563] ? futex_hash+0x4e/0x2b0 [ 534.061877][ T8563] ? futex_hash+0x275/0x2b0 [ 534.061904][ T8563] futex_wait+0x121/0x390 [ 534.061938][ T8563] ? __pfx_futex_wait+0x10/0x10 [ 534.061986][ T8563] do_futex+0x3e7/0x4e0 [ 534.062017][ T8563] ? __pfx_do_futex+0x10/0x10 [ 534.062043][ T8563] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 534.062216][ T8563] __se_sys_futex+0x3a8/0x450 [ 534.062248][ T8563] ? ksys_write+0x248/0x270 [ 534.062275][ T8563] ? __pfx___se_sys_futex+0x10/0x10 [ 534.062302][ T8563] ? __pfx_ksys_write+0x10/0x10 [ 534.062335][ T8563] ? __x64_sys_futex+0x21/0xf0 [ 534.062364][ T8563] do_syscall_64+0x166/0x520 [ 534.062414][ T8563] ? trace_irq_disable+0x3b/0x140 [ 534.062435][ T8563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.062455][ T8563] ? clear_bhb_loop+0x70/0xc0 [ 534.062487][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.062511][ T8563] RIP: 0033:0x7f850952f559 [ 534.062527][ T8563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.062538][ T8563] RSP: 002b:00007f85077860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 534.062556][ T8563] RAX: ffffffffffffffda RBX: 00007f85097b5fa8 RCX: 00007f850952f559 [ 534.062564][ T8563] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f85097b5fa8 [ 534.062572][ T8563] RBP: 00007f85097b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 534.062579][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.062586][ T8563] R13: 00007f85097b6038 R14: 00007ffc0e38a170 R15: 00007ffc0e38a258 [ 534.062603][ T8563] [ 534.349745][ T1825] bridge_slave_0: left allmulticast mode [ 534.349783][ T1825] bridge_slave_0: left promiscuous mode [ 534.350047][ T1825] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.805262][ T202] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 536.114487][ T202] usb 2-1: New USB device found: idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 536.134826][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.149438][ T202] usb 2-1: config 0 descriptor?? [ 536.206191][ T202] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 536.623220][ T202] gspca_cpia1: usb_control_msg 03, error -32 [ 536.634713][ T202] gspca_cpia1: usb_control_msg 03, error -71 [ 536.641598][ T202] gspca_cpia1: usb_control_msg 01, error -71 [ 536.641610][ T202] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 536.698943][ T202] usb 2-1: USB disconnect, device number 15 [ 536.723039][ T1825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.881077][ T1825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.941602][ T1825] bond0 (unregistering): Released all slaves [ 537.456606][ T5340] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 537.616377][ T5340] usb 1-1: Using ep0 maxpacket: 16 [ 537.619972][ T5340] usb 1-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 537.624678][ T5340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.624710][ T5340] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.624725][ T5340] usb 1-1: config 0 interface 0 has no altsetting 0 [ 537.624744][ T5340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.699661][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 537.819460][ T5340] usb 1-1: config 0 descriptor?? [ 537.852087][ T5340] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 538.584368][ T8588] input: syz1 as /devices/virtual/input/input14 [ 539.040498][ T1825] hsr_slave_0: left promiscuous mode [ 539.075483][ T1825] hsr_slave_1: left promiscuous mode [ 539.076254][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.132268][ T1825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.814179][ T1825] team0 (unregistering): Port device team_slave_1 removed [ 540.887504][ T1825] team0 (unregistering): Port device team_slave_0 removed [ 542.032698][ T5741] usb 1-1: USB disconnect, device number 9 [ 542.177932][ T8620] Bluetooth: MGMT ver 1.23 [ 542.474789][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.500630][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.502066][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.504248][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.514500][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.803757][ T5624] Bluetooth: hci2: command tx timeout [ 545.833812][ T8628] rxe_eth0 speed is unknown, defaulting to 1000 [ 546.102978][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 546.150425][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 546.154619][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 546.172929][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 546.174082][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 546.865568][ T5624] Bluetooth: hci2: command tx timeout [ 547.251681][ T8691] netlink: 'syz.0.554': attribute type 3 has an invalid length. [ 547.251707][ T8691] netlink: 3 bytes leftover after parsing attributes in process `syz.0.554'. [ 547.641792][ T49] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 547.928136][ T8686] tun0: tun_chr_ioctl cmd 1074812117 [ 547.957709][ T49] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 548.235626][ T5624] Bluetooth: hci5: command tx timeout [ 548.238863][ T3353] bridge_slave_1: left allmulticast mode [ 548.238898][ T3353] bridge_slave_1: left promiscuous mode [ 548.239151][ T3353] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.370970][ T3353] bridge_slave_0: left allmulticast mode [ 548.371007][ T3353] bridge_slave_0: left promiscuous mode [ 548.371337][ T3353] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.695218][ T202] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 548.845287][ T202] usb 2-1: Using ep0 maxpacket: 16 [ 548.846289][ T202] usb 2-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 548.853082][ T202] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.853139][ T202] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.853167][ T202] usb 2-1: config 0 interface 0 has no altsetting 0 [ 548.853201][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.923190][ T202] usb 2-1: config 0 descriptor?? [ 548.945692][ T5624] Bluetooth: hci2: command tx timeout [ 548.997457][ T202] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 549.029770][ T3353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.145980][ T3353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.206537][ T3353] bond0 (unregistering): Released all slaves [ 549.837313][ T8711] input: syz1 as /devices/virtual/input/input15 [ 549.986629][ T202] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 550.135275][ T202] usb 4-1: Using ep0 maxpacket: 16 [ 550.139286][ T202] usb 4-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 550.141255][ T202] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.141308][ T202] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.141335][ T202] usb 4-1: config 0 interface 0 has no altsetting 0 [ 550.141366][ T202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.232418][ T202] usb 4-1: config 0 descriptor?? [ 550.278431][ T202] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 550.308349][ T5624] Bluetooth: hci5: command tx timeout [ 550.348503][ T8676] rxe_eth0 speed is unknown, defaulting to 1000 [ 550.573426][ T202] usb 4-1: USB disconnect, device number 18 [ 551.025533][ T5624] Bluetooth: hci2: command tx timeout [ 552.567998][ T5624] Bluetooth: hci5: command tx timeout [ 552.957759][ T5340] usb 2-1: USB disconnect, device number 16 [ 553.427534][ T3353] hsr_slave_0: left promiscuous mode [ 553.468643][ T3353] hsr_slave_1: left promiscuous mode [ 553.471796][ T3353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.529202][ T3353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.626928][ T8779] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 553.681369][ T8780] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 553.837895][ T8783] netlink: 'syz.3.575': attribute type 3 has an invalid length. [ 553.837912][ T8783] netlink: 3 bytes leftover after parsing attributes in process `syz.3.575'. [ 554.345298][ T5741] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 554.480457][ T3353] team0 (unregistering): Port device team_slave_1 removed [ 554.496746][ T5741] usb 2-1: Using ep0 maxpacket: 16 [ 554.497680][ T5741] usb 2-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 554.500957][ T5741] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.501009][ T5741] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.501037][ T5741] usb 2-1: config 0 interface 0 has no altsetting 0 [ 554.501069][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.567251][ T5741] usb 2-1: config 0 descriptor?? [ 554.585230][ T5741] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 554.625564][ T5624] Bluetooth: hci5: command tx timeout [ 554.687638][ T3353] team0 (unregistering): Port device team_slave_0 removed [ 557.280675][ T30] usb 2-1: USB disconnect, device number 17 [ 557.593349][ T8802] overlayfs: failed to resolve './file1': -2 [ 560.181373][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.181444][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.181574][ T8628] bridge_slave_0: entered allmulticast mode [ 560.197425][ T8628] bridge_slave_0: entered promiscuous mode [ 560.307844][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.310710][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.310856][ T8628] bridge_slave_1: entered allmulticast mode [ 560.333023][ T8628] bridge_slave_1: entered promiscuous mode [ 562.227213][ T8628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.676085][ T8628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.878553][ T3353] bridge_slave_1: left allmulticast mode [ 562.878591][ T3353] bridge_slave_1: left promiscuous mode [ 562.878859][ T3353] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.960882][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.960959][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.070529][ T3353] bridge_slave_0: left allmulticast mode [ 563.070568][ T3353] bridge_slave_0: left promiscuous mode [ 563.070813][ T3353] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.039479][ T3353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.179273][ T3353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.262549][ T3353] bond0 (unregistering): Released all slaves [ 564.537856][ T8628] team0: Port device team_slave_0 added [ 564.573266][ T8628] team0: Port device team_slave_1 added [ 564.752890][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.752909][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.752935][ T8628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.998248][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.998268][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.998294][ T8628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.885738][ T8874] tun0: tun_chr_ioctl cmd 1074812117 [ 568.357317][ T3353] hsr_slave_0: left promiscuous mode [ 568.379608][ T3353] hsr_slave_1: left promiscuous mode [ 568.380907][ T3353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.429115][ T3353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.891691][ T3353] team0 (unregistering): Port device team_slave_1 removed [ 570.977578][ T3353] team0 (unregistering): Port device team_slave_0 removed [ 571.547758][ T8911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.784467][ T8628] hsr_slave_0: entered promiscuous mode [ 572.794243][ T8628] hsr_slave_1: entered promiscuous mode [ 572.794848][ T8628] debugfs: 'hsr0' already exists in 'hsr' [ 572.794871][ T8628] Cannot create hsr debugfs directory [ 572.916386][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.916920][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.917053][ T8676] bridge_slave_0: entered allmulticast mode [ 572.949638][ T8676] bridge_slave_0: entered promiscuous mode [ 573.110625][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.110719][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.110852][ T8676] bridge_slave_1: entered allmulticast mode [ 573.119528][ T8676] bridge_slave_1: entered promiscuous mode [ 573.729736][ T8676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.866762][ T8676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.915680][ T5763] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 574.065273][ T5763] usb 1-1: Using ep0 maxpacket: 16 [ 574.066087][ T5763] usb 1-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 574.067754][ T5763] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.067785][ T5763] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.067800][ T5763] usb 1-1: config 0 interface 0 has no altsetting 0 [ 574.067818][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.135394][ T5763] usb 1-1: config 0 descriptor?? [ 574.174032][ T5763] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 574.379091][ T8676] team0: Port device team_slave_0 added [ 574.556004][ T8676] team0: Port device team_slave_1 added [ 574.879228][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.879241][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.879257][ T8676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.977412][ T8676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.977432][ T8676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.977460][ T8676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.830433][ T5763] usb 1-1: USB disconnect, device number 10 [ 575.890072][ T8676] hsr_slave_0: entered promiscuous mode [ 575.902990][ T8676] hsr_slave_1: entered promiscuous mode [ 575.911847][ T8676] debugfs: 'hsr0' already exists in 'hsr' [ 575.911867][ T8676] Cannot create hsr debugfs directory [ 578.405847][ T5763] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 578.565175][ T5763] usb 4-1: Using ep0 maxpacket: 16 [ 578.566022][ T5763] usb 4-1: New USB device found: idVendor=1e71, idProduct=2009, bcdDevice=0.00 [ 578.572827][ T5763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.572880][ T5763] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.572908][ T5763] usb 4-1: config 0 interface 0 has no altsetting 0 [ 578.572941][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.670510][ T5763] usb 4-1: config 0 descriptor?? [ 578.727280][ T5763] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 579.250058][ T8628] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 579.309825][ T8628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.320713][ T8628] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 579.391920][ T8628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.427285][ T8980] FAULT_INJECTION: forcing a failure. [ 579.427285][ T8980] name failslab, interval 1, probability 0, space 0, times 1 [ 579.427322][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.1.613 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 579.427346][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 579.427360][ T8980] Call Trace: [ 579.427368][ T8980] [ 579.427377][ T8980] dump_stack_lvl+0xe8/0x150 [ 579.427415][ T8980] should_fail_ex+0x46b/0x600 [ 579.427452][ T8980] should_failslab+0xa8/0x100 [ 579.427476][ T8980] __kmalloc_noprof+0xf6/0x790 [ 579.427506][ T8980] ? realloc_user_queue+0xb4/0x2a0 [ 579.427643][ T8980] ? realloc_user_queue+0xb4/0x2a0 [ 579.427671][ T8980] realloc_user_queue+0xb4/0x2a0 [ 579.427697][ T8980] snd_timer_user_open+0xf3/0x160 [ 579.427728][ T8980] chrdev_open+0x4dc/0x600 [ 579.427752][ T8980] ? __pfx_chrdev_open+0x10/0x10 [ 579.427772][ T8980] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 579.427811][ T8980] ? __pfx_chrdev_open+0x10/0x10 [ 579.427834][ T8980] do_dentry_open+0x841/0x1410 [ 579.427867][ T8980] vfs_open_consume+0x4a/0x360 [ 579.427887][ T8980] ? path_openat+0x16e6/0x2100 [ 579.427918][ T8980] path_openat+0x1701/0x2100 [ 579.427965][ T8980] do_file_open+0x23e/0x4a0 [ 579.427993][ T8980] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 579.428022][ T8980] ? __pfx_do_file_open+0x10/0x10 [ 579.428074][ T8980] ? alloc_fd+0x6b2/0x760 [ 579.428109][ T8980] do_sys_openat2+0x115/0x200 [ 579.428132][ T8980] ? __se_sys_futex+0x3a8/0x450 [ 579.428160][ T8980] ? __pfx_do_sys_openat2+0x10/0x10 [ 579.428187][ T8980] ? rcu_is_watching+0x16/0xb0 [ 579.428215][ T8980] __x64_sys_openat+0x138/0x170 [ 579.428243][ T8980] do_syscall_64+0x166/0x520 [ 579.428264][ T8980] ? trace_irq_disable+0x3b/0x140 [ 579.428285][ T8980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.428306][ T8980] ? clear_bhb_loop+0x70/0xc0 [ 579.428331][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.428352][ T8980] RIP: 0033:0x7f58d2dcf559 [ 579.428372][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.428390][ T8980] RSP: 002b:00007f58d0ffd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 579.428414][ T8980] RAX: ffffffffffffffda RBX: 00007f58d3056090 RCX: 00007f58d2dcf559 [ 579.428431][ T8980] RDX: 0000000000008080 RSI: 0000200000000740 RDI: ffffffffffffff9c [ 579.428446][ T8980] RBP: 00007f58d2e66b20 R08: 0000000000000000 R09: 0000000000000000 [ 579.428460][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.428473][ T8980] R13: 00007f58d3056128 R14: 00007f58d3056090 R15: 00007ffcb1965768 [ 579.428506][ T8980] [ 579.458647][ T8628] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 579.771944][ T8982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.887936][ T8982] ublk4: read batch cmd buffer failed [ 579.888858][ T8982] ublk4: read batch cmd buffer failed [ 580.017075][ T8982] ublk4: read batch cmd buffer failed [ 580.017911][ T8982] ublk4: read batch cmd buffer failed [ 581.048550][ T8628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.331773][ T8976] input: syz1 as /devices/virtual/input/input16 [ 581.354152][ T8628] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 583.352760][ T8628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 583.575486][ T202] usb 4-1: USB disconnect, device number 19 [ 584.495806][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.321264][ T9035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.459485][ T8676] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 588.685452][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.923773][ T8676] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 589.291254][ T9040] ALSA: mixer_oss: invalid OSS volume ' €' [ 589.291329][ T9040] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT�0p³Áúc©' [ 589.291350][ T9040] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 589.291364][ T9040] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 589.291391][ T9040] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 589.291458][ T9040] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 589.291472][ T9040] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 589.294266][ T9040] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 589.294278][ T9040] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 589.831907][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.914448][ T8676] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 590.497706][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.543474][ T8676] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 590.622918][ T8676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 592.622641][ T9074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.443872][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.464726][ T9080] syz_tun: entered allmulticast mode [ 594.613167][ T8628] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.675448][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.675657][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.747290][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.747472][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.853418][ T8676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.000802][ T9093] lo speed is unknown, defaulting to 1000 [ 595.002639][ T9078] syz_tun: left allmulticast mode [ 595.003974][ T9093] lo speed is unknown, defaulting to 1000 [ 595.014699][ T9093] lo speed is unknown, defaulting to 1000 [ 595.021644][ T8676] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.041999][ T9093] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 595.042037][ T9093] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 595.042077][ T9093] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 595.069496][ T9090] ALSA: mixer_oss: invalid OSS volume ' €' [ 595.069525][ T9090] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT�0p³Áúc©' [ 595.069545][ T9090] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 595.069559][ T9090] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 595.069585][ T9090] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 595.069602][ T9090] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 595.069614][ T9090] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 595.069876][ T9090] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 595.069888][ T9090] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 595.201752][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.201984][ T3316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.284589][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.290296][ T3317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.643244][ T9093] lo speed is unknown, defaulting to 1000 [ 595.683961][ T9093] lo speed is unknown, defaulting to 1000 [ 595.743113][ T9093] lo speed is unknown, defaulting to 1000 [ 595.752037][ T9093] lo speed is unknown, defaulting to 1000 [ 595.768135][ T9093] lo speed is unknown, defaulting to 1000 [ 595.880703][ T9109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.661023][ T9102] siw: device registration error -23 [ 597.541204][ T35] audit: type=1326 audit(1793075232.287:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 597.541258][ T35] audit: type=1326 audit(1793075232.327:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 597.548157][ T35] audit: type=1326 audit(1793075232.357:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 597.548204][ T35] audit: type=1326 audit(1793075232.357:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 597.548254][ T35] audit: type=1326 audit(1793075232.357:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 597.549045][ T35] audit: type=1326 audit(1793075232.357:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 597.549087][ T35] audit: type=1326 audit(1793075232.357:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 597.549125][ T35] audit: type=1326 audit(1793075232.357:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 597.558541][ T35] audit: type=1326 audit(1793075232.367:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1a2ee1fd8e code=0x7ffc0000 [ 597.558584][ T35] audit: type=1326 audit(1793075232.367:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9128 comm="syz.3.639" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2ee5f559 code=0x7ffc0000 [ 600.365773][ T9165] ALSA: mixer_oss: invalid OSS volume ' €' [ 600.365809][ T9165] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT�0p³Áúc©' [ 600.365829][ T9165] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 600.365844][ T9165] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 600.365871][ T9165] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 600.365887][ T9165] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 600.365900][ T9165] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 600.366182][ T9165] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 600.366194][ T9165] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 600.688349][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.975689][ T8676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.577819][ T9206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.768176][ T9206] ublk0: read batch cmd buffer failed [ 601.770076][ T9206] ublk0: read batch cmd buffer failed [ 601.900647][ T9206] ublk0: read batch cmd buffer failed [ 601.901513][ T9206] ublk0: read batch cmd buffer failed [ 603.256882][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.313309][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 605.367110][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 605.369642][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 605.372218][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 605.387646][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 605.784599][ T9239] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 606.022630][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.034488][ T9229] ALSA: mixer_oss: invalid OSS volume ' €' [ 606.034512][ T9229] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 606.034532][ T9229] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT�0p³Áúc©' [ 606.034552][ T9229] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 606.034566][ T9229] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 606.034597][ T9229] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 606.034614][ T9229] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 606.034626][ T9229] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 606.034893][ T9229] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 606.034904][ T9229] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 607.722466][ T5623] Bluetooth: hci4: command tx timeout [ 608.591416][ T5624] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 608.684214][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 608.688436][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 608.696021][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 608.700382][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 608.708482][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 609.745171][ T5623] Bluetooth: hci4: command tx timeout [ 611.033444][ T9284] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 611.105203][ T5623] Bluetooth: hci2: command tx timeout [ 611.838640][ T5623] Bluetooth: hci4: command tx timeout [ 613.185362][ T5623] Bluetooth: hci2: command tx timeout [ 613.257407][ T9222] rxe_eth0 speed is unknown, defaulting to 1000 [ 613.384693][ T9300] ALSA: mixer_oss: invalid OSS volume ' €' [ 613.384714][ T9300] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 613.384732][ T9300] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT�0p³Áúc©' [ 613.384750][ T9300] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 613.384765][ T9300] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 613.384790][ T9300] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 613.384806][ T9300] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 613.384817][ T9300] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 613.585203][ T9300] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 613.585214][ T9300] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 613.905237][ T5623] Bluetooth: hci4: command tx timeout [ 614.197401][ T9243] rxe_eth0 speed is unknown, defaulting to 1000 [ 614.230894][ T9222] lo speed is unknown, defaulting to 1000 [ 614.911116][ T9316] syz_tun: entered allmulticast mode [ 614.938208][ T9243] lo speed is unknown, defaulting to 1000 [ 615.043178][ T9324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.265661][ T5623] Bluetooth: hci2: command tx timeout [ 615.890189][ T9314] syz_tun: left allmulticast mode [ 616.497969][ T9334] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 617.444234][ T9342] ALSA: mixer_oss: invalid OSS volume ' €' [ 617.444261][ T9342] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 617.444280][ T9342] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT�0p³Áúc©' [ 617.444309][ T9342] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 617.444324][ T9342] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 617.444351][ T9342] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 617.444367][ T9342] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 617.444379][ T9342] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 617.444652][ T9342] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 617.444664][ T9342] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 617.475320][ T35] kauditd_printk_skb: 4 callbacks suppressed [ 617.475341][ T35] audit: type=1326 audit(1793075252.227:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.477551][ T35] audit: type=1326 audit(1793075252.287:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.478293][ T35] audit: type=1326 audit(1793075252.287:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.478338][ T35] audit: type=1326 audit(1793075252.287:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.478375][ T35] audit: type=1326 audit(1793075252.287:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.479610][ T35] audit: type=1326 audit(1793075252.287:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.480513][ T35] audit: type=1326 audit(1793075252.287:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.482826][ T35] audit: type=1326 audit(1793075252.287:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58d2d8fd8e code=0x7ffc0000 [ 617.482871][ T35] audit: type=1326 audit(1793075252.287:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.482907][ T35] audit: type=1326 audit(1793075252.287:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9345 comm="syz.1.677" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 617.506773][ T5623] Bluetooth: hci2: command tx timeout [ 619.503219][ T9369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.997617][ T9381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 623.043582][ T9399] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 624.391589][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.391659][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.815619][ T9409] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 629.437440][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.437680][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.437878][ T9222] bridge_slave_0: entered allmulticast mode [ 629.440178][ T9222] bridge_slave_0: entered promiscuous mode [ 629.579876][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.580032][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.580239][ T9222] bridge_slave_1: entered allmulticast mode [ 629.608192][ T9222] bridge_slave_1: entered promiscuous mode [ 629.788936][ T9436] binfmt_misc: register: failed to install interpreter ./file0 [ 630.278001][ T128] bridge_slave_1: left allmulticast mode [ 630.278038][ T128] bridge_slave_1: left promiscuous mode [ 630.278329][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.759325][ T128] bridge_slave_0: left allmulticast mode [ 630.759546][ T128] bridge_slave_0: left promiscuous mode [ 630.807581][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.286889][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 634.076122][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.156061][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.197342][ T128] bond0 (unregistering): Released all slaves [ 634.218998][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.219278][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.219369][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.219501][ T9243] bridge_slave_0: entered allmulticast mode [ 634.223397][ T9243] bridge_slave_0: entered promiscuous mode [ 634.323425][ T9463] syz_tun: entered allmulticast mode [ 634.339801][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.340084][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.340230][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.340330][ T9243] bridge_slave_1: entered allmulticast mode [ 634.341591][ T9243] bridge_slave_1: entered promiscuous mode [ 634.352643][ T9463] syz_tun: left allmulticast mode [ 636.985981][ T9222] team0: Port device team_slave_0 added [ 637.577494][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.600585][ T9222] team0: Port device team_slave_1 added [ 637.647175][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.009458][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.009477][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.009504][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.014625][ T9243] team0: Port device team_slave_0 added [ 638.086188][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.086202][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.086219][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.092440][ T9243] team0: Port device team_slave_1 added [ 640.487447][ T9515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.359964][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.359981][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.360007][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.503916][ T9522] binfmt_misc: register: failed to install interpreter ./file0 [ 641.615630][ T128] hsr_slave_0: left promiscuous mode [ 641.655410][ T128] hsr_slave_1: left promiscuous mode [ 641.656163][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.700247][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.757349][ T9530] FAULT_INJECTION: forcing a failure. [ 641.757349][ T9530] name failslab, interval 1, probability 0, space 0, times 0 [ 641.757373][ T9530] CPU: 0 UID: 0 PID: 9530 Comm: syz.0.718 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 641.757386][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 641.757394][ T9530] Call Trace: [ 641.757399][ T9530] [ 641.757404][ T9530] dump_stack_lvl+0xe8/0x150 [ 641.757428][ T9530] should_fail_ex+0x46b/0x600 [ 641.757448][ T9530] should_failslab+0xa8/0x100 [ 641.757461][ T9530] __kmalloc_noprof+0xf6/0x790 [ 641.757477][ T9530] ? realloc_user_queue+0xb4/0x2a0 [ 641.757489][ T9530] ? realloc_user_queue+0xb4/0x2a0 [ 641.757503][ T9530] realloc_user_queue+0xb4/0x2a0 [ 641.757516][ T9530] snd_timer_user_open+0xf3/0x160 [ 641.757527][ T9530] chrdev_open+0x4dc/0x600 [ 641.757540][ T9530] ? __pfx_chrdev_open+0x10/0x10 [ 641.757550][ T9530] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 641.757575][ T9530] ? __pfx_chrdev_open+0x10/0x10 [ 641.757585][ T9530] do_dentry_open+0x841/0x1410 [ 641.757604][ T9530] vfs_open_consume+0x4a/0x360 [ 641.757622][ T9530] ? path_openat+0x16e6/0x2100 [ 641.757650][ T9530] path_openat+0x1701/0x2100 [ 641.757678][ T9530] do_file_open+0x23e/0x4a0 [ 641.757692][ T9530] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 641.757707][ T9530] ? __pfx_do_file_open+0x10/0x10 [ 641.757734][ T9530] ? alloc_fd+0x6b2/0x760 [ 641.757758][ T9530] do_sys_openat2+0x115/0x200 [ 641.757770][ T9530] ? __se_sys_futex+0x3a8/0x450 [ 641.757786][ T9530] ? __pfx_do_sys_openat2+0x10/0x10 [ 641.757801][ T9530] ? rcu_is_watching+0x16/0xb0 [ 641.757818][ T9530] __x64_sys_openat+0x138/0x170 [ 641.757833][ T9530] do_syscall_64+0x166/0x520 [ 641.757844][ T9530] ? trace_irq_disable+0x3b/0x140 [ 641.757856][ T9530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.757867][ T9530] ? clear_bhb_loop+0x70/0xc0 [ 641.757880][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.757892][ T9530] RIP: 0033:0x7f850952f559 [ 641.757903][ T9530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.757913][ T9530] RSP: 002b:00007f8507786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 641.757928][ T9530] RAX: ffffffffffffffda RBX: 00007f85097b5fa0 RCX: 00007f850952f559 [ 641.757936][ T9530] RDX: 0000000000008080 RSI: 0000200000000740 RDI: ffffffffffffff9c [ 641.757944][ T9530] RBP: 00007f85095c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 641.757951][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.757957][ T9530] R13: 00007f85097b6038 R14: 00007f85097b5fa0 R15: 00007ffc0e38a258 [ 641.757974][ T9530] [ 644.541493][ T128] team0 (unregistering): Port device team_slave_1 removed [ 644.639505][ T128] team0 (unregistering): Port device team_slave_0 removed [ 645.160552][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.160569][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.160597][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.451109][ T9222] hsr_slave_0: entered promiscuous mode [ 645.468339][ T9222] hsr_slave_1: entered promiscuous mode [ 645.471118][ T9222] debugfs: 'hsr0' already exists in 'hsr' [ 645.471136][ T9222] Cannot create hsr debugfs directory [ 645.882580][ T9243] hsr_slave_0: entered promiscuous mode [ 645.884031][ T9243] hsr_slave_1: entered promiscuous mode [ 645.884979][ T9243] debugfs: 'hsr0' already exists in 'hsr' [ 645.885002][ T9243] Cannot create hsr debugfs directory [ 648.394430][ T9586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.322756][ T9604] FAULT_INJECTION: forcing a failure. [ 651.322756][ T9604] name failslab, interval 1, probability 0, space 0, times 0 [ 651.322793][ T9604] CPU: 0 UID: 0 PID: 9604 Comm: syz.3.734 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 651.322819][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.322832][ T9604] Call Trace: [ 651.322840][ T9604] [ 651.322850][ T9604] dump_stack_lvl+0xe8/0x150 [ 651.322889][ T9604] should_fail_ex+0x46b/0x600 [ 651.322927][ T9604] should_failslab+0xa8/0x100 [ 651.322951][ T9604] __kmalloc_noprof+0xf6/0x790 [ 651.322981][ T9604] ? realloc_user_queue+0xb4/0x2a0 [ 651.323002][ T9604] ? realloc_user_queue+0xb4/0x2a0 [ 651.323029][ T9604] realloc_user_queue+0xb4/0x2a0 [ 651.323052][ T9604] snd_timer_user_open+0xf3/0x160 [ 651.323075][ T9604] chrdev_open+0x4dc/0x600 [ 651.323106][ T9604] ? __pfx_chrdev_open+0x10/0x10 [ 651.323127][ T9604] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 651.323166][ T9604] ? __pfx_chrdev_open+0x10/0x10 [ 651.323183][ T9604] do_dentry_open+0x841/0x1410 [ 651.323213][ T9604] vfs_open_consume+0x4a/0x360 [ 651.323231][ T9604] ? path_openat+0x16e6/0x2100 [ 651.323260][ T9604] path_openat+0x1701/0x2100 [ 651.323304][ T9604] do_file_open+0x23e/0x4a0 [ 651.323327][ T9604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 651.323355][ T9604] ? __pfx_do_file_open+0x10/0x10 [ 651.323403][ T9604] ? alloc_fd+0x6b2/0x760 [ 651.323437][ T9604] do_sys_openat2+0x115/0x200 [ 651.323459][ T9604] ? __se_sys_futex+0x3a8/0x450 [ 651.323485][ T9604] ? __pfx_do_sys_openat2+0x10/0x10 [ 651.323512][ T9604] ? rcu_is_watching+0x16/0xb0 [ 651.323541][ T9604] __x64_sys_openat+0x138/0x170 [ 651.323568][ T9604] do_syscall_64+0x166/0x520 [ 651.323589][ T9604] ? trace_irq_disable+0x3b/0x140 [ 651.323608][ T9604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.323631][ T9604] ? clear_bhb_loop+0x70/0xc0 [ 651.323654][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.323672][ T9604] RIP: 0033:0x7f1a2ee5f559 [ 651.323692][ T9604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.323711][ T9604] RSP: 002b:00007f1a2d08d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 651.323735][ T9604] RAX: ffffffffffffffda RBX: 00007f1a2f0e6090 RCX: 00007f1a2ee5f559 [ 651.323751][ T9604] RDX: 0000000000008080 RSI: 0000200000000740 RDI: ffffffffffffff9c [ 651.323766][ T9604] RBP: 00007f1a2eef6b20 R08: 0000000000000000 R09: 0000000000000000 [ 651.323780][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.323793][ T9604] R13: 00007f1a2f0e6128 R14: 00007f1a2f0e6090 R15: 00007ffd742b2d28 [ 651.323825][ T9604] [ 651.341416][ T9592] ALSA: mixer_oss: invalid OSS volume ' €' [ 651.341443][ T9592] ALSA: mixer_oss: invalid OSS volume 'f’ÑU=;ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 651.341459][ T9592] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 651.341485][ T9592] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 651.341501][ T9592] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 651.341513][ T9592] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 651.341778][ T9592] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 651.341789][ T9592] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 651.825518][ T202] lo speed is unknown, defaulting to 1000 [ 651.841764][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 659.150022][ T9656] binfmt_misc: register: failed to install interpreter ./file0 [ 659.450767][ T9661] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 660.245570][ T9649] ALSA: mixer_oss: invalid OSS volume ' €' [ 660.245600][ T9649] ALSA: mixer_oss: invalid OSS volume 'f’ÑU=;ʸg™¯ÔŠ8ª\>Px´i9ù hû~£' [ 660.245615][ T9649] ALSA: mixer_oss: invalid OSS volume 'å£Ñ¥ÏÀ¶®v™¢vcr^IjDw£?q’´øæå)½' [ 660.245642][ T9649] ALSA: mixer_oss: invalid OSS volume 'ü´#yæwáëÜÜ�Ô#¢è�YŽqN”È ' [ 660.245665][ T9649] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'�Ä®Cú' [ 660.245677][ T9649] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 660.245965][ T9649] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 660.245976][ T9649] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 660.543022][ T9661] md: could not open device unknown-block(1,1). [ 660.596274][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 661.402020][ T9688] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 663.984639][ T1841] IPVS: starting estimator thread 0... [ 664.134259][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 664.134717][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 664.635405][ T9708] IPVS: using max 7 ests per chain, 16800 per kthread [ 664.739118][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 664.825487][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.005812][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.008199][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.009043][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.725358][ T9728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.868964][ T9728] ublk4: read batch cmd buffer failed [ 665.869907][ T9728] ublk4: read batch cmd buffer failed [ 666.020972][ T9728] ublk4: read batch cmd buffer failed [ 666.022021][ T9728] ublk4: read batch cmd buffer failed [ 667.198553][ T5624] Bluetooth: hci5: command tx timeout [ 668.856900][ T5624] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 669.265525][ T5624] Bluetooth: hci5: command tx timeout [ 669.414840][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.475928][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 669.506413][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 669.531040][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 669.534562][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 669.659365][ T9755] netlink: 'syz.3.764': attribute type 3 has an invalid length. [ 669.659386][ T9755] netlink: 3 bytes leftover after parsing attributes in process `syz.3.764'. [ 669.789120][ T1841] IPVS: starting estimator thread 0... [ 669.878220][ T9761] IPVS: using max 11 ests per chain, 26400 per kthread [ 669.966892][ T9766] FAULT_INJECTION: forcing a failure. [ 669.966892][ T9766] name failslab, interval 1, probability 0, space 0, times 0 [ 669.966931][ T9766] CPU: 0 UID: 0 PID: 9766 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 669.966957][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 669.966971][ T9766] Call Trace: [ 669.966980][ T9766] [ 669.966989][ T9766] dump_stack_lvl+0xe8/0x150 [ 669.967027][ T9766] should_fail_ex+0x46b/0x600 [ 669.967059][ T9766] should_failslab+0xa8/0x100 [ 669.967077][ T9766] __kmalloc_noprof+0xf6/0x790 [ 669.967103][ T9766] ? realloc_user_queue+0xb4/0x2a0 [ 669.967123][ T9766] ? realloc_user_queue+0xb4/0x2a0 [ 669.967145][ T9766] realloc_user_queue+0xb4/0x2a0 [ 669.967167][ T9766] snd_timer_user_open+0xf3/0x160 [ 669.967190][ T9766] chrdev_open+0x4dc/0x600 [ 669.967212][ T9766] ? __pfx_chrdev_open+0x10/0x10 [ 669.967232][ T9766] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 669.967269][ T9766] ? __pfx_chrdev_open+0x10/0x10 [ 669.967288][ T9766] do_dentry_open+0x841/0x1410 [ 669.967315][ T9766] vfs_open_consume+0x4a/0x360 [ 669.967335][ T9766] ? path_openat+0x16e6/0x2100 [ 669.967379][ T9766] path_openat+0x1701/0x2100 [ 669.967426][ T9766] do_file_open+0x23e/0x4a0 [ 669.967452][ T9766] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 669.967487][ T9766] ? __pfx_do_file_open+0x10/0x10 [ 669.967538][ T9766] ? alloc_fd+0x6b2/0x760 [ 669.967571][ T9766] do_sys_openat2+0x115/0x200 [ 669.967593][ T9766] ? __se_sys_futex+0x3a8/0x450 [ 669.967619][ T9766] ? __pfx_do_sys_openat2+0x10/0x10 [ 669.967644][ T9766] ? rcu_is_watching+0x16/0xb0 [ 669.967671][ T9766] __x64_sys_openat+0x138/0x170 [ 669.967696][ T9766] do_syscall_64+0x166/0x520 [ 669.967718][ T9766] ? trace_irq_disable+0x3b/0x140 [ 669.967737][ T9766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.967758][ T9766] ? clear_bhb_loop+0x70/0xc0 [ 669.967792][ T9766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.967813][ T9766] RIP: 0033:0x7f850952f559 [ 669.967833][ T9766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.967852][ T9766] RSP: 002b:00007f8507765028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 669.967878][ T9766] RAX: ffffffffffffffda RBX: 00007f85097b6090 RCX: 00007f850952f559 [ 669.967895][ T9766] RDX: 0000000000008080 RSI: 0000200000000740 RDI: ffffffffffffff9c [ 669.967912][ T9766] RBP: 00007f85095c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 669.967926][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.967942][ T9766] R13: 00007f85097b6128 R14: 00007f85097b6090 R15: 00007ffc0e38a258 [ 669.967972][ T9766] [ 670.151282][ T9770] FAULT_INJECTION: forcing a failure. [ 670.151282][ T9770] name failslab, interval 1, probability 0, space 0, times 0 [ 670.151322][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.1.767 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 670.151347][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 670.151361][ T9770] Call Trace: [ 670.151369][ T9770] [ 670.151377][ T9770] dump_stack_lvl+0xe8/0x150 [ 670.151417][ T9770] should_fail_ex+0x46b/0x600 [ 670.151453][ T9770] should_failslab+0xa8/0x100 [ 670.151473][ T9770] ? __anon_vma_prepare+0x109/0x4d0 [ 670.151502][ T9770] kmem_cache_alloc_noprof+0x99/0x680 [ 670.151530][ T9770] ? __anon_vma_prepare+0xbe/0x4d0 [ 670.151555][ T9770] ? __anon_vma_prepare+0x109/0x4d0 [ 670.151587][ T9770] __anon_vma_prepare+0x109/0x4d0 [ 670.151617][ T9770] do_pte_missing+0x1d2a/0x28f0 [ 670.151659][ T9770] ? handle_mm_fault+0xeb/0x28c0 [ 670.151690][ T9770] handle_mm_fault+0xf64/0x28c0 [ 670.151722][ T9770] ? handle_mm_fault+0xeb/0x28c0 [ 670.151758][ T9770] ? __pfx_handle_mm_fault+0x10/0x10 [ 670.151790][ T9770] ? lock_vma_under_rcu+0x45a/0x500 [ 670.151844][ T9770] do_user_addr_fault+0xb35/0x1480 [ 670.151882][ T9770] ? trace_page_fault_user+0x84/0x1e0 [ 670.151910][ T9770] exc_page_fault+0x6a/0xc0 [ 670.151934][ T9770] asm_exc_page_fault+0x26/0x30 [ 670.151954][ T9770] RIP: 0033:0x7f58d2d91df1 [ 670.151974][ T9770] Code: 00 0f 84 92 00 00 00 48 8d 15 a5 1d 0f 00 48 89 de 48 89 ef e8 10 e9 03 00 48 8d 4d 10 40 f6 c5 0f 0f 85 ba 00 00 00 48 89 d8 <48> c7 45 00 00 00 00 00 ba 01 00 00 00 48 83 c8 02 48 89 45 08 f0 [ 670.151993][ T9770] RSP: 002b:00007f58d0ffbcc0 EFLAGS: 00010246 [ 670.152013][ T9770] RAX: 0000000000001000 RBX: 0000000000001000 RCX: 00007f58d302f010 [ 670.152028][ T9770] RDX: 00007f58d2e83b7a RSI: 0000000000001000 RDI: 00007f58d302f000 [ 670.152043][ T9770] RBP: 00007f58d302f000 R08: 00000000ffffffff R09: 0000000000000000 [ 670.152057][ T9770] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 670.152070][ T9770] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000001000 [ 670.152101][ T9770] [ 670.155638][ T9770] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 670.494007][ T9768] gadgetfs: bound to dummy_udc driver [ 670.755135][ T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 670.755516][ C1] gadgetfs: connected [ 670.756078][ T30] gadgetfs: disconnected [ 671.345712][ T5623] Bluetooth: hci5: command tx timeout [ 671.591577][ T5623] Bluetooth: hci6: command tx timeout [ 672.920432][ T10] bridge0: entered promiscuous mode [ 673.032423][ T9709] rxe_eth0 speed is unknown, defaulting to 1000 [ 673.498142][ T9709] lo speed is unknown, defaulting to 1000 [ 673.612444][ T5623] Bluetooth: hci5: command tx timeout [ 673.797563][ T5623] Bluetooth: hci6: command tx timeout [ 676.042670][ T5623] Bluetooth: hci6: command tx timeout [ 676.976567][ T9826] gadgetfs: bound to dummy_udc driver [ 677.234013][ T9828] FAULT_INJECTION: forcing a failure. [ 677.234013][ T9828] name failslab, interval 1, probability 0, space 0, times 0 [ 677.234055][ T9828] CPU: 1 UID: 0 PID: 9828 Comm: syz.1.774 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 677.234081][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 677.234094][ T9828] Call Trace: [ 677.234103][ T9828] [ 677.234112][ T9828] dump_stack_lvl+0xe8/0x150 [ 677.234152][ T9828] should_fail_ex+0x46b/0x600 [ 677.234189][ T9828] should_failslab+0xa8/0x100 [ 677.234211][ T9828] ? __anon_vma_prepare+0x109/0x4d0 [ 677.234239][ T9828] kmem_cache_alloc_noprof+0x99/0x680 [ 677.234267][ T9828] ? __anon_vma_prepare+0xbe/0x4d0 [ 677.234293][ T9828] ? __anon_vma_prepare+0x109/0x4d0 [ 677.234328][ T9828] __anon_vma_prepare+0x109/0x4d0 [ 677.234361][ T9828] do_pte_missing+0x1d2a/0x28f0 [ 677.234409][ T9828] ? handle_mm_fault+0xeb/0x28c0 [ 677.234441][ T9828] handle_mm_fault+0xf64/0x28c0 [ 677.234474][ T9828] ? handle_mm_fault+0xeb/0x28c0 [ 677.234512][ T9828] ? __pfx_handle_mm_fault+0x10/0x10 [ 677.234537][ T9828] ? lock_vma_under_rcu+0x45a/0x500 [ 677.234591][ T9828] do_user_addr_fault+0xb35/0x1480 [ 677.234629][ T9828] ? trace_page_fault_user+0x84/0x1e0 [ 677.234656][ T9828] exc_page_fault+0x6a/0xc0 [ 677.234681][ T9828] asm_exc_page_fault+0x26/0x30 [ 677.234701][ T9828] RIP: 0033:0x7f58d2d91df1 [ 677.234720][ T9828] Code: 00 0f 84 92 00 00 00 48 8d 15 a5 1d 0f 00 48 89 de 48 89 ef e8 10 e9 03 00 48 8d 4d 10 40 f6 c5 0f 0f 85 ba 00 00 00 48 89 d8 <48> c7 45 00 00 00 00 00 ba 01 00 00 00 48 83 c8 02 48 89 45 08 f0 [ 677.234739][ T9828] RSP: 002b:00007f58d0ffbcc0 EFLAGS: 00010246 [ 677.234760][ T9828] RAX: 0000000000001000 RBX: 0000000000001000 RCX: 00007f58d302f010 [ 677.234776][ T9828] RDX: 00007f58d2e83b7a RSI: 0000000000001000 RDI: 00007f58d302f000 [ 677.234791][ T9828] RBP: 00007f58d302f000 R08: 00000000ffffffff R09: 0000000000000000 [ 677.234805][ T9828] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 677.234819][ T9828] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000001000 [ 677.234852][ T9828] [ 677.234887][ T9828] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 677.285136][ T9752] rxe_eth0 speed is unknown, defaulting to 1000 [ 678.290373][ T5623] Bluetooth: hci6: command tx timeout [ 680.347712][ T9858] md: could not open device unknown-block(1,1). [ 681.488967][ T9807] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 681.853769][ T9752] lo speed is unknown, defaulting to 1000 [ 682.240656][ T9890] gadgetfs: bound to dummy_udc driver [ 682.268165][ T128] bridge_slave_1: left allmulticast mode [ 682.268201][ T128] bridge_slave_1: left promiscuous mode [ 682.268455][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.479993][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 682.544742][ T128] bridge_slave_0: left allmulticast mode [ 682.598508][ T128] bridge_slave_0: left promiscuous mode [ 682.635252][ T49] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 682.635551][ C1] gadgetfs: connected [ 682.637674][ T49] gadgetfs: disconnected [ 682.642488][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.712516][ C1] gadgetfs: connected [ 683.712704][ T49] usb 1-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 683.946860][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.038794][ T9890] FAULT_INJECTION: forcing a failure. [ 684.038794][ T9890] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 684.038890][ T9890] CPU: 1 UID: 0 PID: 9890 Comm: syz.1.781 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 684.038916][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 684.038929][ T9890] Call Trace: [ 684.038938][ T9890] [ 684.038947][ T9890] dump_stack_lvl+0xe8/0x150 [ 684.038985][ T9890] should_fail_ex+0x46b/0x600 [ 684.039010][ T9890] strncpy_from_user+0x36/0x2c0 [ 684.039103][ T9890] do_getname+0x77/0x250 [ 684.039117][ T9890] do_sys_openat2+0xce/0x200 [ 684.039130][ T9890] ? __se_sys_futex+0x3a8/0x450 [ 684.039145][ T9890] ? __pfx_do_sys_openat2+0x10/0x10 [ 684.039160][ T9890] ? rcu_is_watching+0x16/0xb0 [ 684.039175][ T9890] __x64_sys_openat+0x138/0x170 [ 684.039190][ T9890] do_syscall_64+0x166/0x520 [ 684.039202][ T9890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.039214][ T9890] ? clear_bhb_loop+0x70/0xc0 [ 684.039227][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.039239][ T9890] RIP: 0033:0x7f58d2dcf559 [ 684.039251][ T9890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.039261][ T9890] RSP: 002b:00007f58d101e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 684.039275][ T9890] RAX: ffffffffffffffda RBX: 00007f58d3055fa0 RCX: 00007f58d2dcf559 [ 684.039284][ T9890] RDX: 00000000009850c1 RSI: 0000000000000000 RDI: 0000000000000006 [ 684.039296][ T9890] RBP: 00007f58d2e66b20 R08: 0000000000000000 R09: 0000000000000000 [ 684.039308][ T9890] R10: 0000000000000182 R11: 0000000000000246 R12: 0000000000000000 [ 684.039319][ T9890] R13: 00007f58d3056038 R14: 00007f58d3055fa0 R15: 00007ffcb1965768 [ 684.039350][ T9890] [ 684.277366][ C1] gadgetfs: configuration #1 [ 684.339908][ T49] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18 [ 684.779649][ T9887] gadgetfs: suspended from state 3 [ 684.779887][ T9887] gadgetfs: disconnected [ 684.999893][ T49] usb 1-1: USB disconnect, device number 12 [ 684.999897][ C0] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 685.165969][ T35] kauditd_printk_skb: 3 callbacks suppressed [ 685.165987][ T35] audit: type=1326 audit(1793075319.977:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.166860][ T35] audit: type=1326 audit(1793075319.977:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.166906][ T35] audit: type=1326 audit(1793075319.977:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.167466][ T35] audit: type=1326 audit(1793075319.977:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.167507][ T35] audit: type=1326 audit(1793075319.977:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.167893][ T35] audit: type=1326 audit(1793075319.977:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.167935][ T35] audit: type=1326 audit(1793075319.977:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.168914][ T35] audit: type=1326 audit(1793075319.977:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.169352][ T35] audit: type=1326 audit(1793075319.977:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.169393][ T35] audit: type=1326 audit(1793075319.977:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9901 comm="syz.1.785" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d2dcf559 code=0x7ffc0000 [ 685.223682][ T9903] gadgetfs: bound to dummy_udc driver [ 685.841879][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.841979][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.875221][ T49] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 685.875486][ C1] gadgetfs: connected [ 685.875659][ T49] gadgetfs: disconnected [ 686.008177][ T9900] gadgetfs: suspended from state 2 [ 686.031242][ T49] usb 1-1: device descriptor read/all, error -71 [ 686.166284][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.246119][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.289945][ T128] bond0 (unregistering): Released all slaves [ 686.654063][ T9913] gadgetfs: bound to dummy_udc driver [ 686.676151][ T9913] FAULT_INJECTION: forcing a failure. [ 686.676151][ T9913] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 686.676188][ T9913] CPU: 1 UID: 0 PID: 9913 Comm: syz.0.786 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 686.676215][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 686.676229][ T9913] Call Trace: [ 686.676236][ T9913] [ 686.676244][ T9913] dump_stack_lvl+0xe8/0x150 [ 686.676279][ T9913] should_fail_ex+0x46b/0x600 [ 686.676314][ T9913] prepare_alloc_pages+0x21e/0x650 [ 686.676350][ T9913] __alloc_frozen_pages_noprof+0x19f/0x440 [ 686.676387][ T9913] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 686.676426][ T9913] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 686.676454][ T9913] alloc_pages_mpol+0xd4/0x280 [ 686.676486][ T9913] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 686.676510][ T9913] vma_alloc_folio_noprof+0xe1/0x1e0 [ 686.676535][ T9913] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 686.676571][ T9913] ? do_pte_missing+0x1da5/0x28f0 [ 686.676613][ T9913] do_pte_missing+0x835/0x28f0 [ 686.676652][ T9913] ? handle_mm_fault+0xeb/0x28c0 [ 686.676683][ T9913] handle_mm_fault+0xf64/0x28c0 [ 686.676715][ T9913] ? handle_mm_fault+0xeb/0x28c0 [ 686.676752][ T9913] ? __pfx_handle_mm_fault+0x10/0x10 [ 686.676782][ T9913] ? lock_vma_under_rcu+0x45a/0x500 [ 686.676832][ T9913] do_user_addr_fault+0xb35/0x1480 [ 686.676868][ T9913] ? trace_page_fault_user+0x84/0x1e0 [ 686.676895][ T9913] exc_page_fault+0x6a/0xc0 [ 686.676918][ T9913] asm_exc_page_fault+0x26/0x30 [ 686.676939][ T9913] RIP: 0033:0x7f85094f1df1 [ 686.676959][ T9913] Code: 00 0f 84 92 00 00 00 48 8d 15 a5 1d 0f 00 48 89 de 48 89 ef e8 10 e9 03 00 48 8d 4d 10 40 f6 c5 0f 0f 85 ba 00 00 00 48 89 d8 <48> c7 45 00 00 00 00 00 ba 01 00 00 00 48 83 c8 02 48 89 45 08 f0 [ 686.676978][ T9913] RSP: 002b:00007f8507784cc0 EFLAGS: 00010246 [ 686.676999][ T9913] RAX: 0000000000001000 RBX: 0000000000001000 RCX: 00007f850a2ee010 [ 686.677014][ T9913] RDX: 00007f85095e3b7a RSI: 0000000000001000 RDI: 00007f850a2ee000 [ 686.677029][ T9913] RBP: 00007f850a2ee000 R08: 00000000ffffffff R09: 0000000000000000 [ 686.677044][ T9913] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 686.677057][ T9913] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000001000 [ 686.677089][ T9913] [ 686.677124][ T9913] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 688.248966][ T10] bridge0: entered promiscuous mode [ 795.264978][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 795.271960][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7592/2:b..l.. P3420/3:b..l.. P28/2:b..l.. [ 795.284553][ C1] rcu: (detected by 1, t=10502 jiffies, g=42869, q=116 ncpus=2) [ 795.292547][ C1] task:ktimers/1 state:R running task stack:22728 pid:28 tgid:28 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 795.306093][ C1] Call Trace: [ 795.309376][ C1] [ 795.312297][ C1] __schedule+0x171d/0x56e0 [ 795.316821][ C1] ? __pfx___schedule+0x10/0x10 [ 795.321676][ C1] ? irqentry_exit+0x2a0/0x9b0 [ 795.326433][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 795.331792][ C1] preempt_schedule_common+0x7f/0xd0 [ 795.337060][ C1] preempt_schedule_thunk+0x16/0x40 [ 795.342255][ C1] rt_spin_lock+0x31a/0x400 [ 795.346746][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 795.351755][ C1] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 795.357027][ C1] snd_seq_check_queue+0xa1/0x4a0 [ 795.362158][ C1] ? __pfx_snd_seq_check_queue+0x10/0x10 [ 795.367773][ C1] ? rt_spin_unlock+0x165/0x200 [ 795.372624][ C1] ? snd_seq_timer_interrupt+0x2ed/0x400 [ 795.378255][ C1] ? __pfx_snd_seq_timer_interrupt+0x10/0x10 [ 795.384225][ C1] snd_timer_interrupt+0x1133/0x13a0 [ 795.389516][ C1] snd_hrtimer_callback+0x1b2/0x330 [ 795.394711][ C1] ? __pfx_snd_hrtimer_callback+0x10/0x10 [ 795.400433][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 795.405630][ C1] hrtimer_run_softirq+0x1e1/0x2e0 [ 795.410744][ C1] handle_softirqs+0x1d4/0x6c0 [ 795.415514][ C1] run_ktimerd+0x6a/0x100 [ 795.419838][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 795.424765][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 795.429780][ C1] kthread+0x38b/0x470 [ 795.433835][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 795.439274][ C1] ? __pfx_kthread+0x10/0x10 [ 795.443848][ C1] ret_from_fork+0x514/0xb70 [ 795.448422][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 795.453535][ C1] ? __switch_to+0xc78/0x1410 [ 795.458217][ C1] ? __pfx_kthread+0x10/0x10 [ 795.462798][ C1] ret_from_fork_asm+0x1a/0x30 [ 795.467554][ C1] [ 795.470576][ C1] task:kworker/u8:18 state:R running task stack:21256 pid:3420 tgid:3420 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 795.484115][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 795.490965][ C1] Call Trace: [ 795.494231][ C1] [ 795.497159][ C1] __schedule+0x171d/0x56e0 [ 795.501678][ C1] ? __pfx___schedule+0x10/0x10 [ 795.506534][ C1] preempt_schedule_irq+0x4b/0x90 [ 795.511548][ C1] irqentry_exit+0x14f/0x9b0 [ 795.516145][ C1] ? trace_irq_disable+0x3b/0x140 [ 795.521166][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 795.527135][ C1] RIP: 0010:nsim_dev_trap_report_work+0x834/0xca0 [ 795.533572][ C1] Code: fb 48 ba 00 00 00 00 00 fc ff df 48 8b 0c 24 4c 8b 31 48 8b 44 24 38 49 8d 3c 04 48 83 c7 f8 48 89 f8 48 c1 e8 03 80 3c 10 00 <74> 05 e8 15 c4 5b fb 48 8b 44 24 38 4a 8b 54 20 f8 48 8b 7c 24 68 [ 795.553179][ C1] RSP: 0000:ffffc9000e84fa20 EFLAGS: 00000246 [ 795.559235][ C1] RAX: 1ffff1100c415d10 RBX: ffffffff86de3c3d RCX: ffff888034743e80 [ 795.567205][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff8880620ae880 [ 795.575200][ C1] RBP: ffff8880343663c0 R08: ffffffff8b72afe2 R09: 0000000000000000 [ 795.583199][ C1] R10: dffffc0000000000 R11: fffffbfff21a9938 R12: 0000000000000088 [ 795.591184][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000fffffffc [ 795.599151][ C1] ? nsim_dev_trap_report_work+0x79d/0xca0 [ 795.604974][ C1] ? rt_spin_lock+0x1e2/0x400 [ 795.609669][ C1] ? process_scheduled_works+0x97a/0x1630 [ 795.615398][ C1] process_scheduled_works+0xc3d/0x1630 [ 795.620961][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 795.626956][ C1] ? assign_work+0x3cf/0x5d0 [ 795.631550][ C1] worker_thread+0xa47/0xfb0 [ 795.636146][ C1] ? __kthread_parkme+0x71/0x1f0 [ 795.641082][ C1] kthread+0x38b/0x470 [ 795.645140][ C1] ? __pfx_worker_thread+0x10/0x10 [ 795.650234][ C1] ? __pfx_kthread+0x10/0x10 [ 795.654824][ C1] ret_from_fork+0x514/0xb70 [ 795.659407][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 795.664526][ C1] ? __switch_to+0xc78/0x1410 [ 795.669208][ C1] ? __pfx_kthread+0x10/0x10 [ 795.673807][ C1] ret_from_fork_asm+0x1a/0x30 [ 795.678570][ C1] [ 795.681573][ C1] task:kworker/u8:19 state:R running task stack:22408 pid:7592 tgid:7592 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 795.695135][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 795.701889][ C1] Call Trace: [ 795.705158][ C1] [ 795.708077][ C1] __schedule+0x171d/0x56e0 [ 795.712578][ C1] ? __pfx___schedule+0x10/0x10 [ 795.717418][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 795.723209][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 795.728587][ C1] preempt_schedule_common+0x7f/0xd0 [ 795.733877][ C1] preempt_schedule_thunk+0x16/0x40 [ 795.739077][ C1] rt_mutex_slowunlock+0x6d3/0xa30 [ 795.744181][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 795.749833][ C1] ? crng_make_state+0x232/0x5d0 [ 795.754846][ C1] rt_spin_unlock+0x10f/0x200 [ 795.759523][ C1] crng_make_state+0x232/0x5d0 [ 795.764299][ C1] _get_random_bytes+0xff/0x260 [ 795.769136][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 795.774588][ C1] ? __kmalloc_node_track_caller_noprof+0x587/0x7b0 [ 795.781199][ C1] nsim_dev_trap_report_work+0x702/0xca0 [ 795.786835][ C1] ? process_scheduled_works+0x97a/0x1630 [ 795.792574][ C1] process_scheduled_works+0xc3d/0x1630 [ 795.798152][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 795.804125][ C1] ? assign_work+0x3cf/0x5d0 [ 795.808705][ C1] worker_thread+0xa47/0xfb0 [ 795.813334][ C1] ? __kthread_parkme+0x71/0x1f0 [ 795.818276][ C1] kthread+0x38b/0x470 [ 795.822330][ C1] ? __pfx_worker_thread+0x10/0x10 [ 795.827433][ C1] ? __pfx_kthread+0x10/0x10 [ 795.832009][ C1] ret_from_fork+0x514/0xb70 [ 795.836586][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 795.841681][ C1] ? __switch_to+0xc78/0x1410 [ 795.846340][ C1] ? __pfx_kthread+0x10/0x10 [ 795.850911][ C1] ret_from_fork_asm+0x1a/0x30 [ 795.855668][ C1] [ 795.858701][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10556 jiffies! g42869 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 795.870668][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=28509 [ 795.878540][ C1] rcu: rcu_preempt kthread starved for 10562 jiffies! g42869 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 795.889629][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 795.899589][ C1] rcu: RCU grace-period kthread stack dump: [ 795.905458][ C1] task:rcu_preempt state:I stack:27688 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 795.917357][ C1] Call Trace: [ 795.920632][ C1] [ 795.923551][ C1] __schedule+0x171d/0x56e0 [ 795.928076][ C1] ? __pfx___schedule+0x10/0x10 [ 795.932930][ C1] ? lock_acquire+0x115/0x350 [ 795.937601][ C1] ? schedule+0x90/0x2b0 [ 795.941843][ C1] schedule+0x164/0x2b0 [ 795.945979][ C1] schedule_timeout+0x152/0x2c0 [ 795.950814][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 795.956169][ C1] ? __pfx_process_timeout+0x10/0x10 [ 795.961444][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 795.967234][ C1] ? prepare_to_swait_event+0x220/0x3e0 [ 795.972768][ C1] ? prepare_to_swait_event+0x35e/0x3e0 [ 795.978300][ C1] rcu_gp_fqs_loop+0x30c/0x1230 [ 795.983157][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 795.988425][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 795.994042][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 795.999862][ C1] rcu_gp_kthread+0x9c/0x340 [ 796.004456][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 796.009647][ C1] ? __kthread_parkme+0x71/0x1f0 [ 796.014567][ C1] ? __kthread_parkme+0x199/0x1f0 [ 796.019589][ C1] kthread+0x38b/0x470 [ 796.023673][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 796.029038][ C1] ? __pfx_kthread+0x10/0x10 [ 796.033640][ C1] ret_from_fork+0x514/0xb70 [ 796.038227][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 796.043329][ C1] ? __switch_to+0xc78/0x1410 [ 796.048004][ C1] ? __pfx_kthread+0x10/0x10 [ 796.052597][ C1] ret_from_fork_asm+0x1a/0x30 [ 796.057357][ C1] [ 796.060363][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 796.066679][ C1] Sending NMI from CPU 1 to CPUs 0: [ 796.071901][ C0] NMI backtrace for cpu 0 [ 796.071930][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 796.071950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 796.071961][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 796.071986][ C0] Code: 7b 6a 02 e9 c3 e7 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 54 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 796.072002][ C0] RSP: 0018:ffffffff8f007ca0 EFLAGS: 00000246 [ 796.072020][ C0] RAX: 0000000000e9fb93 RBX: ffffffff819b6e2c RCX: 8000000000000001 [ 796.072033][ C0] RDX: 0000000000000001 RSI: ffffffff8daeeee5 RDI: ffffffff8becee80 [ 796.072045][ C0] RBP: ffffffff8f007d78 R08: ffff8880b84341db R09: 1ffff1101708683b [ 796.072059][ C0] R10: dffffc0000000000 R11: ffffed101708683c R12: 0000000000000000 [ 796.072072][ C0] R13: 1ffffffff1e1ee00 R14: 1ffffffff1e00f9c R15: dffffc0000000000 [ 796.072086][ C0] FS: 0000000000000000(0000) GS:ffff888124734000(0000) knlGS:0000000000000000 [ 796.072101][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 796.072113][ C0] CR2: 00007faff26f4395 CR3: 000000003420e000 CR4: 00000000003526f0 [ 796.072130][ C0] Call Trace: [ 796.072139][ C0] [ 796.072146][ C0] default_idle+0x9/0x20 [ 796.072167][ C0] default_idle_call+0x72/0xb0 [ 796.072198][ C0] do_idle+0x1cc/0x540 [ 796.072226][ C0] ? __pfx_do_idle+0x10/0x10 [ 796.072254][ C0] ? do_idle+0xc/0x540 [ 796.072280][ C0] cpu_startup_entry+0x43/0x60 [ 796.072306][ C0] rest_init+0x378/0x3a0 [ 796.072328][ C0] ? __pfx_rest_init+0x10/0x10 [ 796.072354][ C0] ? __pfx_kernel_init+0x10/0x10 [ 796.072378][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 796.072509][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 796.072553][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 796.072572][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 796.072590][ C0] start_kernel+0x392/0x3e0 [ 796.072612][ C0] x86_64_start_reservations+0x24/0x30 [ 796.072638][ C0] x86_64_start_kernel+0x137/0x1b0 [ 796.072662][ C0] common_startup_64+0x13e/0x157 [ 796.072701][ C0]