last executing test programs: 2m2.209828054s ago: executing program 2 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x94, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}]}]}, 0x94}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2m1.909534088s ago: executing program 2 (id=236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", 'qv(}', "3d8efa05fdffffff"}, 0x3) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000b0601010000000000000000000000000900020073797a02000000000500010006005d002c0007801800e040a4097281d2df8a880288e20b18b3018006000240fe8000000000000000000000000000bb060004400e1f00000500070006000000"], 0x54}}, 0x0) 2m1.660275099s ago: executing program 2 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x20, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 2m1.46831955s ago: executing program 2 (id=241): unlinkat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r6, r5, 0x0, 0x7ffff000) shmctl$SHM_LOCK(0x0, 0xb) 2m0.424193705s ago: executing program 2 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000000)='6', 0x32) fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xd, 0x13, r2, 0x81000000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000040), 0x6) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f00000030c0), 0x0, 0x4000084) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "d725c82b17bfc117", "810c6a5c768cea9d101ff46514fe00", "df3508c4", "ee3903eb99064a6b"}, 0x28) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x2c, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2m0.12402751s ago: executing program 2 (id=245): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x20, 0xfb, 0x208}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)="31303017", 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r3, 0x0, 0x0, 0x21, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)="c00e8c04b1610fa0dca29cb2d2871d00e7893eada383a651ca2aa38c941e53228d58dc8a4cb991ee7cd7325086b36aa40b9cde57100ba32f77a7a88728151e49178cff6214c9fea7f1e3b50754d42487476ee71bfce135ec78662c9f24ae26d07895ed27f7616e1776ad3f825af5e5596de99dea923085f7e2b05c50f3064771141cfb1274cd7b7bfd193d05b73896a1e79d208bf99a2d75d48b2d13264e5184eb8d13308fc52b2ec154c2", 0xab) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/msr/read_msr/enable\x00', 0x8000, 0x142) read(r4, 0x0, 0x0) 1m55.671421158s ago: executing program 0 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) mlockall(0x700) (async) mlockall(0x700) write(r0, &(0x7f0000000100)='#e', 0x2) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x8, 0x5, 0x3, 0x0, 0x9, 0x7, 0x4, 0x0, 0xafd7, 0x0, 0x6, 0x7, 0x43, 0xfffffffffffffffb, 0xf2d8, 0x833c], 0xe000}) 1m55.412857992s ago: executing program 0 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x2fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/121, 0x79}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000003700)=""/1, 0x1}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f00000002c0)=""/183, 0xb7}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f00000039c0)=""/85, 0x55}, {&(0x7f0000000180)=""/169, 0xa9}], 0x8}, 0x9}], 0x4, 0x0, 0x0) 1m54.408377028s ago: executing program 0 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mkdir(&(0x7f0000000100)='./my_sysfs\x00', 0x171) mount(0x0, &(0x7f0000000040)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x1, 0x0) (async) setns(r2, 0x24020000) (async) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x80, 0x0) 1m54.08402993s ago: executing program 0 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000004000") 1m53.887153607s ago: executing program 0 (id=274): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x72a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xf9, {0x9, 0x21, 0x1ff, 0x4, 0x1, {0x22, 0x4db}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x80, 0x55}}}}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x150, 0x0, 0xa, 0x0, 0x8, 0x1}, 0xf, &(0x7f0000001500)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x5, 0xb3, 0xb}]}, 0x9, [{0xc3, &(0x7f0000001540)=@string={0xc3, 0x3, "8955416f41e3743fb89f9a0e6291ef0d8df01037d9c1408831072f3e20aeccc368bd1fab322aae745db699ccc01b1dcb0b2c9ebaf9a64ebf551ef04c39b730fea13bb51bff0574e43c1c95bd545fc0e0d1e208ed909123da2b86fdedf6acbbe2cf4d37eee86e68ca101cf2d88bd4b211d4dc8720c0c5bc89eec7dddf993b09b6f1bf0bc2abf9ac45d5260c1f3135848fe4f5c3a001a7a214141d7cb361dce02c075059a1899b8783d86e4efb3717b2c1bb5bfcb4c331369e14b4dbb93177346883"}}, {0x56, &(0x7f0000001640)=@string={0x56, 0x3, "878bcd533672bd90d7ca6b5c8da374b9ace791cec2039b41be2e80f73062d5c8d17630dd9ca153c036ea1a82f07a6ecc450865581a0824d6a687025b2216caae9ea6212a0c39d41832b0ecdf2498f8095e2203db"}}, {0x56, &(0x7f00000016c0)=@string={0x56, 0x3, "51c2da295938a38cd58ed8b87162f6588174c10199d22f592a8526afd42556c61eb9c8522f1b93bae2985934a5c60d0e1c5536b45dde67af33264dd9b49c516c49cbe03ede0e11e423e014cd7ed43819b701c4d5"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000001780)=@lang_id={0x4}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0xf4ff}}]}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c051}, 0x4000000) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$midi(0x1, 0x59, &(0x7f0000001980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xf7, 0x90, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0xc5, [@midi_out_jack={0x19, 0x24, 0x3, 0x0, 0x9, 0x9, [{0x84}, {0x94, 0x81}, {0xc2, 0x8}, {0x4, 0x6}, {0x4, 0xc}, {0x2, 0x11}, {0x8, 0x1}, {0x7, 0xf9}, {0x3, 0x2}], 0x1}], [{{0x9, 0x5, 0x7, 0x8, 0x450, 0x81, 0xf7, 0x9, {0x6, 0x25, 0x1, 0x2, "2da0"}}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x6, 0xf1, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x210, 0x4, 0x49, 0x40, 0x40, 0x6}, 0x27, &(0x7f0000001a40)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2b, 0x1, 0x40, 0x10, 0x7}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "64540b82aed4506995b48b7434e3923a"}]}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000100)={r8, r7, r9, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 1m49.903339318s ago: executing program 0 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)={0xa8, 0x0, 0x1, 0x401, 0x11, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0xa8}}, 0x0) 1m49.130735067s ago: executing program 32 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)={0xa8, 0x0, 0x1, 0x401, 0x11, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0xa8}}, 0x0) 1m44.634772737s ago: executing program 33 (id=245): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x20, 0xfb, 0x208}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)="31303017", 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r3, 0x0, 0x0, 0x21, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)="c00e8c04b1610fa0dca29cb2d2871d00e7893eada383a651ca2aa38c941e53228d58dc8a4cb991ee7cd7325086b36aa40b9cde57100ba32f77a7a88728151e49178cff6214c9fea7f1e3b50754d42487476ee71bfce135ec78662c9f24ae26d07895ed27f7616e1776ad3f825af5e5596de99dea923085f7e2b05c50f3064771141cfb1274cd7b7bfd193d05b73896a1e79d208bf99a2d75d48b2d13264e5184eb8d13308fc52b2ec154c2", 0xab) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/msr/read_msr/enable\x00', 0x8000, 0x142) read(r4, 0x0, 0x0) 1m23.338905858s ago: executing program 3 (id=383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) setns(0xc9, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x58, 0x12) socket(0x8, 0x5, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x8) r4 = syz_clone(0x4000200, &(0x7f0000000300)="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", 0x1000, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="6bd9f384a1da0cf7bdf8d3c3bb50fd61240ce7d479ee83e981d3aed659096b69d00955cadfe9e648f4670ee897c3a02b5ed262721f4267ed5dea05b7b9a5f33531e0b8e642da10423150170b24b4b0155d3da34543f99539f95f4968cda68cbe6555817c873e12fc8b3d362363a46f5eda9fbd8f58b1a49c4bc8a29d98020bbe9b0d7ba77f473b8688952ff941ff5c930dbc32bd984c3686c25ef088568739cd041a88b2ff3ff738d182c0de0124a613d28d0bd29b298c37ffc9f86c41f3fe3b647f908975061be922f93e31fc11e760610d956f7d89b2e1ebd78c4769a3f1dafd309bf2556854f713a02903f537a141fb88dc1dd2da174f") capset(&(0x7f0000001480)={0xe83410700d24a2d5, r4}, &(0x7f00000014c0)={0x0, 0x7fff, 0x9, 0xfffff000, 0x8, 0x7fff}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1m18.401181333s ago: executing program 3 (id=409): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x705, 0x70bd2c, 0x25dfdbfd, {0x26, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810) 1m18.321286438s ago: executing program 3 (id=411): r0 = socket(0x8, 0x5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) write(r1, &(0x7f00000001c0)='kyber', 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x108, 0x42000004, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x31e, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './debug/bluetooth/6lowpan_control/file0\x00'}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x4802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000340)={0x9, 0x5, 0xbc00000, 0xb624}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x2, 0x20) write(r5, &(0x7f0000000140)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000100), 0x8000, 0x200000) write(r6, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) 1m17.955146746s ago: executing program 3 (id=414): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x2000000}, 0x0) 1m17.829153096s ago: executing program 3 (id=415): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010000", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x60) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x40, 0x38303553, 0x7, 0xb, [{0x6, 0x7c}, {0xe, 0x2}, {0x8, 0x4}, {0x2, 0x8}, {0x4, 0x1}, {0x401, 0x5}, {0xfffffff8, 0x8}, {0x1, 0xd}], 0x2, 0x0, 0x0, 0x2, 0x6}}) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, &(0x7f0000000200)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x4440) io_setup(0x4, &(0x7f0000000180)=0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x101002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r4, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x3, r5, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r5, 0x0}]) write(r1, &(0x7f0000000500)="2e801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe40737978", 0x20) 1m17.75860204s ago: executing program 3 (id=417): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000000000000002000700000001940401004404dcfe"], 0x20}, 0x404e900) 1m2.042163333s ago: executing program 34 (id=417): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000000000000002000700000001940401004404dcfe"], 0x20}, 0x404e900) 11.720431845s ago: executing program 6 (id=742): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x81}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r3 = socket$kcm(0x23, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x23, [0x9, 0x7, 0x5, 0x6, 0x5, 0x155f, 0x10000006, 0x4, 0x2dcd, 0xa7ff, 0xb4, 0xd, 0xa2b9, 0x6, 0x355, 0xe1, 0x6, 0xfc000004, 0x40403, 0xbbf, 0x0, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x4, 0x2, 0x2, 0x7, 0x489, 0x20, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x92cee5b, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0xffffffff, 0x2e6bf783, 0x80000001, 0x5, 0x6, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x0, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x40010003, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x4, 0xff, 0x1001005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0xd]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000280)="62c1") pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)="002145000014000b", 0x8}], 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x13, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) listen(r3, 0x800) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd7", 0x43}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) 11.168487505s ago: executing program 6 (id=745): r0 = socket(0x8, 0x5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) write(r1, &(0x7f00000001c0)='kyber', 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x108, 0x42000004, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x31e, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './debug/bluetooth/6lowpan_control/file0\x00'}) write(r3, &(0x7f0000000400)="3e4aecdd871687e06c8c52066eccd0f268f009e809e142b6a4157598f5a5eeeba1901245405693d57535cbf0c09801c7d6ebacec7cb4251977210f0bfe3cc66cfa9315b2794885dedffbb87af3ddeeb9c2a43610f7add311b819f2d274d376e33b3f090906eb3d12df82d83c489f8870", 0x70) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x4802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000340)={0x9, 0x5, 0xbc00000, 0xb624}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x2, 0x20) write(r6, &(0x7f0000000140)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000100), 0x8000, 0x200000) write(r7, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) 10.70088843s ago: executing program 6 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xe) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x13c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'sha224-arm64\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x8}], 0x38) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = dup(r6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='bond_slave_1\x00', 0x10) shutdown(r7, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe4, 0x5, 0x7, 0x7, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.319885083s ago: executing program 6 (id=750): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000740)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000780)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000880)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r2, r3, r4], &(0x7f0000000840)=[0x9, 0x7, 0xf1be], 0xa, 0x1}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000600142603600e12150005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xbe7, 0x101502) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x10000, 0x0, 0x1, 0x2, 0x5e, 0x3, 0x7, 0x1ff, 0x9cf, 0x0, 0xd85b, 0x31, 0x7, 0x80, 0x10, 0xb, {0x8, 0x9}, 0xa, 0x1}}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x44, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount(&(0x7f00000003c0)=@sg0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='bfs\x00', 0x28, &(0x7f0000000480)='&:\x00') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0x10, &(0x7f00000018c0)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000001940)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001a40)={r10, 0x20, &(0x7f0000001980)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000001a80)=0x10) mount(&(0x7f0000000100)=@md0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ocfs2_dlmfs\x00', 0xa40400, &(0x7f00000001c0)='\x00') 9.892090884s ago: executing program 6 (id=752): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000002880)=""/4141, 0x102d}, {&(0x7f00000015c0)=""/225, 0xe1}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000001c0)=""/82, 0x52}], 0x4, 0x0, 0x16}, 0x5}], 0x1, 0x2, 0x0) 9.386193505s ago: executing program 6 (id=756): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0xfffc, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0x99}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000002900e9"], 0xb8}}, 0x20004000) 9.156451412s ago: executing program 35 (id=756): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0xfffc, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0x99}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000002900e9"], 0xb8}}, 0x20004000) 5.634212075s ago: executing program 1 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0xfffffff5, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) 5.520829696s ago: executing program 1 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="d8000000150081044e81f782db44b9040218080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000340032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000780)={0x1, @pix_mp={0x3, 0x2, 0x34324152, 0x7, 0x3, [{0x804, 0x7f}, {0xfff, 0x2}, {0x2, 0x7fffffff}, {0x0, 0x5}, {0x5, 0x14c}, {0x9, 0x3}, {0xfffffffd}, {0x4, 0x3}], 0x9, 0x6, 0x6, 0x2}}) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) 5.410875439s ago: executing program 1 (id=778): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="24000000260009efffffff000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.379711948s ago: executing program 4 (id=784): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f00000014c0)={0x0, 0x1000000, 0x3900, 0x0, 0x1e9}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 64) r7 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000880)={0x18, 0x25, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd=r8}]}, 0x18}], 0x1, 0x0, 0x0, 0x20004880}, 0xc800) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 64) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d03}]}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002102, 0x1, {0x3}}) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x10}}}, 0x0) (async, rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, r11, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) 2.615027331s ago: executing program 4 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x83, {{0xa, 0x4e20, 0xd28e, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfdfffdff}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x3, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x5e14, @mcast1, 0x5}}}, 0x108) (async) getsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xffffffffffffffbd) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@local, 0x4e28, 0x4, 0x4e23, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x800000000, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x2000, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010065bd7000ffdbdf252100000008000300", @ANYRES32=r6, @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x24881}, 0x800) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1000003) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x1, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) r8 = socket(0x10, 0x2, 0x0) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0xa, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0x7}, {0x41000, 0x54000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x100000, 0x2d}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000000, 0x3, 0xef6, 0xff]}) (async) ioctl$KVM_TRANSLATE(r11, 0xc018ae85, &(0x7f0000000040)={0xc000, 0x4, 0x5, 0x7, 0x6}) (async) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r12, &(0x7f0000000040), 0x14) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000000)=0x3) 2.184792282s ago: executing program 5 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x200000000000000) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 2.081206467s ago: executing program 4 (id=790): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x3, 0x90, [0x0, 0x200000000840, 0x2000000009ae, 0x200000000bfa], 0x0, 0x0, &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='ext4\x00', 0x20c080, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) 1.852164115s ago: executing program 5 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) write(r0, &(0x7f00000001c0)='kyber', 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x108, 0x42000004, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x31e, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './debug/bluetooth/6lowpan_control/file0\x00'}) write(r2, &(0x7f0000000400)="3e4aecdd871687e06c8c52066eccd0f268f009e809e142b6a4157598f5a5eeeba1901245405693d57535cbf0c09801c7d6ebacec7cb4251977210f0bfe3cc66cfa9315b2794885dedffbb87af3ddeeb9c2a43610f7add311b819f2d274d376e33b3f090906eb3d12df82d83c489f8870", 0x70) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x4802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000340)={0x9, 0x5, 0xbc00000, 0xb624}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x2, 0x20) write(r5, &(0x7f0000000140)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000100), 0x8000, 0x200000) write(r6, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) 1.797746497s ago: executing program 4 (id=792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000700000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1.355724764s ago: executing program 4 (id=793): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) r2 = eventfd2(0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x4000000, 0x0, 0xa1, 0x0, 0x3, r0, &(0x7f0000000040)="1d", 0xfffffd7b, 0x801, 0x0, 0x1, r2}]) 1.34771493s ago: executing program 5 (id=794): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0xec6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 736.168225ms ago: executing program 1 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x20, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) 735.942152ms ago: executing program 5 (id=796): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) syz_open_dev$mouse(0x0, 0x0, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x406603, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCATTCHAN(r1, 0x40047457, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) 545.030467ms ago: executing program 1 (id=797): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) write(r0, &(0x7f0000000000)="010000", 0x3) 487.482533ms ago: executing program 5 (id=798): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x5000000, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0001000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 288.044316ms ago: executing program 1 (id=799): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x2b, 0xc, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0xdd6e2e3f461ee510}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r3, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='pvfs2\x00', 0x800004, 0x0) close_range(r0, 0xffffffffffffffff, 0x2000000) 263.052548ms ago: executing program 5 (id=800): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x28, 0x12, 0x1, 0x70bd28, 0x0, {@in=@remote, 0x4d4, 0xd, 0xff}}, 0x28}}, 0x0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000600)='./file0\x00', 0x0, 0x8c) syz_fuse_handle_req(r2, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000503800", 0xfffffffffffffced, &(0x7f0000000640)={&(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x0, 0xffffffff80050202, 0x8, 0xfc, 0x8, 0x9, 0x0, 0x0, 0x1f91affae52e4a1d, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x800f4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x20003) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000200)="bad004b087ee36640fc77b2166b91802000066b8b600000066ba000000000f30643e65660f38229c778b360f00952e000fc77200baf80c66b8f0b9bb8266efbafc0ced0fc7b300780f0177bc0f01c9", 0x4f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=801): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) write(r0, &(0x7f00000001c0)='kyber', 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x108, 0x42000004, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x31e, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './debug/bluetooth/6lowpan_control/file0\x00'}) write(r2, &(0x7f0000000400)="3e4aecdd871687e06c8c52066eccd0f268f009e809e142b6a4157598f5a5eeeba1901245405693d57535cbf0c09801c7d6ebacec7cb4251977210f0bfe3cc66cfa9315b2794885dedffbb87af3ddeeb9c2a43610f7add311b819f2d274d376e33b3f090906eb3d12df82d83c489f8870", 0x70) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x4802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000340)={0x9, 0x5, 0xbc00000, 0xb624}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x2, 0x20) write(r5, &(0x7f0000000140)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000100), 0x8000, 0x200000) write(r6, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) kernel console output (not intermixed with test programs): ith driver uvcvideo failed with error -71 [ 170.992166][ T62] usb 6-1: USB disconnect, device number 4 [ 171.163975][ T5614] Bluetooth: hci0: command tx timeout [ 171.386985][ T12] team0 (unregistering): Port device team_slave_1 removed [ 171.409363][ T12] team0 (unregistering): Port device team_slave_0 removed [ 171.780911][ T7487] FAULT_INJECTION: forcing a failure. [ 171.780911][ T7487] name failslab, interval 1, probability 0, space 0, times 0 [ 171.780946][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.5.432 Not tainted syzkaller #0 PREEMPT(full) [ 171.780973][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.780988][ T7487] Call Trace: [ 171.780997][ T7487] [ 171.781008][ T7487] dump_stack_lvl+0xe8/0x150 [ 171.781046][ T7487] should_fail_ex+0x3eb/0x540 [ 171.781080][ T7487] should_failslab+0xa8/0x100 [ 171.781110][ T7487] __kmalloc_cache_node_noprof+0xa5/0x620 [ 171.781149][ T7487] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 171.781184][ T7487] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 171.781227][ T7487] sbitmap_queue_init_node+0x1dc/0x4d0 [ 171.781267][ T7487] kyber_alloc_sched_data+0x1a7/0x540 [ 171.781300][ T7487] blk_mq_alloc_sched_res+0x103/0x360 [ 171.781334][ T7487] elevator_change+0x122/0x480 [ 171.781370][ T7487] ? do_raw_spin_unlock+0xf5/0x200 [ 171.781406][ T7487] elv_iosched_store+0x504/0x630 [ 171.781437][ T7487] ? __pfx_elv_iosched_store+0x10/0x10 [ 171.781484][ T7487] queue_attr_store+0x207/0x2b0 [ 171.781521][ T7487] ? __pfx_queue_attr_store+0x10/0x10 [ 171.781552][ T7487] ? lock_acquire+0x115/0x350 [ 171.781585][ T7487] ? sysfs_file_kobj+0x1a/0x230 [ 171.781622][ T7487] ? sysfs_file_kobj+0x1a/0x230 [ 171.781654][ T7487] ? sysfs_file_kobj+0x1a/0x230 [ 171.781681][ T7487] ? sysfs_file_kobj+0x1a/0x230 [ 171.781711][ T7487] ? sysfs_file_kobj+0x1e4/0x230 [ 171.781741][ T7487] ? sysfs_kf_write+0x166/0x260 [ 171.781775][ T7487] ? __pfx_sysfs_kf_write+0x10/0x10 [ 171.781804][ T7487] kernfs_fop_write_iter+0x3a4/0x540 [ 171.781837][ T7487] vfs_write+0x612/0xba0 [ 171.781880][ T7487] ? __pfx_vfs_write+0x10/0x10 [ 171.781924][ T7487] ? __fget_files+0x2a/0x420 [ 171.781964][ T7487] ksys_write+0x150/0x270 [ 171.781999][ T7487] ? __pfx_ksys_write+0x10/0x10 [ 171.782052][ T7487] do_syscall_64+0x166/0x520 [ 171.782075][ T7487] ? trace_irq_disable+0x3b/0x140 [ 171.782108][ T7487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.782132][ T7487] ? clear_bhb_loop+0x70/0xc0 [ 171.782162][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.782186][ T7487] RIP: 0033:0x7ff90219e159 [ 171.782208][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.782254][ T7487] RSP: 002b:00007ff903059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.782280][ T7487] RAX: ffffffffffffffda RBX: 00007ff902425fa0 RCX: 00007ff90219e159 [ 171.782297][ T7487] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 171.782313][ T7487] RBP: 00007ff90223506b R08: 0000000000000000 R09: 0000000000000000 [ 171.782328][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.782342][ T7487] R13: 00007ff902426038 R14: 00007ff902425fa0 R15: 00007fffdcdcad78 [ 171.782387][ T7487] [ 171.904963][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 172.823031][ T7510] veth1_macvtap: left promiscuous mode [ 173.243585][ T5614] Bluetooth: hci0: command tx timeout [ 173.261769][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.261934][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.262090][ T7438] bridge_slave_0: entered allmulticast mode [ 173.283841][ T7438] bridge_slave_0: entered promiscuous mode [ 173.298333][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.298522][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.298689][ T7438] bridge_slave_1: entered allmulticast mode [ 173.322079][ T7438] bridge_slave_1: entered promiscuous mode [ 173.490935][ T7438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.512562][ T7438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.582575][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 173.680816][ T7438] team0: Port device team_slave_0 added [ 173.719346][ T7438] team0: Port device team_slave_1 added [ 173.828503][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.828525][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.828553][ T7438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.849779][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.849877][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.849961][ T7438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.029086][ T7438] hsr_slave_0: entered promiscuous mode [ 174.030248][ T7438] hsr_slave_1: entered promiscuous mode [ 174.332986][ T7548] FAULT_INJECTION: forcing a failure. [ 174.332986][ T7548] name failslab, interval 1, probability 0, space 0, times 0 [ 174.333020][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.5.442 Not tainted syzkaller #0 PREEMPT(full) [ 174.333046][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.333059][ T7548] Call Trace: [ 174.333069][ T7548] [ 174.333079][ T7548] dump_stack_lvl+0xe8/0x150 [ 174.333117][ T7548] should_fail_ex+0x3eb/0x540 [ 174.333150][ T7548] should_failslab+0xa8/0x100 [ 174.333187][ T7548] __kmalloc_cache_node_noprof+0xa5/0x620 [ 174.333226][ T7548] ? kyber_alloc_sched_data+0x79/0x540 [ 174.333251][ T7548] ? kyber_alloc_sched_data+0x79/0x540 [ 174.333285][ T7548] kyber_alloc_sched_data+0x79/0x540 [ 174.333317][ T7548] blk_mq_alloc_sched_res+0x103/0x360 [ 174.333350][ T7548] elevator_change+0x122/0x480 [ 174.333374][ T7548] ? do_raw_spin_unlock+0xf5/0x200 [ 174.333408][ T7548] elv_iosched_store+0x504/0x630 [ 174.333439][ T7548] ? __pfx_elv_iosched_store+0x10/0x10 [ 174.333489][ T7548] queue_attr_store+0x207/0x2b0 [ 174.333524][ T7548] ? __pfx_queue_attr_store+0x10/0x10 [ 174.333555][ T7548] ? lock_acquire+0x115/0x350 [ 174.333587][ T7548] ? sysfs_file_kobj+0x1a/0x230 [ 174.333624][ T7548] ? sysfs_file_kobj+0x1a/0x230 [ 174.333652][ T7548] ? sysfs_file_kobj+0x1a/0x230 [ 174.333679][ T7548] ? sysfs_file_kobj+0x1a/0x230 [ 174.333709][ T7548] ? sysfs_file_kobj+0x1e4/0x230 [ 174.333740][ T7548] ? sysfs_kf_write+0x166/0x260 [ 174.333774][ T7548] ? __pfx_sysfs_kf_write+0x10/0x10 [ 174.333802][ T7548] kernfs_fop_write_iter+0x3a4/0x540 [ 174.333836][ T7548] vfs_write+0x612/0xba0 [ 174.333879][ T7548] ? __pfx_vfs_write+0x10/0x10 [ 174.333923][ T7548] ? __fget_files+0x2a/0x420 [ 174.333963][ T7548] ksys_write+0x150/0x270 [ 174.333998][ T7548] ? __pfx_ksys_write+0x10/0x10 [ 174.334044][ T7548] do_syscall_64+0x166/0x520 [ 174.334066][ T7548] ? trace_irq_disable+0x3b/0x140 [ 174.334099][ T7548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.334123][ T7548] ? clear_bhb_loop+0x70/0xc0 [ 174.334159][ T7548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.334184][ T7548] RIP: 0033:0x7ff90219e159 [ 174.334208][ T7548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.334229][ T7548] RSP: 002b:00007ff903059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.334255][ T7548] RAX: ffffffffffffffda RBX: 00007ff902425fa0 RCX: 00007ff90219e159 [ 174.334272][ T7548] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 174.334288][ T7548] RBP: 00007ff90223506b R08: 0000000000000000 R09: 0000000000000000 [ 174.334303][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.334317][ T7548] R13: 00007ff902426038 R14: 00007ff902425fa0 R15: 00007fffdcdcad78 [ 174.334355][ T7548] [ 175.324386][ T5614] Bluetooth: hci0: command tx timeout [ 175.669999][ T7438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.684808][ T7438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.685891][ T7438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.692772][ T7438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.699688][ T7438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.733134][ T7438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.742519][ T7438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.755350][ T7438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.955783][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.991315][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.009184][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.009299][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.045148][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.045284][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.474301][ T5277] veth1_macvtap: entered promiscuous mode [ 176.902007][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.403598][ T5614] Bluetooth: hci0: command tx timeout [ 177.546689][ T7438] veth0_vlan: entered promiscuous mode [ 177.560025][ T7438] veth1_vlan: entered promiscuous mode [ 177.627855][ T7438] veth0_macvtap: entered promiscuous mode [ 177.645693][ T7438] veth1_macvtap: entered promiscuous mode [ 177.680088][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.701820][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.830409][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.835996][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.866828][ T1257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.866879][ T1257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.947328][ T1257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.947353][ T1257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.081131][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.081156][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.716750][ T7642] netlink: 26 bytes leftover after parsing attributes in process `syz.4.449'. [ 178.719868][ T7646] netlink: 'syz.4.449': attribute type 40 has an invalid length. [ 178.734646][ T7645] tmpfs: Unknown parameter 'mpoault:†!' [ 179.455635][ T5700] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.529610][ T7678] netlink: 'syz.1.459': attribute type 2 has an invalid length. [ 179.605307][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 179.606149][ T5700] usb 5-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 179.609983][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.610011][ T5700] usb 5-1: Product: syz [ 179.610027][ T5700] usb 5-1: Manufacturer: syz [ 179.610044][ T5700] usb 5-1: SerialNumber: syz [ 179.932522][ T5700] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 179.954569][ T5700] usb 5-1: unit 3 not found! [ 180.176390][ T5700] usb 5-1: USB disconnect, device number 4 [ 180.402965][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.426157][ T1257] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.812580][ T1257] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.883642][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.891003][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.910434][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.933832][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.934490][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.055269][ T5766] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 181.090097][ T1257] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.207548][ T5766] usb 5-1: Using ep0 maxpacket: 16 [ 181.211344][ T5766] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 181.224879][ T5766] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.224976][ T5766] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.225034][ T5766] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.225126][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.272120][ T5766] usb 5-1: config 0 descriptor?? [ 181.345210][ T1257] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.719359][ T1257] bridge_slave_1: left allmulticast mode [ 181.719403][ T1257] bridge_slave_1: left promiscuous mode [ 181.719640][ T1257] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.758352][ T1257] bridge_slave_0: left allmulticast mode [ 181.758380][ T1257] bridge_slave_0: left promiscuous mode [ 181.758614][ T1257] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.784810][ T7692] use of bytesused == 0 is deprecated and will be removed in the future, [ 181.784827][ T7692] use the actual size instead. [ 181.982131][ T5766] usbhid 5-1:0.0: can't add hid device: -71 [ 181.982243][ T5766] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.033325][ T5766] usb 5-1: USB disconnect, device number 5 [ 182.345940][ T1257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.348861][ T1257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.352263][ T1257] bond0 (unregistering): Released all slaves [ 182.539888][ T1257] ovs-dp0: left promiscuous mode [ 182.919626][ T1257] hsr_slave_0: left promiscuous mode [ 182.921911][ T1257] hsr_slave_1: left promiscuous mode [ 182.922846][ T1257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.922878][ T1257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.928952][ T1257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.929016][ T1257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.994520][ T1257] veth1_macvtap: left promiscuous mode [ 182.994561][ T1257] veth0_macvtap: left promiscuous mode [ 182.994670][ T1257] veth1_vlan: left promiscuous mode [ 182.994741][ T1257] veth0_vlan: left promiscuous mode [ 183.006850][ T5620] Bluetooth: hci2: command tx timeout [ 183.505621][ T1257] team0 (unregistering): Port device team_slave_1 removed [ 183.527494][ T1257] team0 (unregistering): Port device team_slave_0 removed [ 183.943939][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.964811][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.966449][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.967415][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.970435][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.617421][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.617616][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.617760][ T7694] bridge_slave_0: entered allmulticast mode [ 184.619819][ T7694] bridge_slave_0: entered promiscuous mode [ 184.627497][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.628011][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.628437][ T7694] bridge_slave_1: entered allmulticast mode [ 184.633151][ T7694] bridge_slave_1: entered promiscuous mode [ 184.780924][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.801273][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.904203][ T1257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.972257][ T7694] team0: Port device team_slave_0 added [ 184.985762][ T7694] team0: Port device team_slave_1 added [ 185.084608][ T5620] Bluetooth: hci2: command tx timeout [ 185.159779][ T1257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.187308][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.187328][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.187356][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.189870][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.189886][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.189910][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.438978][ T7694] hsr_slave_0: entered promiscuous mode [ 185.440096][ T7694] hsr_slave_1: entered promiscuous mode [ 185.440859][ T7694] debugfs: 'hsr0' already exists in 'hsr' [ 185.440880][ T7694] Cannot create hsr debugfs directory [ 185.598077][ T1257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.754108][ T5766] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 185.837332][ T1257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.905051][ T5766] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 185.906118][ T5766] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 185.906152][ T5766] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.908487][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 185.908514][ T5766] usb 5-1: Product: syz [ 185.908532][ T5766] usb 5-1: Manufacturer: syz [ 185.908548][ T5766] usb 5-1: SerialNumber: syz [ 185.968466][ T5766] usb 5-1: config 0 descriptor?? [ 185.993329][ T5766] usb 5-1: selecting invalid altsetting 0 [ 186.053623][ T5620] Bluetooth: hci4: command tx timeout [ 186.229228][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.229754][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.284936][ T7786] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 186.291071][ T5766] usb 5-1: USB disconnect, device number 6 [ 186.689699][ T1257] bridge_slave_1: left allmulticast mode [ 186.689730][ T1257] bridge_slave_1: left promiscuous mode [ 186.689963][ T1257] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.692563][ T1257] bridge_slave_0: left allmulticast mode [ 186.692585][ T1257] bridge_slave_0: left promiscuous mode [ 186.692769][ T1257] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.011335][ T7826] FAULT_INJECTION: forcing a failure. [ 187.011335][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 187.011371][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.4.477 Not tainted syzkaller #0 PREEMPT(full) [ 187.011397][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.011412][ T7826] Call Trace: [ 187.011422][ T7826] [ 187.011432][ T7826] dump_stack_lvl+0xe8/0x150 [ 187.011469][ T7826] should_fail_ex+0x3eb/0x540 [ 187.011502][ T7826] should_failslab+0xa8/0x100 [ 187.011530][ T7826] __kmalloc_cache_node_noprof+0xa5/0x620 [ 187.011570][ T7826] ? kyber_alloc_sched_data+0x79/0x540 [ 187.011605][ T7826] ? kyber_alloc_sched_data+0x79/0x540 [ 187.011639][ T7826] kyber_alloc_sched_data+0x79/0x540 [ 187.011672][ T7826] blk_mq_alloc_sched_res+0x103/0x360 [ 187.011706][ T7826] elevator_change+0x122/0x480 [ 187.011731][ T7826] ? do_raw_spin_unlock+0xf5/0x200 [ 187.011765][ T7826] elv_iosched_store+0x504/0x630 [ 187.011796][ T7826] ? __pfx_elv_iosched_store+0x10/0x10 [ 187.011843][ T7826] queue_attr_store+0x207/0x2b0 [ 187.011879][ T7826] ? __pfx_queue_attr_store+0x10/0x10 [ 187.011910][ T7826] ? lock_acquire+0x115/0x350 [ 187.011944][ T7826] ? sysfs_file_kobj+0x1a/0x230 [ 187.011981][ T7826] ? sysfs_file_kobj+0x1a/0x230 [ 187.012010][ T7826] ? sysfs_file_kobj+0x1a/0x230 [ 187.012037][ T7826] ? sysfs_file_kobj+0x1a/0x230 [ 187.012067][ T7826] ? sysfs_file_kobj+0x1e4/0x230 [ 187.012097][ T7826] ? sysfs_kf_write+0x166/0x260 [ 187.012132][ T7826] ? __pfx_sysfs_kf_write+0x10/0x10 [ 187.012161][ T7826] kernfs_fop_write_iter+0x3a4/0x540 [ 187.012195][ T7826] vfs_write+0x612/0xba0 [ 187.012237][ T7826] ? __pfx_vfs_write+0x10/0x10 [ 187.012281][ T7826] ? __fget_files+0x2a/0x420 [ 187.012321][ T7826] ksys_write+0x150/0x270 [ 187.012357][ T7826] ? __pfx_ksys_write+0x10/0x10 [ 187.012403][ T7826] do_syscall_64+0x166/0x520 [ 187.012425][ T7826] ? trace_irq_disable+0x3b/0x140 [ 187.012463][ T7826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.012493][ T7826] ? clear_bhb_loop+0x70/0xc0 [ 187.012522][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.012546][ T7826] RIP: 0033:0x7f802cd9e159 [ 187.012568][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.012595][ T7826] RSP: 002b:00007f802dc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.012622][ T7826] RAX: ffffffffffffffda RBX: 00007f802d025fa0 RCX: 00007f802cd9e159 [ 187.012639][ T7826] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 187.012655][ T7826] RBP: 00007f802ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 187.012670][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.012684][ T7826] R13: 00007f802d026038 R14: 00007f802d025fa0 R15: 00007fffd1173b48 [ 187.012721][ T7826] [ 187.163898][ T5620] Bluetooth: hci2: command tx timeout [ 187.317123][ T1257] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 187.342689][ T1257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.358552][ T1257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.360715][ T1257] bond0 (unregistering): Released all slaves [ 187.626982][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.478'. [ 187.851455][ T1257] hsr_slave_0: left promiscuous mode [ 187.861614][ T1257] hsr_slave_1: left promiscuous mode [ 187.869960][ T1257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.869987][ T1257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.871191][ T1257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.871213][ T1257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.918151][ T1257] veth1_macvtap: left promiscuous mode [ 187.918194][ T1257] veth0_macvtap: left promiscuous mode [ 187.918297][ T1257] veth1_vlan: left promiscuous mode [ 187.918365][ T1257] veth0_vlan: left promiscuous mode [ 188.124228][ T5620] Bluetooth: hci4: command tx timeout [ 188.507330][ T1257] team0 (unregistering): Port device team_slave_1 removed [ 188.527122][ T1257] team0 (unregistering): Port device team_slave_0 removed [ 188.704410][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 188.834160][ T10] usb 5-1: device descriptor read/64, error -71 [ 188.941427][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.941541][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.941731][ T7744] bridge_slave_0: entered allmulticast mode [ 188.946205][ T7744] bridge_slave_0: entered promiscuous mode [ 188.979777][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.979958][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.980092][ T7744] bridge_slave_1: entered allmulticast mode [ 188.982075][ T7744] bridge_slave_1: entered promiscuous mode [ 189.077265][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.095188][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 189.143910][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.234034][ T10] usb 5-1: device descriptor read/64, error -71 [ 189.243614][ T5620] Bluetooth: hci2: command tx timeout [ 189.273710][ T7744] team0: Port device team_slave_0 added [ 189.293893][ T7744] team0: Port device team_slave_1 added [ 189.344171][ T10] usb usb5-port1: attempt power cycle [ 189.381167][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.381188][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.381218][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.450660][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.450681][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.450710][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.572754][ T7694] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.583785][ T7694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.592621][ T7744] hsr_slave_0: entered promiscuous mode [ 189.601791][ T7744] hsr_slave_1: entered promiscuous mode [ 189.605690][ T7744] debugfs: 'hsr0' already exists in 'hsr' [ 189.605756][ T7744] Cannot create hsr debugfs directory [ 189.609441][ T7694] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.639551][ T7694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.643048][ T7694] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.662023][ T7694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.684574][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 189.689118][ T7694] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.696442][ T7694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.727344][ T10] usb 5-1: device descriptor read/8, error -71 [ 189.964416][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 189.998422][ T10] usb 5-1: device descriptor read/8, error -71 [ 190.105333][ T10] usb usb5-port1: unable to enumerate USB device [ 190.131004][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.203578][ T5620] Bluetooth: hci4: command tx timeout [ 190.227568][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.252456][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.252621][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.253402][ T7744] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 190.281175][ T7744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.300099][ T7744] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.315146][ T7744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.318991][ T203] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.319106][ T203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.321155][ T7744] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 190.356583][ T7744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.357912][ T7744] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.380743][ T7744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.626907][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.675281][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.703356][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.703538][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.732259][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.732383][ T974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.506693][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.790297][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.125617][ T31] audit: type=1400 audit(1790224613.932:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=7964 comm="syz.4.489" [ 192.286057][ T5620] Bluetooth: hci4: command tx timeout [ 192.648834][ T7694] veth0_vlan: entered promiscuous mode [ 192.711811][ T7694] veth1_vlan: entered promiscuous mode [ 192.772007][ T7744] veth0_vlan: entered promiscuous mode [ 192.803825][ T7744] veth1_vlan: entered promiscuous mode [ 192.836146][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.867878][ T7694] veth0_macvtap: entered promiscuous mode [ 192.899839][ T7694] veth1_macvtap: entered promiscuous mode [ 193.006104][ T7744] veth0_macvtap: entered promiscuous mode [ 193.006364][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 193.007259][ T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 193.008447][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 193.008479][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 193.008507][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 193.008533][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 193.008561][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 193.013359][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.013395][ T9] usb 5-1: Product: syz [ 193.013410][ T9] usb 5-1: Manufacturer: syz [ 193.013423][ T9] usb 5-1: SerialNumber: syz [ 193.035620][ T9] usb 5-1: config 0 descriptor?? [ 193.128412][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.156502][ T7744] veth1_macvtap: entered promiscuous mode [ 193.202787][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.239107][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.254417][ T1257] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.254498][ T1257] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.254540][ T1257] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.316998][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.409799][ T2999] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.409870][ T2999] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.409922][ T2999] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.409960][ T2999] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.500412][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 193.500487][ T9] input input11: Device does not respond to id packet M [ 193.501850][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 193.501908][ T9] input input11: Device does not respond to id packet P [ 193.504909][ T9] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 193.504961][ T9] input input11: Device does not respond to id packet B [ 193.593405][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.593431][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.611148][ T1009] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.738267][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.738292][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.773245][ T7992] veth1_macvtap: left promiscuous mode [ 193.835755][ T8009] veth1_macvtap: entered promiscuous mode [ 193.896921][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.899250][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.999403][ T1257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.999454][ T1257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.042102][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.050822][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.063346][ T8015] FAULT_INJECTION: forcing a failure. [ 194.063346][ T8015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.063379][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.5.499 Not tainted syzkaller #0 PREEMPT(full) [ 194.063405][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.063420][ T8015] Call Trace: [ 194.063429][ T8015] [ 194.063438][ T8015] dump_stack_lvl+0xe8/0x150 [ 194.063477][ T8015] should_fail_ex+0x3eb/0x540 [ 194.063508][ T8015] strncpy_from_user+0x36/0x2c0 [ 194.063537][ T8015] do_getname+0x77/0x250 [ 194.063565][ T8015] user_path_at+0x2a/0x160 [ 194.063598][ T8015] __se_sys_mount+0x2dc/0x420 [ 194.063634][ T8015] ? __pfx___se_sys_mount+0x10/0x10 [ 194.063670][ T8015] ? __x64_sys_mount+0x20/0xc0 [ 194.063701][ T8015] do_syscall_64+0x166/0x520 [ 194.063722][ T8015] ? trace_irq_disable+0x3b/0x140 [ 194.063755][ T8015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.063779][ T8015] ? clear_bhb_loop+0x70/0xc0 [ 194.063807][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.063839][ T8015] RIP: 0033:0x7f24a9d9e159 [ 194.063860][ T8015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.063880][ T8015] RSP: 002b:00007f24aaba5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.063904][ T8015] RAX: ffffffffffffffda RBX: 00007f24aa025fa0 RCX: 00007f24a9d9e159 [ 194.063921][ T8015] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 194.063948][ T8015] RBP: 00007f24aaba5090 R08: 0000000000000000 R09: 0000000000000000 [ 194.063963][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.063977][ T8015] R13: 00007f24aa026038 R14: 00007f24aa025fa0 R15: 00007ffee2139b68 [ 194.064012][ T8015] [ 194.071536][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.080232][ T9] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.270580][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 194.422821][ T9] usb 5-1: USB disconnect, device number 11 [ 194.513178][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.513203][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.534574][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.534630][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.949555][ T8034] FAULT_INJECTION: forcing a failure. [ 194.949555][ T8034] name failslab, interval 1, probability 0, space 0, times 0 [ 194.949600][ T8034] CPU: 1 UID: 0 PID: 8034 Comm: syz.5.502 Not tainted syzkaller #0 PREEMPT(full) [ 194.949627][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.949642][ T8034] Call Trace: [ 194.949651][ T8034] [ 194.949662][ T8034] dump_stack_lvl+0xe8/0x150 [ 194.949701][ T8034] should_fail_ex+0x3eb/0x540 [ 194.949735][ T8034] should_failslab+0xa8/0x100 [ 194.949764][ T8034] __kmalloc_cache_node_noprof+0xa5/0x620 [ 194.949805][ T8034] ? kyber_alloc_sched_data+0x79/0x540 [ 194.949829][ T8034] ? kyber_alloc_sched_data+0x79/0x540 [ 194.949862][ T8034] kyber_alloc_sched_data+0x79/0x540 [ 194.949896][ T8034] blk_mq_alloc_sched_res+0x103/0x360 [ 194.949931][ T8034] elevator_change+0x122/0x480 [ 194.949955][ T8034] ? do_raw_spin_unlock+0xf5/0x200 [ 194.949990][ T8034] elv_iosched_store+0x504/0x630 [ 194.950022][ T8034] ? __pfx_elv_iosched_store+0x10/0x10 [ 194.950070][ T8034] queue_attr_store+0x207/0x2b0 [ 194.950106][ T8034] ? __pfx_queue_attr_store+0x10/0x10 [ 194.950138][ T8034] ? lock_acquire+0x115/0x350 [ 194.950172][ T8034] ? sysfs_file_kobj+0x1a/0x230 [ 194.950209][ T8034] ? sysfs_file_kobj+0x1a/0x230 [ 194.950238][ T8034] ? sysfs_file_kobj+0x1a/0x230 [ 194.950266][ T8034] ? sysfs_file_kobj+0x1a/0x230 [ 194.950296][ T8034] ? sysfs_file_kobj+0x1e4/0x230 [ 194.950327][ T8034] ? sysfs_kf_write+0x166/0x260 [ 194.950374][ T8034] ? __pfx_sysfs_kf_write+0x10/0x10 [ 194.950403][ T8034] kernfs_fop_write_iter+0x3a4/0x540 [ 194.950437][ T8034] vfs_write+0x612/0xba0 [ 194.950482][ T8034] ? __pfx_vfs_write+0x10/0x10 [ 194.950527][ T8034] ? __fget_files+0x2a/0x420 [ 194.950566][ T8034] ksys_write+0x150/0x270 [ 194.950601][ T8034] ? __pfx_ksys_write+0x10/0x10 [ 194.950643][ T8034] do_syscall_64+0x166/0x520 [ 194.950665][ T8034] ? trace_irq_disable+0x3b/0x140 [ 194.950699][ T8034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.950722][ T8034] ? clear_bhb_loop+0x70/0xc0 [ 194.950749][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.950770][ T8034] RIP: 0033:0x7f24a9d9e159 [ 194.950792][ T8034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.950812][ T8034] RSP: 002b:00007f24aaba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.950837][ T8034] RAX: ffffffffffffffda RBX: 00007f24aa025fa0 RCX: 00007f24a9d9e159 [ 194.950855][ T8034] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 194.950872][ T8034] RBP: 00007f24a9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 194.950887][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.950901][ T8034] R13: 00007f24aa026038 R14: 00007f24aa025fa0 R15: 00007ffee2139b68 [ 194.950938][ T8034] [ 195.147614][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 195.307125][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.307177][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 195.308245][ T25] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 195.345236][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.345264][ T25] usb 5-1: Product: syz [ 195.345281][ T25] usb 5-1: Manufacturer: syz [ 195.345298][ T25] usb 5-1: SerialNumber: syz [ 195.404432][ T8008] netlink: 72 bytes leftover after parsing attributes in process `syz.1.498'. [ 195.412383][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 195.470322][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.590755][ T25] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 196.046811][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 196.196612][ T25] usb 5-1: invalid uac2 rates [ 196.198493][ T25] usb 5-1: invalid uac2 rates [ 196.398167][ T25] usb 5-1: failed to enable PITCH for EP 0x82 [ 196.401207][ T25] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 196.401267][ T25] usb 5-1: clock source 0 is not valid, cannot use [ 196.401872][ T25] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 196.434330][ T25] usb 5-1: 2:1: cannot set freq 1594661186 (v2/v3): err -71 [ 196.557067][ T25] usb 5-1: USB disconnect, device number 12 [ 196.722311][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.739585][ T5700] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 196.756900][ T1009] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.896086][ T5700] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 196.898710][ T5700] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.898738][ T5700] usb 6-1: config 0 has no interface number 0 [ 196.898780][ T5700] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.898809][ T5700] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.898834][ T5700] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.898880][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.977520][ T5700] usb 6-1: config 0 descriptor?? [ 197.098804][ T1009] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.293256][ T1009] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.446296][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.450972][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.480399][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.500810][ T1009] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.501521][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.522412][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.649717][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 197.668994][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.669682][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.693297][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.703879][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.057809][ T1009] bridge_slave_1: left allmulticast mode [ 198.057838][ T1009] bridge_slave_1: left promiscuous mode [ 198.058126][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.092918][ T1009] bridge_slave_0: left allmulticast mode [ 198.092947][ T1009] bridge_slave_0: left promiscuous mode [ 198.093223][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.432411][ T1009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.452471][ T1009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.468589][ T1009] bond0 (unregistering): Released all slaves [ 198.851396][ T8119] IPVS: Error connecting to the multicast addr [ 199.018471][ T1009] hsr_slave_0: left promiscuous mode [ 199.019434][ T1009] hsr_slave_1: left promiscuous mode [ 199.020472][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.020496][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.021460][ T1009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.021480][ T1009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.051175][ T1009] veth1_macvtap: left promiscuous mode [ 199.051291][ T1009] veth0_macvtap: left promiscuous mode [ 199.051552][ T1009] veth1_vlan: left promiscuous mode [ 199.051783][ T1009] veth0_vlan: left promiscuous mode [ 199.406585][ T1009] team0 (unregistering): Port device team_slave_1 removed [ 199.438718][ T1009] team0 (unregistering): Port device team_slave_0 removed [ 199.553579][ T5700] usbhid 6-1:0.1: can't add hid device: -71 [ 199.553762][ T5700] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 199.580384][ T5700] usb 6-1: USB disconnect, device number 5 [ 199.647033][ T5620] Bluetooth: hci3: command tx timeout [ 199.718439][ T8134] kAFS: bad VL server IP address [ 199.747358][ T8132] FAULT_INJECTION: forcing a failure. [ 199.747358][ T8132] name fail_futex, interval 1, probability 0, space 0, times 0 [ 199.747403][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.4.520 Not tainted syzkaller #0 PREEMPT(full) [ 199.747429][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.747443][ T8132] Call Trace: [ 199.747452][ T8132] [ 199.747463][ T8132] dump_stack_lvl+0xe8/0x150 [ 199.747499][ T8132] should_fail_ex+0x3eb/0x540 [ 199.747531][ T8132] get_futex_key+0x1b4/0x1580 [ 199.747572][ T8132] ? __pfx_futex_wake_mark+0x10/0x10 [ 199.747609][ T8132] ? __pfx_get_futex_key+0x10/0x10 [ 199.747659][ T8132] futex_wake+0x119/0x5f0 [ 199.747695][ T8132] ? __pfx_futex_wake+0x10/0x10 [ 199.747742][ T8132] do_futex+0x458/0x4e0 [ 199.747772][ T8132] ? __pfx_do_futex+0x10/0x10 [ 199.747807][ T8132] __se_sys_futex+0x3a8/0x450 [ 199.747838][ T8132] ? __fget_files+0x3a2/0x420 [ 199.747867][ T8132] ? __pfx___se_sys_futex+0x10/0x10 [ 199.747896][ T8132] ? fdget+0x183/0x1e0 [ 199.747927][ T8132] ? __x64_sys_futex+0x21/0xf0 [ 199.747956][ T8132] do_syscall_64+0x166/0x520 [ 199.747978][ T8132] ? trace_irq_disable+0x3b/0x140 [ 199.748011][ T8132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.748035][ T8132] ? clear_bhb_loop+0x70/0xc0 [ 199.748064][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.748088][ T8132] RIP: 0033:0x7f802cd9e159 [ 199.748110][ T8132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.748129][ T8132] RSP: 002b:00007f802dc410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.748154][ T8132] RAX: ffffffffffffffda RBX: 00007f802d025fa8 RCX: 00007f802cd9e159 [ 199.748171][ T8132] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f802d025fac [ 199.748186][ T8132] RBP: 00007f802d025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 199.748202][ T8132] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 199.748217][ T8132] R13: 00007f802d026038 R14: 00007fffd1173a60 R15: 00007fffd1173b48 [ 199.748253][ T8132] [ 200.013042][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 200.324627][ T5700] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 200.476433][ T5700] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 200.482458][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.482491][ T5700] usb 6-1: Product: syz [ 200.482508][ T5700] usb 6-1: Manufacturer: syz [ 200.482524][ T5700] usb 6-1: SerialNumber: syz [ 200.551433][ T5700] ums-karma 6-1:1.0: USB Mass Storage device detected [ 200.569467][ T5700] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 200.569467][ T5700] Please send a copy of this message to and [ 200.571302][ T8154] macvlan0: entered promiscuous mode [ 200.571509][ T8154] macvlan0: entered allmulticast mode [ 200.571526][ T8154] veth1_vlan: entered allmulticast mode [ 200.797910][ T8162] comedi comedi0: Minor 3 could not be opened [ 200.978581][ T8137] FAULT_INJECTION: forcing a failure. [ 200.978581][ T8137] name failslab, interval 1, probability 0, space 0, times 0 [ 200.978619][ T8137] CPU: 0 UID: 0 PID: 8137 Comm: syz.5.522 Not tainted syzkaller #0 PREEMPT(full) [ 200.978646][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.978662][ T8137] Call Trace: [ 200.978671][ T8137] [ 200.978682][ T8137] dump_stack_lvl+0xe8/0x150 [ 200.978719][ T8137] should_fail_ex+0x3eb/0x540 [ 200.978753][ T8137] should_failslab+0xa8/0x100 [ 200.978779][ T8137] ? sk_prot_alloc+0x57/0x210 [ 200.978806][ T8137] kmem_cache_alloc_noprof+0x9c/0x600 [ 200.978837][ T8137] ? make_kgid+0x1d1/0x6a0 [ 200.978868][ T8137] ? security_inode_alloc+0x39/0x310 [ 200.978903][ T8137] ? kmem_cache_alloc_noprof+0x151/0x600 [ 200.978936][ T8137] ? sk_prot_alloc+0x57/0x210 [ 200.978967][ T8137] sk_prot_alloc+0x57/0x210 [ 200.978988][ T8137] ? sk_alloc+0x27/0x390 [ 200.979014][ T8137] sk_alloc+0x3a/0x390 [ 200.979042][ T8137] rxrpc_create+0xd9/0x750 [ 200.979076][ T8137] __sock_create+0x4b5/0xac0 [ 200.979118][ T8137] __sys_socket+0xd6/0x1b0 [ 200.979155][ T8137] __x64_sys_socket+0x7a/0x90 [ 200.979191][ T8137] do_syscall_64+0x166/0x520 [ 200.979211][ T8137] ? trace_irq_disable+0x3b/0x140 [ 200.979244][ T8137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.979269][ T8137] ? clear_bhb_loop+0x70/0xc0 [ 200.979308][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.979333][ T8137] RIP: 0033:0x7f24a9d9e159 [ 200.979354][ T8137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.979375][ T8137] RSP: 002b:00007f24aaba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 200.979402][ T8137] RAX: ffffffffffffffda RBX: 00007f24aa025fa0 RCX: 00007f24a9d9e159 [ 200.979420][ T8137] RDX: 000000000000000a RSI: 0000000000000002 RDI: 0000000000000021 [ 200.979433][ T8137] RBP: 00007f24a9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 200.979448][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.979463][ T8137] R13: 00007f24aa026038 R14: 00007f24aa025fa0 R15: 00007ffee2139b68 [ 200.979498][ T8137] [ 201.056583][ T5700] scsi host1: usb-storage 6-1:1.0 [ 201.256556][ T8176] Invalid ELF header magic: != ELF [ 201.277997][ T5700] usb 6-1: USB disconnect, device number 6 [ 201.292213][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.292325][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.292503][ T8088] bridge_slave_0: entered allmulticast mode [ 201.315251][ T8088] bridge_slave_0: entered promiscuous mode [ 201.323210][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.323330][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.346111][ T8088] bridge_slave_1: entered allmulticast mode [ 201.350487][ T8088] bridge_slave_1: entered promiscuous mode [ 201.436758][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.456933][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.475972][ T8179] FAULT_INJECTION: forcing a failure. [ 201.475972][ T8179] name fail_futex, interval 1, probability 0, space 0, times 0 [ 201.476010][ T8179] CPU: 0 UID: 0 PID: 8179 Comm: syz.4.531 Not tainted syzkaller #0 PREEMPT(full) [ 201.476038][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.476052][ T8179] Call Trace: [ 201.476061][ T8179] [ 201.476072][ T8179] dump_stack_lvl+0xe8/0x150 [ 201.476108][ T8179] should_fail_ex+0x3eb/0x540 [ 201.476140][ T8179] get_futex_key+0x1b4/0x1580 [ 201.476177][ T8179] ? __lock_acquire+0x747/0x2de0 [ 201.476233][ T8179] ? __pfx_get_futex_key+0x10/0x10 [ 201.476277][ T8179] ? update_se+0x90/0x1020 [ 201.476309][ T8179] futex_wait_setup+0x4a/0x590 [ 201.476346][ T8179] ? __futex_wait+0xdb/0x470 [ 201.476381][ T8179] __futex_wait+0x175/0x470 [ 201.476410][ T8179] ? update_protect_slice+0x128/0x210 [ 201.476447][ T8179] ? __pfx___futex_wait+0x10/0x10 [ 201.476483][ T8179] ? __pfx_futex_wake_mark+0x10/0x10 [ 201.476519][ T8179] ? try_to_wake_up+0x8c5/0x14d0 [ 201.476559][ T8179] futex_wait+0x121/0x390 [ 201.476593][ T8179] ? __pfx_futex_wait+0x10/0x10 [ 201.476643][ T8179] do_futex+0x3e7/0x4e0 [ 201.476675][ T8179] ? __pfx_do_futex+0x10/0x10 [ 201.476699][ T8179] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.476732][ T8179] __se_sys_futex+0x3a8/0x450 [ 201.476765][ T8179] ? __pfx___se_sys_futex+0x10/0x10 [ 201.476790][ T8179] ? rcu_is_watching+0x16/0xb0 [ 201.476820][ T8179] ? __x64_sys_futex+0x21/0xf0 [ 201.476848][ T8179] do_syscall_64+0x166/0x520 [ 201.476870][ T8179] ? trace_irq_disable+0x3b/0x140 [ 201.476903][ T8179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.476927][ T8179] ? clear_bhb_loop+0x70/0xc0 [ 201.476955][ T8179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.476979][ T8179] RIP: 0033:0x7f802cd9e159 [ 201.477001][ T8179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.477021][ T8179] RSP: 002b:00007f802dc410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.477046][ T8179] RAX: ffffffffffffffda RBX: 00007f802d025fa8 RCX: 00007f802cd9e159 [ 201.477063][ T8179] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f802d025fa8 [ 201.477079][ T8179] RBP: 00007f802d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 201.477094][ T8179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.477108][ T8179] R13: 00007f802d026038 R14: 00007fffd1173a60 R15: 00007fffd1173b48 [ 201.477144][ T8179] [ 201.728192][ T5620] Bluetooth: hci3: command tx timeout [ 201.760861][ T8088] team0: Port device team_slave_0 added [ 201.771455][ T8088] team0: Port device team_slave_1 added [ 201.810264][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.810285][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.810312][ T8088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.812355][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.812372][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.812401][ T8088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.055806][ T8088] hsr_slave_0: entered promiscuous mode [ 202.059912][ T8088] hsr_slave_1: entered promiscuous mode [ 202.060693][ T8088] debugfs: 'hsr0' already exists in 'hsr' [ 202.060715][ T8088] Cannot create hsr debugfs directory [ 202.894896][ T5700] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.046294][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 203.048484][ T5700] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 203.050732][ T5700] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 203.057608][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 203.057690][ T5700] usb 5-1: Product: syz [ 203.057726][ T5700] usb 5-1: Manufacturer: syz [ 203.057761][ T5700] usb 5-1: SerialNumber: syz [ 203.098044][ T5700] usb 5-1: config 0 descriptor?? [ 203.102893][ T8204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.130617][ T5700] hub 5-1:0.0: bad descriptor, ignoring hub [ 203.130648][ T5700] hub 5-1:0.0: probe with driver hub failed with error -5 [ 203.246956][ T8219] netlink: 'syz.5.539': attribute type 29 has an invalid length. [ 203.266370][ T8219] netlink: 'syz.5.539': attribute type 29 has an invalid length. [ 203.400419][ T5700] usb 5-1: USB disconnect, device number 13 [ 203.478273][ T8227] netlink: 'syz.5.539': attribute type 29 has an invalid length. [ 203.593981][ T8229] netlink: 'syz.1.541': attribute type 21 has an invalid length. [ 203.594004][ T8229] netlink: 128 bytes leftover after parsing attributes in process `syz.1.541'. [ 203.600562][ T8229] netlink: 3 bytes leftover after parsing attributes in process `syz.1.541'. [ 203.681422][ T8088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.694149][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.697168][ T8088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.734379][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.735515][ T8088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.759349][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.760374][ T8088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.784761][ T8088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.803697][ T5620] Bluetooth: hci3: command tx timeout [ 203.971705][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.005008][ T8088] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.033176][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.033297][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.094015][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.094117][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.204445][ T5700] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 204.467941][ T8260] comedi comedi0: Minor 3 could not be opened [ 204.613361][ T5700] usb 6-1: unable to get BOS descriptor or descriptor too short [ 204.613416][ T5700] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 204.613454][ T5700] usb 6-1: no configurations [ 204.615238][ T5700] usb 6-1: can't read configurations, error -22 [ 204.933677][ T5707] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 205.098691][ T5707] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 205.114751][ T5707] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 205.114821][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.116441][ T5707] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 205.116471][ T5707] usb 5-1: Manufacturer: syz [ 205.121223][ T5707] usb 5-1: config 0 descriptor?? [ 205.238109][ T5707] rc_core: IR keymap rc-hauppauge not found [ 205.238131][ T5707] Registered IR keymap rc-empty [ 205.262136][ T5707] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 205.285416][ T5707] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 205.342344][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.354229][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.356459][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 205.461345][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.584059][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.588765][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 84 [ 205.591488][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.592057][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 205.598482][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.614652][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.802104][ T5766] usb 5-1: USB disconnect, device number 14 [ 205.884252][ T5620] Bluetooth: hci3: command tx timeout [ 205.977418][ T8314] FAULT_INJECTION: forcing a failure. [ 205.977418][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 205.977468][ T8314] CPU: 0 UID: 0 PID: 8314 Comm: syz.5.556 Not tainted syzkaller #0 PREEMPT(full) [ 205.977495][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.977510][ T8314] Call Trace: [ 205.977520][ T8314] [ 205.977530][ T8314] dump_stack_lvl+0xe8/0x150 [ 205.977568][ T8314] should_fail_ex+0x3eb/0x540 [ 205.977600][ T8314] should_failslab+0xa8/0x100 [ 205.977629][ T8314] __kmalloc_cache_noprof+0x9e/0x600 [ 205.977665][ T8314] ? tty_alloc_file+0x4f/0xa0 [ 205.977697][ T8314] ? tty_alloc_file+0x4f/0xa0 [ 205.977737][ T8314] tty_alloc_file+0x4f/0xa0 [ 205.977771][ T8314] ptmx_open+0x5f/0x2e0 [ 205.977818][ T8314] chrdev_open+0x4d9/0x600 [ 205.977844][ T8314] ? __pfx_chrdev_open+0x10/0x10 [ 205.977871][ T8314] ? devcgroup_check_permission+0x31/0x8f0 [ 205.977911][ T8314] ? __pfx_chrdev_open+0x10/0x10 [ 205.977933][ T8314] do_dentry_open+0x80e/0x1360 [ 205.977969][ T8314] vfs_open_consume+0x4a/0x350 [ 205.977992][ T8314] ? path_openat+0x14bb/0x1e40 [ 205.978030][ T8314] path_openat+0x14d7/0x1e40 [ 205.978084][ T8314] do_file_open+0x23e/0x4a0 [ 205.978125][ T8314] ? __pfx_do_file_open+0x10/0x10 [ 205.978183][ T8314] ? _raw_spin_unlock+0x28/0x50 [ 205.978216][ T8314] ? alloc_fd+0x651/0x6c0 [ 205.978253][ T8314] do_sys_openat2+0x115/0x200 [ 205.978280][ T8314] ? __se_sys_futex+0x3a8/0x450 [ 205.978306][ T8314] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.978337][ T8314] ? rcu_is_watching+0x16/0xb0 [ 205.978366][ T8314] __x64_sys_openat+0x138/0x170 [ 205.978398][ T8314] do_syscall_64+0x166/0x520 [ 205.978418][ T8314] ? trace_irq_disable+0x3b/0x140 [ 205.978450][ T8314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.978473][ T8314] ? clear_bhb_loop+0x70/0xc0 [ 205.978500][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.978524][ T8314] RIP: 0033:0x7f24a9d9e159 [ 205.978545][ T8314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.978565][ T8314] RSP: 002b:00007f24aaba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 205.978591][ T8314] RAX: ffffffffffffffda RBX: 00007f24aa025fa0 RCX: 00007f24a9d9e159 [ 205.978609][ T8314] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 205.978625][ T8314] RBP: 00007f24a9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 205.978641][ T8314] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000000 [ 205.978655][ T8314] R13: 00007f24aa026038 R14: 00007f24aa025fa0 R15: 00007ffee2139b68 [ 205.978692][ T8314] [ 206.612465][ T8088] veth0_vlan: entered promiscuous mode [ 206.675234][ T8088] veth1_vlan: entered promiscuous mode [ 206.702781][ T8329] FAULT_INJECTION: forcing a failure. [ 206.702781][ T8329] name failslab, interval 1, probability 0, space 0, times 0 [ 206.702815][ T8329] CPU: 0 UID: 0 PID: 8329 Comm: syz.4.559 Not tainted syzkaller #0 PREEMPT(full) [ 206.702840][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.702854][ T8329] Call Trace: [ 206.702864][ T8329] [ 206.702874][ T8329] dump_stack_lvl+0xe8/0x150 [ 206.702910][ T8329] should_fail_ex+0x3eb/0x540 [ 206.702942][ T8329] should_failslab+0xa8/0x100 [ 206.702970][ T8329] __kmalloc_noprof+0xf9/0x710 [ 206.703002][ T8329] ? d_path+0x3f8/0x530 [ 206.703026][ T8329] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 206.703053][ T8329] ? landlock_init_hierarchy_log+0x16c/0x5f0 [ 206.703089][ T8329] landlock_init_hierarchy_log+0x16c/0x5f0 [ 206.703121][ T8329] landlock_merge_ruleset+0x72c/0xab0 [ 206.703164][ T8329] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 206.703210][ T8329] do_syscall_64+0x166/0x520 [ 206.703232][ T8329] ? trace_irq_disable+0x3b/0x140 [ 206.703264][ T8329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.703289][ T8329] ? clear_bhb_loop+0x70/0xc0 [ 206.703327][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.703350][ T8329] RIP: 0033:0x7f802cd9e159 [ 206.703371][ T8329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.703390][ T8329] RSP: 002b:00007f802dc20028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 206.703414][ T8329] RAX: ffffffffffffffda RBX: 00007f802d026090 RCX: 00007f802cd9e159 [ 206.703432][ T8329] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 206.703446][ T8329] RBP: 00007f802ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 206.703468][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.703481][ T8329] R13: 00007f802d026128 R14: 00007f802d026090 R15: 00007fffd1173b48 [ 206.703515][ T8329] [ 206.844526][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 207.008937][ T8088] veth0_macvtap: entered promiscuous mode [ 207.041088][ T8088] veth1_macvtap: entered promiscuous mode [ 207.088246][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.126351][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.157752][ T85] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.236524][ T85] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.278950][ T85] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.280269][ T85] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.431374][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.431398][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.576164][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.576189][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.634867][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 207.873644][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 208.034898][ T9] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00 [ 208.036136][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 208.036178][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 208.036219][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.091641][ T8353] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.091771][ T8353] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.210346][ T7128] hid-generic 0005:4C4A:0009.0003: item fetching failed at offset 0/1 [ 208.211697][ T7128] hid-generic 0005:4C4A:0009.0003: probe with driver hid-generic failed with error -22 [ 208.232220][ T9] ushc 5-1:1.0: probe with driver ushc failed with error -110 [ 209.183617][ T5700] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.334352][ T5700] usb 7-1: Using ep0 maxpacket: 8 [ 209.335546][ T5700] usb 7-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 209.339707][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.339741][ T5700] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.339789][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.351829][ T5700] usb 7-1: config 0 descriptor?? [ 209.820540][ T5700] input: HID 05ac:8240 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8240.0004/input/input13 [ 209.872432][ T8434] netlink: 'syz.1.579': attribute type 12 has an invalid length. [ 209.872452][ T8434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.579'. [ 210.082898][ T5700] appleir 0003:05AC:8240.0004: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 05ac:8240] on usb-dummy_hcd.6-1/input0 [ 210.394599][ T8441] erofs (device nullb0): cannot find valid erofs superblock [ 210.411781][ T5766] usb 7-1: USB disconnect, device number 2 [ 210.667262][ T5700] usb 5-1: USB disconnect, device number 15 [ 210.762885][ T8456] netlink: 44 bytes leftover after parsing attributes in process `syz.1.586'. [ 210.844477][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.985990][ T8464] overlayfs: fs on 'lower2' does not support file handles, falling back to index=off,nfs_export=off. [ 210.990670][ T8464] overlayfs: failed to resolve './bus': -2 [ 211.006848][ T9] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 211.031287][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.031347][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 211.031377][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 211.031423][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.597109][ T8485] netlink: 'syz.6.595': attribute type 21 has an invalid length. [ 211.770844][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.776333][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.106803][ T9] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 212.106835][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 212.106851][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 212.138941][ T9] cxacru 6-1:1.0: probe with driver cxacru failed with error -71 [ 212.155654][ T9] usb 6-1: USB disconnect, device number 9 [ 213.298327][ T8527] overlayfs: failed to clone upperpath [ 213.969229][ T8549] netlink: 'syz.5.617': attribute type 21 has an invalid length. [ 214.081976][ T8555] netlink: 44 bytes leftover after parsing attributes in process `syz.5.619'. [ 214.309618][ T8563] netlink: 'syz.5.623': attribute type 11 has an invalid length. [ 214.312317][ T8563] evm: overlay not supported [ 214.384193][ T8565] netlink: 'syz.1.624': attribute type 5 has an invalid length. [ 214.384220][ T8565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 214.512432][ T9] hid (null): bogus close delimiter [ 214.512515][ T9] hid (null): unknown global tag 0xd [ 214.554656][ T9] logitech-hidpp-device 0005:046D:B012.0005: unknown main item tag 0x0 [ 214.554693][ T9] logitech-hidpp-device 0005:046D:B012.0005: unknown main item tag 0x0 [ 214.554723][ T9] logitech-hidpp-device 0005:046D:B012.0005: unknown main item tag 0x0 [ 214.554760][ T9] logitech-hidpp-device 0005:046D:B012.0005: unknown main item tag 0x4 [ 214.554787][ T9] logitech-hidpp-device 0005:046D:B012.0005: ignoring exceeding usage max [ 214.557048][ T9] logitech-hidpp-device 0005:046D:B012.0005: bogus close delimiter [ 214.557072][ T9] logitech-hidpp-device 0005:046D:B012.0005: item 0 0 2 10 parsing failed [ 214.559500][ T9] logitech-hidpp-device 0005:046D:B012.0005: hidpp_probe:parse failed [ 214.559603][ T9] logitech-hidpp-device 0005:046D:B012.0005: probe with driver logitech-hidpp-device failed with error -22 [ 214.668867][ T8571] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 214.704438][ T1009] IPVS: starting estimator thread 0... [ 214.805178][ T8572] IPVS: using max 31 ests per chain, 74400 per kthread [ 214.809506][ T8579] ovs-dp0: entered promiscuous mode [ 215.183675][ T5700] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 215.335222][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 215.336800][ T5700] usb 5-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 215.341675][ T5700] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.341700][ T5700] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.341718][ T5700] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.341743][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.354601][ T5700] usb 5-1: config 0 descriptor?? [ 215.808308][ T5700] wacom 0003:056A:0023.0006: unknown main item tag 0x0 [ 215.808349][ T5700] wacom 0003:056A:0023.0006: unknown main item tag 0x0 [ 215.808378][ T5700] wacom 0003:056A:0023.0006: unknown main item tag 0x0 [ 215.808416][ T5700] wacom 0003:056A:0023.0006: unknown main item tag 0x0 [ 215.808444][ T5700] wacom 0003:056A:0023.0006: unknown main item tag 0x0 [ 215.808471][ T5700] wacom 0003:056A:0023.0006: unknown main item tag 0x0 [ 216.020536][ T5700] usb 5-1: USB disconnect, device number 16 [ 216.351375][ T8635] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 216.351406][ T8635] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.366336][ T8635] vhci_hcd vhci_hcd.0: Device attached [ 216.543803][ T5700] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 216.603820][ T5700] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 216.623872][ T62] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 216.777582][ T62] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 216.778508][ T62] usb 6-1: config 0 has no interfaces? [ 216.778543][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.813061][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 216.817736][ T62] usb 6-1: config 0 descriptor?? [ 217.123682][ T5700] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 217.165313][ T5664] usb 6-1: USB disconnect, device number 10 [ 217.182873][ T8636] vhci_hcd: connection reset by peer [ 217.185251][ T5700] usb 43-1: device descriptor read/64, error -71 [ 217.222120][ T1009] vhci_hcd vhci_hcd.5: stop threads [ 217.239723][ T1009] vhci_hcd vhci_hcd.5: release socket [ 217.250244][ T1009] vhci_hcd vhci_hcd.5: disconnect device [ 217.368578][ T5700] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 217.455441][ T8672] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm syz.6.650: bg 4: bad block bitmap checksum [ 217.455606][ T8672] EXT4-fs warning (device sda1): ext4_trim_all_free:7005: Error -74 loading buddy information for 4 [ 217.875592][ T5664] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 218.030736][ T5664] usb 7-1: unable to get BOS descriptor or descriptor too short [ 218.030793][ T5664] usb 7-1: New USB device found, idVendor=a019, idProduct=117f, bcdDevice=16.50 [ 218.030833][ T5664] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 218.042328][ T5664] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 218.042449][ T5664] usb 7-1: can't read configurations, error -61 [ 218.224703][ T5664] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 218.388723][ T5664] usb 7-1: unable to get BOS descriptor or descriptor too short [ 218.388779][ T5664] usb 7-1: New USB device found, idVendor=a019, idProduct=117f, bcdDevice=16.50 [ 218.388818][ T5664] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 218.390950][ T5664] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 218.390989][ T5664] usb 7-1: can't read configurations, error -61 [ 218.392764][ T5664] usb usb7-port1: attempt power cycle [ 218.764869][ T5664] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 218.806521][ T5664] usb 7-1: unable to get BOS descriptor or descriptor too short [ 218.806572][ T5664] usb 7-1: New USB device found, idVendor=a019, idProduct=117f, bcdDevice=16.50 [ 218.806610][ T5664] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 218.811405][ T5664] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 218.811440][ T5664] usb 7-1: can't read configurations, error -61 [ 218.933899][ T5664] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 218.962879][ T5664] usb 7-1: unable to get BOS descriptor or descriptor too short [ 218.962933][ T5664] usb 7-1: New USB device found, idVendor=a019, idProduct=117f, bcdDevice=16.50 [ 218.962972][ T5664] usb 7-1: too many configurations: 123, using maximum allowed: 8 [ 218.968325][ T5664] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 218.968423][ T5664] usb 7-1: can't read configurations, error -61 [ 218.970423][ T5664] usb usb7-port1: unable to enumerate USB device [ 219.185214][ T8709] infiniband syz2: set active [ 219.185323][ T8709] infiniband syz2: added team_slave_0 [ 219.214463][ T8709] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 219.214510][ T8709] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 219.214555][ T8709] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 219.316199][ T8709] RDS/IB: syz2: added [ 219.316262][ T8709] smc: adding ib device syz2 with port count 1 [ 219.316285][ T8709] smc: ib device syz2 port 1 has no pnetid [ 219.323282][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.358304][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.417719][ T5664] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 219.573729][ T5664] usb 5-1: Invalid ep0 maxpacket: 64 [ 219.703594][ T5664] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 219.896708][ T5664] usb 5-1: Invalid ep0 maxpacket: 64 [ 219.910444][ T5664] usb usb5-port1: attempt power cycle [ 220.263599][ T5664] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 220.285049][ T5664] usb 5-1: Invalid ep0 maxpacket: 64 [ 220.423648][ T5664] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 220.454816][ T5664] usb 5-1: Invalid ep0 maxpacket: 64 [ 220.455082][ T5664] usb usb5-port1: unable to enumerate USB device [ 221.470419][ T8763] serio: Serial port ptm0 [ 222.893636][ T7127] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 223.046099][ T7127] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 223.047251][ T7127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.047308][ T7127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.047333][ T7127] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.047359][ T7127] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.047403][ T7127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.505765][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.506242][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.537211][ T7127] gud 5-1:1.0: Unexpected status OK for failed transfer [ 223.537260][ T7127] gud 5-1:1.0: probe with driver gud failed with error -32 [ 223.586872][ T8814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 223.586923][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.681'. [ 223.746180][ T7127] usb 5-1: USB disconnect, device number 21 [ 224.941280][ T8849] netlink: 'syz.4.689': attribute type 12 has an invalid length. [ 224.959681][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.101347][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.101489][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.145058][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.145221][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.145345][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.145466][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.145663][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.145788][ T8849] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 225.830631][ T8869] capability: warning: `syz.4.693' uses 32-bit capabilities (legacy support in use) [ 226.680360][ T8884] FAULT_INJECTION: forcing a failure. [ 226.680360][ T8884] name fail_futex, interval 1, probability 0, space 0, times 0 [ 226.680406][ T8884] CPU: 0 UID: 0 PID: 8884 Comm: syz.4.698 Not tainted syzkaller #0 PREEMPT(full) [ 226.680434][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.680448][ T8884] Call Trace: [ 226.680458][ T8884] [ 226.680468][ T8884] dump_stack_lvl+0xe8/0x150 [ 226.680504][ T8884] should_fail_ex+0x3eb/0x540 [ 226.680533][ T8884] get_futex_key+0x1b4/0x1580 [ 226.680566][ T8884] ? __lock_acquire+0x747/0x2de0 [ 226.680607][ T8884] ? __pfx_get_futex_key+0x10/0x10 [ 226.680646][ T8884] ? update_se+0x90/0x1020 [ 226.680675][ T8884] futex_wait_setup+0x4a/0x590 [ 226.680708][ T8884] ? __futex_wait+0xdb/0x470 [ 226.680740][ T8884] __futex_wait+0x175/0x470 [ 226.680768][ T8884] ? update_protect_slice+0x128/0x210 [ 226.680802][ T8884] ? __pfx___futex_wait+0x10/0x10 [ 226.680834][ T8884] ? __pfx_futex_wake_mark+0x10/0x10 [ 226.680867][ T8884] ? try_to_wake_up+0x8c5/0x14d0 [ 226.680900][ T8884] futex_wait+0x121/0x390 [ 226.680930][ T8884] ? __pfx_futex_wait+0x10/0x10 [ 226.680974][ T8884] do_futex+0x3e7/0x4e0 [ 226.681001][ T8884] ? __pfx_do_futex+0x10/0x10 [ 226.681032][ T8884] __se_sys_futex+0x3a8/0x450 [ 226.681061][ T8884] ? __pfx___se_sys_futex+0x10/0x10 [ 226.681083][ T8884] ? __se_sys_renameat2+0xfb/0x2c0 [ 226.681108][ T8884] ? kmem_cache_free+0x182/0x650 [ 226.681149][ T8884] ? __x64_sys_futex+0x21/0xf0 [ 226.681174][ T8884] do_syscall_64+0x166/0x520 [ 226.681194][ T8884] ? trace_irq_disable+0x3b/0x140 [ 226.681224][ T8884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.681244][ T8884] ? clear_bhb_loop+0x70/0xc0 [ 226.681276][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.681299][ T8884] RIP: 0033:0x7f802cd9e159 [ 226.681322][ T8884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.681341][ T8884] RSP: 002b:00007f802dc410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 226.681367][ T8884] RAX: ffffffffffffffda RBX: 00007f802d025fa8 RCX: 00007f802cd9e159 [ 226.681385][ T8884] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f802d025fa8 [ 226.681411][ T8884] RBP: 00007f802d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 226.681427][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.681441][ T8884] R13: 00007f802d026038 R14: 00007fffd1173a60 R15: 00007fffd1173b48 [ 226.681477][ T8884] [ 227.232068][ T8888] input: syz0 as /devices/virtual/input/input14 [ 227.433663][ T5700] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 227.583625][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 227.584431][ T5700] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 227.585427][ T5700] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 227.585463][ T5700] usb 5-1: config 0 has no interface number 0 [ 227.585506][ T5700] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.585532][ T5700] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 227.585562][ T5700] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 227.585590][ T5700] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 42997, setting to 1024 [ 227.585619][ T5700] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.588590][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.588618][ T5700] usb 5-1: Product: syz [ 227.588635][ T5700] usb 5-1: Manufacturer: syz [ 227.588651][ T5700] usb 5-1: SerialNumber: syz [ 227.718251][ T5700] usb 5-1: config 0 descriptor?? [ 227.719723][ T8886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.935564][ T5700] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 228.182972][ C1] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 228.195518][ T5700] usb 5-1: USB disconnect, device number 22 [ 229.384095][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.386395][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.428133][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.428269][ T8928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.430184][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.430333][ T8928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.568881][ T8928] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 230.333584][ T5700] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 230.487644][ T5700] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 230.488948][ T5700] usb 7-1: config index 0 descriptor too short (expected 5668, got 36) [ 230.488977][ T5700] usb 7-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 230.489000][ T5700] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 230.489023][ T5700] usb 7-1: config 3 has no interface number 0 [ 230.489065][ T5700] usb 7-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 230.489094][ T5700] usb 7-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.491171][ T5700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.491199][ T5700] usb 7-1: Product: syz [ 230.491216][ T5700] usb 7-1: Manufacturer: syz [ 230.491231][ T5700] usb 7-1: SerialNumber: syz [ 230.587353][ T8939] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 231.148600][ T5700] usb-storage 7-1:3.20: USB Mass Storage device detected [ 231.178168][ T5700] usb-storage 7-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 231.195861][ T5700] scsi host1: usb-storage 7-1:3.20 [ 231.261831][ T5700] usb 7-1: USB disconnect, device number 7 [ 231.857604][ T8966] FAULT_INJECTION: forcing a failure. [ 231.857604][ T8966] name fail_futex, interval 1, probability 0, space 0, times 0 [ 231.857641][ T8966] CPU: 0 UID: 0 PID: 8966 Comm: syz.6.726 Not tainted syzkaller #0 PREEMPT(full) [ 231.857668][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.857683][ T8966] Call Trace: [ 231.857692][ T8966] [ 231.857702][ T8966] dump_stack_lvl+0xe8/0x150 [ 231.857739][ T8966] should_fail_ex+0x3eb/0x540 [ 231.857771][ T8966] get_futex_key+0x1b4/0x1580 [ 231.857807][ T8966] ? arch_stack_walk+0xfb/0x150 [ 231.857843][ T8966] ? __pfx_get_futex_key+0x10/0x10 [ 231.857877][ T8966] ? stack_trace_save+0xa9/0x100 [ 231.857909][ T8966] ? __pfx_stack_trace_save+0x10/0x10 [ 231.857939][ T8966] ? kasan_save_track+0x4f/0x80 [ 231.857986][ T8966] futex_wake+0x119/0x5f0 [ 231.858014][ T8966] ? kasan_save_track+0x4f/0x80 [ 231.858047][ T8966] ? kasan_save_track+0x3e/0x80 [ 231.858082][ T8966] ? kmem_cache_free+0x182/0x650 [ 231.858124][ T8966] ? __se_sys_renameat2+0xfb/0x2c0 [ 231.858152][ T8966] ? __pfx_futex_wake+0x10/0x10 [ 231.858199][ T8966] do_futex+0x458/0x4e0 [ 231.858230][ T8966] ? __pfx_do_futex+0x10/0x10 [ 231.858265][ T8966] __se_sys_futex+0x3a8/0x450 [ 231.858298][ T8966] ? __pfx___se_sys_futex+0x10/0x10 [ 231.858324][ T8966] ? __se_sys_renameat2+0xfb/0x2c0 [ 231.858348][ T8966] ? kmem_cache_free+0x182/0x650 [ 231.858389][ T8966] ? __x64_sys_futex+0x21/0xf0 [ 231.858419][ T8966] do_syscall_64+0x166/0x520 [ 231.858440][ T8966] ? trace_irq_disable+0x3b/0x140 [ 231.858474][ T8966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.858498][ T8966] ? clear_bhb_loop+0x70/0xc0 [ 231.858528][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.858552][ T8966] RIP: 0033:0x7fbd4c59e159 [ 231.858574][ T8966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.858595][ T8966] RSP: 002b:00007fbd4d48f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 231.858621][ T8966] RAX: ffffffffffffffda RBX: 00007fbd4c825fa8 RCX: 00007fbd4c59e159 [ 231.858638][ T8966] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbd4c825fac [ 231.858655][ T8966] RBP: 00007fbd4c825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 231.858671][ T8966] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 231.858687][ T8966] R13: 00007fbd4c826038 R14: 00007ffd4ac552f0 R15: 00007ffd4ac553d8 [ 231.858723][ T8966] [ 232.355713][ T8972] netlink: 168 bytes leftover after parsing attributes in process `syz.4.729'. [ 232.776042][ T8981] pvfs2: Unknown parameter '*' [ 232.810897][ T8983] echo interval is out of bounds [ 232.810897][ T8983] [ 232.812116][ T8983] CIFS: VFS: echo interval is out of bounds [ 232.962025][ T8986] FAULT_INJECTION: forcing a failure. [ 232.962025][ T8986] name failslab, interval 1, probability 0, space 0, times 0 [ 232.962059][ T8986] CPU: 0 UID: 0 PID: 8986 Comm: syz.4.735 Not tainted syzkaller #0 PREEMPT(full) [ 232.962086][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.962100][ T8986] Call Trace: [ 232.962110][ T8986] [ 232.962120][ T8986] dump_stack_lvl+0xe8/0x150 [ 232.962157][ T8986] should_fail_ex+0x3eb/0x540 [ 232.962190][ T8986] should_failslab+0xa8/0x100 [ 232.962219][ T8986] __kmalloc_noprof+0xf9/0x710 [ 232.962251][ T8986] ? __get_acl+0xa5/0x410 [ 232.962284][ T8986] ? security_inode_init_security+0x102/0x3e0 [ 232.962314][ T8986] ? security_inode_init_security+0x102/0x3e0 [ 232.962352][ T8986] security_inode_init_security+0x102/0x3e0 [ 232.962384][ T8986] ? __pfx_shmem_initxattrs+0x10/0x10 [ 232.962423][ T8986] ? __pfx_security_inode_init_security+0x10/0x10 [ 232.962463][ T8986] ? set_cached_acl+0xd2/0x180 [ 232.962496][ T8986] ? simple_acl_create+0x184/0x1b0 [ 232.962537][ T8986] shmem_mknod+0x1ea/0x340 [ 232.962576][ T8986] shmem_mkdir+0x33/0x70 [ 232.962611][ T8986] vfs_mkdir+0x398/0x710 [ 232.962640][ T8986] filename_mkdirat+0x285/0x510 [ 232.962661][ T8986] ? __might_fault+0xaf/0x130 [ 232.962695][ T8986] ? __pfx_filename_mkdirat+0x10/0x10 [ 232.962726][ T8986] ? do_getname+0x151/0x250 [ 232.962756][ T8986] __se_sys_mkdirat+0x35/0x150 [ 232.962782][ T8986] do_syscall_64+0x166/0x520 [ 232.962804][ T8986] ? trace_irq_disable+0x3b/0x140 [ 232.962837][ T8986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.962862][ T8986] ? clear_bhb_loop+0x70/0xc0 [ 232.962891][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.962914][ T8986] RIP: 0033:0x7f802cd9e159 [ 232.962936][ T8986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.962956][ T8986] RSP: 002b:00007f802dc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 232.962982][ T8986] RAX: ffffffffffffffda RBX: 00007f802d025fa0 RCX: 00007f802cd9e159 [ 232.963000][ T8986] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 232.963016][ T8986] RBP: 00007f802ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 232.963032][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.963046][ T8986] R13: 00007f802d026038 R14: 00007f802d025fa0 R15: 00007fffd1173b48 [ 232.963082][ T8986] [ 233.401259][ T8992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.611168][ T8997] FAULT_INJECTION: forcing a failure. [ 233.611168][ T8997] name failslab, interval 1, probability 0, space 0, times 0 [ 233.611205][ T8997] CPU: 1 UID: 0 PID: 8997 Comm: syz.4.741 Not tainted syzkaller #0 PREEMPT(full) [ 233.611232][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.611246][ T8997] Call Trace: [ 233.611256][ T8997] [ 233.611266][ T8997] dump_stack_lvl+0xe8/0x150 [ 233.611304][ T8997] should_fail_ex+0x3eb/0x540 [ 233.611335][ T8997] should_failslab+0xa8/0x100 [ 233.611364][ T8997] __kmalloc_node_noprof+0xfb/0x720 [ 233.611398][ T8997] ? __raw_spin_lock_init+0x45/0x100 [ 233.611426][ T8997] ? mempool_init_node+0x121/0x510 [ 233.611458][ T8997] ? mempool_init_node+0x121/0x510 [ 233.611500][ T8997] ? __init_waitqueue_head+0xa8/0x150 [ 233.611530][ T8997] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 233.611563][ T8997] mempool_init_node+0x121/0x510 [ 233.611595][ T8997] ? __pfx_mempool_free_slab+0x10/0x10 [ 233.611637][ T8997] ? xa_load+0x1db/0x210 [ 233.611663][ T8997] ? __pfx_mempool_free_slab+0x10/0x10 [ 233.611695][ T8997] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 233.611727][ T8997] mempool_init_noprof+0x3a/0x50 [ 233.611763][ T8997] bioset_init+0x2ee/0x7e0 [ 233.611801][ T8997] ? __pfx_bioset_init+0x10/0x10 [ 233.611831][ T8997] ? __kasan_kmalloc+0x93/0xb0 [ 233.611856][ T8997] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 233.611892][ T8997] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 233.611925][ T8997] ? __alloc_disk_node+0x5e/0x600 [ 233.611955][ T8997] ? __alloc_disk_node+0x5e/0x600 [ 233.611994][ T8997] __alloc_disk_node+0x7b/0x600 [ 233.612031][ T8997] __blk_alloc_disk+0x105/0x1d0 [ 233.612066][ T8997] ? __pfx___blk_alloc_disk+0x10/0x10 [ 233.612125][ T8997] ? __raw_spin_lock_init+0x45/0x100 [ 233.612156][ T8997] dm_create+0x476/0xf70 [ 233.612188][ T8997] dev_create+0x1f7/0x400 [ 233.612226][ T8997] ? __pfx_dev_create+0x10/0x10 [ 233.612262][ T8997] ? __might_fault+0xaf/0x130 [ 233.612298][ T8997] dm_ctl_ioctl+0x9ec/0xe10 [ 233.612343][ T8997] ? __pfx_dev_create+0x10/0x10 [ 233.612378][ T8997] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 233.612444][ T8997] ? __fget_files+0x2a/0x420 [ 233.612478][ T8997] ? __fget_files+0x3a2/0x420 [ 233.612511][ T8997] ? __fget_files+0x2a/0x420 [ 233.612545][ T8997] ? bpf_lsm_file_ioctl+0x9/0x20 [ 233.612575][ T8997] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 233.612610][ T8997] __se_sys_ioctl+0xfc/0x170 [ 233.612650][ T8997] do_syscall_64+0x166/0x520 [ 233.612671][ T8997] ? trace_irq_disable+0x3b/0x140 [ 233.612704][ T8997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.612729][ T8997] ? clear_bhb_loop+0x70/0xc0 [ 233.612758][ T8997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.612782][ T8997] RIP: 0033:0x7f802cd9e159 [ 233.612804][ T8997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.612824][ T8997] RSP: 002b:00007f802dc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.612850][ T8997] RAX: ffffffffffffffda RBX: 00007f802d025fa0 RCX: 00007f802cd9e159 [ 233.612868][ T8997] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 233.612884][ T8997] RBP: 00007f802ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 233.612899][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.612913][ T8997] R13: 00007f802d026038 R14: 00007f802d025fa0 R15: 00007fffd1173b48 [ 233.612949][ T8997] [ 234.173792][ T8999] netlink: 52 bytes leftover after parsing attributes in process `syz.1.740'. [ 234.443742][ T5700] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 234.595311][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 234.596639][ T5700] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 234.597857][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.601870][ T5700] usb 5-1: config 0 descriptor?? [ 234.641767][ T5700] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 234.681508][ T9012] FAULT_INJECTION: forcing a failure. [ 234.681508][ T9012] name failslab, interval 1, probability 0, space 0, times 0 [ 234.681544][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.6.745 Not tainted syzkaller #0 PREEMPT(full) [ 234.681570][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.681585][ T9012] Call Trace: [ 234.681594][ T9012] [ 234.681605][ T9012] dump_stack_lvl+0xe8/0x150 [ 234.681644][ T9012] should_fail_ex+0x3eb/0x540 [ 234.681681][ T9012] should_failslab+0xa8/0x100 [ 234.681710][ T9012] __kmalloc_noprof+0xf9/0x710 [ 234.681745][ T9012] ? tomoyo_encode+0x2ad/0x570 [ 234.681785][ T9012] ? tomoyo_encode+0x2ad/0x570 [ 234.681826][ T9012] tomoyo_encode+0x2ad/0x570 [ 234.681862][ T9012] tomoyo_realpath_from_path+0x5fa/0x640 [ 234.681914][ T9012] ? tomoyo_path_number_perm+0x219/0x5f0 [ 234.681941][ T9012] tomoyo_path_number_perm+0x246/0x5f0 [ 234.681969][ T9012] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 234.682041][ T9012] ? __pfx_current_check_access_path+0x10/0x10 [ 234.682070][ T9012] ? d_splice_alias_ops+0x119/0x440 [ 234.682092][ T9012] ? d_splice_alias+0x12/0x30 [ 234.682130][ T9012] ? lookup_one_qstr_excl+0x1d4/0x360 [ 234.682168][ T9012] tomoyo_path_mkdir+0xb0/0xf0 [ 234.682201][ T9012] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 234.682238][ T9012] ? __pfx_filename_create+0x10/0x10 [ 234.682280][ T9012] security_path_mkdir+0x169/0x350 [ 234.682320][ T9012] filename_mkdirat+0x200/0x510 [ 234.682348][ T9012] ? __might_fault+0xaf/0x130 [ 234.682387][ T9012] ? __pfx_filename_mkdirat+0x10/0x10 [ 234.682415][ T9012] ? do_getname+0x151/0x250 [ 234.682445][ T9012] __se_sys_mkdirat+0x35/0x150 [ 234.682472][ T9012] do_syscall_64+0x166/0x520 [ 234.682494][ T9012] ? trace_irq_disable+0x3b/0x140 [ 234.682535][ T9012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.682560][ T9012] ? clear_bhb_loop+0x70/0xc0 [ 234.682589][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.682613][ T9012] RIP: 0033:0x7fbd4c59e159 [ 234.682636][ T9012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.682657][ T9012] RSP: 002b:00007fbd4d48f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 234.682682][ T9012] RAX: ffffffffffffffda RBX: 00007fbd4c825fa0 RCX: 00007fbd4c59e159 [ 234.682700][ T9012] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 234.682717][ T9012] RBP: 00007fbd4c63506b R08: 0000000000000000 R09: 0000000000000000 [ 234.682732][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.682746][ T9012] R13: 00007fbd4c826038 R14: 00007fbd4c825fa0 R15: 00007ffd4ac553d8 [ 234.682786][ T9012] [ 234.699573][ T9012] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.445865][ T9026] validate_nla: 26 callbacks suppressed [ 235.445891][ T9026] netlink: 'syz.6.750': attribute type 21 has an invalid length. [ 235.445908][ T9026] netlink: 'syz.6.750': attribute type 5 has an invalid length. [ 235.445923][ T9026] netlink: 152 bytes leftover after parsing attributes in process `syz.6.750'. [ 235.492030][ T5700] gspca_vc032x: reg_w err -71 [ 235.492072][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492085][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492095][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492106][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492115][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492125][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492134][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492144][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492153][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492163][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492173][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492184][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492193][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492203][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492214][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492223][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492234][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492243][ T5700] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.492253][ T5700] gspca_vc032x: Unknown sensor... [ 235.492329][ T5700] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 235.571072][ T9028] tmpfs: Unknown parameter '&:' [ 235.622980][ T5700] usb 5-1: USB disconnect, device number 23 [ 236.008739][ T9036] FAULT_INJECTION: forcing a failure. [ 236.008739][ T9036] name fail_futex, interval 1, probability 0, space 0, times 0 [ 236.008791][ T9036] CPU: 0 UID: 0 PID: 9036 Comm: syz.5.755 Not tainted syzkaller #0 PREEMPT(full) [ 236.008817][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.008833][ T9036] Call Trace: [ 236.008842][ T9036] [ 236.008852][ T9036] dump_stack_lvl+0xe8/0x150 [ 236.008887][ T9036] should_fail_ex+0x3eb/0x540 [ 236.008921][ T9036] get_futex_key+0x1b4/0x1580 [ 236.008956][ T9036] ? __pfx_get_futex_key+0x10/0x10 [ 236.008980][ T9036] ? lock_acquire+0x115/0x350 [ 236.009008][ T9036] ? __lock_acquire+0x747/0x2de0 [ 236.009034][ T9036] futex_wait_setup+0x4a/0x590 [ 236.009060][ T9036] ? __futex_wait+0xdb/0x470 [ 236.009085][ T9036] __futex_wait+0x175/0x470 [ 236.009112][ T9036] ? __pfx___futex_wait+0x10/0x10 [ 236.009138][ T9036] ? __pfx_futex_wake_mark+0x10/0x10 [ 236.009164][ T9036] ? try_to_wake_up+0x8c5/0x14d0 [ 236.009189][ T9036] futex_wait+0x121/0x390 [ 236.009212][ T9036] ? __pfx_futex_wait+0x10/0x10 [ 236.009247][ T9036] do_futex+0x3e7/0x4e0 [ 236.009268][ T9036] ? __pfx_do_futex+0x10/0x10 [ 236.009292][ T9036] __se_sys_futex+0x3a8/0x450 [ 236.009315][ T9036] ? __pfx___se_sys_futex+0x10/0x10 [ 236.009331][ T9036] ? __se_sys_renameat2+0xfb/0x2c0 [ 236.009350][ T9036] ? kmem_cache_free+0x182/0x650 [ 236.009378][ T9036] ? __x64_sys_futex+0x21/0xf0 [ 236.009397][ T9036] do_syscall_64+0x166/0x520 [ 236.009412][ T9036] ? trace_irq_disable+0x3b/0x140 [ 236.009436][ T9036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.009452][ T9036] ? clear_bhb_loop+0x70/0xc0 [ 236.009472][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.009488][ T9036] RIP: 0033:0x7f24a9d9e159 [ 236.009504][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.009517][ T9036] RSP: 002b:00007f24aaba50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.009536][ T9036] RAX: ffffffffffffffda RBX: 00007f24aa025fa8 RCX: 00007f24a9d9e159 [ 236.009548][ T9036] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24aa025fa8 [ 236.009558][ T9036] RBP: 00007f24aa025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 236.009568][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.009577][ T9036] R13: 00007f24aa026038 R14: 00007ffee2139a80 R15: 00007ffee2139b68 [ 236.009602][ T9036] [ 236.533920][ T974] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.669056][ T9043] FAULT_INJECTION: forcing a failure. [ 236.669056][ T9043] name failslab, interval 1, probability 0, space 0, times 0 [ 236.669093][ T9043] CPU: 0 UID: 0 PID: 9043 Comm: syz.4.759 Not tainted syzkaller #0 PREEMPT(full) [ 236.669122][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.669148][ T9043] Call Trace: [ 236.669158][ T9043] [ 236.669168][ T9043] dump_stack_lvl+0xe8/0x150 [ 236.669206][ T9043] should_fail_ex+0x3eb/0x540 [ 236.669238][ T9043] should_failslab+0xa8/0x100 [ 236.669267][ T9043] __kmalloc_cache_noprof+0x9e/0x600 [ 236.669302][ T9043] ? lock_acquire+0x115/0x350 [ 236.669336][ T9043] ? xfrm_policy_inexact_insert_node+0xa86/0xb90 [ 236.669361][ T9043] ? xfrm_policy_inexact_insert_node+0xa86/0xb90 [ 236.669393][ T9043] xfrm_policy_inexact_insert_node+0xa86/0xb90 [ 236.669420][ T9043] ? lock_acquire+0x115/0x350 [ 236.669470][ T9043] xfrm_policy_inexact_alloc_chain+0x7a7/0xe80 [ 236.669500][ T9043] ? xfrm_policy_inexact_insert+0xc9/0x180 [ 236.669534][ T9043] xfrm_policy_inexact_insert+0xc9/0x180 [ 236.669569][ T9043] xfrm_policy_insert+0x113/0x960 [ 236.669612][ T9043] xfrm_add_policy+0x2ea/0x690 [ 236.669655][ T9043] ? __pfx_xfrm_add_policy+0x10/0x10 [ 236.669687][ T9043] ? apparmor_capable+0x126/0x170 [ 236.669726][ T9043] ? __nla_parse+0x40/0x60 [ 236.669762][ T9043] xfrm_user_rcv_msg+0x7a8/0xf30 [ 236.669799][ T9043] ? look_up_lock_class+0x57/0x110 [ 236.669836][ T9043] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 236.669906][ T9043] ? __mutex_trylock_common+0x15f/0x270 [ 236.669936][ T9043] ? __pfx___mutex_trylock_common+0x10/0x10 [ 236.669966][ T9043] ? rcu_is_watching+0x16/0xb0 [ 236.669990][ T9043] ? trace_contention_end+0x3d/0x140 [ 236.670025][ T9043] netlink_rcv_skb+0x226/0x4a0 [ 236.670056][ T9043] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 236.670091][ T9043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.670147][ T9043] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.670177][ T9043] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.670210][ T9043] xfrm_netlink_rcv+0x79/0x90 [ 236.670243][ T9043] netlink_unicast+0x7bd/0x940 [ 236.670282][ T9043] netlink_sendmsg+0x7c3/0xae0 [ 236.670320][ T9043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.670359][ T9043] ? apparmor_socket_sendmsg+0x18b/0x360 [ 236.670386][ T9043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.670415][ T9043] sock_sendmsg_nosec+0x13a/0x180 [ 236.670452][ T9043] ____sys_sendmsg+0x54e/0x850 [ 236.670484][ T9043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.670521][ T9043] ? import_iovec+0x73/0xa0 [ 236.670555][ T9043] ___sys_sendmsg+0x2a5/0x360 [ 236.670580][ T9043] ? __lock_acquire+0x747/0x2de0 [ 236.670618][ T9043] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.670648][ T9043] ? futex_wait+0x2a2/0x390 [ 236.670711][ T9043] ? __fget_files+0x2a/0x420 [ 236.670740][ T9043] ? __fget_files+0x3a2/0x420 [ 236.670780][ T9043] __x64_sys_sendmsg+0x1b1/0x290 [ 236.670810][ T9043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.670860][ T9043] do_syscall_64+0x166/0x520 [ 236.670880][ T9043] ? trace_irq_disable+0x3b/0x140 [ 236.670913][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.670938][ T9043] ? clear_bhb_loop+0x70/0xc0 [ 236.670966][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.670990][ T9043] RIP: 0033:0x7f802cd9e159 [ 236.671012][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.671032][ T9043] RSP: 002b:00007f802dc41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.671059][ T9043] RAX: ffffffffffffffda RBX: 00007f802d025fa0 RCX: 00007f802cd9e159 [ 236.671077][ T9043] RDX: 0000000020004000 RSI: 0000200000000580 RDI: 0000000000000005 [ 236.671093][ T9043] RBP: 00007f802ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 236.671107][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.671122][ T9043] R13: 00007f802d026038 R14: 00007f802d025fa0 R15: 00007fffd1173b48 [ 236.671167][ T9043] [ 237.113312][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.130251][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.145206][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.151459][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.169488][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.313889][ T974] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.456444][ T9057] overlayfs: failed to clone upperpath [ 237.506571][ T974] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.549160][ T9060] FAULT_INJECTION: forcing a failure. [ 237.549160][ T9060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.549209][ T9060] CPU: 0 UID: 0 PID: 9060 Comm: syz.5.764 Not tainted syzkaller #0 PREEMPT(full) [ 237.549237][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.549253][ T9060] Call Trace: [ 237.549262][ T9060] [ 237.549273][ T9060] dump_stack_lvl+0xe8/0x150 [ 237.549313][ T9060] should_fail_ex+0x3eb/0x540 [ 237.549346][ T9060] _copy_from_user+0x2d/0xb0 [ 237.549379][ T9060] memdup_user+0x5e/0xd0 [ 237.549419][ T9060] strndup_user+0x68/0xd0 [ 237.549456][ T9060] __se_sys_fsopen+0x3d/0x2c0 [ 237.549485][ T9060] do_syscall_64+0x166/0x520 [ 237.549510][ T9060] ? trace_irq_disable+0x3b/0x140 [ 237.549545][ T9060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.549570][ T9060] ? clear_bhb_loop+0x70/0xc0 [ 237.549601][ T9060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.549625][ T9060] RIP: 0033:0x7f24a9d9e159 [ 237.549648][ T9060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.549668][ T9060] RSP: 002b:00007f24aaba5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 237.549695][ T9060] RAX: ffffffffffffffda RBX: 00007f24aa025fa0 RCX: 00007f24a9d9e159 [ 237.549714][ T9060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 237.549729][ T9060] RBP: 00007f24a9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 237.549745][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.549760][ T9060] R13: 00007f24aa026038 R14: 00007f24aa025fa0 R15: 00007ffee2139b68 [ 237.549797][ T9060] [ 237.819015][ T974] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.937087][ T9067] FAULT_INJECTION: forcing a failure. [ 237.937087][ T9067] name failslab, interval 1, probability 0, space 0, times 0 [ 237.937121][ T9067] CPU: 0 UID: 0 PID: 9067 Comm: syz.5.766 Not tainted syzkaller #0 PREEMPT(full) [ 237.937149][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.937164][ T9067] Call Trace: [ 237.937174][ T9067] [ 237.937185][ T9067] dump_stack_lvl+0xe8/0x150 [ 237.937222][ T9067] should_fail_ex+0x3eb/0x540 [ 237.937253][ T9067] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 237.937296][ T9067] should_failslab+0xa8/0x100 [ 237.937324][ T9067] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 237.937354][ T9067] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 237.937390][ T9067] ? shmem_alloc_inode+0x28/0x40 [ 237.937420][ T9067] ? shmem_alloc_inode+0x28/0x40 [ 237.937451][ T9067] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.937482][ T9067] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 237.937512][ T9067] shmem_alloc_inode+0x28/0x40 [ 237.937542][ T9067] alloc_inode+0x6a/0x1b0 [ 237.937571][ T9067] new_inode+0x1f/0x170 [ 237.937602][ T9067] shmem_get_inode+0x3a4/0x1030 [ 237.937643][ T9067] ? __pfx_shmem_get_inode+0x10/0x10 [ 237.937673][ T9067] ? make_vfsuid+0x49/0xa0 [ 237.937700][ T9067] ? generic_permission+0x2ba/0x660 [ 237.937734][ T9067] shmem_mknod+0x17d/0x340 [ 237.937772][ T9067] shmem_mkdir+0x33/0x70 [ 237.937807][ T9067] vfs_mkdir+0x398/0x710 [ 237.937836][ T9067] filename_mkdirat+0x285/0x510 [ 237.937856][ T9067] ? __might_fault+0xaf/0x130 [ 237.937891][ T9067] ? __pfx_filename_mkdirat+0x10/0x10 [ 237.937918][ T9067] ? do_getname+0x151/0x250 [ 237.937947][ T9067] __se_sys_mkdirat+0x35/0x150 [ 237.937983][ T9067] do_syscall_64+0x166/0x520 [ 237.938005][ T9067] ? trace_irq_disable+0x3b/0x140 [ 237.938037][ T9067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.938061][ T9067] ? clear_bhb_loop+0x70/0xc0 [ 237.938089][ T9067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.938113][ T9067] RIP: 0033:0x7f24a9d9e159 [ 237.938135][ T9067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.938156][ T9067] RSP: 002b:00007f24aaba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 237.938181][ T9067] RAX: ffffffffffffffda RBX: 00007f24aa025fa0 RCX: 00007f24a9d9e159 [ 237.938199][ T9067] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 237.938215][ T9067] RBP: 00007f24a9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 237.938230][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.938244][ T9067] R13: 00007f24aa026038 R14: 00007f24aa025fa0 R15: 00007ffee2139b68 [ 237.938280][ T9067] [ 238.397942][ T31] audit: type=1326 audit(1790224660.202:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.1.768" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce5459e159 code=0x0 [ 238.515543][ T9064] orangefs_mount: mount request failed with -4 [ 238.578810][ T974] bridge_slave_1: left allmulticast mode [ 238.578840][ T974] bridge_slave_1: left promiscuous mode [ 238.579090][ T974] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.623750][ T974] bridge_slave_0: left allmulticast mode [ 238.623780][ T974] bridge_slave_0: left promiscuous mode [ 238.624010][ T974] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.003702][ T5707] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 239.152700][ T974] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 239.164642][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 239.173277][ T5707] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.185288][ T5707] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 239.185344][ T5707] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.185368][ T5707] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.185404][ T5707] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.185430][ T5707] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.185475][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.247179][ T5620] Bluetooth: hci3: command tx timeout [ 239.284344][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 239.287539][ T974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.314516][ T974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.321467][ T974] bond0 (unregistering): Released all slaves [ 239.435863][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 239.471473][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 239.490716][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 239.493260][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 239.493307][ T10] usb 6-1: Product: syz [ 239.493318][ T10] usb 6-1: Manufacturer: syz [ 239.493329][ T10] usb 6-1: SerialNumber: syz [ 239.544819][ T10] usb 6-1: config 0 descriptor?? [ 239.549861][ T9087] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 239.553165][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 239.553197][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 239.663529][ T9] usb 5-1: USB disconnect, device number 24 [ 239.857789][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 240.181955][ T9111] netlink: 'syz.1.776': attribute type 2 has an invalid length. [ 240.350391][ T974] hsr_slave_0: left promiscuous mode [ 240.359637][ T974] hsr_slave_1: left promiscuous mode [ 240.360604][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.360627][ T974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.388295][ T974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.388321][ T974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.439208][ T974] veth1_macvtap: left promiscuous mode [ 240.439252][ T974] veth0_macvtap: left promiscuous mode [ 240.439356][ T974] veth1_vlan: left promiscuous mode [ 240.439700][ T974] veth0_vlan: left promiscuous mode [ 240.706447][ T5700] usb 6-1: USB disconnect, device number 11 [ 241.245723][ T974] team0 (unregistering): Port device team_slave_1 removed [ 241.261626][ T974] team0 (unregistering): Port device team_slave_0 removed [ 241.323707][ T5620] Bluetooth: hci3: command tx timeout [ 241.431064][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 241.950704][ T9146] FAULT_INJECTION: forcing a failure. [ 241.950704][ T9146] name failslab, interval 1, probability 0, space 0, times 0 [ 241.950742][ T9146] CPU: 1 UID: 0 PID: 9146 Comm: syz.4.782 Not tainted syzkaller #0 PREEMPT(full) [ 241.950771][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.950801][ T9146] Call Trace: [ 241.950812][ T9146] [ 241.950823][ T9146] dump_stack_lvl+0xe8/0x150 [ 241.950861][ T9146] should_fail_ex+0x3eb/0x540 [ 241.950894][ T9146] should_failslab+0xa8/0x100 [ 241.950923][ T9146] __kmalloc_cache_node_noprof+0xa5/0x620 [ 241.950963][ T9146] ? kyber_alloc_sched_data+0x79/0x540 [ 241.950987][ T9146] ? kyber_alloc_sched_data+0x79/0x540 [ 241.951020][ T9146] kyber_alloc_sched_data+0x79/0x540 [ 241.951053][ T9146] blk_mq_alloc_sched_res+0x103/0x360 [ 241.951087][ T9146] elevator_change+0x122/0x480 [ 241.951111][ T9146] ? do_raw_spin_unlock+0xf5/0x200 [ 241.951146][ T9146] elv_iosched_store+0x504/0x630 [ 241.951186][ T9146] ? __pfx_elv_iosched_store+0x10/0x10 [ 241.951234][ T9146] queue_attr_store+0x207/0x2b0 [ 241.951270][ T9146] ? __pfx_queue_attr_store+0x10/0x10 [ 241.951302][ T9146] ? lock_acquire+0x115/0x350 [ 241.951338][ T9146] ? sysfs_file_kobj+0x1a/0x230 [ 241.951376][ T9146] ? sysfs_file_kobj+0x1a/0x230 [ 241.951405][ T9146] ? sysfs_file_kobj+0x1a/0x230 [ 241.951433][ T9146] ? sysfs_file_kobj+0x1a/0x230 [ 241.951463][ T9146] ? sysfs_file_kobj+0x1e4/0x230 [ 241.951494][ T9146] ? sysfs_kf_write+0x166/0x260 [ 241.951529][ T9146] ? __pfx_sysfs_kf_write+0x10/0x10 [ 241.951558][ T9146] kernfs_fop_write_iter+0x3a4/0x540 [ 241.951590][ T9146] vfs_write+0x612/0xba0 [ 241.951634][ T9146] ? __pfx_vfs_write+0x10/0x10 [ 241.951678][ T9146] ? __fget_files+0x2a/0x420 [ 241.951720][ T9146] ksys_write+0x150/0x270 [ 241.951755][ T9146] ? __pfx_ksys_write+0x10/0x10 [ 241.951802][ T9146] do_syscall_64+0x166/0x520 [ 241.951827][ T9146] ? trace_irq_disable+0x3b/0x140 [ 241.951860][ T9146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.951884][ T9146] ? clear_bhb_loop+0x70/0xc0 [ 241.951914][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.951938][ T9146] RIP: 0033:0x7f802cd9e159 [ 241.951962][ T9146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.951982][ T9146] RSP: 002b:00007f802dc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.952009][ T9146] RAX: ffffffffffffffda RBX: 00007f802d025fa0 RCX: 00007f802cd9e159 [ 241.952027][ T9146] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 241.952043][ T9146] RBP: 00007f802ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 241.952058][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.952072][ T9146] R13: 00007f802d026038 R14: 00007f802d025fa0 R15: 00007fffd1173b48 [ 241.952111][ T9146] [ 242.290149][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.290272][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.290449][ T9047] bridge_slave_0: entered allmulticast mode [ 242.304178][ T9047] bridge_slave_0: entered promiscuous mode [ 242.332123][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.336793][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.336967][ T9047] bridge_slave_1: entered allmulticast mode [ 242.356412][ T9047] bridge_slave_1: entered promiscuous mode [ 242.532449][ T9047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.567637][ T9047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.642947][ T9163] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 242.642985][ T9163] CIFS: Attempting to mount //::1/share [ 242.741044][ T9047] team0: Port device team_slave_0 added [ 242.758393][ T9047] team0: Port device team_slave_1 added [ 242.818392][ T9163] CIFS: VFS: Error connecting to socket. Aborting operation. [ 242.818449][ T9163] CIFS: VFS: cifs_mount failed w/return code = -111 [ 242.902692][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.902713][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.902742][ T9047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.964281][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.964302][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.964332][ T9047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.134874][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 243.251757][ T9047] hsr_slave_0: entered promiscuous mode [ 243.252837][ T9047] hsr_slave_1: entered promiscuous mode [ 243.259890][ T9047] debugfs: 'hsr0' already exists in 'hsr' [ 243.259915][ T9047] Cannot create hsr debugfs directory [ 243.260109][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.787'. [ 243.333316][ T9174] Unsupported ieee802154 address type: 0 [ 243.348953][ T9173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.403866][ T5620] Bluetooth: hci3: command tx timeout [ 243.968011][ T9194] FAULT_INJECTION: forcing a failure. [ 243.968011][ T9194] name failslab, interval 1, probability 0, space 0, times 0 [ 243.968047][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.5.791 Not tainted syzkaller #0 PREEMPT(full) [ 243.968074][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.968089][ T9194] Call Trace: [ 243.968099][ T9194] [ 243.968110][ T9194] dump_stack_lvl+0xe8/0x150 [ 243.968147][ T9194] should_fail_ex+0x3eb/0x540 [ 243.968180][ T9194] should_failslab+0xa8/0x100 [ 243.968210][ T9194] __kmalloc_cache_node_noprof+0xa5/0x620 [ 243.968248][ T9194] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 243.968283][ T9194] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 243.968325][ T9194] sbitmap_queue_init_node+0x1dc/0x4d0 [ 243.968365][ T9194] kyber_alloc_sched_data+0x1a7/0x540 [ 243.968398][ T9194] blk_mq_alloc_sched_res+0x103/0x360 [ 243.968431][ T9194] elevator_change+0x122/0x480 [ 243.968454][ T9194] ? do_raw_spin_unlock+0xf5/0x200 [ 243.968489][ T9194] elv_iosched_store+0x504/0x630 [ 243.968520][ T9194] ? __pfx_elv_iosched_store+0x10/0x10 [ 243.968568][ T9194] queue_attr_store+0x207/0x2b0 [ 243.968601][ T9194] ? __pfx_queue_attr_store+0x10/0x10 [ 243.968633][ T9194] ? lock_acquire+0x115/0x350 [ 243.968664][ T9194] ? sysfs_file_kobj+0x1a/0x230 [ 243.968701][ T9194] ? sysfs_file_kobj+0x1a/0x230 [ 243.968733][ T9194] ? sysfs_file_kobj+0x1a/0x230 [ 243.968760][ T9194] ? sysfs_file_kobj+0x1a/0x230 [ 243.968790][ T9194] ? sysfs_file_kobj+0x1e4/0x230 [ 243.968821][ T9194] ? sysfs_kf_write+0x166/0x260 [ 243.968856][ T9194] ? __pfx_sysfs_kf_write+0x10/0x10 [ 243.968884][ T9194] kernfs_fop_write_iter+0x3a4/0x540 [ 243.968923][ T9194] vfs_write+0x612/0xba0 [ 243.968967][ T9194] ? __pfx_vfs_write+0x10/0x10 [ 243.969011][ T9194] ? __fget_files+0x2a/0x420 [ 243.969051][ T9194] ksys_write+0x150/0x270 [ 243.969086][ T9194] ? __pfx_ksys_write+0x10/0x10 [ 243.969132][ T9194] do_syscall_64+0x166/0x520 [ 243.969154][ T9194] ? trace_irq_disable+0x3b/0x140 [ 243.969186][ T9194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.969209][ T9194] ? clear_bhb_loop+0x70/0xc0 [ 243.969238][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.969262][ T9194] RIP: 0033:0x7f24a9d9e159 [ 243.969283][ T9194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.969303][ T9194] RSP: 002b:00007f24aaba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.969329][ T9194] RAX: ffffffffffffffda RBX: 00007f24aa025fa0 RCX: 00007f24a9d9e159 [ 243.969346][ T9194] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 243.969361][ T9194] RBP: 00007f24a9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 243.969375][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.969389][ T9194] R13: 00007f24aa026038 R14: 00007f24aa025fa0 R15: 00007ffee2139b68 [ 243.969426][ T9194] [ 244.217682][ T9198] netlink: 168 bytes leftover after parsing attributes in process `syz.4.792'. [ 244.512206][ T9047] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.531111][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.542882][ T9047] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.562754][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.580809][ T9047] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.620175][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.622938][ T9047] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.662416][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.043301][ T9216] jffs2: notice: (9216) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 245.064568][ T9047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.089763][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 245.126166][ T9047] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.152983][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.153094][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.210116][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.210228][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.476533][ T9229] fuse: fd is not a fuse device [ 245.483747][ T5620] Bluetooth: hci3: command tx timeout [ 245.772831][ T4944] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 245.784804][ T4944] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 245.790678][ T9242] FAULT_INJECTION: forcing a failure. [ 245.790678][ T9242] name failslab, interval 1, probability 0, space 0, times 0 [ 245.790762][ T9242] CPU: 1 UID: 0 PID: 9242 Comm: syz.4.801 Not tainted syzkaller #0 PREEMPT(full) [ 245.790822][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.790862][ T9242] Call Trace: [ 245.790876][ T9242] [ 245.790905][ T9242] dump_stack_lvl+0xe8/0x150 [ 245.790991][ T9242] should_fail_ex+0x3eb/0x540 [ 245.791064][ T9242] should_failslab+0xa8/0x100 [ 245.791136][ T9242] __kmalloc_cache_node_noprof+0xa5/0x620 [ 245.791223][ T9242] ? kyber_alloc_sched_data+0x79/0x540 [ 245.791298][ T9242] ? kyber_alloc_sched_data+0x79/0x540 [ 245.791371][ T9242] kyber_alloc_sched_data+0x79/0x540 [ 245.791453][ T9242] blk_mq_alloc_sched_res+0x103/0x360 [ 245.791527][ T9242] elevator_change+0x122/0x480 [ 245.791581][ T9242] ? do_raw_spin_unlock+0xf5/0x200 [ 245.791662][ T9242] elv_iosched_store+0x504/0x630 [ 245.791724][ T9242] ? __pfx_elv_iosched_store+0x10/0x10 [ 245.791780][ T9242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.791862][ T9242] ? __pfx___mutex_trylock_common+0x10/0x10 [ 245.791948][ T9242] queue_attr_store+0x207/0x2b0 [ 245.792029][ T9242] ? __pfx_queue_attr_store+0x10/0x10 [ 245.792091][ T9242] ? _copy_from_iter+0x21b/0x1660 [ 245.792162][ T9242] ? rcu_is_watching+0x16/0xb0 [ 245.792215][ T9242] ? sysfs_file_kobj+0x1a/0x230 [ 245.792289][ T9242] ? rcu_is_watching+0x16/0xb0 [ 245.792343][ T9242] ? sysfs_file_kobj+0x1a/0x230 [ 245.792408][ T9242] ? lock_release+0x4b/0x3c0 [ 245.792490][ T9242] ? lock_acquire+0x58/0x350 [ 245.792574][ T9242] ? sysfs_file_kobj+0x1a/0x230 [ 245.792639][ T9242] ? sysfs_file_kobj+0x1a/0x230 [ 245.792711][ T9242] ? sysfs_file_kobj+0x1e4/0x230 [ 245.792770][ T9242] ? sysfs_kf_write+0x166/0x260 [ 245.792853][ T9242] ? __pfx_sysfs_kf_write+0x10/0x10 [ 245.792920][ T9242] kernfs_fop_write_iter+0x3a4/0x540 [ 245.792991][ T9242] vfs_write+0x612/0xba0 [ 245.793077][ T9242] ? __pfx_vfs_write+0x10/0x10 [ 245.793170][ T9242] ? __fget_files+0x2a/0x420 [ 245.793250][ T9242] ksys_write+0x150/0x270 [ 245.793351][ T9242] ? __pfx_ksys_write+0x10/0x10 [ 245.793456][ T9242] ? rcu_is_watching+0x16/0xb0 [ 245.793517][ T9242] do_syscall_64+0x166/0x520 [ 245.793572][ T9242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.793635][ T9242] ? clear_bhb_loop+0x70/0xc0 [ 245.793705][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.793771][ T9242] RIP: 0033:0x7f802cd9e159 [ 245.793823][ T9242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.793877][ T9242] RSP: 002b:00007f802dc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.793940][ T9242] RAX: ffffffffffffffda RBX: 00007f802d025fa0 RCX: 00007f802cd9e159 [ 245.793983][ T9242] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 245.794024][ T9242] RBP: 00007f802ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 245.794058][ T9242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.794101][ T9242] R13: 00007f802d026038 R14: 00007f802d025fa0 R15: 00007fffd1173b48 [ 245.794164][ T9242] [ 246.103510][ T4944] CPU: 0 UID: 0 PID: 4944 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) [ 246.112912][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.122992][ T4944] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 246.128252][ T4944] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 246.147897][ T4944] RSP: 0018:ffffc9000443f868 EFLAGS: 00010202 [ 246.153981][ T4944] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 246.161980][ T4944] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88806afbe020 [ 246.169981][ T4944] RBP: 0000000000009801 R08: ffff88806afbe07f R09: 1ffff1100d5f7c0f [ 246.177981][ T4944] R10: dffffc0000000000 R11: ffffed100d5f7c10 R12: dffffc0000000000 [ 246.185996][ T4944] R13: ffff88806afbe000 R14: ffff88803492c000 R15: 0000000000000008 [ 246.194097][ T4944] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 246.203074][ T4944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.209704][ T4944] CR2: 00007fb4f725ae9c CR3: 000000005ebb4000 CR4: 00000000003526f0 [ 246.217772][ T4944] Call Trace: [ 246.221091][ T4944] [ 246.224058][ T4944] ? __pfx_journal_end_buffer_io_sync+0x10/0x10 [ 246.230363][ T4944] jbd2_journal_commit_transaction+0x2285/0x5c80 [ 246.236773][ T4944] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 246.243525][ T4944] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 246.249050][ T4944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 246.254921][ T4944] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 246.255504][ T9229] orangefs_mount: mount request failed with -4 [ 246.267649][ T4944] ? __timer_delete_sync+0x4a7/0x520 [ 246.272999][ T4944] kjournald2+0x3bc/0x740 [ 246.277389][ T4944] ? __pfx_kjournald2+0x10/0x10 [ 246.282290][ T4944] ? __pfx_autoremove_wake_function+0x10/0x10 [ 246.288566][ T4944] ? __kthread_parkme+0x71/0x1f0 [ 246.293557][ T4944] ? __kthread_parkme+0x199/0x1f0 [ 246.298636][ T4944] kthread+0x38b/0x480 [ 246.302747][ T4944] ? __pfx_kjournald2+0x10/0x10 [ 246.307636][ T4944] ? __pfx_kthread+0x10/0x10 [ 246.312262][ T4944] ret_from_fork+0x514/0xb70 [ 246.316895][ T4944] ? __pfx_ret_from_fork+0x10/0x10 [ 246.322043][ T4944] ? __switch_to+0xc89/0x1420 [ 246.326767][ T4944] ? __pfx_kthread+0x10/0x10 [ 246.331408][ T4944] ret_from_fork_asm+0x1a/0x30 [ 246.336218][ T4944] [ 246.339263][ T4944] Modules linked in: [ 246.344481][ T4944] ---[ end trace 0000000000000000 ]--- [ 246.391142][ T4944] RIP: 0010:__bh_submit+0x22d/0x8d0 [ 246.391181][ T4944] Code: c1 e8 03 48 89 44 24 18 42 80 3c 20 00 74 08 48 89 df e8 f6 e7 d7 ff 48 89 5c 24 28 48 8b 1b 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 e7 d7 ff 4d 8b 3f 4c 89 fe 48 [ 246.391201][ T4944] RSP: 0018:ffffc9000443f868 EFLAGS: 00010202 [ 246.391223][ T4944] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff84b9d9a9 [ 246.391238][ T4944] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88806afbe020 [ 246.391253][ T4944] RBP: 0000000000009801 R08: ffff88806afbe07f R09: 1ffff1100d5f7c0f [ 246.391268][ T4944] R10: dffffc0000000000 R11: ffffed100d5f7c10 R12: dffffc0000000000 [ 246.391284][ T4944] R13: ffff88806afbe000 R14: ffff88803492c000 R15: 0000000000000008 [ 246.391299][ T4944] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 246.391317][ T4944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.391332][ T4944] CR2: 00007f1f277a7e9c CR3: 000000007f208000 CR4: 00000000003526f0 [ 246.391354][ T4944] Kernel panic - not syncing: Fatal exception [ 246.492737][ T4944] Kernel Offset: disabled [ 246.497104][ T4944] Rebooting in 86400 seconds..