last executing test programs: 17m11.498378665s ago: executing program 3 (id=4): open$dir(0x0, 0xe8c40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b70400000000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7"], &(0x7f0000000600)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r4, &(0x7f0000026000)=""/102400, 0x19000) syz_open_dev$sg(0x0, 0x0, 0x10800) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000910000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r7, &(0x7f0000000340)='X', 0x1, 0xe0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17m4.289992951s ago: executing program 3 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "eeba1daa3c696e33", "8cd11084a86e02071031ecd5f1cb8efeeee1da564cf9831268724500b699fa5e", "990ff934", "917ab8da99afa933"}, 0x38) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r4 = fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x0) close(r4) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='0', 0x3fec, 0x0, 0x0, 0x0) close(r0) 16m47.02953155s ago: executing program 32 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "eeba1daa3c696e33", "8cd11084a86e02071031ecd5f1cb8efeeee1da564cf9831268724500b699fa5e", "990ff934", "917ab8da99afa933"}, 0x38) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r4 = fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x0) close(r4) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='0', 0x3fec, 0x0, 0x0, 0x0) close(r0) 16m41.63140701s ago: executing program 4 (id=39): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) socket(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r4 = add_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) keyctl$read(0xb, r4, &(0x7f0000001a00)=""/4096, 0x1000) getpid() 16m39.227943673s ago: executing program 4 (id=41): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000700)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) getpriority(0x1, r1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r4, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c", 0x3}], 0x1}}], 0x2, 0x1c000) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000047c0)={0x2020}, 0x2020) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd}}}}}}, 0x0) 16m35.20667116s ago: executing program 4 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x7f, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100757365725f6c696e6b750000000061626c6564000000000000000000000000000500faff050000000400e00c0800"], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x509d884560ba1ba6, 0x10}, {}, {0xfff2, 0x6}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0xffeb, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040090}, 0x20028041) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) get_mempolicy(0x0, &(0x7f0000000080), 0x919, &(0x7f0000ffa000/0x4000)=nil, 0x8) socket$netlink(0x10, 0x3, 0x0) 16m31.423920679s ago: executing program 4 (id=49): rseq(0xfffffffffffffffe, 0xfffffffffffffeb2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000280)={0x0, 0xb9d8, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdir(&(0x7f0000000640)='./file2\x00', 0x1ff) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_setup(0x266b, 0x0) mount(&(0x7f0000000740)=@filename='127.0.0.1:/\x00', &(0x7f0000000780)='./file2\x00', 0x0, 0x0, &(0x7f0000000800)='addr=127.0.0.1,vers=3,proto=udp\x00') r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x80082, 0x0) write$vga_arbiter(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newchain={0x50, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7f}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 16m27.714036335s ago: executing program 4 (id=53): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x8000000) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x129202, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x8000, 0x0, 0x3b}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000680)=0x180004) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000006c0)=0xffffffff) write$dsp(r0, &(0x7f0000000700), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f00000007c0)=[0x10, 0x8000, 0x179]) symlinkat(&(0x7f0000001840)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00') rmdir(&(0x7f0000002880)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0xd, &(0x7f0000003900)={0x0, 0x3095, 0x4, 0x2, 0x2f6}, &(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) 16m22.093049774s ago: executing program 4 (id=57): socketpair(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 16m5.358512091s ago: executing program 33 (id=57): socketpair(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 13m58.795436261s ago: executing program 2 (id=181): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001300)=""/4048, 0xfd0}, {&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {0x0}], 0x6}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) 13m53.15373376s ago: executing program 2 (id=188): socketpair(0x2a, 0x2, 0x5, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000640)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000740)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000780)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/uprobe_events\x00', 0x401, 0x90) write(r7, &(0x7f0000000240)='p:-est/event1 ./file0:0x0 @', 0x1b) 13m51.824237602s ago: executing program 2 (id=189): setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x602, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008000000"], 0x20}}, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f00000002c0)={'lo\x00', @ifru_mtu=0x44}) r4 = socket(0x2d, 0x2, 0x0) bind(r4, &(0x7f0000000380)=@generic={0x2d, "00000100000008010800"}, 0x80) r5 = socket(0x2d, 0x2, 0x0) sendto(r5, &(0x7f00000005c0)="010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0xc8, 0x0, &(0x7f0000000680)=@generic={0x2d, "00000100000008010800"}, 0x80) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="6e2d3c9428", 0x5}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m44.8414715s ago: executing program 2 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000bc0)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000c80)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES32, @ANYBLOB="0100"/20, @ANYRES32], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e00)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000ec0)=0x2) recvmmsg(r1, &(0x7f0000000f00), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xa, &(0x7f0000001040)=ANY=[], &(0x7f0000001080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000010c0)='./file2\x00', 0x81c0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000001100)={0x0, 0x2, 0xe98, 0x0, 0x100}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001180)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000040)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x13, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x0, 0xfffffffe, 0x1, 0xff, 0x47, 0x8, 0x84, 0x8, 0x1010103, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffffd, 0x38, 0xc, 0x10000006, 0x10001, 0xfffffff8]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='status\x00') prctl$PR_MCE_KILL_GET(0x22) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000003300)=0x4) symlinkat(&(0x7f0000003340)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000003380)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 13m43.233679127s ago: executing program 2 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) ioprio_get$uid(0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x20002) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000440)='match_busid\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) sendfile(r7, r6, &(0x7f0000000680)=0x7, 0x8) 13m37.656919598s ago: executing program 2 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x60442, 0x0) r6 = dup(r5) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000480)=""/121, 0x79}, {0x0}], 0x2, 0x401, 0x6) lseek(r3, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 13m22.410661009s ago: executing program 34 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x60442, 0x0) r6 = dup(r5) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000480)=""/121, 0x79}, {0x0}], 0x2, 0x401, 0x6) lseek(r3, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 11.485804091s ago: executing program 7 (id=1690): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlink(0x0) 9.885405259s ago: executing program 7 (id=1706): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x3}) fsopen(&(0x7f00000002c0)='9p\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x2, 0x2, {0xa, 0x4e21, 0xfffff874, @loopback, 0x1}}}, 0x3a) sendmsg$key(r0, &(0x7f0000000380)={0x500, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3a, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x18}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffffff, @mcast1, 0x9ed6}}]}, 0x70}}, 0x0) 6.105344687s ago: executing program 6 (id=1730): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x770}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 5.264608548s ago: executing program 6 (id=1733): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/sched/filter\x00', 0x82, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/136, 0x88}, {&(0x7f0000000240)=""/245, 0xf5}], 0x2) 4.960499448s ago: executing program 6 (id=1734): syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x8942) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl(r0, 0xc4c85513, &(0x7f0000000200)) 4.949156249s ago: executing program 7 (id=1735): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.159925726s ago: executing program 5 (id=1741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x283, 0x0, 0x9}]}) 4.027297389s ago: executing program 0 (id=1743): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r0, &(0x7f0000000340)='10', 0x2) mount(0x0, &(0x7f00000003c0)='./proc\x00', 0x0, 0xeb, 0x0) 3.900298129s ago: executing program 1 (id=1744): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmmsg$alg(r0, &(0x7f0000006a40)=[{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000000180)="7ccc", 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x8004) 3.68611103s ago: executing program 5 (id=1745): r0 = creat(&(0x7f0000000140)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@ng={0x4, 0xb}, 0x2, 0x1) close(r0) execve(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 3.573303638s ago: executing program 0 (id=1746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, &(0x7f0000000300)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 3.429736343s ago: executing program 0 (id=1747): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001d80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001dc0)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001e40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e80)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001ec0)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000001f80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001fc0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x3a) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000100)='.\x00', 0xc100092e) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000020c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000640)=r5, 0x4) 3.429109894s ago: executing program 1 (id=1748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r2, 0x8924, 0x20000000000f) 3.330806545s ago: executing program 5 (id=1749): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x11c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = fsopen(&(0x7f0000000280)='overlay\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000bc0), 0x14c98, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.320110593s ago: executing program 7 (id=1750): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001300)=""/4048, 0xfd0}, {&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/250, 0xfa}, {0x0}], 0x6}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7fe}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4000c}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x4}], 0x7, 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x101301) 3.175446051s ago: executing program 1 (id=1751): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x42032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) 1.98973982s ago: executing program 0 (id=1752): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x1, 0xd, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000000000000000000000000000061183000000000007a0af8ff0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000150802000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001c40)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) 1.721699408s ago: executing program 7 (id=1753): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$STOP_ARRAY(r0, 0x932, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x9) 1.606474899s ago: executing program 1 (id=1754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{0x7, 0x2, 0x1, 0x9, 0x17fe, 0xffeffffe, 0xfffffc44}]}) 1.598065797s ago: executing program 6 (id=1755): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) ioctl(0xffffffffffffffff, 0x400452c8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/rfcomm0\x00', 0x802, 0x0) 1.580664478s ago: executing program 5 (id=1756): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 1.231446142s ago: executing program 0 (id=1757): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, &(0x7f0000000300)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 1.229740198s ago: executing program 1 (id=1758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.153651995s ago: executing program 6 (id=1759): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000880)="b461802305624431ed33730100", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x121403) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.151096227s ago: executing program 5 (id=1760): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 946.478243ms ago: executing program 0 (id=1761): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, 0x0) 890.803506ms ago: executing program 5 (id=1762): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001d80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001dc0)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001e40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e80)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001ec0)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000001f80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001fc0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x3a) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000100)='.\x00', 0xc100092e) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000020c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000640)=r5, 0x4) 832.522964ms ago: executing program 6 (id=1763): syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) 814.148904ms ago: executing program 7 (id=1764): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xff, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x7, 0x450c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, &(0x7f0000000300)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1765): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000200)="aefdf79d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d7", 0x20}, {&(0x7f00000004c0)="4673c875ca4d9cb6f1d39f1148c805c9a48b6bfad79db2f8ffac454102a0b64722d3f9bc6cd3f362725779ed6c4eb82b03a9f965a9e238f9387a706fcab2b6", 0x3f}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000540)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x527, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x12, 0xfffffffffffffffd]}}) kernel console output (not intermixed with test programs): owmem_reserve[]: 0 0 0 0 0 [ 749.764225][ T9158] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 749.764390][ T9158] Node 0 DMA32: 35*4kB (UME) 6*8kB (M) 793*16kB (UME) 761*32kB (UME) 435*64kB (UME) 237*128kB (UME) 61*256kB (UM) 37*512kB (UME) 27*1024kB (ME) 11*2048kB (UM) 243*4096kB (UM) = 1175468kB [ 749.764607][ T9158] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 749.764742][ T9158] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 8*16kB (UM) 11*32kB (UM) 5*64kB (UM) 8*128kB (UM) 3*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3933768kB [ 749.764969][ T9158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.764991][ T9158] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 749.770264][ T9158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.770291][ T9158] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 749.770313][ T9158] 60759 total pagecache pages [ 749.770338][ T9158] 11 pages in swap cache [ 749.770356][ T9158] Free swap = 124772kB [ 749.770367][ T9158] Total swap = 124996kB [ 749.770377][ T9158] 2097051 pages RAM [ 749.770387][ T9158] 0 pages HighMem/MovableOnly [ 749.770396][ T9158] 430433 pages reserved [ 749.770406][ T9158] 0 pages cma reserved [ 750.234807][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.234962][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.379940][ T9160] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 751.638921][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 752.665553][ T36] audit: type=1326 audit(1792934116.691:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.665618][ T36] audit: type=1326 audit(1792934116.691:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.665676][ T36] audit: type=1326 audit(1792934116.710:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.665725][ T36] audit: type=1326 audit(1792934116.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.665773][ T36] audit: type=1326 audit(1792934116.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.665821][ T36] audit: type=1326 audit(1792934116.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.665869][ T36] audit: type=1326 audit(1792934116.719:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.665921][ T36] audit: type=1326 audit(1792934116.719:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.665970][ T36] audit: type=1326 audit(1792934116.728:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.666018][ T36] audit: type=1326 audit(1792934116.820:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9153 comm="syz.1.508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bf3ff559 code=0x7ffc0000 [ 752.709461][ T4915] Bluetooth: hci3: command tx timeout [ 752.742320][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 753.110729][ T8808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 753.610371][ T8808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 754.383519][ T9173] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5605] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9173] [ 754.940607][ T4915] Bluetooth: hci3: command tx timeout [ 755.066312][ T9060] rxe_eth0 speed is unknown, defaulting to 1000 [ 757.889577][ T4915] Bluetooth: hci3: command tx timeout [ 759.664294][ T9199] __vm_enough_memory: pid: 9199, comm: syz.5.515, bytes: 4503599627366400 not enough memory for the allocation [ 760.158121][ T4915] Bluetooth: hci3: command tx timeout [ 760.279573][ T9206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.516'. [ 760.290334][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.291931][ T9206] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.308819][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 763.772554][ T9148] rxe_eth0 speed is unknown, defaulting to 1000 [ 764.101475][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 765.907780][ T9235] FAULT_INJECTION: forcing a failure. [ 765.907780][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 765.907856][ T9235] CPU: 0 UID: 0 PID: 9235 Comm: syz.5.522 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 765.907892][ T9235] Tainted: [Y]=FORCED_BIND [ 765.907901][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 765.907915][ T9235] Call Trace: [ 765.907925][ T9235] [ 765.907935][ T9235] dump_stack_lvl+0xe8/0x150 [ 765.907984][ T9235] should_fail_ex+0x46b/0x600 [ 765.908026][ T9235] _copy_from_user+0x2d/0xb0 [ 765.908061][ T9235] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 765.908108][ T9235] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 765.908142][ T9235] ? rcu_is_watching+0x16/0xb0 [ 765.908171][ T9235] ? trace_kmalloc+0x2a/0xf0 [ 765.908208][ T9235] ip_generic_getfrag+0x149/0x2d0 [ 765.908246][ T9235] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 765.908284][ T9235] ? __alloc_skb+0x4d0/0x7a0 [ 765.908317][ T9235] ? skb_put+0x112/0x210 [ 765.908362][ T9235] __ip_append_data+0x2f45/0x3cf0 [ 765.908417][ T9235] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 765.908474][ T9235] ? __pfx___ip_append_data+0x10/0x10 [ 765.908505][ T9235] ? ipv4_mtu+0x561/0x670 [ 765.908539][ T9235] ? ip_setup_cork+0x512/0x920 [ 765.908576][ T9235] ip_make_skb+0x250/0x460 [ 765.908615][ T9235] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 765.908650][ T9235] ? __pfx_ip_make_skb+0x10/0x10 [ 765.908681][ T9235] ? irqentry_exit+0x2a0/0x9b0 [ 765.908729][ T9235] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 765.908769][ T9235] udp_sendmsg+0x1937/0x2140 [ 765.908827][ T9235] ? __pfx_udp_sendmsg+0x10/0x10 [ 765.908870][ T9235] ? perf_cgroup_switch+0xe6/0x920 [ 765.908896][ T9235] ? __perf_event_task_sched_in+0xfe/0x1b40 [ 765.908921][ T9235] ? sched_clock+0x41/0x60 [ 765.908949][ T9235] ? lock_acquire+0x115/0x350 [ 765.909005][ T9235] ? rcu_is_watching+0x16/0xb0 [ 765.909040][ T9235] udpv6_sendmsg+0x915/0x2610 [ 765.909090][ T9235] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 765.909134][ T9235] ? __schedule+0x1733/0x56e0 [ 765.909188][ T9235] ? irqentry_exit+0x2a0/0x9b0 [ 765.909227][ T9235] ? inet_send_prepare+0x5b/0x260 [ 765.909263][ T9235] ? inet6_sendmsg+0xe4/0x120 [ 765.909292][ T9235] ? __pfx_inet6_sendmsg+0x10/0x10 [ 765.909318][ T9235] sock_sendmsg_nosec+0x90/0x190 [ 765.909358][ T9235] sock_write_iter+0x2e4/0x3f0 [ 765.909388][ T9235] ? __pfx_sock_write_iter+0x10/0x10 [ 765.909438][ T9235] vfs_write+0x61e/0xbb0 [ 765.909479][ T9235] ? __pfx_vfs_write+0x10/0x10 [ 765.909514][ T9235] ? __fget_files+0x3a8/0x420 [ 765.909543][ T9235] ? __fget_files+0x2a/0x420 [ 765.909576][ T9235] ? fdget+0x1b2/0x250 [ 765.909613][ T9235] ksys_write+0x156/0x270 [ 765.909646][ T9235] ? __pfx_ksys_write+0x10/0x10 [ 765.909690][ T9235] do_syscall_64+0x166/0x520 [ 765.909715][ T9235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.909739][ T9235] ? clear_bhb_loop+0x70/0xc0 [ 765.909769][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.909792][ T9235] RIP: 0033:0x7fd01cd7f559 [ 765.909814][ T9235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.909835][ T9235] RSP: 002b:00007fd01af8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 765.909861][ T9235] RAX: ffffffffffffffda RBX: 00007fd01d006180 RCX: 00007fd01cd7f559 [ 765.909879][ T9235] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 765.909895][ T9235] RBP: 00007fd01ce16b20 R08: 0000000000000000 R09: 0000000000000000 [ 765.909911][ T9235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.909925][ T9235] R13: 00007fd01d006218 R14: 00007fd01d006180 R15: 00007ffe728b1b18 [ 765.909963][ T9235] [ 767.880155][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 767.880187][ T36] audit: type=1326 audit(1792934131.408:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 767.880240][ T36] audit: type=1326 audit(1792934131.408:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 768.932040][ T36] audit: type=1326 audit(1792934132.386:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 768.932659][ T36] audit: type=1326 audit(1792934132.395:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 768.933846][ T36] audit: type=1326 audit(1792934132.395:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 768.934161][ T36] audit: type=1326 audit(1792934132.395:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 768.934706][ T36] audit: type=1326 audit(1792934132.395:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 768.935015][ T36] audit: type=1326 audit(1792934132.395:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 768.935326][ T36] audit: type=1326 audit(1792934132.395:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 768.936149][ T36] audit: type=1326 audit(1792934132.395:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9252 comm="syz.5.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 770.750337][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.751241][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.751427][ T9060] bridge_slave_0: entered allmulticast mode [ 770.754660][ T9060] bridge_slave_0: entered promiscuous mode [ 770.764543][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.764816][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.764988][ T9060] bridge_slave_1: entered allmulticast mode [ 770.767676][ T9060] bridge_slave_1: entered promiscuous mode [ 770.864130][ T9060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.946761][ T9060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.107495][ T9270] ubi0: attaching mtd0 [ 771.183684][ T9270] ubi0: scanning is finished [ 771.184137][ T9270] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 773.287297][ T9270] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 773.354785][ T9060] team0: Port device team_slave_0 added [ 773.391164][ T9060] team0: Port device team_slave_1 added [ 773.627608][ T9280] IPv6: NLM_F_CREATE should be specified when creating new route [ 773.907813][ T9288] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 773.907896][ T9288] Error validating options; rc = [-22] [ 774.050926][ T9289] fuse: fd is not a fuse device [ 774.264089][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 774.295198][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.295281][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.295313][ T9060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.507069][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.508072][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.508108][ T9060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.228831][ T4915] Bluetooth: hci1: command 0x0c24 tx timeout [ 778.753237][ T9060] hsr_slave_0: entered promiscuous mode [ 778.759894][ T9060] hsr_slave_1: entered promiscuous mode [ 778.768246][ T9060] debugfs: 'hsr0' already exists in 'hsr' [ 778.768275][ T9060] Cannot create hsr debugfs directory [ 778.786540][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.786754][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.787095][ T9148] bridge_slave_0: entered allmulticast mode [ 778.793591][ T9148] bridge_slave_0: entered promiscuous mode [ 778.856775][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.856984][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.857143][ T9148] bridge_slave_1: entered allmulticast mode [ 778.874911][ T9148] bridge_slave_1: entered promiscuous mode [ 779.359701][ T9316] FAULT_INJECTION: forcing a failure. [ 779.359701][ T9316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.359775][ T9316] CPU: 0 UID: 0 PID: 9316 Comm: syz.5.540 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 779.359810][ T9316] Tainted: [Y]=FORCED_BIND [ 779.359820][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 779.359834][ T9316] Call Trace: [ 779.359844][ T9316] [ 779.359854][ T9316] dump_stack_lvl+0xe8/0x150 [ 779.359899][ T9316] should_fail_ex+0x46b/0x600 [ 779.359940][ T9316] _copy_from_user+0x2d/0xb0 [ 779.359976][ T9316] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 779.360023][ T9316] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 779.360055][ T9316] ? rcu_is_watching+0x16/0xb0 [ 779.360082][ T9316] ? trace_kmalloc+0x2a/0xf0 [ 779.360120][ T9316] ip_generic_getfrag+0x149/0x2d0 [ 779.360157][ T9316] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 779.360194][ T9316] ? __alloc_skb+0x4d0/0x7a0 [ 779.360227][ T9316] ? skb_put+0x112/0x210 [ 779.360266][ T9316] __ip_append_data+0x2f45/0x3cf0 [ 779.360321][ T9316] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 779.360380][ T9316] ? __pfx___ip_append_data+0x10/0x10 [ 779.360411][ T9316] ? ipv4_mtu+0x561/0x670 [ 779.360445][ T9316] ? ip_setup_cork+0x512/0x920 [ 779.360482][ T9316] ip_make_skb+0x250/0x460 [ 779.360520][ T9316] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 779.360555][ T9316] ? __pfx_ip_make_skb+0x10/0x10 [ 779.360594][ T9316] ? irqentry_exit+0x2a0/0x9b0 [ 779.360642][ T9316] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 779.360690][ T9316] udp_sendmsg+0x1937/0x2140 [ 779.360750][ T9316] ? __pfx_udp_sendmsg+0x10/0x10 [ 779.360792][ T9316] ? perf_cgroup_switch+0xe6/0x920 [ 779.360819][ T9316] ? __perf_event_task_sched_in+0xfe/0x1b40 [ 779.360844][ T9316] ? sched_clock+0x41/0x60 [ 779.360872][ T9316] ? lock_acquire+0x115/0x350 [ 779.360927][ T9316] ? rcu_is_watching+0x16/0xb0 [ 779.360961][ T9316] udpv6_sendmsg+0x915/0x2610 [ 779.361012][ T9316] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 779.361056][ T9316] ? __schedule+0x1733/0x56e0 [ 779.361118][ T9316] ? irqentry_exit+0x2a0/0x9b0 [ 779.361156][ T9316] ? inet_send_prepare+0x5b/0x260 [ 779.361192][ T9316] ? inet6_sendmsg+0xe4/0x120 [ 779.361222][ T9316] ? __pfx_inet6_sendmsg+0x10/0x10 [ 779.361247][ T9316] sock_sendmsg_nosec+0x90/0x190 [ 779.361281][ T9316] sock_write_iter+0x2e4/0x3f0 [ 779.361312][ T9316] ? __pfx_sock_write_iter+0x10/0x10 [ 779.361361][ T9316] vfs_write+0x61e/0xbb0 [ 779.361402][ T9316] ? __pfx_vfs_write+0x10/0x10 [ 779.361436][ T9316] ? __fget_files+0x3a8/0x420 [ 779.361464][ T9316] ? __fget_files+0x2a/0x420 [ 779.361497][ T9316] ? fdget+0x1b2/0x250 [ 779.361533][ T9316] ksys_write+0x156/0x270 [ 779.361567][ T9316] ? __pfx_ksys_write+0x10/0x10 [ 779.361617][ T9316] do_syscall_64+0x166/0x520 [ 779.361641][ T9316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.361666][ T9316] ? clear_bhb_loop+0x70/0xc0 [ 779.361695][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.361719][ T9316] RIP: 0033:0x7fd01cd7f559 [ 779.361741][ T9316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.361762][ T9316] RSP: 002b:00007fd01af8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.361788][ T9316] RAX: ffffffffffffffda RBX: 00007fd01d006180 RCX: 00007fd01cd7f559 [ 779.361806][ T9316] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 779.361821][ T9316] RBP: 00007fd01ce16b20 R08: 0000000000000000 R09: 0000000000000000 [ 779.361836][ T9316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.361850][ T9316] R13: 00007fd01d006218 R14: 00007fd01d006180 R15: 00007ffe728b1b18 [ 779.361888][ T9316] [ 780.613742][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.711344][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.764241][ T9326] ubi0: attaching mtd0 [ 781.877953][ T9326] ubi0: scanning is finished [ 781.879222][ T9326] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 783.153070][ T9148] team0: Port device team_slave_0 added [ 783.243122][ T9148] team0: Port device team_slave_1 added [ 783.503994][ T4915] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 784.606280][ T9326] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 784.932598][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.932619][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.932659][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.111250][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.111271][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.111303][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.201770][ T4915] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 785.257174][ T8944] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 786.541353][ T8944] usb 6-1: not running at top speed; connect to a high speed hub [ 786.541800][ T8944] usb 6-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 786.577210][ T8944] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.577241][ T8944] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 786.577438][ T8944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.711824][ T9148] hsr_slave_0: entered promiscuous mode [ 786.714894][ T9148] hsr_slave_1: entered promiscuous mode [ 786.715916][ T9148] debugfs: 'hsr0' already exists in 'hsr' [ 786.715941][ T9148] Cannot create hsr debugfs directory [ 786.789455][ T8944] uvcvideo 6-1:1.0: Found UVC 0.00 device (046d:0825) [ 786.789643][ T8944] uvcvideo 6-1:1.0: No valid video chain found. [ 787.007315][ T8944] usb 6-1: USB disconnect, device number 2 [ 787.692123][ T4915] Bluetooth: hci0: unexpected event 0x04 length: 3 < 10 [ 789.296895][ T9362] Device name not specified. [ 789.296895][ T9362] [ 789.547605][ T4915] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 790.156946][ T4915] Bluetooth: hci0: Injecting HCI hardware error event [ 790.179735][ T5618] Bluetooth: hci0: hardware error 0x00 [ 791.665817][ T9374] netlink: 100 bytes leftover after parsing attributes in process `syz.5.552'. [ 791.733884][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 791.733909][ T36] audit: type=1326 audit(1792934153.147:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 791.733969][ T36] audit: type=1326 audit(1792934153.147:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 791.734024][ T36] audit: type=1326 audit(1792934153.147:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc37865fd8e code=0x7ffc0000 [ 791.734078][ T36] audit: type=1326 audit(1792934153.147:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc37865fd8e code=0x7ffc0000 [ 791.734131][ T36] audit: type=1326 audit(1792934153.147:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc37865fd8e code=0x7ffc0000 [ 791.734184][ T36] audit: type=1326 audit(1792934153.147:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc37865fd8e code=0x7ffc0000 [ 791.734246][ T36] audit: type=1326 audit(1792934153.147:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc37865fd8e code=0x7ffc0000 [ 791.734300][ T36] audit: type=1326 audit(1792934153.147:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc37865fd8e code=0x7ffc0000 [ 791.734355][ T36] audit: type=1326 audit(1792934153.147:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc37865fd8e code=0x7ffc0000 [ 791.734457][ T36] audit: type=1326 audit(1792934153.147:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9363 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc37865fd8e code=0x7ffc0000 [ 792.482409][ T5618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 792.945672][ T5618] Bluetooth: hci1: unexpected event for opcode 0x203b [ 793.346948][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 793.749668][ T4915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 794.072793][ T4915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 794.077638][ T4915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 794.095887][ T4915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 794.103672][ T4915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 796.184223][ T9417] netlink: 72 bytes leftover after parsing attributes in process `syz.5.561'. [ 796.730823][ T5618] Bluetooth: hci2: command tx timeout [ 799.003783][ T5618] Bluetooth: hci4: unexpected event 0x04 length: 3 < 10 [ 799.027631][ T5618] Bluetooth: hci2: command tx timeout [ 799.787591][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 799.860782][ T9448] 9p: Bad value for 'rfdno' [ 799.947933][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 801.294721][ T5618] Bluetooth: hci2: command tx timeout [ 802.355954][ T3304] bridge_slave_1: left allmulticast mode [ 802.355993][ T3304] bridge_slave_1: left promiscuous mode [ 802.356946][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.424606][ T3304] bridge_slave_0: left allmulticast mode [ 803.424648][ T3304] bridge_slave_0: left promiscuous mode [ 803.424946][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.494252][ T5618] Bluetooth: hci2: command tx timeout [ 803.752466][ T3304] bridge_slave_1: left allmulticast mode [ 803.752548][ T3304] bridge_slave_1: left promiscuous mode [ 803.781617][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.874788][ T3304] bridge_slave_0: left allmulticast mode [ 803.874832][ T3304] bridge_slave_0: left promiscuous mode [ 803.875056][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.015366][ T8944] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 804.347611][ T8944] usb 6-1: New USB device found: idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 804.347953][ T8944] usb 6-1: too many configurations: 25, using maximum allowed: 8 [ 804.432470][ T8944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.498318][ T8944] usb 6-1: config 0 descriptor?? [ 804.564081][ T8944] pwc: Creative Labs Webcam Pro Ex detected. [ 804.564100][ T8944] pwc: Warning: more than 1 configuration available. [ 804.787168][ T8944] pwc: Failed to set LED on/off time (-71) [ 804.793693][ T8944] pwc: send_video_command error -71 [ 804.793714][ T8944] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 804.831478][ T8944] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 805.120152][ T3304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.139064][ T8944] usb 6-1: USB disconnect, device number 3 [ 805.243880][ T3304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.336533][ T3304] bond0 (unregistering): Released all slaves [ 805.901187][ T9513] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 805.942795][ T9513] Bluetooth: ISO socket layer initialized [ 806.890323][ T5618] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 807.396981][ T3304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.508445][ T3304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.551690][ T3304] bond0 (unregistering): Released all slaves [ 808.167137][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 808.346440][ T9522] ubi0: attaching mtd0 [ 808.383259][ T9522] ubi0: scanning is finished [ 808.383620][ T9522] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 809.283477][ T9522] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 809.769793][ T9526] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 810.149574][ T5747] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 810.367775][ T5747] usb 6-1: unable to get BOS descriptor or descriptor too short [ 810.368604][ T5747] usb 6-1: not running at top speed; connect to a high speed hub [ 810.368645][ T5747] usb 6-1: New USB device found: idVendor=0545, idProduct=800c, bcdDevice=3.0a [ 810.370503][ T5747] usb 6-1: config 232 has an invalid interface number: 238 but max is 0 [ 810.370531][ T5747] usb 6-1: config 232 has no interface number 0 [ 810.370566][ T5747] usb 6-1: config 232 interface 238 has no altsetting 0 [ 810.506323][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.506356][ T5747] usb 6-1: Product: syz [ 810.506372][ T5747] usb 6-1: Manufacturer: syz [ 810.506388][ T5747] usb 6-1: SerialNumber: syz [ 812.626837][ T9396] rxe_eth0 speed is unknown, defaulting to 1000 [ 812.868296][ T5747] usb 6-1: USB disconnect, device number 4 [ 814.548057][ T5744] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 814.675134][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 814.739872][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 814.781247][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 814.786868][ T5744] usb 6-1: Using ep0 maxpacket: 32 [ 814.817875][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 814.830571][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 814.891228][ T5744] usb 6-1: unable to get BOS descriptor or descriptor too short [ 814.891796][ T5744] usb 6-1: New USB device found: idVendor=0763, idProduct=2012, bcdDevice=0.40 [ 815.089687][ T5744] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.089722][ T5744] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 815.213158][ T5744] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.213252][ T5744] usb 6-1: Product: syz [ 815.213268][ T5744] usb 6-1: Manufacturer: syz [ 815.213290][ T5744] usb 6-1: SerialNumber: syz [ 815.854760][ T5744] usb 6-1: Fast Track Pro switching to config #2 [ 815.942163][ T5744] usb 6-1: USB disconnect, device number 5 [ 816.412255][ T4915] Bluetooth: hci4: command 0x0406 tx timeout [ 816.598694][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.598870][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.229602][ T5618] Bluetooth: hci1: unexpected cc 0x2029 length: 100 > 1 [ 817.229718][ T5618] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 818.159142][ T5618] Bluetooth: hci5: command tx timeout [ 818.477194][ T5618] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 818.637411][ T3304] hsr_slave_0: left promiscuous mode [ 818.660562][ T3304] hsr_slave_1: left promiscuous mode [ 818.661984][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.701494][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.917926][ T3304] hsr_slave_0: left promiscuous mode [ 818.974793][ T3304] hsr_slave_1: left promiscuous mode [ 818.993738][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.036981][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.198266][ T3304] veth1_macvtap: left promiscuous mode [ 819.198377][ T3304] veth0_macvtap: left promiscuous mode [ 819.198687][ T3304] veth1_vlan: left promiscuous mode [ 819.198902][ T3304] veth0_vlan: left promiscuous mode [ 820.433544][ T4915] Bluetooth: hci5: command tx timeout [ 822.160540][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 822.233257][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 822.696641][ T4915] Bluetooth: hci5: command tx timeout [ 824.856564][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.617'. [ 824.859163][ T9668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.617'. [ 825.532626][ T4915] Bluetooth: hci5: command tx timeout [ 825.972969][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 826.075123][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 826.389969][ T4915] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 827.701655][ T9557] rxe_eth0 speed is unknown, defaulting to 1000 [ 828.210257][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.210392][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.210670][ T9396] bridge_slave_0: entered allmulticast mode [ 828.215678][ T9396] bridge_slave_0: entered promiscuous mode [ 828.229345][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.229711][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.230075][ T9396] bridge_slave_1: entered allmulticast mode [ 828.234622][ T9396] bridge_slave_1: entered promiscuous mode [ 829.585278][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.639911][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.933662][ T9396] team0: Port device team_slave_0 added [ 829.963881][ T9396] team0: Port device team_slave_1 added [ 830.104766][ T9727] netlink: 'syz.0.633': attribute type 5 has an invalid length. [ 830.350728][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.350748][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.350779][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.429749][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.429770][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.429801][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.674999][ T5928] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 830.905787][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short [ 830.905934][ T5928] usb 6-1: New USB device found: idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 830.909758][ T5928] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 830.909790][ T5928] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 830.909813][ T5928] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 830.910280][ T5928] usb 6-1: config 129 has no interface number 0 [ 830.910302][ T5928] usb 6-1: config 129 has no interface number 1 [ 830.910361][ T5928] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 830.910640][ T5928] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 830.910682][ T5928] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 830.910711][ T5928] usb 6-1: config 129 interface 135 has no altsetting 0 [ 830.910731][ T5928] usb 6-1: config 129 interface 5 has no altsetting 0 [ 831.233503][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.233612][ T5928] usb 6-1: Product: syz [ 831.233632][ T5928] usb 6-1: Manufacturer: syz [ 831.233648][ T5928] usb 6-1: SerialNumber: syz [ 832.637045][ T9396] hsr_slave_0: entered promiscuous mode [ 832.646736][ T9396] hsr_slave_1: entered promiscuous mode [ 832.983820][ T5928] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 832.984845][ T5928] usb 6-1: MIDIStreaming interface descriptor not found [ 833.760079][ T3304] bridge_slave_1: left allmulticast mode [ 833.760119][ T3304] bridge_slave_1: left promiscuous mode [ 833.760385][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.898632][ T9794] comedi comedi1: dt2811-pgh: a I/O base address must be specified [ 833.934228][ T3304] bridge_slave_0: left allmulticast mode [ 833.934275][ T3304] bridge_slave_0: left promiscuous mode [ 833.949723][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.180459][ T5928] usb 6-1: USB disconnect, device number 6 [ 834.289179][ T3304] bridge_slave_1: left allmulticast mode [ 834.289219][ T3304] bridge_slave_1: left promiscuous mode [ 834.289465][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.478357][ T3304] bridge_slave_0: left allmulticast mode [ 834.478415][ T3304] bridge_slave_0: left promiscuous mode [ 834.491716][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.216613][ T3304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.291759][ T5928] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 835.324779][ T3304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.403453][ T3304] bond0 (unregistering): Released all slaves [ 835.498420][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 835.504504][ T5928] usb 6-1: New USB device found: idVendor=046d, idProduct=08d3, bcdDevice=b.28 [ 835.506439][ T5928] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 835.506468][ T5928] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 835.506490][ T5928] usb 6-1: config 0 has no interface number 0 [ 835.547786][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.547815][ T5928] usb 6-1: Product: syz [ 835.547830][ T5928] usb 6-1: Manufacturer: syz [ 835.547846][ T5928] usb 6-1: SerialNumber: syz [ 835.627293][ T5928] usb 6-1: config 0 descriptor?? [ 835.653177][ T5928] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 835.855961][ T3304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.947531][ T5747] usb 6-1: USB disconnect, device number 7 [ 836.029423][ T3304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.098193][ T3304] bond0 (unregistering): Released all slaves [ 839.184904][ T9396] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 839.897817][ T9396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.939772][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 839.975215][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 839.975255][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 840.110561][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 840.110602][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 840.433775][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.671'. [ 840.517245][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 840.517296][ T36] audit: type=1326 audit(1792934198.322:114): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.517591][ T36] audit: type=1326 audit(1792934198.322:115): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.517670][ T36] audit: type=1326 audit(1792934198.332:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.518168][ T36] audit: type=1326 audit(1792934198.341:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.519694][ T36] audit: type=1326 audit(1792934198.341:118): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.520021][ T36] audit: type=1326 audit(1792934198.341:119): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.520403][ T36] audit: type=1326 audit(1792934198.341:120): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.521748][ T36] audit: type=1326 audit(1792934198.341:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.802765][ T36] audit: type=1326 audit(1792934198.341:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 840.803179][ T36] audit: type=1326 audit(1792934198.341:123): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9841 comm="syz.0.671" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 841.360313][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 841.360353][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 841.719444][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 841.719485][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.668'. [ 842.270459][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.323374][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.334897][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.367987][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.963911][ T9396] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 845.104263][ T9396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.158667][ T9396] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 846.362928][ T9396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.573322][ T9881] __nla_validate_parse: 135 callbacks suppressed [ 846.573360][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 846.635270][ T3304] hsr_slave_0: left promiscuous mode [ 846.671158][ T3304] hsr_slave_1: left promiscuous mode [ 846.674294][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.697131][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.170360][ T36] kauditd_printk_skb: 118 callbacks suppressed [ 847.171665][ T36] audit: type=1326 audit(1792934204.560:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 847.176337][ T36] audit: type=1326 audit(1792934204.569:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 847.236685][ T3304] hsr_slave_0: left promiscuous mode [ 847.242324][ T36] audit: type=1326 audit(1792934204.569:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01cd7f559 code=0x7ffc0000 [ 847.243530][ T36] audit: type=1326 audit(1792934204.569:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 847.247170][ T36] audit: type=1326 audit(1792934204.569:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 847.251645][ T36] audit: type=1326 audit(1792934204.569:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 847.265650][ T36] audit: type=1326 audit(1792934204.569:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 847.270474][ T36] audit: type=1326 audit(1792934204.569:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 847.273789][ T36] audit: type=1326 audit(1792934204.569:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 848.027702][ T36] audit: type=1326 audit(1792934204.569:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9882 comm="syz.5.685" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd01cd3fd8e code=0x7ffc0000 [ 848.144252][ T3304] hsr_slave_1: left promiscuous mode [ 848.157082][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.337229][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.905085][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 848.970828][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 849.728366][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 849.788778][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 850.119360][ T9396] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 850.191048][ T9396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.200651][ T9881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'. [ 850.404106][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.404438][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.404800][ T9557] bridge_slave_0: entered allmulticast mode [ 850.409561][ T9557] bridge_slave_0: entered promiscuous mode [ 850.654556][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.654773][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.655136][ T9557] bridge_slave_1: entered allmulticast mode [ 850.691040][ T9557] bridge_slave_1: entered promiscuous mode [ 850.720612][ T9900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.619454][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.664426][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.942494][ T9557] team0: Port device team_slave_0 added [ 852.117564][ T9557] team0: Port device team_slave_1 added [ 853.801218][ T4915] Bluetooth: hci1: unexpected event 0x04 length: 3 < 10 [ 854.533520][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.533541][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.533572][ T9557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.563050][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.563097][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.576217][ T9557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.943290][ T9925] netlink: 52 bytes leftover after parsing attributes in process `syz.5.693'. [ 855.012446][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.693'. [ 856.070707][ T9557] hsr_slave_0: entered promiscuous mode [ 856.072105][ T9557] hsr_slave_1: entered promiscuous mode [ 856.074794][ T9557] debugfs: 'hsr0' already exists in 'hsr' [ 856.074822][ T9557] Cannot create hsr debugfs directory [ 857.846479][ T37] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.108432][ T71] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.109998][ T7252] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.110054][ T7252] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.682982][ T9557] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 858.735297][ T9557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 858.754221][ T9557] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 858.791758][ T9949] jffs2: notice: (9949) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 858.834050][ T9952] netlink: 'syz.5.705': attribute type 4 has an invalid length. [ 858.834088][ T9952] netlink: 152 bytes leftover after parsing attributes in process `syz.5.705'. [ 858.965562][ T9557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.170094][ T4915] Bluetooth: hci4: unexpected event 0x04 length: 3 < 10 [ 860.017590][ T4915] Bluetooth: hci1: command 0x0c24 tx timeout [ 860.227767][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 860.337793][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 860.375939][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 860.395751][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 860.397576][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 860.501503][ T9952] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 860.502749][ T9557] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 860.707680][ T9557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.177641][ T5618] Bluetooth: hci3: command tx timeout [ 863.369270][ T9970] input: syz0 as /devices/virtual/input/input7 [ 863.692204][ T9557] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 863.749011][ T9557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.064225][ T9985] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 865.398789][ T5618] Bluetooth: hci3: command tx timeout [ 866.324525][T10020] comedi comedi0: pcl711: I/O base address not correctly aligned [ 866.349957][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 866.599495][T10023] [U] Œ/ûTÛEðãòNïhÝ>¹Ó´Oˆ]ê¿>ý&º+xä [ 866.603534][T10023] [U] ¸Êå½}ýcsLý¾µ–­63ûñº?gö¾?¢6ŒCw±“ƒâÉös´I’¾ær;&tIlytŸo˜ME#ÈR·_m*Ôf¢,À· [ 866.603550][T10023] [U] Sz˜Ô [ 866.603606][T10023] [U] µ7¶(aƒPú5üzkÑʈE:Ûæ^óZ“k”iX=…DÐEÛŸK£è‰½Ês9$›Ù}PkZÅ †KøÞWJÍĺhØx²Àäg-}¶ãÆóÔSpšÐ ÅŽbxÒúy·`fë [ 866.604085][T10022] [U] ã [ 866.803970][T10026] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 866.809060][T10026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.821095][T10026] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 867.278195][T10039] netlink: 52 bytes leftover after parsing attributes in process `syz.0.729'. [ 867.360000][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 867.654277][ T5618] Bluetooth: hci3: command tx timeout [ 868.393833][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.394221][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.434171][T10037] tc_dump_action: action bad kind [ 868.516794][ T9957] rxe_eth0 speed is unknown, defaulting to 1000 [ 868.593429][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.674444][ T9557] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.689662][T10046] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 868.862921][T10046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.890349][T10046] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 869.013949][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.015805][ T7255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.337956][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.338106][ T7255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.911421][ T5618] Bluetooth: hci3: command tx timeout [ 870.690166][ T9957] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.690401][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.690582][ T9957] bridge_slave_0: entered allmulticast mode [ 870.694048][ T9957] bridge_slave_0: entered promiscuous mode [ 870.698080][ T9957] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.698252][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.703329][ T9957] bridge_slave_1: entered allmulticast mode [ 870.708581][ T9957] bridge_slave_1: entered promiscuous mode [ 870.873941][ T3304] bridge_slave_1: left allmulticast mode [ 870.874090][ T3304] bridge_slave_1: left promiscuous mode [ 870.874433][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.040010][ T3304] bridge_slave_0: left allmulticast mode [ 871.040051][ T3304] bridge_slave_0: left promiscuous mode [ 871.040345][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.739752][ T3304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.828667][ T3304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.896526][ T3304] bond0 (unregistering): Released all slaves [ 871.957403][ T9957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.984753][ T9957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.123070][ T9957] team0: Port device team_slave_0 added [ 872.137950][ T9957] team0: Port device team_slave_1 added [ 872.300781][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.300805][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.300841][ T9957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.317093][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.317114][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.317160][ T9957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.415252][ T9557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.686752][ T9957] hsr_slave_0: entered promiscuous mode [ 872.709905][ T9957] hsr_slave_1: entered promiscuous mode [ 872.720701][ T9957] debugfs: 'hsr0' already exists in 'hsr' [ 872.720734][ T9957] Cannot create hsr debugfs directory [ 873.528686][ T3304] hsr_slave_0: left promiscuous mode [ 873.573371][ T3304] hsr_slave_1: left promiscuous mode [ 873.575645][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.626086][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.167277][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 874.232405][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 874.519934][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 875.197322][ T9557] veth0_vlan: entered promiscuous mode [ 875.215527][ T9557] veth1_vlan: entered promiscuous mode [ 875.348575][ T9557] veth0_macvtap: entered promiscuous mode [ 875.356777][ T9557] veth1_macvtap: entered promiscuous mode [ 875.650208][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.773012][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.204178][ T5859] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.204242][ T5859] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.204284][ T5859] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.204325][ T5859] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.268841][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.268862][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.697267][ T3304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.697292][ T3304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.489726][T10126] input: syz1 as /devices/virtual/input/input8 [ 880.695969][ T9957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 880.776962][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 880.786491][ T9957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 881.005501][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.023782][ T9957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 882.220622][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 882.225632][ T9957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 882.309208][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 883.023186][ T9957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.128005][ T9957] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.186134][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.186344][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.202015][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.202350][ T5859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.510306][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.546436][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.744204][ T8455] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 884.912103][ T8455] usb 6-1: unable to get BOS descriptor or descriptor too short [ 884.912167][ T8455] usb 6-1: New USB device found: idVendor=04b4, idProduct=0384, bcdDevice=0.40 [ 884.953216][ T8455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.953250][ T8455] usb 6-1: Product: syz [ 884.953266][ T8455] usb 6-1: Manufacturer: syz [ 884.953283][ T8455] usb 6-1: SerialNumber: syz [ 885.220513][ T8455] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 886.800283][ T8455] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 887.934698][ T8455] usb 6-1: can't set first interface for hiFace device. [ 887.934822][ T8455] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 888.002003][ T8455] usb 6-1: can't set first interface for hiFace device. [ 888.002051][ T8455] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 888.120865][ T8455] usb 6-1: can't set first interface for hiFace device. [ 888.120913][ T8455] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 888.226521][T10198] overlayfs: failed to resolve './dev/sda1': -2 [ 888.299902][ T8455] usb 6-1: USB disconnect, device number 8 [ 888.471024][T10094] udevd[10094]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 888.721064][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 891.183405][ T9957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.367160][T10250] xfrm1: entered allmulticast mode [ 892.399315][T10268] bond0: (slave bond_slave_1): Releasing backup interface [ 893.534174][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 893.639287][T10283] netlink: 60 bytes leftover after parsing attributes in process `syz.6.780'. [ 893.639312][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.780'. [ 893.639365][T10283] netlink: 60 bytes leftover after parsing attributes in process `syz.6.780'. [ 893.651181][ T9957] veth0_vlan: entered promiscuous mode [ 893.682087][ T9957] veth1_vlan: entered promiscuous mode [ 893.699290][ T10] usb 6-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.01 [ 893.702200][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.029338][ T9957] veth0_macvtap: entered promiscuous mode [ 894.128344][ T9957] veth1_macvtap: entered promiscuous mode [ 894.139980][ C0] dln2 6-1:1.0: size mismatch: handle 42c cmd 5631 echo a7c9 size 26047 actual 8 [ 894.284707][ T10] dln2 6-1:1.0: USB write failed: -110 [ 894.315603][ T10] dln2 6-1:1.0: failed to initialize hardware [ 894.341396][ T10] dln2 6-1:1.0: probe with driver dln2 failed with error -110 [ 894.419267][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.433281][ T10] usb 6-1: USB disconnect, device number 9 [ 894.493167][ T9957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.574797][ T7255] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.639738][ T7249] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.840660][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.6.787'. [ 895.485661][ T7254] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.487188][ T7254] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.703985][T10303] CIFS: Attempting to mount //127.0.0.1/share [ 895.805830][ T5859] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 895.805908][ T5859] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 895.899385][T10303] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:5445 failed: -ENODEV [ 896.290190][ T58] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 896.290246][ T58] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 896.290366][T10303] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:445 failed: -ENODEV [ 897.109081][T10303] CIFS: VFS: cifs_mount failed w/return code = -2 [ 897.524755][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.524782][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.079855][T10326] netlink: 'syz.5.797': attribute type 4 has an invalid length. [ 899.079882][T10326] netlink: 'syz.5.797': attribute type 7 has an invalid length. [ 899.527003][T10332] gadgetfs: bound to dummy_udc driver [ 899.666047][ T7253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.666072][ T7253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.821124][ T5928] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 899.821599][ C1] gadgetfs: connected [ 899.822436][ T5928] gadgetfs: disconnected [ 899.823235][T10334] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.058198][ C1] gadgetfs: connected [ 900.058531][ T5928] usb 2-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 900.059654][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.094432][ C1] gadgetfs: configuration #1 [ 900.321908][ T5928] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 900.363741][T10330] gadgetfs: suspended from state 3 [ 900.364703][T10330] gadgetfs: disconnected [ 901.055872][ C0] usbtouchscreen 2-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 901.080675][T10353] ÿ: renamed from bond_slave_0 (while UP) [ 901.411579][T10355] FAULT_INJECTION: forcing a failure. [ 901.411579][T10355] name failslab, interval 1, probability 5, space 0, times 9999 [ 901.411631][T10355] CPU: 0 UID: 0 PID: 10355 Comm: syz.5.811 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 901.411667][T10355] Tainted: [Y]=FORCED_BIND [ 901.411677][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 901.411693][T10355] Call Trace: [ 901.411702][T10355] [ 901.411715][T10355] dump_stack_lvl+0xe8/0x150 [ 901.411764][T10355] should_fail_ex+0x46b/0x600 [ 901.411811][T10355] should_failslab+0xa8/0x100 [ 901.411840][T10355] __kmalloc_noprof+0xf6/0x790 [ 901.411879][T10355] ? security_sk_alloc+0x52/0x360 [ 901.411903][T10355] ? security_sk_alloc+0x52/0x360 [ 901.411937][T10355] security_sk_alloc+0x52/0x360 [ 901.411967][T10355] sk_prot_alloc+0x101/0x210 [ 901.412006][T10355] ? sk_alloc+0x27/0x390 [ 901.412048][T10355] sk_alloc+0x3a/0x390 [ 901.412092][T10355] __netlink_create+0x62/0x260 [ 901.412126][T10355] ? __pfx_genl_release+0x10/0x10 [ 901.412151][T10355] netlink_create+0x3c6/0x5b0 [ 901.412189][T10355] ? __pfx_genl_unbind+0x10/0x10 [ 901.412210][T10355] ? __pfx_genl_bind+0x10/0x10 [ 901.412237][T10355] __sock_create+0x4b5/0xac0 [ 901.412281][T10355] __sys_socket+0xd6/0x1b0 [ 901.412321][T10355] __x64_sys_socket+0x7a/0x90 [ 901.412357][T10355] do_syscall_64+0x166/0x520 [ 901.412384][T10355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.412416][T10355] ? clear_bhb_loop+0x70/0xc0 [ 901.412458][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.412486][T10355] RIP: 0033:0x7fd01cd7f559 [ 901.412511][T10355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.412534][T10355] RSP: 002b:00007fd01afce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 901.412562][T10355] RAX: ffffffffffffffda RBX: 00007fd01d005fa0 RCX: 00007fd01cd7f559 [ 901.412582][T10355] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 901.412598][T10355] RBP: 00007fd01ce16b20 R08: 0000000000000000 R09: 0000000000000000 [ 901.412615][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.412630][T10355] R13: 00007fd01d006038 R14: 00007fd01d005fa0 R15: 00007ffe728b1b18 [ 901.412672][T10355] [ 902.538548][ T5928] usb 2-1: USB disconnect, device number 2 [ 905.399624][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.846362][T10404] FAULT_INJECTION: forcing a failure. [ 907.846362][T10404] name failslab, interval 1, probability 5, space 0, times 9998 [ 907.846407][T10404] CPU: 0 UID: 0 PID: 10404 Comm: syz.6.825 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 907.846440][T10404] Tainted: [Y]=FORCED_BIND [ 907.846449][T10404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 907.846463][T10404] Call Trace: [ 907.846472][T10404] [ 907.846482][T10404] dump_stack_lvl+0xe8/0x150 [ 907.846526][T10404] should_fail_ex+0x46b/0x600 [ 907.846567][T10404] should_failslab+0xa8/0x100 [ 907.846594][T10404] __kmalloc_noprof+0xf6/0x790 [ 907.846627][T10404] ? security_sk_alloc+0x52/0x360 [ 907.846649][T10404] ? security_sk_alloc+0x52/0x360 [ 907.846679][T10404] security_sk_alloc+0x52/0x360 [ 907.846706][T10404] sk_prot_alloc+0x101/0x210 [ 907.846741][T10404] ? sk_alloc+0x27/0x390 [ 907.846779][T10404] sk_alloc+0x3a/0x390 [ 907.846820][T10404] __netlink_create+0x62/0x260 [ 907.846849][T10404] ? __pfx_genl_release+0x10/0x10 [ 907.846877][T10404] netlink_create+0x3c6/0x5b0 [ 907.846911][T10404] ? __pfx_genl_unbind+0x10/0x10 [ 907.846932][T10404] ? __pfx_genl_bind+0x10/0x10 [ 907.846957][T10404] __sock_create+0x4b5/0xac0 [ 907.846997][T10404] __sys_socket+0xd6/0x1b0 [ 907.847063][T10404] __x64_sys_socket+0x7a/0x90 [ 907.847096][T10404] do_syscall_64+0x166/0x520 [ 907.847121][T10404] ? trace_irq_disable+0x3b/0x140 [ 907.847145][T10404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.847169][T10404] ? clear_bhb_loop+0x70/0xc0 [ 907.847197][T10404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.847221][T10404] RIP: 0033:0x7fa2e71af559 [ 907.847243][T10404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.847263][T10404] RSP: 002b:00007fa2e5406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 907.847289][T10404] RAX: ffffffffffffffda RBX: 00007fa2e7435fa0 RCX: 00007fa2e71af559 [ 907.847307][T10404] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 907.847322][T10404] RBP: 00007fa2e7246b20 R08: 0000000000000000 R09: 0000000000000000 [ 907.847338][T10404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.847352][T10404] R13: 00007fa2e7436038 R14: 00007fa2e7435fa0 R15: 00007ffdeba9ab88 [ 907.847389][T10404] [ 907.870774][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.826'. [ 911.507439][T10444] FAULT_INJECTION: forcing a failure. [ 911.507439][T10444] name failslab, interval 1, probability 5, space 0, times 9997 [ 911.507484][T10444] CPU: 1 UID: 0 PID: 10444 Comm: syz.6.840 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 911.507517][T10444] Tainted: [Y]=FORCED_BIND [ 911.507526][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 911.507541][T10444] Call Trace: [ 911.507550][T10444] [ 911.507560][T10444] dump_stack_lvl+0xe8/0x150 [ 911.507602][T10444] should_fail_ex+0x46b/0x600 [ 911.507643][T10444] should_failslab+0xa8/0x100 [ 911.507669][T10444] __kmalloc_noprof+0xf6/0x790 [ 911.507703][T10444] ? security_sk_alloc+0x52/0x360 [ 911.507724][T10444] ? security_sk_alloc+0x52/0x360 [ 911.507752][T10444] security_sk_alloc+0x52/0x360 [ 911.507779][T10444] sk_prot_alloc+0x101/0x210 [ 911.507812][T10444] ? sk_alloc+0x27/0x390 [ 911.507850][T10444] sk_alloc+0x3a/0x390 [ 911.507889][T10444] __netlink_create+0x62/0x260 [ 911.507918][T10444] ? __pfx_genl_release+0x10/0x10 [ 911.507941][T10444] netlink_create+0x3c6/0x5b0 [ 911.507974][T10444] ? __pfx_genl_unbind+0x10/0x10 [ 911.507993][T10444] ? __pfx_genl_bind+0x10/0x10 [ 911.508018][T10444] __sock_create+0x4b5/0xac0 [ 911.508057][T10444] __sys_socket+0xd6/0x1b0 [ 911.508091][T10444] __x64_sys_socket+0x7a/0x90 [ 911.508124][T10444] do_syscall_64+0x166/0x520 [ 911.508148][T10444] ? trace_irq_disable+0x3b/0x140 [ 911.508171][T10444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.508195][T10444] ? clear_bhb_loop+0x70/0xc0 [ 911.508224][T10444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.508247][T10444] RIP: 0033:0x7fa2e71af559 [ 911.508269][T10444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.508289][T10444] RSP: 002b:00007fa2e5406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 911.508323][T10444] RAX: ffffffffffffffda RBX: 00007fa2e7435fa0 RCX: 00007fa2e71af559 [ 911.508341][T10444] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 911.508355][T10444] RBP: 00007fa2e7246b20 R08: 0000000000000000 R09: 0000000000000000 [ 911.508370][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.508385][T10444] R13: 00007fa2e7436038 R14: 00007fa2e7435fa0 R15: 00007ffdeba9ab88 [ 911.508422][T10444] [ 920.529459][T10519] tipc: Started in network mode [ 920.529497][T10519] tipc: Node identity ac14142a, cluster identity 4711 [ 920.622477][T10519] tipc: Enabled bearer , priority 10 [ 921.962061][ T35] tipc: Node number set to 2886997034 [ 934.841673][T10661] gadgetfs: bound to dummy_udc driver [ 935.128206][T10672] netlink: 'syz.5.920': attribute type 3 has an invalid length. [ 935.236296][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.921'. [ 935.254036][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.921'. [ 939.894193][T10714] IPv6: Can't replace route, no match found [ 941.249594][T10720] tipc: MTU too low for tipc bearer [ 941.857464][T10729] device-mapper: table: 248:1: mirror: Device lookup failure (-ENOENT) [ 941.857524][T10729] device-mapper: ioctl: error adding target to table [ 942.158263][T10752] xt_socket: unknown flags 0xfa [ 942.365246][T10755] gadgetfs: bound to dummy_udc driver [ 943.348958][ T5748] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 943.349251][ C0] gadgetfs: connected [ 943.349476][ T5748] gadgetfs: disconnected [ 943.432624][T10749] gadgetfs: suspended from state 2 [ 943.715067][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.7.955'. [ 943.734718][ T5748] usb 2-1: device not accepting address 3, error -71 [ 945.444881][T10779] tipc: Started in network mode [ 945.444916][T10779] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 945.445187][T10779] tipc: Enabled bearer , priority 0 [ 945.796994][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 945.797019][ T36] audit: type=1326 audit(1792934295.575:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10786 comm="syz.7.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c94dff559 code=0x7ffc0000 [ 945.797960][ T36] audit: type=1326 audit(1792934295.584:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10786 comm="syz.7.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c94dff559 code=0x7ffc0000 [ 945.870420][ T36] audit: type=1326 audit(1792934295.640:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10786 comm="syz.7.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2c94dff559 code=0x7ffc0000 [ 945.876964][ T36] audit: type=1326 audit(1792934295.649:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10786 comm="syz.7.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c94dff559 code=0x7ffc0000 [ 945.940564][ T36] audit: type=1326 audit(1792934295.649:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10786 comm="syz.7.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c94dff559 code=0x7ffc0000 [ 945.940622][ T36] audit: type=1326 audit(1792934295.713:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10786 comm="syz.7.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f2c94dff559 code=0x7ffc0000 [ 945.940737][ T36] audit: type=1326 audit(1792934295.713:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10786 comm="syz.7.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c94dff559 code=0x7ffc0000 [ 945.940785][ T36] audit: type=1326 audit(1792934295.713:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10786 comm="syz.7.964" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c94dff559 code=0x7ffc0000 [ 946.541069][ T5747] tipc: Node number set to 11578026 [ 949.804917][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 949.831708][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 951.444011][T10840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.983'. [ 951.624635][T10844] gadgetfs: bound to dummy_udc driver [ 952.399460][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 956.563468][T10883] gadgetfs: bound to dummy_udc driver [ 961.364028][T10905] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1003'. [ 961.483314][T10907] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 963.502753][ T5748] libceph: connect (1)127.0.0.1:6789 error -101 [ 963.503589][ T5748] libceph: mon0 (1)127.0.0.1:6789 connect error [ 963.517286][ T5748] libceph: connect (1)127.0.0.1:6789 error -101 [ 963.517719][ T5748] libceph: mon0 (1)127.0.0.1:6789 connect error [ 963.799619][ T5748] libceph: connect (1)127.0.0.1:6789 error -101 [ 963.799856][ T5748] libceph: mon0 (1)127.0.0.1:6789 connect error [ 964.247042][T10929] ceph: No mds server is up or the cluster is laggy [ 964.397635][ T5748] libceph: connect (1)127.0.0.1:6789 error -101 [ 964.397859][ T5748] libceph: mon0 (1)127.0.0.1:6789 connect error [ 967.292460][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 967.825277][T10982] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1030'. [ 969.253264][T10993] Cannot find del_set index 14804 as target [ 969.703774][T11009] team0: entered allmulticast mode [ 969.703800][T11009] team_slave_0: entered allmulticast mode [ 969.703828][T11009] team_slave_1: entered allmulticast mode [ 969.704638][T11009] team0: Cannot enslave team device to itself [ 969.751129][ T5607] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 970.153409][ T5607] usb 7-1: New USB device found: idVendor=110a, idProduct=1250, bcdDevice=1.00 [ 970.155029][ T5607] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 970.155141][ T5607] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 970.155169][ T5607] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.008564][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.008597][ T5607] usb 7-1: Product: syz [ 971.008614][ T5607] usb 7-1: Manufacturer: syz [ 971.008698][ T5607] usb 7-1: SerialNumber: syz [ 971.327941][T10997] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 971.328332][T10997] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 971.799818][ T5607] mxuport 7-1:1.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 972.848791][ T5607] mxuport 7-1:1.0: probe with driver mxuport failed with error -5 [ 973.934346][ T5607] usb 7-1: USB disconnect, device number 2 [ 978.352798][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1065'. [ 984.350248][T11130] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 984.350509][T11130] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 990.201090][T11160] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1095'. [ 992.144116][T11184] device-mapper: table: 248:3: multipath: not enough path parameters (-EINVAL) [ 992.144145][T11184] device-mapper: ioctl: error adding target to table [ 993.166954][T11190] ubi0: attaching mtd0 [ 993.169771][T11190] ubi0: scanning is finished [ 993.169826][T11190] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 993.504626][T11190] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 997.917248][ T9855] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 998.144182][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 998.985763][ T9855] usb 8-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 998.987341][ T9855] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 998.987370][ T9855] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 998.987392][ T9855] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 998.987415][ T9855] usb 8-1: config 220 has no interface number 2 [ 998.987487][ T9855] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 998.987518][ T9855] usb 8-1: config 220 interface 0 has no altsetting 0 [ 998.987539][ T9855] usb 8-1: config 220 interface 76 has no altsetting 0 [ 998.987560][ T9855] usb 8-1: config 220 interface 1 has no altsetting 0 [ 999.004959][ T5748] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 999.083650][ T9855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.083682][ T9855] usb 8-1: Product: syz [ 999.083698][ T9855] usb 8-1: Manufacturer: syz [ 999.083727][ T9855] usb 8-1: SerialNumber: syz [ 1000.849107][ T5748] usb 6-1: device descriptor read/all, error -71 [ 1000.850040][ T9855] uvcvideo 8-1:220.0: probe with driver uvcvideo failed with error -22 [ 1001.145942][ T9855] usb 8-1: USB disconnect, device number 2 [ 1001.326488][T11260] vlan0: entered promiscuous mode [ 1001.398160][T11263] tipc: Enabling of bearer rejected, failed to enable media [ 1001.674034][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'. [ 1001.674063][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 1001.674091][T11270] netlink: 'syz.5.1129': attribute type 19 has an invalid length. [ 1001.674108][T11270] netlink: 'syz.5.1129': attribute type 20 has an invalid length. [ 1003.394377][T11279] ubi0: attaching mtd0 [ 1003.397181][T11279] ubi0: scanning is finished [ 1003.397234][T11279] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1004.084899][ T5858] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.242713][ T7253] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.244840][ T7253] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.244889][ T7253] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.548272][T11279] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1009.372406][T11342] device-mapper: table: 248:4: verity: Hash device lookup failed (-ENOENT) [ 1009.372436][T11342] device-mapper: ioctl: error adding target to table [ 1010.293549][T11358] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1010.293702][T11358] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1010.496819][ T5607] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1011.425537][ T5607] usb 6-1: New USB device found: idVendor=0c70, idProduct=f014, bcdDevice=0.00 [ 1011.428514][ T5607] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1011.428553][ T5607] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1011.428589][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.438100][ T5607] usb 6-1: config 0 descriptor?? [ 1012.955440][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 1012.956583][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 1014.302115][T11391] tipc: Started in network mode [ 1014.302150][T11391] tipc: Node identity ac141441, cluster identity 4711 [ 1014.314598][T11391] tipc: Enabled bearer , priority 4 [ 1015.222661][T11395] xt_HMARK: proto mask must be zero with L3 mode [ 1015.733557][T11388] team0: Device ipip0 is up. Set it down before adding it as a team port [ 1015.828586][T11406] Invalid ELF header magic: != ELF [ 1016.175386][ T5748] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1017.130083][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1017.161009][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1017.161182][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1017.260170][ T9855] tipc: Node number set to 2886997057 [ 1017.301268][ T5748] usb 7-1: Using ep0 maxpacket: 16 [ 1017.302154][ T5748] usb 7-1: New USB device found: idVendor=046d, idProduct=c534, bcdDevice=0.00 [ 1017.304905][ T5748] usb 7-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1017.304939][ T5748] usb 7-1: config 0 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1017.304966][ T5748] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1017.305001][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.456396][ T5748] usb 7-1: config 0 descriptor?? [ 1017.489580][ T35] usb 8-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 1017.496512][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1017.496645][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.969767][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.969817][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.969853][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.969887][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.969922][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.969956][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.969990][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.970025][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.970059][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1017.970094][ T5748] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x0 [ 1018.185824][ T9855] usb 7-1: USB disconnect, device number 3 [ 1018.415085][ T5607] aquacomputer_d5next 0003:0C70:F014.0001: hidraw0: USB HID v80.00 Joystick [HID 0c70:f014] on usb-dummy_hcd.5-1/input0 [ 1020.217404][ T9855] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1020.382149][ T9855] usb 7-1: Using ep0 maxpacket: 16 [ 1020.386658][ T9855] usb 7-1: New USB device found: idVendor=6161, idProduct=4d15, bcdDevice=0.00 [ 1020.388198][ T9855] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1020.388221][ T9855] usb 7-1: config 0 has no interface number 0 [ 1020.388262][ T9855] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.388288][ T9855] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.388324][ T9855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.507789][T11445] device-mapper: table: 248:5: crypt: Device lookup failed (-ENOENT) [ 1020.507817][T11445] device-mapper: ioctl: error adding target to table [ 1020.604314][ T9855] usb 7-1: config 0 descriptor?? [ 1020.785495][ T35] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 1020.791676][ T5607] usb 6-1: USB disconnect, device number 12 [ 1022.239390][ T4915] Bluetooth: hci3: failed to read key size for handle 0 [ 1022.239544][ T4915] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1022.336176][ T9855] usb 7-1: USB disconnect, device number 4 [ 1022.680824][ T35] wwan wwan0: port wwan0qmi0 attached [ 1022.821049][T11471] jffs2: notice: (11471) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1024.115667][T11474] overlayfs: failed to clone lowerpath [ 1024.418702][ T4915] Bluetooth: hci3: command 0x0406 tx timeout [ 1024.521537][ T35] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.7-1, WWAN/QMI device, 6a:7f:11:6f:22:99 [ 1024.551352][ T35] usb 8-1: USB disconnect, device number 3 [ 1025.393637][ T35] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.7-1, WWAN/QMI device [ 1026.810345][ T4915] Bluetooth: hci3: command 0x0406 tx timeout [ 1027.904166][ T35] wwan wwan0: port wwan0qmi0 disconnected [ 1028.417779][T11537] ubi8: attaching mtd0 [ 1029.678057][T11537] ubi8: scanning is finished [ 1029.678116][T11537] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 1030.614159][ T5618] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 1030.997808][T11537] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1033.492352][ T5748] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1033.631496][T11610] device-mapper: table: 248:6: verity: Invalid number of feature args (-EINVAL) [ 1033.631523][T11610] device-mapper: ioctl: error adding target to table [ 1033.650772][ T35] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1033.688970][ T5748] usb 8-1: Using ep0 maxpacket: 16 [ 1033.689844][ T5748] usb 8-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 1033.691367][ T5748] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.691429][ T5748] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1033.691465][ T5748] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1033.691491][ T5748] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1033.691512][ T5748] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.691559][ T5748] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.803208][ T5748] usb 8-1: config 0 descriptor?? [ 1033.865849][ T35] usb 7-1: New USB device found: idVendor=056a, idProduct=0016, bcdDevice=0.00 [ 1033.868574][ T35] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.868697][ T35] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1033.868738][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.078104][T11616] gadgetfs: bound to dummy_udc driver [ 1034.987003][ T35] usb 7-1: config 0 descriptor?? [ 1035.345275][T11621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1247'. [ 1035.435112][ T5748] rc_core: IR keymap rc-hauppauge not found [ 1035.435210][ T5748] Registered IR keymap rc-empty [ 1035.436590][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1035.454288][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1035.517963][ T5748] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1035.559069][ T5748] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input13 [ 1035.945472][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1035.963555][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1035.985460][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1036.976748][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1037.002028][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1037.028294][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1037.057622][ T5747] usb 7-1: USB disconnect, device number 5 [ 1037.093872][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1037.114056][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1037.137430][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1037.155690][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1037.177335][ T5748] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1037.210734][ T5748] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 1037.210762][ T5748] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1037.298105][ T5748] usb 8-1: USB disconnect, device number 4 [ 1040.330986][ T5746] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1041.165498][ T5746] usb 7-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1041.167984][ T5746] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.168012][ T5746] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1041.176019][ T5746] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1041.213612][ T5746] usb 7-1: Product: syz [ 1041.213785][ T5746] usb 7-1: Manufacturer: syz [ 1041.404299][ T5746] uvcvideo 7-1:1.0: Found multiple Units with ID 1 [ 1041.742596][ T5746] uvcvideo 7-1:1.0: Found UVC 71.01 device syz (225a:e1d4) [ 1041.769211][ T5746] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 1041.988351][ T5748] usb 7-1: USB disconnect, device number 6 [ 1042.375221][T11693] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1273'. [ 1042.375247][T11693] tipc: Invalid UDP bearer configuration [ 1042.375298][T11693] tipc: Enabling of bearer rejected, failed to enable media [ 1045.204872][T11741] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1046.490575][ T5748] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1046.780284][ T5748] usb 6-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1046.787398][ T5748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.787436][ T5748] usb 6-1: Product: syz [ 1046.787453][ T5748] usb 6-1: Manufacturer: syz [ 1046.787469][ T5748] usb 6-1: SerialNumber: syz [ 1046.831811][ T5748] usb 6-1: config 0 descriptor?? [ 1046.857512][ T5748] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1046.952281][ T5748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1046.964339][ T5748] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1046.964491][ T5748] usb 6-1: media controller created [ 1047.000796][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1047.297101][ T5748] DVB: Unable to find symbol mt352_attach() [ 1047.360112][T11757] vlan2: entered promiscuous mode [ 1047.361318][T11757] macvtap0: entered promiscuous mode [ 1048.081985][T11744] dvb-usb: bulk message failed: -22 (7/0) [ 1048.307957][ T5748] DVB: Unable to find symbol nxt6000_attach() [ 1048.308053][ T5748] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1048.321732][ T5748] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 1048.413642][ T5748] dvb-usb: schedule remote query interval to 1000 msecs. [ 1048.413671][ T5748] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1048.413885][ T5748] dvb-usb: bulk message failed: -22 (7/0) [ 1048.413906][ T5748] dvb-usb: bulk message failed: -22 (7/0) [ 1048.506932][ T5748] usb 6-1: USB disconnect, device number 13 [ 1049.121002][ T5928] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1049.240587][ T5748] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1049.326336][ T5928] usb 7-1: Using ep0 maxpacket: 8 [ 1049.327674][ T5928] usb 7-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1049.373362][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.373512][ T5928] usb 7-1: Product: syz [ 1049.373530][ T5928] usb 7-1: Manufacturer: syz [ 1049.373547][ T5928] usb 7-1: SerialNumber: syz [ 1049.545593][ T5928] usb 7-1: config 0 descriptor?? [ 1050.110463][ T5928] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1050.111002][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1050.141513][ T5928] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1050.310481][ T5607] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1050.836274][ T5928] usb 7-1: USB disconnect, device number 7 [ 1050.984434][ T5607] usb 6-1: Using ep0 maxpacket: 32 [ 1050.986203][ T5607] usb 6-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 1050.989212][ T5607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.989244][ T5607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.989368][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.274573][ T5607] usb 6-1: config 0 descriptor?? [ 1051.496261][T11800] tipc: Started in network mode [ 1051.496385][T11800] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 1051.496615][T11800] tipc: Enabling of bearer rejected, failed to enable media [ 1051.498995][T11801] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1311'. [ 1051.834726][ T5607] hid_parser_main: 14 callbacks suppressed [ 1051.834753][ T5607] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 1051.834786][ T5607] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 1052.201954][ T5607] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 1052.203226][ T5607] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -71 [ 1053.025195][ T5607] usb 6-1: USB disconnect, device number 14 [ 1053.464869][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 1053.589456][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1325'. [ 1053.687887][T11832] ip6gre1: entered promiscuous mode [ 1053.687917][T11832] ip6gre1: entered allmulticast mode [ 1053.831969][T11837] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1326'. [ 1054.335229][T11854] overlayfs: failed to clone lowerpath [ 1054.412391][ T5747] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1054.549133][ T4915] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1054.573411][ T5747] usb 8-1: New USB device found: idVendor=046d, idProduct=0a07, bcdDevice=0.00 [ 1054.575111][ T5747] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.575147][ T5747] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.575178][ T5747] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1054.575215][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.662224][ T5747] usb 8-1: config 0 descriptor?? [ 1055.814882][ T5747] lg-g15 0003:046D:0A07.0006: unknown main item tag 0x3 [ 1055.834155][ T5747] lg-g15 0003:046D:0A07.0006: hidraw0: USB HID v11.06 Device [HID 046d:0a07] on usb-dummy_hcd.7-1/input0 [ 1056.061336][ T5747] usb 8-1: USB disconnect, device number 5 [ 1056.136315][T11870] fido_id[11870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1057.284319][T11871] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1057.284440][T11871] block device autoloading is deprecated and will be removed. [ 1059.304634][T11919] base or size exceeds the MTRR width [ 1065.352406][T11968] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1076.118305][ T36] audit: type=1326 audit(1792934415.812:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 1076.120630][ T36] audit: type=1326 audit(1792934415.830:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 1076.783580][ T36] audit: type=1326 audit(1792934416.439:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 1076.788951][ T36] audit: type=1326 audit(1792934416.439:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 1076.793132][ T36] audit: type=1326 audit(1792934416.439:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 1076.848794][ T36] audit: type=1326 audit(1792934416.504:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 1076.853486][ T36] audit: type=1326 audit(1792934416.504:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc37869f2c2 code=0x7ffc0000 [ 1078.996148][ T36] audit: type=1326 audit(1792934418.479:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc37869f357 code=0x7ffc0000 [ 1078.996200][ T36] audit: type=1326 audit(1792934418.479:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 1078.996240][ T36] audit: type=1326 audit(1792934418.479:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12065 comm="syz.0.1408" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37869f559 code=0x7ffc0000 [ 1079.595356][T12102] ubi0: attaching mtd0 [ 1079.598301][T12102] ubi0: scanning is finished [ 1079.598356][T12102] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1080.849371][T12105] tipc: Resetting bearer [ 1080.853757][T12105] tipc: Resetting bearer [ 1081.614682][T12110] netlink: 'syz.1.1419': attribute type 16 has an invalid length. [ 1081.614707][T12110] netlink: 'syz.1.1419': attribute type 17 has an invalid length. [ 1081.816622][ T7259] tipc: Resetting bearer [ 1081.887240][T12110] tipc: Resetting bearer [ 1081.919537][T12110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.919766][T12110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.924291][T12110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.924443][T12110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.994567][T12102] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1082.024550][T12110] veth0_vlan: left promiscuous mode [ 1082.028827][T12110] veth0_vlan: entered promiscuous mode [ 1082.515461][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1427'. [ 1083.526337][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1083.526517][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1088.828452][T12182] ubi0: attaching mtd0 [ 1088.831150][T12182] ubi0: scanning is finished [ 1088.831201][T12182] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1089.407839][T12182] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1090.949518][T12201] device-mapper: table: 248:7: integrity: Invalid internal hash (-ENOENT) [ 1090.949548][T12201] device-mapper: ioctl: error adding target to table [ 1095.797115][T12285] jffs2: notice: (12285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1095.879541][T12287] program syz.5.1489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1095.968358][T12289] vlan2: entered promiscuous mode [ 1095.968385][T12289] bond0: entered promiscuous mode [ 1095.968467][T12289] bond_slave_0: entered promiscuous mode [ 1095.968905][T12289] bond_slave_1: entered promiscuous mode [ 1097.338418][ T5747] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1097.502342][ T5747] usb 6-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1097.504580][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.540745][ T5747] usb 6-1: config 0 descriptor?? [ 1097.587209][ T5747] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1097.635953][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1500'. [ 1097.718179][ T8455] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1097.802778][ T5747] gp8psk: usb in 128 operation failed. [ 1097.881052][ T8455] usb 7-1: New USB device found: idVendor=258a, idProduct=6a88, bcdDevice=0.00 [ 1097.883789][ T8455] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.883893][ T8455] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1097.883925][ T8455] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1097.883961][ T8455] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.989093][ T8455] usb 7-1: config 0 descriptor?? [ 1098.024710][ T5747] gp8psk: FW Version = 180.125.208 (0xb47dd0) Build 2098/211/118 [ 1098.146011][T12318] sch_fq: defrate 4294967291 ignored. [ 1098.245025][ T5747] gp8psk: usb in 149 operation failed. [ 1098.245300][ T5747] gp8psk: failed to get FPGA version [ 1098.277063][ T5747] gp8psk: usb in 138 operation failed. [ 1098.277090][ T5747] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1098.277196][ T5747] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1098.331056][ T5747] usb 6-1: USB disconnect, device number 15 [ 1098.536909][ T8455] itetech 0003:258A:6A88.0007: unknown main item tag 0x1 [ 1098.537005][ T8455] itetech 0003:258A:6A88.0007: unknown main item tag 0x6 [ 1098.537086][ T8455] itetech 0003:258A:6A88.0007: ignoring exceeding usage max [ 1098.591124][ T8455] itetech 0003:258A:6A88.0007: hidraw0: USB HID v0.01 Device [HID 258a:6a88] on usb-dummy_hcd.6-1/input0 [ 1098.768197][ T5747] usb 7-1: USB disconnect, device number 8 [ 1098.824823][T12323] fido_id[12323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:258A:6A88.0007/report_descriptor': No such device [ 1098.929069][ T4915] Bluetooth: hci4: unexpected event for opcode 0x0803 [ 1101.683483][ T35] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1103.168234][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 1103.170735][ T35] usb 6-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1103.201072][ T35] usb 6-1: config 32 has an invalid interface number: 85 but max is 0 [ 1103.201108][ T35] usb 6-1: config 32 has no interface number 0 [ 1103.241782][ T35] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.242504][ T35] usb 6-1: config 32 interface 85 has no altsetting 0 [ 1103.269246][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.269275][ T35] usb 6-1: Product: syz [ 1103.269709][ T35] usb 6-1: Manufacturer: syz [ 1103.269729][ T35] usb 6-1: SerialNumber: syz [ 1104.676969][ T35] usb 6-1: can't set config #32, error -71 [ 1104.755590][ T35] usb 6-1: USB disconnect, device number 16 [ 1105.807889][T12380] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1105.970445][T12378] netlink: 232 bytes leftover after parsing attributes in process `syz.7.1521'. [ 1106.354565][ T35] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1106.528001][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 1106.530067][ T35] usb 6-1: New USB device found: idVendor=1b96, idProduct=0006, bcdDevice=0.00 [ 1106.533089][ T35] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1106.533563][ T35] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1106.533597][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1106.533634][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.636058][ T35] usb 6-1: config 0 descriptor?? [ 1106.781871][T12386] tap0: tun_chr_ioctl cmd 2147767511 [ 1108.392970][ T35] input: HID 1b96:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1B96:0006.0008/input/input19 [ 1111.355032][ T35] ntrig 0003:1B96:0006.0008: input,hidraw0: USB HID v0.53 Joystick [HID 1b96:0006] on usb-dummy_hcd.5-1/input0 [ 1111.444287][ T35] usb 6-1: USB disconnect, device number 17 [ 1111.702048][ T5618] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1111.702089][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: kworker/u9:5 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 1111.702125][ T5618] Tainted: [Y]=FORCED_BIND [ 1111.702134][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1111.702150][ T5618] Workqueue: hci4 hci_rx_work [ 1111.702179][ T5618] Call Trace: [ 1111.702189][ T5618] [ 1111.702200][ T5618] dump_stack_lvl+0xe8/0x150 [ 1111.702242][ T5618] sysfs_create_dir_ns+0x271/0x2a0 [ 1111.702278][ T5618] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1111.702310][ T5618] ? rt_spin_unlock+0x165/0x200 [ 1111.702337][ T5618] kobject_add_internal+0x62c/0xce0 [ 1111.702371][ T5618] kobject_add+0x163/0x240 [ 1111.702399][ T5618] ? rt_spin_unlock+0x159/0x200 [ 1111.702438][ T5618] ? __pfx_kobject_add+0x10/0x10 [ 1111.702476][ T5618] ? get_device_parent+0x370/0x3a0 [ 1111.702509][ T5618] device_add+0x3fa/0xb80 [ 1111.702539][ T5618] hci_conn_add_sysfs+0xd5/0x210 [ 1111.702568][ T5618] le_conn_complete_evt+0x1094/0x1780 [ 1111.702613][ T5618] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1111.702651][ T5618] ? rt_mutex_slowunlock+0x219/0x460 [ 1111.702684][ T5618] ? skb_pull_data+0xf0/0x200 [ 1111.702716][ T5618] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1111.702749][ T5618] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1111.702785][ T5618] hci_event_packet+0x67a/0xf10 [ 1111.702808][ T5618] ? reacquire_held_locks+0x117/0x1a0 [ 1111.702840][ T5618] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1111.702867][ T5618] ? __pfx_hci_event_packet+0x10/0x10 [ 1111.702890][ T5618] ? rt_spin_unlock+0x159/0x200 [ 1111.702944][ T5618] ? hci_send_to_monitor+0xdf/0x600 [ 1111.702983][ T5618] hci_rx_work+0x2b4/0x1110 [ 1111.703017][ T5618] ? process_scheduled_works+0x97a/0x1630 [ 1111.703053][ T5618] process_scheduled_works+0xc3d/0x1630 [ 1111.703125][ T5618] ? __pfx_process_scheduled_works+0x10/0x10 [ 1111.703169][ T5618] ? assign_work+0x3cf/0x5d0 [ 1111.703210][ T5618] worker_thread+0xa47/0xfb0 [ 1111.703262][ T5618] ? __kthread_parkme+0x71/0x1f0 [ 1111.703298][ T5618] kthread+0x38b/0x470 [ 1111.703325][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 1111.703359][ T5618] ? __pfx_kthread+0x10/0x10 [ 1111.703388][ T5618] ret_from_fork+0x514/0xb70 [ 1111.703420][ T5618] ? __pfx_ret_from_fork+0x10/0x10 [ 1111.703447][ T5618] ? __switch_to+0xc78/0x1410 [ 1111.703474][ T5618] ? __pfx_kthread+0x10/0x10 [ 1111.703502][ T5618] ret_from_fork_asm+0x1a/0x30 [ 1111.703548][ T5618] [ 1111.703706][ T5618] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1111.703817][ T5618] Bluetooth: hci4: failed to register connection device [ 1111.954448][T12410] fido_id[12410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1112.759102][T12429] overlayfs: failed to clone upperpath [ 1113.979007][ T4915] Bluetooth: hci4: command 0x0406 tx timeout [ 1115.997995][T12452] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1547'. [ 1116.357113][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 1117.810039][ T35] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1118.709627][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 1118.712451][ T35] usb 6-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1118.741693][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.741725][ T35] usb 6-1: Product: syz [ 1118.741743][ T35] usb 6-1: Manufacturer: syz [ 1118.741759][ T35] usb 6-1: SerialNumber: syz [ 1118.832263][ T35] usb 6-1: config 0 descriptor?? [ 1120.470353][ T35] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1122.786457][T12517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1123.147991][ T8455] usb 6-1: USB disconnect, device number 18 [ 1123.380108][T12533] netlink: 'syz.0.1579': attribute type 4 has an invalid length. [ 1124.128556][ T5748] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1124.253178][T12552] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1124.292713][ T5748] usb 6-1: New USB device found: idVendor=0b05, idProduct=1abe, bcdDevice=0.00 [ 1124.294734][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.294766][ T5748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.294805][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.341403][ T5748] usb 6-1: config 0 descriptor?? [ 1124.865606][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865651][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865683][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865714][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865744][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865774][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865804][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865834][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865864][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.865893][ T5748] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0 [ 1124.874950][ T5748] asus 0003:0B05:1ABE.0009: unexpected long global item [ 1124.885013][ T5748] asus 0003:0B05:1ABE.0009: Asus hid parse failed: -22 [ 1124.885227][ T5748] asus 0003:0B05:1ABE.0009: probe with driver asus failed with error -22 [ 1126.333032][ T5748] usb 6-1: USB disconnect, device number 19 [ 1126.864565][ T5748] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1127.045120][ T5748] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1127.050631][ T5748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.050690][ T5748] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1127.050715][ T5748] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1127.050741][ T5748] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.050787][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.976690][ T5748] gud 6-1:1.0: Failed to add properties (error=-5) [ 1127.976738][ T5748] gud 6-1:1.0: probe with driver gud failed with error -5 [ 1128.199032][ T5748] usb 6-1: USB disconnect, device number 20 [ 1130.219340][ T5748] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1130.244305][T12624] fuse: fd is not a fuse device [ 1130.284252][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 1130.399421][ T5748] usb 6-1: not running at top speed; connect to a high speed hub [ 1130.399467][ T5748] usb 6-1: New USB device found: idVendor=0424, idProduct=5534, bcdDevice=1.00 [ 1130.412781][ T5748] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1130.412819][ T5748] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.412871][ T5748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.480858][ T5748] hub 6-1:1.0: USB hub found [ 1130.748818][ T5748] hub 6-1:1.0: config failed, can't read hub descriptor (err -22) [ 1130.842105][ T5748] usb 6-1: USB disconnect, device number 21 [ 1132.648102][ T5928] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1133.053971][ T5928] usb 8-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 1133.088710][ T5928] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.089189][ T5928] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.089216][ T5928] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1133.089242][ T5928] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1133.107579][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.108485][ T5928] usb 8-1: Product: syz [ 1133.108541][ T5928] usb 8-1: Manufacturer: syz [ 1133.109248][ T5928] usb 8-1: SerialNumber: syz [ 1133.251402][ T5928] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1133.251423][ T5928] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1133.253000][ T5928] usbserial_generic 8-1:1.0: generic converter detected [ 1134.544427][ T5928] usb 8-1: generic converter now attached to ttyUSB0 [ 1134.555124][ T5928] usb 8-1: USB disconnect, device number 6 [ 1134.904212][ T5928] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1134.909979][ T5928] usbserial_generic 8-1:1.0: device disconnected [ 1135.313034][ T8455] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1136.137682][ T8455] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 1136.139312][ T8455] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.139369][ T8455] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1136.139399][ T8455] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1136.139424][ T8455] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1136.139450][ T8455] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1136.139495][ T8455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.177789][T12673] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1136.256247][ T8455] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1136.264167][ T8455] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1136.264268][ T8455] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1136.398596][ T8455] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1136.404617][ T8455] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1136.404715][ T8455] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1136.483715][ T8455] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1136.710227][T12688] i2c i2c-0: new_device: Invalid device name [ 1136.958299][ T8455] usb 6-1: USB disconnect, device number 22 [ 1137.029320][ T8455] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1137.102420][ T8455] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1137.107479][ T8455] keyspan 6-1:1.0: device disconnected [ 1142.887818][T12742] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 1143.956801][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 1143.956826][ T36] audit: type=1326 audit(1792934478.362:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12725 comm="syz.1.1657" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17bf3ff559 code=0x7fc00000 [ 1144.393334][T12751] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1144.660914][T12758] Line length is too long: Should be less than 4094 [ 1144.889457][ T5618] Bluetooth: hci4: connection err: -111 [ 1145.153754][ T5747] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1145.319118][ T5747] usb 8-1: New USB device found: idVendor=1b1c, idProduct=1c0b, bcdDevice=0.00 [ 1145.322183][ T5747] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1145.322223][ T5747] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1145.322273][ T5747] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.351847][ T5747] usb 8-1: config 0 descriptor?? [ 1146.028390][ T5747] hid_parser_main: 171 callbacks suppressed [ 1146.028418][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028456][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028487][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028517][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028546][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028576][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028605][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028635][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028665][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.028695][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unknown main item tag 0x0 [ 1146.032762][ T5747] corsair-psu 0003:1B1C:1C0B.000A: unbalanced collection at end of report description [ 1146.354623][ T5747] corsair-psu 0003:1B1C:1C0B.000A: probe with driver corsair-psu failed with error -22 [ 1146.403289][ T5747] usb 8-1: USB disconnect, device number 7 [ 1148.684670][ T5618] Bluetooth: hci5: unexpected event 0x04 length: 12 > 10 [ 1148.684706][ T5618] Bluetooth: unknown link type 128 [ 1149.528785][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1149.528989][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1150.745901][ T4915] Bluetooth: hci3: command 0x0406 tx timeout [ 1150.908600][ T4915] Bluetooth: hci5: command 0x0406 tx timeout [ 1153.096667][ T4915] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1153.116616][ T4915] Bluetooth: hci5: Injecting HCI hardware error event [ 1153.140695][ T4915] Bluetooth: hci5: hardware error 0x00 [ 1153.504314][ T8455] hid_parser_main: 200 callbacks suppressed [ 1153.504344][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.504384][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.504421][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.504445][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.504469][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.504492][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.504516][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.504540][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.504577][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1153.593879][ T8455] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1154.436611][ T8455] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1154.861059][T12921] fido_id[12921]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1155.287009][ T1006] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1155.462897][ T1006] usb 7-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1155.465733][ T1006] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 1155.465761][ T1006] usb 7-1: config 1 has no interface number 0 [ 1155.510130][ T1006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.510238][ T1006] usb 7-1: Product: syz [ 1155.510255][ T1006] usb 7-1: Manufacturer: syz [ 1155.510272][ T1006] usb 7-1: SerialNumber: syz [ 1155.738422][ T1006] usb 7-1: cannot find UAC_HEADER [ 1156.411926][ T4915] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1157.566373][ T1006] snd-usb-audio 7-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 1157.575532][ T1006] usb 7-1: USB disconnect, device number 9 [ 1157.898154][T12934] udevd[12934]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1158.244851][T12973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1158.244883][T12973] block device autoloading is deprecated and will be removed. [ 1158.383793][T12989] program syz.6.1759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1216.111832][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1216.112016][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1282.709007][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1282.709174][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1317.376772][ T39] INFO: task syz-executor:5585 blocked in I/O wait for more than 143 seconds. [ 1317.376810][ T39] Tainted: G Y syzkaller #0 [ 1317.376824][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1317.376836][ T39] task:syz-executor state:D stack:21792 pid:5585 tgid:5585 ppid:5584 task_flags:0x440100 flags:0x00080000 [ 1317.376904][ T39] Call Trace: [ 1317.376914][ T39] [ 1317.376931][ T39] __schedule+0x171d/0x56e0 [ 1317.376988][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1317.377039][ T39] ? __pfx___schedule+0x10/0x10 [ 1317.377086][ T39] ? schedule+0x90/0x2b0 [ 1317.377126][ T39] schedule+0x164/0x2b0 [ 1317.377164][ T39] io_schedule+0x80/0xe0 [ 1317.377189][ T39] bit_wait_io+0x13/0x110 [ 1317.377217][ T39] __wait_on_bit+0xac/0x2f0 [ 1317.377240][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 1317.377268][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 1317.377295][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 1317.377319][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1317.377348][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 1317.377390][ T39] do_get_write_access+0x667/0x10d0 [ 1317.377449][ T39] jbd2_journal_get_write_access+0x1d7/0x230 [ 1317.377489][ T39] __ext4_journal_get_write_access+0xec/0x620 [ 1317.377533][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1317.377572][ T39] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1317.377621][ T39] ext4_reserve_inode_write+0x294/0x360 [ 1317.377666][ T39] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1317.377708][ T39] ext4_dirty_inode+0xd0/0x110 [ 1317.377744][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1317.377780][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 1317.377810][ T39] file_update_time_flags+0x39f/0x450 [ 1317.377850][ T39] ext4_page_mkwrite+0x220/0x12c0 [ 1317.377900][ T39] ? reacquire_held_locks+0x117/0x1a0 [ 1317.377930][ T39] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1317.377978][ T39] do_page_mkwrite+0x14a/0x310 [ 1317.378021][ T39] do_wp_page+0x209d/0x3d10 [ 1317.378086][ T39] ? preempt_count_add+0x6a/0x140 [ 1317.378123][ T39] ? __pfx_do_wp_page+0x10/0x10 [ 1317.378150][ T39] ? rt_spin_lock+0x2d0/0x400 [ 1317.378220][ T39] ? __pfx_rt_spin_lock+0x10/0x10 [ 1317.378260][ T39] ? pte_offset_map_rw_nolock+0xea/0x160 [ 1317.378295][ T39] handle_mm_fault+0xd69/0x28c0 [ 1317.378332][ T39] ? handle_mm_fault+0xeb/0x28c0 [ 1317.378374][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 1317.378403][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 1317.378435][ T39] ? __hrtimer_get_next_event+0x51f/0x600 [ 1317.378494][ T39] do_user_addr_fault+0xb35/0x1480 [ 1317.378538][ T39] ? trace_page_fault_user+0x84/0x1e0 [ 1317.378569][ T39] exc_page_fault+0x6a/0xc0 [ 1317.378595][ T39] asm_exc_page_fault+0x26/0x30 [ 1317.378627][ T39] RIP: 0033:0x7fc67715e555 [ 1317.378649][ T39] RSP: 002b:00007ffdd098e638 EFLAGS: 00010203 [ 1317.378671][ T39] RAX: 00007fc6739f0000 RBX: 00005555888921f0 RCX: 00007fc6739f0000 [ 1317.378689][ T39] RDX: 00007fc6739f11f7 RSI: 000055558890e8e0 RDI: 00007fc6739f0fa0 [ 1317.378705][ T39] RBP: 00007ffdd098e650 R08: 0000000000000000 R09: 0000000000000000 [ 1317.378721][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 000055558889ff30 [ 1317.378736][ T39] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1317.378772][ T39] [ 1317.378845][ T39] INFO: task syz.0.1761:12992 blocked in I/O wait for more than 143 seconds. [ 1317.378868][ T39] Tainted: G Y syzkaller #0 [ 1317.378881][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1317.378892][ T39] task:syz.0.1761 state:D stack:25768 pid:12992 tgid:12992 ppid:5601 task_flags:0x440040 flags:0x00080002 [ 1317.378961][ T39] Call Trace: [ 1317.378969][ T39] [ 1317.378984][ T39] __schedule+0x171d/0x56e0 [ 1317.379032][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1317.379081][ T39] ? __pfx___schedule+0x10/0x10 [ 1317.379128][ T39] ? schedule+0x90/0x2b0 [ 1317.379168][ T39] schedule+0x164/0x2b0 [ 1317.379206][ T39] io_schedule+0x80/0xe0 [ 1317.379231][ T39] bit_wait_io+0x13/0x110 [ 1317.379257][ T39] __wait_on_bit+0xac/0x2f0 [ 1317.379282][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 1317.379310][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 1317.379337][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 1317.379361][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1317.379390][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 1317.379431][ T39] do_get_write_access+0x667/0x10d0 [ 1317.379489][ T39] jbd2_journal_get_write_access+0x1d7/0x230 [ 1317.379531][ T39] __ext4_journal_get_write_access+0xec/0x620 [ 1317.379576][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1317.379621][ T39] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1317.379664][ T39] ext4_reserve_inode_write+0x294/0x360 [ 1317.379711][ T39] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1317.379752][ T39] ext4_dirty_inode+0xd0/0x110 [ 1317.379788][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1317.379823][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 1317.379853][ T39] file_update_time_flags+0x39f/0x450 [ 1317.379894][ T39] ext4_page_mkwrite+0x220/0x12c0 [ 1317.379940][ T39] ? __pfx_filemap_fault+0x10/0x10 [ 1317.379968][ T39] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 1317.380006][ T39] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 1317.380044][ T39] do_page_mkwrite+0x14a/0x310 [ 1317.380086][ T39] do_pte_missing+0x734/0x28f0 [ 1317.380133][ T39] handle_mm_fault+0xf64/0x28c0 [ 1317.380171][ T39] ? handle_mm_fault+0xeb/0x28c0 [ 1317.380214][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 1317.380242][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 1317.380302][ T39] do_user_addr_fault+0xb35/0x1480 [ 1317.380345][ T39] ? trace_page_fault_user+0x84/0x1e0 [ 1317.380378][ T39] exc_page_fault+0x6a/0xc0 [ 1317.380405][ T39] asm_exc_page_fault+0x26/0x30 [ 1317.380428][ T39] RIP: 0033:0x7fc378573c09 [ 1317.380448][ T39] RSP: 002b:00007ffc6a38f840 EFLAGS: 00010202 [ 1317.380469][ T39] RAX: 0000001b32c24000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 1317.380485][ T39] RDX: 0000001b32c23ffc RSI: 00000000005ffde8 RDI: 00007fc379455700 [ 1317.380501][ T39] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fc378912000 [ 1317.380516][ T39] R10: 00007fc379455700 R11: 0000000000000000 R12: 0000000000000000 [ 1317.380532][ T39] R13: 000000000000071c R14: ffffffff816dbf6e R15: 00007fc379455720 [ 1317.380551][ T39] ? fpregs_assert_state_consistent+0xee/0x150 [ 1317.380615][ T39] [ 1317.380625][ T39] INFO: task syz.6.1763:12997 blocked in I/O wait for more than 143 seconds. [ 1317.380647][ T39] Tainted: G Y syzkaller #0 [ 1317.380660][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1317.380671][ T39] task:syz.6.1763 state:D stack:27160 pid:12997 tgid:12997 ppid:9557 task_flags:0x440040 flags:0x00080002 [ 1317.380740][ T39] Call Trace: [ 1317.380748][ T39] [ 1317.380762][ T39] __schedule+0x171d/0x56e0 [ 1317.380810][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1317.380857][ T39] ? __pfx___schedule+0x10/0x10 [ 1317.380904][ T39] ? schedule+0x90/0x2b0 [ 1317.380944][ T39] schedule+0x164/0x2b0 [ 1317.380982][ T39] io_schedule+0x80/0xe0 [ 1317.381007][ T39] bit_wait_io+0x13/0x110 [ 1317.381034][ T39] __wait_on_bit+0xac/0x2f0 [ 1317.381058][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 1317.381087][ T39] out_of_line_wait_on_bit+0x13b/0x190 [ 1317.381113][ T39] ? __pfx_bit_wait_io+0x10/0x10 [ 1317.381138][ T39] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1317.381166][ T39] ? __pfx_wake_bit_function+0x10/0x10 [ 1317.381208][ T39] do_get_write_access+0x667/0x10d0 [ 1317.381266][ T39] jbd2_journal_get_write_access+0x1d7/0x230 [ 1317.381308][ T39] __ext4_journal_get_write_access+0xec/0x620 [ 1317.381352][ T39] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 1317.381389][ T39] ? jbd2__journal_start+0x145/0x5d0 [ 1317.381432][ T39] ext4_reserve_inode_write+0x294/0x360 [ 1317.381479][ T39] __ext4_mark_inode_dirty+0x141/0x7b0 [ 1317.381520][ T39] ext4_dirty_inode+0xd0/0x110 [ 1317.381556][ T39] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1317.381591][ T39] __mark_inode_dirty+0x3a8/0x13b0 [ 1317.381620][ T39] ? mnt_get_write_access+0x26a/0x2d0 [ 1317.381656][ T39] ? ext4_file_mmap_prepare+0x286/0x460 [ 1317.381688][ T39] touch_atime+0x568/0x670 [ 1317.381720][ T39] ? ext4_file_mmap_prepare+0x286/0x460 [ 1317.381758][ T39] ext4_file_mmap_prepare+0x286/0x460 [ 1317.381799][ T39] mmap_region+0xeb3/0x23a0 [ 1317.381834][ T39] ? update_cfs_rq_load_avg+0x426/0x4e0 [ 1317.381871][ T39] ? __pfx_mmap_region+0x10/0x10 [ 1317.381896][ T39] ? update_load_avg+0x1bd/0x1920 [ 1317.381938][ T39] ? set_next_task_fair+0xc46/0x1080 [ 1317.381984][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1317.382084][ T39] ? mt_find+0x186/0x630 [ 1317.382117][ T39] ? mt_find+0x5ff/0x630 [ 1317.382149][ T39] ? mt_find+0x186/0x630 [ 1317.382178][ T39] ? __pfx_mt_find+0x10/0x10 [ 1317.382215][ T39] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1317.382237][ T39] ? security_mmap_addr+0x71/0x240 [ 1317.382267][ T39] ? shmem_mapping+0xd/0x50 [ 1317.382289][ T39] ? memfd_check_seals_mmap+0xcb/0x230 [ 1317.382319][ T39] do_mmap+0xe0e/0x1310 [ 1317.382359][ T39] ? __pfx_do_mmap+0x10/0x10 [ 1317.382396][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1317.382426][ T39] ? rwbase_write_lock+0x5ad/0x780 [ 1317.382467][ T39] vm_mmap_pgoff+0x275/0x4e0 [ 1317.382502][ T39] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1317.382534][ T39] ? __fget_files+0x2a/0x420 [ 1317.382561][ T39] ? __fget_files+0x3a8/0x420 [ 1317.382587][ T39] ? __fget_files+0x2a/0x420 [ 1317.382623][ T39] ksys_mmap_pgoff+0x4a6/0x720 [ 1317.382677][ T39] ? __x64_sys_mmap+0x7f/0x140 [ 1317.382711][ T39] do_syscall_64+0x166/0x520 [ 1317.382735][ T39] ? trace_irq_disable+0x3b/0x140 [ 1317.382757][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.382786][ T39] ? clear_bhb_loop+0x70/0xc0 [ 1317.382807][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.382838][ T39] RIP: 0033:0x7fa2e71af2c2 [ 1317.382859][ T39] RSP: 002b:00007ffdeba9aca8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1317.382883][ T39] RAX: ffffffffffffffda RBX: 0000001b31164000 RCX: 00007fa2e71af2c2 [ 1317.382901][ T39] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b31164000 [ 1317.382915][ T39] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 1317.382930][ T39] R10: 0000000000100001 R11: 0000000000000206 R12: 00000000000000bc [ 1317.382944][ T39] R13: 00000000000927c0 R14: 00000000001125d6 R15: 00007ffdeba9af80 [ 1317.382980][ T39] [ 1317.383003][ T39] [ 1317.383003][ T39] Showing all locks held in the system: [ 1317.383030][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 1317.383048][ T39] #0: ffffffff8f3c1680 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1317.383133][ T39] locks held by getty/5353: 2, on CPU#0: [ 1317.383152][ T39] #0: ffff8880377c40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1317.383220][ T39] #1: ffffc900044c62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1317.383280][ T39] locks held by syz-executor/5585: 3, on CPU#1: [ 1317.383296][ T39] #0: ffff88803fcf3448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1317.383351][ T39] #1: ffff888036060688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 1317.383427][ T39] #2: ffff88803603cbb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1317.383506][ T39] locks held by syz.0.1761/12992: 3, on CPU#1: [ 1317.383522][ T39] #0: ffff88802a711bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1317.383611][ T39] #1: ffff888036060688 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x12c0 [ 1317.383676][ T39] #2: ffff88803603cbb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1317.383743][ T39] locks held by syz.6.1763/12997: 3, on CPU#1: [ 1317.383760][ T39] #0: ffff88806ac85eb8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 1317.383816][ T39] #1: ffff888036060510 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x286/0x460 [ 1317.383881][ T39] #2: ffff88803603cbb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0 [ 1317.383947][ T39] [ 1317.383954][ T39] ============================================= [ 1317.383954][ T39] [ 1317.383972][ T39] NMI backtrace for cpu 0 [ 1317.383992][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 1317.384021][ T39] Tainted: [Y]=FORCED_BIND [ 1317.384029][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1317.384047][ T39] Call Trace: [ 1317.384053][ T39] [ 1317.384059][ T39] dump_stack_lvl+0xe8/0x150 [ 1317.384101][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1317.384157][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1317.384187][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1317.384223][ T39] sys_info+0x135/0x170 [ 1317.384254][ T39] watchdog+0xfd2/0x1030 [ 1317.384275][ T39] ? watchdog+0x1c7/0x1030 [ 1317.384318][ T39] kthread+0x38b/0x470 [ 1317.384345][ T39] ? __pfx_watchdog+0x10/0x10 [ 1317.384366][ T39] ? __pfx_kthread+0x10/0x10 [ 1317.384392][ T39] ret_from_fork+0x514/0xb70 [ 1317.384426][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.384445][ T39] ? __switch_to+0xc78/0x1410 [ 1317.384462][ T39] ? __pfx_kthread+0x10/0x10 [ 1317.384503][ T39] ret_from_fork_asm+0x1a/0x30 [ 1317.384546][ T39] [ 1317.384555][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1317.384588][ C1] NMI backtrace for cpu 1 [ 1317.384604][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 1317.384629][ C1] Tainted: [Y]=FORCED_BIND [ 1317.384636][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1317.384648][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1317.384668][ C1] Code: 0b 6d 02 e9 c3 e7 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 f4 1b 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1317.384684][ C1] RSP: 0000:ffffc900001c7e40 EFLAGS: 00000242 [ 1317.384700][ C1] RAX: 0000000001666cb3 RBX: ffffffff819b6b60 RCX: 8000000000000001 [ 1317.384713][ C1] RDX: 0000000000000001 RSI: ffffffff8daee582 RDI: ffffffff8becf380 [ 1317.384726][ C1] RBP: ffffc900001c7f10 R08: ffff8880b85341db R09: 1ffff110170a683b [ 1317.384739][ C1] R10: dffffc0000000000 R11: ffffed10170a683c R12: 0000000000000000 [ 1317.384752][ C1] R13: 1ffff11003bdd3e8 R14: 1ffff92000038fd0 R15: dffffc0000000000 [ 1317.384766][ C1] FS: 0000000000000000(0000) GS:ffff88812483f000(0000) knlGS:0000000000000000 [ 1317.384781][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1317.384793][ C1] CR2: 0000563c14fd2660 CR3: 000000000f1b0000 CR4: 00000000003526f0 [ 1317.384809][ C1] Call Trace: [ 1317.384816][ C1] [ 1317.384822][ C1] default_idle+0x9/0x20 [ 1317.384842][ C1] default_idle_call+0x72/0xb0 [ 1317.384864][ C1] do_idle+0x2e0/0x540 [ 1317.384893][ C1] ? __pfx_do_idle+0x10/0x10 [ 1317.384936][ C1] cpu_startup_entry+0x43/0x60 [ 1317.384962][ C1] start_secondary+0x101/0x110 [ 1317.384980][ C1] common_startup_64+0x13e/0x157 [ 1317.385014][ C1] [ 1317.385594][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1318.841262][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G Y syzkaller #0 PREEMPT_{RT,(full)} [ 1318.852588][ T39] Tainted: [Y]=FORCED_BIND [ 1318.857021][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1318.867099][ T39] Call Trace: [ 1318.870404][ T39] [ 1318.873360][ T39] vpanic+0x56d/0xa60 [ 1318.877370][ T39] ? __pfx_vpanic+0x10/0x10 [ 1318.881930][ T39] ? console_srcu_read_unlock+0x3a/0x60 [ 1318.887514][ T39] panic+0xc5/0xd0 [ 1318.891271][ T39] ? __pfx_panic+0x10/0x10 [ 1318.895838][ T39] ? wq_watchdog_touch+0xf9/0x160 [ 1318.900901][ T39] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1318.907111][ T39] watchdog+0x102b/0x1030 [ 1318.911487][ T39] ? watchdog+0x1c7/0x1030 [ 1318.915969][ T39] kthread+0x38b/0x470 [ 1318.920077][ T39] ? __pfx_watchdog+0x10/0x10 [ 1318.924791][ T39] ? __pfx_kthread+0x10/0x10 [ 1318.929415][ T39] ret_from_fork+0x514/0xb70 [ 1318.934037][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1318.939179][ T39] ? __switch_to+0xc78/0x1410 [ 1318.943884][ T39] ? __pfx_kthread+0x10/0x10 [ 1318.948502][ T39] ret_from_fork_asm+0x1a/0x30 [ 1318.953311][ T39] [ 1318.956534][ T39] Kernel Offset: disabled [ 1318.960896][ T39] Rebooting in 86400 seconds..