last executing test programs: 18.256127523s ago: executing program 0 (id=90): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000002d0013472d"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) unshare(0x22020600) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r1) sendmsg$WG_CMD_GET_DEVICE(r1, 0x0, 0x24008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 18.201571289s ago: executing program 3 (id=93): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="bf1600000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100000dffffffb702000008000000b7030000020000008500000006000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000630000001500020000000000bf01000000000000850000005600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x1e, 0x0, &(0x7f0000000480)="06000000de00000022334456e55e16cbb83588efd1a320bd4496dc7a0800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x50) r2 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000000c0)=0x81) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="205aea4fd09e452c7a3d4b6c22020200000231260bf069f9124686b032a72052b9ced47225973ae29ab48b72ffa7c7f23e4a1fb4843af5d637ecc142a712a3c8b6d0f21c25274329d84ca2ffc712a8531a2b2ba6cbcd9a681bf0692be95d6ce16a51f6d81f8ccc7162bc8033c46aa275ac89ffef6eab18220219b6b64aeea3"], 0x0}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000540)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000580)={0x1d, r4}, 0x18) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="3874517c2edc", 0xfdef}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000000000000bf1600000000000079617e00000000001501010000000000850000005f00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.862657518s ago: executing program 0 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r3 = socket$inet6(0x10, 0x800, 0xfffffffd) sendto$inet6(r3, &(0x7f0000000940)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000008000000000afc8000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001000000085000000860000008500000050000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./proc\x00', 0x24) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) write(r7, &(0x7f0000000100)='1', 0x1) r8 = syz_usb_connect(0x3, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000ac0)={0x20, 0xe, 0xf, "cf0d416510d44a33a84085a068b520"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write(r8, 0x4, 0x0, &(0x7f0000000b00)) syz_usb_control_io$hid(r8, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e00)={r6}, 0xc) 15.440482867s ago: executing program 3 (id=97): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x80, 0x0, 0x410a0, 0xffffffffffffffff, 0x281edb46, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095000000000000006119ec49345431e792131f555d07468554b5580d934634e49591e33811104234d86fee72c4dd5a5923cc2b15e3c2907a8f978fae522131e463eb6fbeb5de25d504356d7b16ec9a59a8fdfdc2281c15b3c088ac9ce1ef113fae4e751d0233ae04aa1045b98052ab8119f298aea56400fb85617d37934c4656ecf69f197b02a91c74e4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="090000000400000004000000100000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000fa690000000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000980)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) preadv(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/160, 0xa0}], 0x1, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000c40), 0x4) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000c80)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) openat$audio(0xffffffffffffff9c, &(0x7f0000000cc0), 0xe8c00, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000d00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000d40)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) 14.249083118s ago: executing program 3 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="ea012351ddc58332fdb2081dbbbe1e347aaa8ec7d8c9738c1a2ab4412ce01f0daf", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)="b3", 0x1}, {0x0}, {&(0x7f00000002c0)="3b914a21e572121d61fdf40d84c51934835536d4f18e68b73bc5849cdbb99a8f94749dc76d905998086bf6294ede8a856a80a22abe2dbe28e663b68cf0f66220380680f2f5a1497cf47ee7078ed5e31644130ed83b56abc93e4a7e5a0cd66741d14303fe304d081d673bf7b3089d8b9661ab8442729e5662099b6e72a00f71a73f38144336a52fbdccd7c971e00581709e9cbc5f76960dcb023a5fac0e06cb81312fcbe7400e3db720906f3aca52e799fd2215848393cbd6c12bb82a02874c5d60bfac879813816048971f995d79e4003b7136a2", 0xd4}, {&(0x7f0000000640)="5752f110dea01f736c54bd8156adca303243093e415b2221795387428b3f75eca7f339bd8d0f4e842593c2555c1b48f2aa8c3e9532700b39559bc20fbd9d3f1043acb63a2d1f422d90d192994d34b023020452d5de55e3618091c235c5143340a9f7aa0953cff1b0db96d3d041e0", 0x6e}, {&(0x7f0000001640)="2b6ae48f4296cf2b8ad3356c2ad4f060648fb1799f29db52139693d0baa4b2ed37c20f6b8f4e7d48e804ad5cb846accd678b8d0c76713e69e7a82c1fb5da6d0317e1573301f89879647a72300007a36006cde6b495fc8893163f5640394b310bfd769870c5dc28031cde7f6eb0c70646abf481881c7161a68f0cb0b279f5318c54d949a4419606c45c98cded701900dffdd83216ce38ae9bfa490ea5b0e614242c29992abc85dd3de88bacddc59364ee63e451d5528666d79b0a412069ed57ce1d528498e2a45046d53ef5aa49f4aca371f5f08d52a81c3bcd3243cb858806a476ee2e75196b4a70a744247b73af94d41ec5cc5c328204615d47", 0xfa}, {0x0}], 0x6}}], 0x2, 0x4004084) 13.501657535s ago: executing program 0 (id=102): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101000905010200"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000100)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r4 = syz_open_dev$video4linux(&(0x7f0000000240), 0xffffffffffffffff, 0xb00) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0xb51, 0xfffffffa, 0x0, 0x3, 0x8, 0x9, 0x5, 0x3}}) ppoll(&(0x7f0000000300)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x1}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 12.261565657s ago: executing program 4 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f00004d3000/0x3000)=nil, 0x3000, 0xb635773f07ebbeea, 0x20010, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec\x00', 0x1ff) sendfile(r2, r1, &(0x7f0000002e00)=0x64, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) epoll_create(0x409) 12.057994301s ago: executing program 3 (id=105): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x6, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.344831781s ago: executing program 2 (id=106): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x6, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x6040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.251196375s ago: executing program 4 (id=107): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000002d0013472d"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) unshare(0x22020600) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x26008089}, 0x24008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 9.245816633s ago: executing program 4 (id=109): mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x40c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket(0x6, 0x2, 0x0) semget(0x0, 0x0, 0x1f3f25a7ee159e73) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000014c0)='./proc\x00', &(0x7f0000001500)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x80100, 0x28) 8.076847133s ago: executing program 1 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x40c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket(0x6, 0x2, 0x0) semget(0x0, 0x0, 0x1f3f25a7ee159e73) add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="ae", 0x1, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000014c0)='./proc\x00', &(0x7f0000001500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x80100, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001580)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write(r3, &(0x7f00000015c0)="4ff66fbe", 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f0000001380)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000013c0)='bbr', 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001400)='dctcp', 0x5) 8.03157797s ago: executing program 3 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) r3 = socket$inet6(0x10, 0x800, 0xfffffffd) sendto$inet6(r3, &(0x7f0000000940)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000800000000000000000000000000000000000000000000000000000008000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000010100000000000084010500fc010000000000000000000000000001000000002b00000000000000ac141418000000000000000000000000000800000000fb0000000000493f0d512000000000000000000000000000000000000001000004d22b00000002000000fc020000000000000000000000000001000000000000000000000000000000000000000000000001000000000000000000000001000000003c00000002000000ffffffff000000000000000000000000000000000103000000000000d62c000000000000ff020000000000000000000000000001000004d23c00000002000000ac1414bb00000000000000000000000000000000020000000100000003000000000000007f00000100000000000000000000000000000000320000000200000000000000000000000000000000000001ffffffff00000000fdffffff000000000000000064010100000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000082ae86ac41e84f962b98c7f100000001028000000000000200000000000000edd742b65b3fb7253442a681c49583c96fe81a729f1d1c62ef7e67b91c541b14fe5291305c178a3355069fa6d470c784c7d3c70cb48f3fb72a5e06ba33592817ced668116e5fe77c4a302e0177fbd69489e8cf7bf6d0e3192be99cb2e455ebd58e31730ffad864595ca273ac564db62a5e154813d976a175308256d1bd8f2ba5981ae2ce3b13e6ff0214ae2704b75091815e"], 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000008000000000afc8000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001000000085000000860000008500000050000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./proc\x00', 0x24) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) write(r7, &(0x7f0000000100)='1', 0x1) r8 = syz_usb_connect(0x3, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000ac0)={0x20, 0xe, 0xf, "cf0d416510d44a33a84085a068b520"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write(r8, 0x4, 0x0, &(0x7f0000000b00)) syz_usb_control_io$hid(r8, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e00)={r6}, 0xc) 7.924624554s ago: executing program 0 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0x10, 0x800, 0xfffffffd) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x2040000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./proc\x00', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='1', 0x1) r5 = syz_usb_connect(0x3, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000ac0)={0x20, 0xe, 0xf, "cf0d416510d44a33a84085a068b520"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_ep_write(r5, 0x4, 0x0, &(0x7f0000000b00)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e00)={r3}, 0xc) 7.770447096s ago: executing program 2 (id=114): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x80, 0x0, 0x410a0, 0xffffffffffffffff, 0x281edb46, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095000000000000006119ec49345431e792131f555d07468554b5580d934634e49591e33811104234d86fee72c4dd5a5923cc2b15e3c2907a8f978fae522131e463eb6fbeb5de25d504356d7b16ec9a59a8fdfdc2281c15b3c088ac9ce1ef113fae4e751d0233ae04aa1045b98052ab8119f298aea56400fb85617d37934c4656ecf69f197b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000c40), 0x4) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000c80)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) openat$audio(0xffffffffffffff9c, &(0x7f0000000cc0), 0xe8c00, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000d00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000d40)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) 6.439222239s ago: executing program 2 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="ea012351ddc58332fdb2081dbbbe1e347aaa8ec7d8c9738c1a2ab4412ce01f0daf", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)="b3", 0x1}, {0x0}, {&(0x7f00000002c0)="3b914a21e572121d61fdf40d84c51934835536d4f18e68b73bc5849cdbb99a8f94749dc76d905998086bf6294ede8a856a80a22abe2dbe28e663b68cf0f66220380680f2f5a1497cf47ee7078ed5e31644130ed83b56abc93e4a7e5a0cd66741d14303fe304d081d673bf7b3089d8b9661ab8442729e5662099b6e72a00f71a73f38144336a52fbdccd7c971e00581709e9cbc5f76960dcb023a5fac0e06cb81312fcbe7400e3db720906f3aca52e799fd2215848393cbd6c12bb82a02874c5d60bfac879813816048971f995d79e4003b7136a2cee6", 0xd6}, {&(0x7f0000000640)="5752f110dea01f736c54bd8156adca303243093e415b2221795387428b3f75eca7f339bd8d0f4e842593c2555c1b48f2aa8c3e9532700b39559bc20fbd9d3f1043acb63a2d1f422d90d192994d34b023020452d5de55e3618091c235c5143340a9f7aa0953cff1b0db96d3d041e0", 0x6e}, {&(0x7f0000001640)="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", 0xfa}, {0x0}], 0x6}}], 0x2, 0x4004084) 6.141342714s ago: executing program 2 (id=116): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$tipc(0x1e, 0x741c6ced6eeaa54e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = dup3(r0, r2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) connect$bt_rfcomm(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setns(r3, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x88800, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000480)={0x28, 0x6, 0x0, 0x0, &(0x7f000068e000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x50621}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) 6.134224717s ago: executing program 1 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f00004d3000/0x3000)=nil, 0x3000, 0xb635773f07ebbeea, 0x20010, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec\x00', 0x1ff) sendfile(r2, r1, &(0x7f0000002e00)=0x64, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) epoll_create(0x409) 4.9306242s ago: executing program 2 (id=118): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delqdisc={0x2c, 0x25, 0x200, 0x70bc28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x0, 0xc}, {0xf, 0x6}}, [@TCA_EGRESS_BLOCK={0xffffffffffffffb4, 0xe, 0xa0ea}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000001}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x40080, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x63) syz_emit_ethernet(0x42, 0x0, 0x0) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x176) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000002d0013472d"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) unshare(0x22020600) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xffffff0a, &(0x7f0000000180)=[{&(0x7f00000001c0)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.619790761s ago: executing program 4 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000b40)='./proc\x00', &(0x7f0000000d00)='proc\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020}, 0x2020) sendfile(r1, r0, &(0x7f0000002e00)=0x64, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000d80)='6', 0x1) epoll_create(0x409) 4.011524279s ago: executing program 1 (id=120): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$tipc(0x1e, 0x741c6ced6eeaa54e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = dup3(r0, r2, 0x0) connect$bt_rfcomm(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setns(r3, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r8, 0x0, &(0x7f000068e000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x50621}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.91738006s ago: executing program 0 (id=121): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x80, 0x0, 0x410a0, 0xffffffffffffffff, 0x281edb46, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095000000000000006119ec49345431e792131f555d07468554b5580d934634e49591e33811104234d86fee72c4dd5a5923cc2b15e3c2907a8f978fae522131e463eb6fbeb5de25d504356d7b16ec9a59a8fdfdc2281c15b3c088ac9ce1ef113fae4e751d0233ae04aa1045b98052ab8119f298aea56400fb85617d37934c4656ecf69f197b02a91c74e4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="090000000400000004000000100000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000fa690000000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000980)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) preadv(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/160, 0xa0}], 0x1, 0xc03, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000c40), 0x4) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000c80)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) openat$audio(0xffffffffffffff9c, &(0x7f0000000cc0), 0xe8c00, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000d00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000d40)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) 2.521245758s ago: executing program 1 (id=122): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000002d0013472d"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) unshare(0x22020600) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x26008089}, 0x24008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2.294170182s ago: executing program 3 (id=123): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101000905010200"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendmmsg$inet6(r3, &(0x7f0000000100)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r4 = syz_open_dev$video4linux(&(0x7f0000000240), 0xffffffffffffffff, 0xb00) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000280)={0x0, 0x0, {0xb51, 0xfffffffa, 0x0, 0x3, 0x8, 0x9, 0x5, 0x3}}) ppoll(&(0x7f0000000300)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x1}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 1.200751229s ago: executing program 0 (id=124): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x6, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x6040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.113387022s ago: executing program 1 (id=125): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x80, 0x0, 0x410a0, 0xffffffffffffffff, 0x281edb46, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095000000000000006119ec49345431e792131f555d07468554b5580d934634e49591e33811104234d86fee72c4dd5a5923cc2b15e3c2907a8f978fae522131e463eb6fbeb5de25d504356d7b16ec9a59a8fdfdc2281c15b3c088ac9ce1ef113fae4e751d0233ae04aa1045b98052ab8119f298aea56400fb85617d37934c4656ecf69f197b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x6) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000c40), 0x4) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000c80)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r3, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x42872, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000822000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008b5000/0x1000)=nil) openat$audio(0xffffffffffffff9c, &(0x7f0000000cc0), 0xe8c00, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000d00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000d40)={0x1, @pix_mp={0xffffffff, 0x0, 0x34325241, 0x0, 0x3, [{0x0, 0x3}, {0xfffffffc, 0x20000000}, {}, {0x8}, {0x0, 0x400000}, {}, {0x0, 0xfffffffd}], 0x0, 0x0, 0x7, 0x0, 0x4}}) 1.112759386s ago: executing program 4 (id=126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="ea012351ddc58332fdb2081dbbbe1e347aaa8ec7d8c9738c1a2ab4412ce01f0daf", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)="b3", 0x1}, {0x0}, {&(0x7f00000002c0)="3b914a21e572121d61fdf40d84c51934835536d4f18e68b73bc5849cdbb99a8f94749dc76d905998086bf6294ede8a856a80a22abe2dbe28e663b68cf0f66220380680f2f5a1497cf47ee7078ed5e31644130ed83b56abc93e4a7e5a0cd66741d14303fe304d081d673bf7b3089d8b9661ab8442729e5662099b6e72a00f71a73f38144336a52fbdccd7c971e00581709e9cbc5f76960dcb023a5fac0e06cb81312fcbe7400e3db720906f3aca52e799fd2215848393cbd6c12bb82a02874c5d60bfac879813816048971f995d79e4003b7136a2cee6", 0xd6}, {&(0x7f0000000640)="5752f110dea01f736c54bd8156adca303243093e415b2221795387428b3f75eca7f339bd8d0f4e842593c2555c1b48f2aa8c3e9532700b39559bc20fbd9d3f1043acb63a2d1f422d90d192994d34b023020452d5de55e3618091c235c5143340a9f7aa0953cff1b0db96d3d041e0", 0x6e}, {&(0x7f0000001640)="2b6ae48f4296cf2b8ad3356c2ad4f060648fb1799f29db52139693d0baa4b2ed37c20f6b8f4e7d48e804ad5cb846accd678b8d0c76713e69e7a82c1fb5da6d0317e1573301f89879647a72300007a36006cde6b495fc8893163f5640394b310bfd769870c5dc28031cde7f6eb0c70646abf481881c7161a68f0cb0b279f5318c54d949a4419606c45c98cded701900dffdd83216ce38ae9bfa490ea5b0e614242c29992abc85dd3de88bacddc59364ee63e451d5528666d79b0a412069ed57ce1d528498e2a45046d53ef5aa49f4aca371f5f08d52a81c3bcd3243cb858806a476ee2e75196b4a70a744247b73af94d41ec5cc5c328204615d47", 0xfa}, {0x0}], 0x6}}], 0x2, 0x4004084) 802.8571ms ago: executing program 2 (id=127): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x6, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 759.51096ms ago: executing program 4 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x40c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) socket(0x6, 0x2, 0x0) semget(0x0, 0x0, 0x1f3f25a7ee159e73) add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="ae", 0x1, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000014c0)='./proc\x00', &(0x7f0000001500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/bus/pci/00/00.0\x00', 0x80100, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001580)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write(r3, &(0x7f00000015c0)="4ff66fbe", 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f0000001380)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000013c0)='bbr', 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001400)='dctcp', 0x5) 0s ago: executing program 1 (id=129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$tipc(0x1e, 0x741c6ced6eeaa54e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = dup3(r0, r2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) connect$bt_rfcomm(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setns(r3, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x88800, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000480)={0x28, 0x6, 0x0, 0x0, &(0x7f000068e000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x50621}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts. [ 74.087328][ T5573] cgroup: Unknown subsys name 'net' [ 74.329073][ T5573] cgroup: Unknown subsys name 'cpuset' [ 74.384108][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.032287][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.471614][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.490103][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.491001][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.495427][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.498079][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.498544][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.523802][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.527682][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.533610][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.537975][ T5593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.655754][ T4902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.661914][ T4902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.663694][ T4902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.666371][ T4902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.667033][ T4902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.742830][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.753890][ T5593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.764062][ T5593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.767073][ T5593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.767728][ T5593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.864263][ T5593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.866213][ T5593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.869322][ T5593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.871373][ T5593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.885057][ T5593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.837458][ T5599] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.838015][ T5596] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.840867][ T5597] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.841463][ T5586] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 79.874032][ T5585] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.878436][ T5585] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.912301][ T5585] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.553508][ T5585] infiniband rxe0: set active [ 80.553530][ T5585] infiniband rxe0: added rxe_eth0 [ 80.609126][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.625705][ T4902] Bluetooth: hci1: command tx timeout [ 80.625833][ T4902] Bluetooth: hci0: command tx timeout [ 80.690457][ T5585] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 80.690491][ T5585] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 80.690536][ T5585] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 80.783547][ T5593] Bluetooth: hci2: command tx timeout [ 80.829891][ T5585] RDS/IB: rxe0: added [ 80.833107][ T5585] smc: adding ib device rxe0 with port count 1 [ 80.833341][ T5585] smc: ib device rxe0 port 1 has no pnetid [ 80.874129][ T5593] Bluetooth: hci3: command tx timeout [ 80.895906][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.937235][ T5318] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.943606][ T5593] Bluetooth: hci4: command tx timeout [ 80.976107][ T5585] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.368801][ T5585] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.061986][ T5585] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.330873][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.331015][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.331538][ T5586] bridge_slave_0: entered allmulticast mode [ 82.361388][ T5586] bridge_slave_0: entered promiscuous mode [ 82.388602][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.388692][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.388976][ T5596] bridge_slave_0: entered allmulticast mode [ 82.390531][ T5596] bridge_slave_0: entered promiscuous mode [ 82.422285][ T5585] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.422496][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.422596][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.423050][ T5586] bridge_slave_1: entered allmulticast mode [ 82.429257][ T5586] bridge_slave_1: entered promiscuous mode [ 82.479289][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.479411][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.479903][ T5596] bridge_slave_1: entered allmulticast mode [ 82.484226][ T5596] bridge_slave_1: entered promiscuous mode [ 82.534439][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.534537][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.534658][ T5599] bridge_slave_0: entered allmulticast mode [ 82.540288][ T5599] bridge_slave_0: entered promiscuous mode [ 82.594272][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.594408][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.594884][ T5597] bridge_slave_0: entered allmulticast mode [ 82.598107][ T5597] bridge_slave_0: entered promiscuous mode [ 82.634559][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.634680][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.634863][ T5599] bridge_slave_1: entered allmulticast mode [ 82.637563][ T5599] bridge_slave_1: entered promiscuous mode [ 82.675157][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.675296][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.675463][ T5597] bridge_slave_1: entered allmulticast mode [ 82.679001][ T5597] bridge_slave_1: entered promiscuous mode [ 82.691973][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.703879][ T5593] Bluetooth: hci0: command tx timeout [ 82.703919][ T5593] Bluetooth: hci1: command tx timeout [ 82.742753][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.801234][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.835653][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.863790][ T4902] Bluetooth: hci2: command tx timeout [ 82.889279][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.930458][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.943638][ T4902] Bluetooth: hci3: command tx timeout [ 82.959331][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.979294][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.981170][ T5586] team0: Port device team_slave_0 added [ 83.008711][ T5596] team0: Port device team_slave_0 added [ 83.025225][ T4902] Bluetooth: hci4: command tx timeout [ 83.051354][ T5586] team0: Port device team_slave_1 added [ 83.081484][ T5596] team0: Port device team_slave_1 added [ 83.111219][ T5599] team0: Port device team_slave_0 added [ 83.129628][ T5597] team0: Port device team_slave_0 added [ 83.153119][ T5599] team0: Port device team_slave_1 added [ 83.174360][ T5597] team0: Port device team_slave_1 added [ 83.175336][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.175346][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.175374][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.176615][ T5585] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.200319][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.200336][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.200368][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.221311][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.221329][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.221360][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.280383][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.280402][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.280427][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.329122][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.329140][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.329165][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.345122][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.345140][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.345164][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.350146][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.350162][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.350186][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.354853][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.354868][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.354893][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.011548][ T5586] hsr_slave_0: entered promiscuous mode [ 84.012451][ T5586] hsr_slave_1: entered promiscuous mode [ 84.023732][ T5596] hsr_slave_0: entered promiscuous mode [ 84.025026][ T5596] hsr_slave_1: entered promiscuous mode [ 84.025988][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 84.026120][ T5596] Cannot create hsr debugfs directory [ 84.105944][ T5597] hsr_slave_0: entered promiscuous mode [ 84.106667][ T5597] hsr_slave_1: entered promiscuous mode [ 84.107242][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 84.107265][ T5597] Cannot create hsr debugfs directory [ 84.133782][ T5599] hsr_slave_0: entered promiscuous mode [ 84.135835][ T5599] hsr_slave_1: entered promiscuous mode [ 84.136699][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 84.136722][ T5599] Cannot create hsr debugfs directory [ 84.784831][ T4902] Bluetooth: hci1: command tx timeout [ 84.784844][ T5593] Bluetooth: hci0: command tx timeout [ 84.939027][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.943591][ T4902] Bluetooth: hci2: command tx timeout [ 84.974726][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.996795][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.023665][ T4902] Bluetooth: hci3: command tx timeout [ 85.028920][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.049702][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.079639][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.103536][ T4902] Bluetooth: hci4: command tx timeout [ 85.104878][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.147950][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.247878][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.248951][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.249137][ T5585] bridge_slave_0: entered allmulticast mode [ 85.250814][ T5585] bridge_slave_0: entered promiscuous mode [ 85.269345][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.269474][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.269634][ T5585] bridge_slave_1: entered allmulticast mode [ 85.272053][ T5585] bridge_slave_1: entered promiscuous mode [ 85.336515][ T5586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.366844][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.387067][ T5586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.429232][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.432056][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.445665][ T5586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.487175][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.492267][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.525382][ T5586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.577474][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.691772][ T5585] team0: Port device team_slave_0 added [ 85.716174][ T5585] team0: Port device team_slave_1 added [ 85.782494][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.782512][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.782531][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.808237][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.808256][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.808282][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.819791][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.897764][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.938080][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.971328][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.981004][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.017581][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.039933][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.077908][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.147591][ T5585] hsr_slave_0: entered promiscuous mode [ 86.148341][ T5585] hsr_slave_1: entered promiscuous mode [ 86.148837][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 86.148860][ T5585] Cannot create hsr debugfs directory [ 86.277717][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.318171][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.340023][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.377966][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.393001][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.422914][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.440048][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.478085][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.628630][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.719811][ T9] cfg80211: failed to load regulatory.db [ 86.863704][ T4902] Bluetooth: hci0: command tx timeout [ 86.863740][ T4902] Bluetooth: hci1: command tx timeout [ 86.886337][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.926245][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.927643][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.977383][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.982153][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.002434][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.012374][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.012477][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.030163][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.033666][ T5593] Bluetooth: hci2: command tx timeout [ 87.067626][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.089519][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.103649][ T5593] Bluetooth: hci3: command tx timeout [ 87.127867][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.145498][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.145634][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.184201][ T5593] Bluetooth: hci4: command tx timeout [ 87.222650][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.258040][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.282489][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.282571][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.337544][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.337704][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.395290][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.434975][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.459625][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.459785][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.507549][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.507675][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.582050][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.651813][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.657809][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.727247][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.727326][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.868471][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.056715][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.138442][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.138599][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.197441][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.197591][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.719606][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.100694][ T5596] veth0_vlan: entered promiscuous mode [ 89.117894][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.185073][ T5596] veth1_vlan: entered promiscuous mode [ 89.300815][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.440304][ T5596] veth0_macvtap: entered promiscuous mode [ 89.510699][ T5596] veth1_macvtap: entered promiscuous mode [ 89.626978][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.658792][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.711226][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.736970][ T5597] veth0_vlan: entered promiscuous mode [ 89.803168][ T5597] veth1_vlan: entered promiscuous mode [ 89.832377][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.237869][ T5599] veth0_vlan: entered promiscuous mode [ 90.298508][ T5586] veth0_vlan: entered promiscuous mode [ 90.310957][ T5597] veth0_macvtap: entered promiscuous mode [ 90.329476][ T5599] veth1_vlan: entered promiscuous mode [ 90.332153][ T2565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.332183][ T2565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.372793][ T5597] veth1_macvtap: entered promiscuous mode [ 90.401494][ T5586] veth1_vlan: entered promiscuous mode [ 90.460301][ T5585] veth0_vlan: entered promiscuous mode [ 90.480463][ T2565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.480484][ T2565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.525196][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.565512][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.566772][ T5585] veth1_vlan: entered promiscuous mode [ 90.631663][ T5599] veth0_macvtap: entered promiscuous mode [ 90.689080][ T5586] veth0_macvtap: entered promiscuous mode [ 90.697954][ T5599] veth1_macvtap: entered promiscuous mode [ 90.766990][ T5586] veth1_macvtap: entered promiscuous mode [ 90.899336][ T5596] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.031726][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.033247][ T5585] veth0_macvtap: entered promiscuous mode [ 91.141467][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.151736][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.152226][ T5585] veth1_macvtap: entered promiscuous mode [ 91.180089][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.180110][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.200599][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.346316][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.799730][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.799800][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.205822][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.296238][ T5799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6'. [ 92.297910][ T5799] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 92.525337][ T36] audit: type=1326 audit(1792476792.147:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 92.525389][ T36] audit: type=1326 audit(1792476792.147:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 92.525432][ T36] audit: type=1326 audit(1792476792.147:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1f8d8eb2bb code=0x7ffc0000 [ 92.525470][ T36] audit: type=1326 audit(1792476792.147:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 92.525507][ T36] audit: type=1326 audit(1792476792.147:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 92.525545][ T36] audit: type=1326 audit(1792476792.147:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f8d92e1eb code=0x7ffc0000 [ 92.525582][ T36] audit: type=1326 audit(1792476792.147:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f8d8eed8e code=0x7ffc0000 [ 92.571912][ T36] audit: type=1326 audit(1792476792.157:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 92.571961][ T36] audit: type=1326 audit(1792476792.197:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 92.579187][ T36] audit: type=1326 audit(1792476792.207:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.7" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 93.068420][ T5807] ip6erspan0: entered allmulticast mode [ 93.082628][ T5807] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 93.082970][ T5318] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.304961][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.304984][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.587054][ T2565] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.589643][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.589666][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.864302][ T3379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.864325][ T3379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.138126][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.138148][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.355725][ T2565] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.355798][ T2565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.355812][ T2565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.356104][ T2565] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358723][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358797][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358831][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358865][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358897][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358930][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358962][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358993][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359025][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359057][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359100][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359134][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359168][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.359201][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.395732][ T1011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.396174][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.396565][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.084200][ T5844] Zero length message leads to an empty skb [ 96.800221][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.800243][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.018917][ T5860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15'. [ 97.609008][ T36] kauditd_printk_skb: 199 callbacks suppressed [ 97.609048][ T36] audit: type=1326 audit(1792476797.047:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.609196][ T36] audit: type=1326 audit(1792476797.047:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.610920][ T36] audit: type=1326 audit(1792476797.057:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.611091][ T36] audit: type=1326 audit(1792476797.057:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.611297][ T36] audit: type=1326 audit(1792476797.057:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.611483][ T36] audit: type=1326 audit(1792476797.057:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.651945][ T36] audit: type=1326 audit(1792476797.057:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.652038][ T36] audit: type=1326 audit(1792476797.067:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.652121][ T36] audit: type=1326 audit(1792476797.067:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 97.652188][ T36] audit: type=1326 audit(1792476797.067:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5854 comm="syz.2.15" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7a3a8ed8e code=0x7ffc0000 [ 99.305713][ T5879] FAULT_INJECTION: forcing a failure. [ 99.305713][ T5879] name failslab, interval 1, probability 0, space 0, times 0 [ 99.305763][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 99.305777][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.305789][ T5879] Call Trace: [ 99.305794][ T5879] [ 99.305799][ T5879] dump_stack_lvl+0xe8/0x150 [ 99.305828][ T5879] should_fail_ex+0x46b/0x600 [ 99.305849][ T5879] should_failslab+0xa8/0x100 [ 99.305861][ T5879] ? security_file_alloc+0x34/0x310 [ 99.305877][ T5879] kmem_cache_alloc_noprof+0x9e/0x690 [ 99.305893][ T5879] ? rcu_is_watching+0x16/0xb0 [ 99.305904][ T5879] ? security_file_alloc+0x34/0x310 [ 99.305921][ T5879] ? alloc_empty_file+0x5b/0x1d0 [ 99.305935][ T5879] security_file_alloc+0x34/0x310 [ 99.305952][ T5879] init_file+0x96/0x2d0 [ 99.305964][ T5879] alloc_empty_file+0x74/0x1d0 [ 99.305975][ T5879] alloc_file_pseudo+0x115/0x1e0 [ 99.305988][ T5879] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 99.306005][ T5879] anon_inode_getfile+0xc5/0x1a0 [ 99.306020][ T5879] do_epoll_create+0x2fc/0x440 [ 99.306031][ T5879] __x64_sys_epoll_create+0x4e/0x70 [ 99.306046][ T5879] do_syscall_64+0x166/0x520 [ 99.306062][ T5879] ? trace_irq_disable+0x3b/0x140 [ 99.306076][ T5879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.306087][ T5879] ? clear_bhb_loop+0x70/0xc0 [ 99.306100][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.306110][ T5879] RIP: 0033:0x7f1f8d92e559 [ 99.306127][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.306136][ T5879] RSP: 002b:00007f1f8bb65028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 99.306148][ T5879] RAX: ffffffffffffffda RBX: 00007f1f8dbb6090 RCX: 00007f1f8d92e559 [ 99.306156][ T5879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000409 [ 99.306162][ T5879] RBP: 00007f1f8d9c5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 99.306169][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.306175][ T5879] R13: 00007f1f8dbb6128 R14: 00007f1f8dbb6090 R15: 00007ffee66e6eb8 [ 99.306192][ T5879] [ 100.235233][ T5884] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 100.848022][ T10] Process accounting resumed [ 101.098909][ T5878] syz.3.19 (5878): drop_caches: 2 [ 101.408235][ T5896] netlink: 44 bytes leftover after parsing attributes in process `syz.1.24'. [ 102.253562][ T5898] FAULT_INJECTION: forcing a failure. [ 102.253562][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 102.253599][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.3.23 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.253626][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.253637][ T5898] Call Trace: [ 102.253644][ T5898] [ 102.253653][ T5898] dump_stack_lvl+0xe8/0x150 [ 102.253688][ T5898] should_fail_ex+0x46b/0x600 [ 102.253724][ T5898] should_failslab+0xa8/0x100 [ 102.253748][ T5898] __kmalloc_cache_noprof+0xa1/0x680 [ 102.253776][ T5898] ? __debugfs_file_get+0x144/0x710 [ 102.253793][ T5898] ? __debugfs_file_get+0x144/0x710 [ 102.253811][ T5898] ? smack_file_open+0x203/0x270 [ 102.253841][ T5898] __debugfs_file_get+0x144/0x710 [ 102.253863][ T5898] ? __pfx___debugfs_file_get+0x10/0x10 [ 102.253889][ T5898] ? rt_spin_unlock+0x159/0x200 [ 102.253913][ T5898] full_proxy_open_regular+0x55/0x520 [ 102.253937][ T5898] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 102.253968][ T5898] do_dentry_open+0x849/0x1420 [ 102.253998][ T5898] vfs_open+0x3b/0x350 [ 102.254016][ T5898] ? path_openat+0x16a9/0x20a0 [ 102.254045][ T5898] path_openat+0x16c4/0x20a0 [ 102.254085][ T5898] do_file_open+0x23e/0x4a0 [ 102.254115][ T5898] ? __pfx_do_file_open+0x10/0x10 [ 102.254163][ T5898] ? alloc_fd+0x654/0x6d0 [ 102.254193][ T5898] do_sys_openat2+0x115/0x200 [ 102.254213][ T5898] ? __se_sys_futex+0x3a8/0x450 [ 102.254234][ T5898] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.254260][ T5898] ? rcu_is_watching+0x16/0xb0 [ 102.254284][ T5898] __x64_sys_openat+0x138/0x170 [ 102.254311][ T5898] do_syscall_64+0x166/0x520 [ 102.254339][ T5898] ? trace_irq_disable+0x3b/0x140 [ 102.254366][ T5898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.254387][ T5898] ? clear_bhb_loop+0x70/0xc0 [ 102.254410][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.254429][ T5898] RIP: 0033:0x7f1f8d92e559 [ 102.254449][ T5898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.254466][ T5898] RSP: 002b:00007f1f8bb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 102.254489][ T5898] RAX: ffffffffffffffda RBX: 00007f1f8dbb5fa0 RCX: 00007f1f8d92e559 [ 102.254504][ T5898] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 102.254518][ T5898] RBP: 00007f1f8d9c5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 102.254530][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.254542][ T5898] R13: 00007f1f8dbb6038 R14: 00007f1f8dbb5fa0 R15: 00007ffee66e6eb8 [ 102.254573][ T5898] [ 104.731999][ T5924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.29'. [ 104.852625][ T36] kauditd_printk_skb: 277 callbacks suppressed [ 104.852657][ T36] audit: type=1326 audit(1792476804.467:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 104.852751][ T36] audit: type=1326 audit(1792476804.467:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 104.852856][ T36] audit: type=1326 audit(1792476804.477:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 104.852952][ T36] audit: type=1326 audit(1792476804.477:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 104.853029][ T36] audit: type=1326 audit(1792476804.477:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 104.853107][ T36] audit: type=1326 audit(1792476804.477:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 104.853199][ T36] audit: type=1326 audit(1792476804.477:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8d92e559 code=0x7ffc0000 [ 104.853264][ T36] audit: type=1326 audit(1792476804.477:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f8d8eed8e code=0x7ffc0000 [ 104.853356][ T36] audit: type=1326 audit(1792476804.477:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f8d8eed8e code=0x7ffc0000 [ 104.903002][ T36] audit: type=1326 audit(1792476804.487:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5921 comm="syz.3.29" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f8d8eed8e code=0x7ffc0000 [ 106.565873][ T5908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.972647][ T5949] process 'syz.3.33' launched './file0' with NULL argv: empty string added [ 108.589744][ T5944] syz.2.31 (5944): drop_caches: 2 [ 108.592287][ T5944] syz.2.31 (5944): drop_caches: 2 [ 109.145599][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.404819][ T5908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.467899][ T30] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 109.511089][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.647316][ T5968] kernel read not supported for file /memory.events (pid: 5968 comm: syz.3.37) [ 109.680707][ T30] usb 5-1: config 0 descriptor?? [ 110.015666][ T30] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 110.689070][ T30] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 110.689223][ T30] [drm] Initialized udl on minor 1 [ 111.011441][ T30] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.017378][ T5979] device-mapper: ioctl: Invalid target message parameters. [ 111.070572][ T30] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 111.254674][ T30] usb 5-1: USB disconnect, device number 2 [ 111.523567][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.753600][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 111.761160][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 111.780880][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 111.780908][ T9] usb 1-1: config 0 has no interface number 0 [ 111.803114][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.803142][ T9] usb 1-1: Product: syz [ 111.803155][ T9] usb 1-1: Manufacturer: syz [ 111.803168][ T9] usb 1-1: SerialNumber: syz [ 111.921666][ T9] usb 1-1: config 0 descriptor?? [ 111.931261][ T5908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.367053][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 113.367089][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 113.753776][ T5981] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.829485][ T5908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.909584][ T5977] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 113.951428][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 113.963217][ T6001] netlink: 44 bytes leftover after parsing attributes in process `syz.4.43'. [ 113.966091][ T5981] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 113.974673][ T5981] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 113.974700][ T5981] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 113.974737][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.023860][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 114.078882][ T36] kauditd_printk_skb: 256 callbacks suppressed [ 114.078921][ T36] audit: type=1326 audit(1792476813.707:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.079150][ T36] audit: type=1326 audit(1792476813.707:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.081343][ T36] audit: type=1326 audit(1792476813.707:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.081416][ T36] audit: type=1326 audit(1792476813.707:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.081495][ T36] audit: type=1326 audit(1792476813.707:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.095338][ T36] audit: type=1326 audit(1792476813.707:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.095579][ T36] audit: type=1326 audit(1792476813.707:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.095776][ T36] audit: type=1326 audit(1792476813.717:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.096012][ T36] audit: type=1326 audit(1792476813.717:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.105946][ T36] audit: type=1326 audit(1792476813.717:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5999 comm="syz.4.43" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b827e559 code=0x7ffc0000 [ 114.642198][ T6004] FAULT_INJECTION: forcing a failure. [ 114.642198][ T6004] name failslab, interval 1, probability 0, space 0, times 0 [ 114.642236][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.3.44 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.642257][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.642268][ T6004] Call Trace: [ 114.642275][ T6004] [ 114.642284][ T6004] dump_stack_lvl+0xe8/0x150 [ 114.642317][ T6004] should_fail_ex+0x46b/0x600 [ 114.642353][ T6004] should_failslab+0xa8/0x100 [ 114.642375][ T6004] __kmalloc_cache_noprof+0xa1/0x680 [ 114.642404][ T6004] ? loopback_open+0x12a/0xaa0 [ 114.642423][ T6004] ? loopback_open+0x12a/0xaa0 [ 114.642441][ T6004] ? loopback_open+0xf3/0xaa0 [ 114.642462][ T6004] loopback_open+0x12a/0xaa0 [ 114.642483][ T6004] ? snd_pcm_attach_substream+0x848/0xb20 [ 114.642535][ T6004] snd_pcm_open_substream+0xff1/0x24f0 [ 114.642573][ T6004] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 114.642601][ T6004] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 114.642630][ T6004] ? mutex_lock_nested+0x152/0x1d0 [ 114.642652][ T6004] ? snd_pcm_open+0x17d/0x620 [ 114.642684][ T6004] snd_pcm_open+0x1d2/0x620 [ 114.642718][ T6004] ? __pfx_snd_pcm_open+0x10/0x10 [ 114.642746][ T6004] ? __pfx_default_wake_function+0x10/0x10 [ 114.642774][ T6004] ? snd_lookup_minor_data+0x11e/0x150 [ 114.642822][ T6004] snd_pcm_playback_open+0x5f/0xc0 [ 114.642852][ T6004] chrdev_open+0x4dc/0x600 [ 114.642878][ T6004] ? __pfx_chrdev_open+0x10/0x10 [ 114.642907][ T6004] ? __pfx_chrdev_open+0x10/0x10 [ 114.642926][ T6004] do_dentry_open+0x849/0x1420 [ 114.642958][ T6004] vfs_open+0x3b/0x350 [ 114.642976][ T6004] ? path_openat+0x16a9/0x20a0 [ 114.643009][ T6004] path_openat+0x16c4/0x20a0 [ 114.643065][ T6004] do_file_open+0x23e/0x4a0 [ 114.643098][ T6004] ? __pfx_do_file_open+0x10/0x10 [ 114.643146][ T6004] ? alloc_fd+0x654/0x6d0 [ 114.643179][ T6004] do_sys_openat2+0x115/0x200 [ 114.643202][ T6004] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.643223][ T6004] ? exc_page_fault+0x6a/0xc0 [ 114.643257][ T6004] ? do_user_addr_fault+0xc4c/0x1340 [ 114.643283][ T6004] __x64_sys_openat+0x138/0x170 [ 114.643315][ T6004] do_syscall_64+0x166/0x520 [ 114.643344][ T6004] ? trace_irq_disable+0x3b/0x140 [ 114.643375][ T6004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.643396][ T6004] ? clear_bhb_loop+0x70/0xc0 [ 114.643417][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.643437][ T6004] RIP: 0033:0x7f1f8d8eed8e [ 114.643458][ T6004] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.643476][ T6004] RSP: 002b:00007f1f8bb85b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.643499][ T6004] RAX: ffffffffffffffda RBX: 00007f1f8bb866c0 RCX: 00007f1f8d8eed8e [ 114.643515][ T6004] RDX: 0000000000000002 RSI: 00007f1f8bb85c00 RDI: ffffffffffffff9c [ 114.643530][ T6004] RBP: 00007f1f8bb85c00 R08: 0000000000000000 R09: 0000000000000000 [ 114.643544][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 114.643558][ T6004] R13: 00007f1f8dbb6038 R14: 00007f1f8dbb5fa0 R15: 00007ffee66e6eb8 [ 114.643592][ T6004] [ 114.748049][ T5981] usb 3-1: probing VID:PID(0424:012C) [ 114.757285][ T5981] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 114.757313][ T5981] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 114.757331][ T5981] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 114.757348][ T5981] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 114.757366][ T5981] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 115.058193][ T9] usb 1-1: USB disconnect, device number 2 [ 115.157070][ T6008] netlink: 44 bytes leftover after parsing attributes in process `syz.4.45'. [ 115.266306][ T5981] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 115.652774][ T5981] usb 3-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 115.962698][ T6018] syz.3.46 (6018): drop_caches: 2 [ 115.966257][ T6018] syz.3.46 (6018): drop_caches: 2 [ 115.984984][ T6016] syz.1.49 (6016): drop_caches: 2 [ 115.985382][ T6016] syz.1.49 (6016): drop_caches: 2 [ 115.992627][ T6016] FAULT_INJECTION: forcing a failure. [ 115.992627][ T6016] name failslab, interval 1, probability 0, space 0, times 0 [ 115.992665][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.992688][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.992700][ T6016] Call Trace: [ 115.992707][ T6016] [ 115.992716][ T6016] dump_stack_lvl+0xe8/0x150 [ 115.992752][ T6016] should_fail_ex+0x46b/0x600 [ 115.992789][ T6016] should_failslab+0xa8/0x100 [ 115.992811][ T6016] ? security_file_alloc+0x34/0x310 [ 115.992840][ T6016] kmem_cache_alloc_noprof+0x9e/0x690 [ 115.992869][ T6016] ? rcu_is_watching+0x16/0xb0 [ 115.992888][ T6016] ? security_file_alloc+0x34/0x310 [ 115.992915][ T6016] ? alloc_empty_file+0x5b/0x1d0 [ 115.992940][ T6016] security_file_alloc+0x34/0x310 [ 115.992971][ T6016] init_file+0x96/0x2d0 [ 115.992994][ T6016] alloc_empty_file+0x74/0x1d0 [ 115.993016][ T6016] alloc_file_pseudo+0x115/0x1e0 [ 115.993040][ T6016] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 115.993073][ T6016] anon_inode_getfile+0xc5/0x1a0 [ 115.993098][ T6016] do_epoll_create+0x2fc/0x440 [ 115.993120][ T6016] __x64_sys_epoll_create+0x4e/0x70 [ 115.993147][ T6016] do_syscall_64+0x166/0x520 [ 115.993175][ T6016] ? trace_irq_disable+0x3b/0x140 [ 115.993202][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.993223][ T6016] ? clear_bhb_loop+0x70/0xc0 [ 115.993246][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.993266][ T6016] RIP: 0033:0x7f531754e559 [ 115.993285][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.993300][ T6016] RSP: 002b:00007f53157a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 115.993320][ T6016] RAX: ffffffffffffffda RBX: 00007f53177d5fa0 RCX: 00007f531754e559 [ 115.993333][ T6016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000409 [ 115.993345][ T6016] RBP: 00007f53175e5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 115.993357][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.993368][ T6016] R13: 00007f53177d6038 R14: 00007f53177d5fa0 R15: 00007ffd0d277a78 [ 115.993397][ T6016] [ 116.153047][ T6022] FAULT_INJECTION: forcing a failure. [ 116.153047][ T6022] name failslab, interval 1, probability 0, space 0, times 0 [ 116.153083][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.153106][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.153120][ T6022] Call Trace: [ 116.153128][ T6022] [ 116.153136][ T6022] dump_stack_lvl+0xe8/0x150 [ 116.153172][ T6022] should_fail_ex+0x46b/0x600 [ 116.153209][ T6022] should_failslab+0xa8/0x100 [ 116.153232][ T6022] __kmalloc_cache_noprof+0xa1/0x680 [ 116.153261][ T6022] ? loopback_open+0x12a/0xaa0 [ 116.153281][ T6022] ? loopback_open+0x12a/0xaa0 [ 116.153301][ T6022] ? loopback_open+0xf3/0xaa0 [ 116.153324][ T6022] loopback_open+0x12a/0xaa0 [ 116.153346][ T6022] ? snd_pcm_attach_substream+0x848/0xb20 [ 116.153378][ T6022] snd_pcm_open_substream+0xff1/0x24f0 [ 116.153420][ T6022] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 116.153448][ T6022] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 116.153475][ T6022] ? mutex_lock_nested+0x152/0x1d0 [ 116.153495][ T6022] ? snd_pcm_open+0x17d/0x620 [ 116.153524][ T6022] snd_pcm_open+0x1d2/0x620 [ 116.153558][ T6022] ? __pfx_snd_pcm_open+0x10/0x10 [ 116.153583][ T6022] ? __pfx_default_wake_function+0x10/0x10 [ 116.153610][ T6022] ? snd_lookup_minor_data+0x11e/0x150 [ 116.153650][ T6022] snd_pcm_playback_open+0x5f/0xc0 [ 116.153678][ T6022] chrdev_open+0x4dc/0x600 [ 116.153700][ T6022] ? __pfx_chrdev_open+0x10/0x10 [ 116.153728][ T6022] ? __pfx_chrdev_open+0x10/0x10 [ 116.153745][ T6022] do_dentry_open+0x849/0x1420 [ 116.153776][ T6022] vfs_open+0x3b/0x350 [ 116.153794][ T6022] ? path_openat+0x16a9/0x20a0 [ 116.153823][ T6022] path_openat+0x16c4/0x20a0 [ 116.153868][ T6022] do_file_open+0x23e/0x4a0 [ 116.153900][ T6022] ? __pfx_do_file_open+0x10/0x10 [ 116.153957][ T6022] ? alloc_fd+0x654/0x6d0 [ 116.153990][ T6022] do_sys_openat2+0x115/0x200 [ 116.154015][ T6022] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.154038][ T6022] ? exc_page_fault+0x6a/0xc0 [ 116.154070][ T6022] ? do_user_addr_fault+0xc4c/0x1340 [ 116.154094][ T6022] __x64_sys_openat+0x138/0x170 [ 116.154121][ T6022] do_syscall_64+0x166/0x520 [ 116.154148][ T6022] ? trace_irq_disable+0x3b/0x140 [ 116.154174][ T6022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.154194][ T6022] ? clear_bhb_loop+0x70/0xc0 [ 116.154218][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.154238][ T6022] RIP: 0033:0x7f1f8d8eed8e [ 116.154257][ T6022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 116.154273][ T6022] RSP: 002b:00007f1f8bb85b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.154294][ T6022] RAX: ffffffffffffffda RBX: 00007f1f8bb866c0 RCX: 00007f1f8d8eed8e [ 116.154309][ T6022] RDX: 0000000000000002 RSI: 00007f1f8bb85c00 RDI: ffffffffffffff9c [ 116.154322][ T6022] RBP: 00007f1f8bb85c00 R08: 0000000000000000 R09: 0000000000000000 [ 116.154335][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 116.154347][ T6022] R13: 00007f1f8dbb6038 R14: 00007f1f8dbb5fa0 R15: 00007ffee66e6eb8 [ 116.154379][ T6022] [ 116.719601][ T5981] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 117.535887][ T5981] usb 3-1: USB disconnect, device number 2 [ 117.540584][ T5575] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 117.549846][ T5575] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 117.552037][ T5575] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 117.633560][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.747164][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.921070][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 117.971600][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.971631][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.971654][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.134285][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 118.134315][ T10] usb 5-1: Product: syz [ 118.134328][ T10] usb 5-1: Manufacturer: syz [ 118.134340][ T10] usb 5-1: SerialNumber: syz [ 119.384888][ T6040] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.468455][ T6040] CIFS: Attempting to mount //127.0.0.1/share [ 119.755022][ T6045] FAULT_INJECTION: forcing a failure. [ 119.755022][ T6045] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.755056][ T6045] CPU: 1 UID: 0 PID: 6045 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 119.755076][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.755086][ T6045] Call Trace: [ 119.755093][ T6045] [ 119.755100][ T6045] dump_stack_lvl+0xe8/0x150 [ 119.755131][ T6045] should_fail_ex+0x46b/0x600 [ 119.755162][ T6045] _copy_from_user+0x2d/0xb0 [ 119.755179][ T6045] __sys_bpf+0x2e7/0xd90 [ 119.755207][ T6045] ? __pfx___sys_bpf+0x10/0x10 [ 119.755230][ T6045] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 119.755255][ T6045] ? rt_mutex_slowunlock+0x219/0x460 [ 119.755289][ T6045] ? ksys_write+0x248/0x270 [ 119.755312][ T6045] ? __pfx_ksys_write+0x10/0x10 [ 119.755337][ T6045] __x64_sys_bpf+0xba/0xd0 [ 119.755362][ T6045] do_syscall_64+0x166/0x520 [ 119.755381][ T6045] ? trace_irq_disable+0x3b/0x140 [ 119.755400][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.755415][ T6045] ? clear_bhb_loop+0x70/0xc0 [ 119.755434][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.755448][ T6045] RIP: 0033:0x7f1f8d92e559 [ 119.755464][ T6045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.755477][ T6045] RSP: 002b:00007f1f8bb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.755495][ T6045] RAX: ffffffffffffffda RBX: 00007f1f8dbb5fa0 RCX: 00007f1f8d92e559 [ 119.755506][ T6045] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 119.755516][ T6045] RBP: 00007f1f8bb86090 R08: 0000000000000000 R09: 0000000000000000 [ 119.755524][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.755533][ T6045] R13: 00007f1f8dbb6038 R14: 00007f1f8dbb5fa0 R15: 00007ffee66e6eb8 [ 119.755559][ T6045] [ 120.703788][ T10] usb 5-1: can't set config #1, error -71 [ 121.045384][ T10] usb 5-1: USB disconnect, device number 3 [ 121.160461][ T5981] USB vub300 remote SDIO host controller[0] now disconnected [ 121.322722][ T6053] FAULT_INJECTION: forcing a failure. [ 121.322722][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.322759][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.322778][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.322788][ T6053] Call Trace: [ 121.322794][ T6053] [ 121.322801][ T6053] dump_stack_lvl+0xe8/0x150 [ 121.322836][ T6053] should_fail_ex+0x46b/0x600 [ 121.322866][ T6053] _copy_from_user+0x2d/0xb0 [ 121.322886][ T6053] ___sys_sendmsg+0x1c6/0x360 [ 121.322911][ T6053] ? __lock_acquire+0x747/0x2de0 [ 121.322940][ T6053] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.322982][ T6053] ? __fget_files+0x2a/0x420 [ 121.323001][ T6053] ? __fget_files+0x3a8/0x420 [ 121.323032][ T6053] __x64_sys_sendmsg+0x1b7/0x290 [ 121.323059][ T6053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.323100][ T6053] do_syscall_64+0x166/0x520 [ 121.323124][ T6053] ? trace_irq_disable+0x3b/0x140 [ 121.323148][ T6053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.323165][ T6053] ? clear_bhb_loop+0x70/0xc0 [ 121.323185][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.323203][ T6053] RIP: 0033:0x7f1f8d92e559 [ 121.323219][ T6053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.323234][ T6053] RSP: 002b:00007f1f8bb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.323254][ T6053] RAX: ffffffffffffffda RBX: 00007f1f8dbb5fa0 RCX: 00007f1f8d92e559 [ 121.323267][ T6053] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 121.323278][ T6053] RBP: 00007f1f8bb86090 R08: 0000000000000000 R09: 0000000000000000 [ 121.323288][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.323299][ T6053] R13: 00007f1f8dbb6038 R14: 00007f1f8dbb5fa0 R15: 00007ffee66e6eb8 [ 121.323329][ T6053] [ 121.370724][ T6040] CIFS: VFS: Error connecting to socket. Aborting operation. [ 121.371002][ T6040] CIFS: VFS: cifs_mount failed w/return code = -4 [ 121.376780][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.829741][ T6052] ovs-s!: entered promiscuous mode [ 121.839775][ T6040] syz.0.53 (6040) used greatest stack depth: 18832 bytes left [ 124.139760][ T6084] syz.1.67 (6084): drop_caches: 2 [ 124.141777][ T6084] syz.1.67 (6084): drop_caches: 2 [ 124.163549][ T5981] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.192872][ T6084] FAULT_INJECTION: forcing a failure. [ 124.192872][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 124.192909][ T6084] CPU: 1 UID: 0 PID: 6084 Comm: syz.1.67 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.192933][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.192948][ T6084] Call Trace: [ 124.192957][ T6084] [ 124.192965][ T6084] dump_stack_lvl+0xe8/0x150 [ 124.193001][ T6084] should_fail_ex+0x46b/0x600 [ 124.193038][ T6084] should_failslab+0xa8/0x100 [ 124.193060][ T6084] ? security_file_alloc+0x34/0x310 [ 124.193091][ T6084] kmem_cache_alloc_noprof+0x9e/0x690 [ 124.193120][ T6084] ? rcu_is_watching+0x16/0xb0 [ 124.193139][ T6084] ? security_file_alloc+0x34/0x310 [ 124.193169][ T6084] ? alloc_empty_file+0x5b/0x1d0 [ 124.193194][ T6084] security_file_alloc+0x34/0x310 [ 124.193226][ T6084] init_file+0x96/0x2d0 [ 124.193248][ T6084] alloc_empty_file+0x74/0x1d0 [ 124.193270][ T6084] alloc_file_pseudo+0x115/0x1e0 [ 124.193294][ T6084] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 124.193327][ T6084] anon_inode_getfile+0xc5/0x1a0 [ 124.193360][ T6084] do_epoll_create+0x2fc/0x440 [ 124.193384][ T6084] __x64_sys_epoll_create+0x4e/0x70 [ 124.193409][ T6084] do_syscall_64+0x166/0x520 [ 124.193437][ T6084] ? trace_irq_disable+0x3b/0x140 [ 124.193464][ T6084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.193485][ T6084] ? clear_bhb_loop+0x70/0xc0 [ 124.193510][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.193530][ T6084] RIP: 0033:0x7f531754e559 [ 124.193550][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.193566][ T6084] RSP: 002b:00007f53157a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 124.193589][ T6084] RAX: ffffffffffffffda RBX: 00007f53177d5fa0 RCX: 00007f531754e559 [ 124.193603][ T6084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000409 [ 124.193616][ T6084] RBP: 00007f53175e5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 124.193629][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.193641][ T6084] R13: 00007f53177d6038 R14: 00007f53177d5fa0 R15: 00007ffd0d277a78 [ 124.193672][ T6084] [ 124.696389][ T5981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 124.700466][ T5981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.700496][ T5981] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.700519][ T5981] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.761012][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 124.761041][ T5981] usb 5-1: Product: syz [ 124.761055][ T5981] usb 5-1: Manufacturer: syz [ 124.761069][ T5981] usb 5-1: SerialNumber: syz [ 124.905732][ T6087] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.65'. [ 125.310670][ T6095] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 125.422043][ T6095] exFAT-fs (nbd2): unable to read boot sector [ 125.422211][ T6095] exFAT-fs (nbd2): failed to read boot sector [ 125.422265][ T6095] exFAT-fs (nbd2): failed to recognize exfat type [ 127.293348][ T5981] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.376673][ T5981] usb 5-1: USB disconnect, device number 4 [ 127.418545][ T5981] usblp0: removed [ 127.483561][ T30] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.679172][ T6111] syz.2.72 (6111): drop_caches: 2 [ 127.679580][ T6111] syz.2.72 (6111): drop_caches: 2 [ 128.423818][ T6098] syz.4.64 (6098) used greatest stack depth: 18216 bytes left [ 128.638993][ T6115] tmpfs: Unknown parameter 'grpqimit' [ 128.655834][ T6115] ovs-s!: entered promiscuous mode [ 129.744124][ T6122] FAULT_INJECTION: forcing a failure. [ 129.744124][ T6122] name failslab, interval 1, probability 0, space 0, times 0 [ 129.744159][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 129.744182][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.744193][ T6122] Call Trace: [ 129.744201][ T6122] [ 129.744209][ T6122] dump_stack_lvl+0xe8/0x150 [ 129.744242][ T6122] should_fail_ex+0x46b/0x600 [ 129.744277][ T6122] should_failslab+0xa8/0x100 [ 129.744300][ T6122] __kmalloc_noprof+0xfb/0x790 [ 129.744327][ T6122] ? tomoyo_realpath_from_path+0xef/0x640 [ 129.744347][ T6122] ? tomoyo_realpath_from_path+0xef/0x640 [ 129.744375][ T6122] tomoyo_realpath_from_path+0xef/0x640 [ 129.744406][ T6122] ? tomoyo_path_number_perm+0x219/0x5f0 [ 129.744443][ T6122] tomoyo_path_number_perm+0x246/0x5f0 [ 129.744477][ T6122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.744503][ T6122] ? __lock_acquire+0x747/0x2de0 [ 129.744542][ T6122] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 129.744568][ T6122] ? hook_file_ioctl+0x1f5/0x610 [ 129.744609][ T6122] ? __fget_files+0x2a/0x420 [ 129.744635][ T6122] ? __fget_files+0x2a/0x420 [ 129.744656][ T6122] ? __fget_files+0x3a8/0x420 [ 129.744676][ T6122] ? __fget_files+0x2a/0x420 [ 129.744700][ T6122] security_file_ioctl+0xc3/0x2a0 [ 129.744731][ T6122] __se_sys_ioctl+0x47/0x170 [ 129.744761][ T6122] do_syscall_64+0x166/0x520 [ 129.744786][ T6122] ? trace_irq_disable+0x3b/0x140 [ 129.744811][ T6122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.744829][ T6122] ? clear_bhb_loop+0x70/0xc0 [ 129.744851][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.744869][ T6122] RIP: 0033:0x7f1f8d92e559 [ 129.744887][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.744902][ T6122] RSP: 002b:00007f1f8bb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.744924][ T6122] RAX: ffffffffffffffda RBX: 00007f1f8dbb5fa0 RCX: 00007f1f8d92e559 [ 129.744938][ T6122] RDX: 0000200000000700 RSI: 00000000000089e1 RDI: 0000000000000004 [ 129.744950][ T6122] RBP: 00007f1f8bb86090 R08: 0000000000000000 R09: 0000000000000000 [ 129.744962][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.744973][ T6122] R13: 00007f1f8dbb6038 R14: 00007f1f8dbb5fa0 R15: 00007ffee66e6eb8 [ 129.745002][ T6122] [ 129.746290][ T6122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.225454][ T30] usb 1-1: device descriptor read/all, error -71 [ 131.483438][ T6147] FAULT_INJECTION: forcing a failure. [ 131.483438][ T6147] name failslab, interval 1, probability 0, space 0, times 0 [ 131.483476][ T6147] CPU: 1 UID: 0 PID: 6147 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.483498][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.483514][ T6147] Call Trace: [ 131.483522][ T6147] [ 131.483530][ T6147] dump_stack_lvl+0xe8/0x150 [ 131.483561][ T6147] should_fail_ex+0x46b/0x600 [ 131.483594][ T6147] should_failslab+0xa8/0x100 [ 131.483616][ T6147] ? security_file_alloc+0x34/0x310 [ 131.483641][ T6147] kmem_cache_alloc_noprof+0x9e/0x690 [ 131.483664][ T6147] ? rcu_is_watching+0x16/0xb0 [ 131.483680][ T6147] ? security_file_alloc+0x34/0x310 [ 131.483706][ T6147] ? alloc_empty_file+0x5b/0x1d0 [ 131.483730][ T6147] security_file_alloc+0x34/0x310 [ 131.483758][ T6147] init_file+0x96/0x2d0 [ 131.483779][ T6147] alloc_empty_file+0x74/0x1d0 [ 131.483798][ T6147] alloc_file_pseudo+0x115/0x1e0 [ 131.483820][ T6147] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 131.483850][ T6147] anon_inode_getfile+0xc5/0x1a0 [ 131.483873][ T6147] do_epoll_create+0x2fc/0x440 [ 131.483892][ T6147] __x64_sys_epoll_create+0x4e/0x70 [ 131.483917][ T6147] do_syscall_64+0x166/0x520 [ 131.483943][ T6147] ? trace_irq_disable+0x3b/0x140 [ 131.483968][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.483990][ T6147] ? clear_bhb_loop+0x70/0xc0 [ 131.484012][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.484030][ T6147] RIP: 0033:0x7fa6d62fe559 [ 131.484048][ T6147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.484064][ T6147] RSP: 002b:00007fa6d4535028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 131.484083][ T6147] RAX: ffffffffffffffda RBX: 00007fa6d6586090 RCX: 00007fa6d62fe559 [ 131.484097][ T6147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000409 [ 131.484107][ T6147] RBP: 00007fa6d6395ad8 R08: 0000000000000000 R09: 0000000000000000 [ 131.484118][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.484129][ T6147] R13: 00007fa6d6586128 R14: 00007fa6d6586090 R15: 00007ffd5d7f0648 [ 131.484156][ T6147] [ 131.944455][ T6146] syz.0.80 (6146): drop_caches: 2 [ 131.951986][ T6146] syz.0.80 (6146): drop_caches: 2 [ 132.797619][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.797720][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.966151][ T6157] FAULT_INJECTION: forcing a failure. [ 132.966151][ T6157] name failslab, interval 1, probability 0, space 0, times 0 [ 132.966176][ T6157] CPU: 0 UID: 0 PID: 6157 Comm: syz.2.82 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.966189][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.966196][ T6157] Call Trace: [ 132.966201][ T6157] [ 132.966206][ T6157] dump_stack_lvl+0xe8/0x150 [ 132.966230][ T6157] should_fail_ex+0x46b/0x600 [ 132.966252][ T6157] should_failslab+0xa8/0x100 [ 132.966265][ T6157] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 132.966283][ T6157] ? __split_page_owner+0x2c/0x330 [ 132.966293][ T6157] ? snd_pcm_hw_rule_add+0x196/0x800 [ 132.966309][ T6157] ? snd_pcm_hw_rule_add+0x196/0x800 [ 132.966326][ T6157] ? snd_pcm_hw_rule_add+0x196/0x800 [ 132.966341][ T6157] krealloc_node_align_noprof+0x19a/0x390 [ 132.966358][ T6157] snd_pcm_hw_rule_add+0x196/0x800 [ 132.966375][ T6157] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 132.966389][ T6157] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 132.966404][ T6157] ? snd_pcm_attach_substream+0x848/0xb20 [ 132.966421][ T6157] snd_pcm_open_substream+0xae4/0x24f0 [ 132.966443][ T6157] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 132.966458][ T6157] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 132.966473][ T6157] ? mutex_lock_nested+0x152/0x1d0 [ 132.966485][ T6157] ? snd_pcm_open+0x17d/0x620 [ 132.966499][ T6157] snd_pcm_open+0x1d2/0x620 [ 132.966517][ T6157] ? __pfx_snd_pcm_open+0x10/0x10 [ 132.966530][ T6157] ? __pfx_default_wake_function+0x10/0x10 [ 132.966545][ T6157] ? snd_lookup_minor_data+0x11e/0x150 [ 132.966567][ T6157] snd_pcm_playback_open+0x5f/0xc0 [ 132.966583][ T6157] chrdev_open+0x4dc/0x600 [ 132.966594][ T6157] ? __pfx_chrdev_open+0x10/0x10 [ 132.966609][ T6157] ? __pfx_chrdev_open+0x10/0x10 [ 132.966618][ T6157] do_dentry_open+0x849/0x1420 [ 132.966635][ T6157] vfs_open+0x3b/0x350 [ 132.966644][ T6157] ? path_openat+0x16a9/0x20a0 [ 132.966660][ T6157] path_openat+0x16c4/0x20a0 [ 132.966684][ T6157] do_file_open+0x23e/0x4a0 [ 132.966701][ T6157] ? __pfx_do_file_open+0x10/0x10 [ 132.966727][ T6157] ? alloc_fd+0x654/0x6d0 [ 132.966744][ T6157] do_sys_openat2+0x115/0x200 [ 132.966756][ T6157] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.966768][ T6157] ? exc_page_fault+0x6a/0xc0 [ 132.966784][ T6157] ? do_user_addr_fault+0xc4c/0x1340 [ 132.966798][ T6157] __x64_sys_openat+0x138/0x170 [ 132.966812][ T6157] do_syscall_64+0x166/0x520 [ 132.966827][ T6157] ? trace_irq_disable+0x3b/0x140 [ 132.966841][ T6157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.966851][ T6157] ? clear_bhb_loop+0x70/0xc0 [ 132.966872][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.966883][ T6157] RIP: 0033:0x7fa7a3a8ed8e [ 132.966895][ T6157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.966904][ T6157] RSP: 002b:00007fa7a1d25b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.966917][ T6157] RAX: ffffffffffffffda RBX: 00007fa7a1d266c0 RCX: 00007fa7a3a8ed8e [ 132.966924][ T6157] RDX: 0000000000000002 RSI: 00007fa7a1d25c00 RDI: ffffffffffffff9c [ 132.966932][ T6157] RBP: 00007fa7a1d25c00 R08: 0000000000000000 R09: 0000000000000000 [ 132.966938][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 132.966945][ T6157] R13: 00007fa7a3d56038 R14: 00007fa7a3d55fa0 R15: 00007ffdefba17c8 [ 132.966961][ T6157] [ 133.517012][ T6173] BTRFS error: failed to parse compression option 'zstd>6' [ 133.517678][ T6173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.88'. [ 133.557264][ T5593] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 133.573590][ T6171] FAULT_INJECTION: forcing a failure. [ 133.573590][ T6171] name failslab, interval 1, probability 0, space 0, times 0 [ 133.573626][ T6171] CPU: 1 UID: 0 PID: 6171 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.573647][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.573654][ T6171] Call Trace: [ 133.573659][ T6171] [ 133.573665][ T6171] dump_stack_lvl+0xe8/0x150 [ 133.573686][ T6171] should_fail_ex+0x46b/0x600 [ 133.573707][ T6171] should_failslab+0xa8/0x100 [ 133.573720][ T6171] __kvmalloc_node_noprof+0x176/0x890 [ 133.573733][ T6171] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 133.573749][ T6171] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 133.573765][ T6171] __nf_hook_entries_try_shrink+0x34e/0x720 [ 133.573786][ T6171] __nf_unregister_net_hook+0x4be/0x6d0 [ 133.573803][ T6171] nf_unregister_net_hooks+0xcb/0x140 [ 133.573817][ T6171] nf_ct_netns_put+0x3b9/0x520 [ 133.573831][ T6171] ? __pfx_nft_flow_offload_destroy+0x10/0x10 [ 133.573847][ T6171] __nft_release_table+0x57e/0x1150 [ 133.573868][ T6171] ? __pfx___nft_release_table+0x10/0x10 [ 133.573891][ T6171] nft_rcv_nl_event+0xcc6/0xe60 [ 133.573914][ T6171] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 133.573930][ T6171] ? nfulnl_rcv_nl_event+0x445/0x480 [ 133.573943][ T6171] ? nfulnl_rcv_nl_event+0x98/0x480 [ 133.573958][ T6171] notifier_call_chain+0x1a5/0x3d0 [ 133.573975][ T6171] blocking_notifier_call_chain+0x6a/0x90 [ 133.573988][ T6171] netlink_release+0x122f/0x1ab0 [ 133.574009][ T6171] ? netlink_release+0x106/0x1ab0 [ 133.574026][ T6171] ? __pfx_netlink_release+0x10/0x10 [ 133.574050][ T6171] __sock_release+0xa0/0x1f0 [ 133.574063][ T6171] ? __pfx_sock_close+0x10/0x10 [ 133.574073][ T6171] sock_close+0x1c/0x30 [ 133.574082][ T6171] __fput+0x41f/0xa80 [ 133.574099][ T6171] fput_close_sync+0x11f/0x240 [ 133.574111][ T6171] ? __pfx_fput_close_sync+0x10/0x10 [ 133.574130][ T6171] __x64_sys_close+0x7e/0x110 [ 133.574143][ T6171] do_syscall_64+0x166/0x520 [ 133.574159][ T6171] ? trace_irq_disable+0x3b/0x140 [ 133.574173][ T6171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.574184][ T6171] ? clear_bhb_loop+0x70/0xc0 [ 133.574197][ T6171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.574208][ T6171] RIP: 0033:0x7fa6d62fe559 [ 133.574220][ T6171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.574229][ T6171] RSP: 002b:00007fa6d4556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 133.574242][ T6171] RAX: ffffffffffffffda RBX: 00007fa6d6585fa0 RCX: 00007fa6d62fe559 [ 133.574249][ T6171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 133.574255][ T6171] RBP: 00007fa6d4556090 R08: 0000000000000000 R09: 0000000000000000 [ 133.574261][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.574285][ T6171] R13: 00007fa6d6586038 R14: 00007fa6d6585fa0 R15: 00007ffd5d7f0648 [ 133.574303][ T6171] [ 133.968830][ T6175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.89'. [ 134.088701][ T36] kauditd_printk_skb: 363 callbacks suppressed [ 134.088741][ T36] audit: type=1326 audit(1792476833.687:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.089068][ T36] audit: type=1326 audit(1792476833.687:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.089340][ T36] audit: type=1326 audit(1792476833.687:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.089557][ T36] audit: type=1326 audit(1792476833.687:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.089756][ T36] audit: type=1326 audit(1792476833.687:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.089943][ T36] audit: type=1326 audit(1792476833.687:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.090166][ T36] audit: type=1326 audit(1792476833.687:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.090405][ T36] audit: type=1326 audit(1792476833.687:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.090600][ T36] audit: type=1326 audit(1792476833.687:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.090821][ T36] audit: type=1326 audit(1792476833.687:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.2.89" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a3ace559 code=0x7ffc0000 [ 134.547940][ T6184] busy [ 134.788670][ T5661] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.805085][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.859079][ T6192] busy [ 134.976087][ T5661] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 134.982783][ T5661] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 134.982812][ T5661] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 134.982849][ T5661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.984145][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 134.986681][ T30] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 134.988833][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.024813][ T30] usb 4-1: config 0 descriptor?? [ 135.167616][ T30] gspca_main: sunplus-2.14.0 probing 041e:400b [ 135.183359][ T5661] usb 3-1: probing VID:PID(0424:012C) [ 135.190709][ T5661] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 135.190735][ T5661] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 135.190752][ T5661] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 135.190769][ T5661] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 135.190785][ T5661] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 135.203524][ T5984] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.425143][ T5984] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 135.428688][ T5984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 135.428716][ T5984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 135.428799][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.531110][ T5984] usb 1-1: probing VID:PID(0424:012C) [ 135.541662][ T5661] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 135.560402][ T5984] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 135.560479][ T5984] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 135.560508][ T5984] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 135.560525][ T5984] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 135.560543][ T5984] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 135.743960][ T5661] usb 3-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 135.760010][ T30] gspca_sunplus: reg_r err -32 [ 135.760112][ T30] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 135.924897][ T5984] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 136.036073][ T9] usb 4-1: USB disconnect, device number 2 [ 136.126081][ T5984] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 137.070756][ T5661] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 137.218334][ T5661] usb 3-1: USB disconnect, device number 3 [ 137.327928][ T9] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 137.332082][ T9] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 137.350334][ T9] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 137.387711][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 137.392524][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 137.408271][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 137.448400][ T5984] usb 1-1: USB disconnect, device number 6 [ 138.419521][ T5661] USB vub300 remote SDIO host controller[0] now disconnected [ 138.529117][ T5984] USB vub300 remote SDIO host controller[0] now disconnected [ 140.807277][ T6232] syz.4.103 (6232): drop_caches: 2 [ 140.809036][ T6232] syz.4.103 (6232): drop_caches: 2 [ 141.115557][ T6236] FAULT_INJECTION: forcing a failure. [ 141.115557][ T6236] name fail_futex, interval 1, probability 0, space 0, times 1 [ 141.115595][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.2.104 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.115618][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.115630][ T6236] Call Trace: [ 141.115638][ T6236] [ 141.115647][ T6236] dump_stack_lvl+0xe8/0x150 [ 141.115683][ T6236] should_fail_ex+0x46b/0x600 [ 141.115721][ T6236] get_futex_key+0x1ab/0x1410 [ 141.115750][ T6236] ? ktime_get+0x45/0x220 [ 141.115778][ T6236] ? ktime_get+0x1f5/0x220 [ 141.115806][ T6236] ? clockevents_program_event+0x491/0x630 [ 141.115827][ T6236] ? __pfx_get_futex_key+0x10/0x10 [ 141.115854][ T6236] ? __pfx_clockevents_program_event+0x10/0x10 [ 141.115883][ T6236] futex_wake+0x119/0x600 [ 141.115915][ T6236] ? __pfx_futex_wake+0x10/0x10 [ 141.115954][ T6236] do_futex+0x458/0x4e0 [ 141.115980][ T6236] ? __pfx_do_futex+0x10/0x10 [ 141.116010][ T6236] __se_sys_futex+0x3a8/0x450 [ 141.116038][ T6236] ? __pfx___se_sys_futex+0x10/0x10 [ 141.116061][ T6236] ? fd_install+0x97/0x3e0 [ 141.116088][ T6236] ? __x64_sys_futex+0x21/0xf0 [ 141.116112][ T6236] do_syscall_64+0x166/0x520 [ 141.116140][ T6236] ? trace_irq_disable+0x3b/0x140 [ 141.116176][ T6236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.116197][ T6236] ? clear_bhb_loop+0x70/0xc0 [ 141.116222][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.116243][ T6236] RIP: 0033:0x7fa7a3ace559 [ 141.116263][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.116280][ T6236] RSP: 002b:00007fa7a1d050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 141.116302][ T6236] RAX: ffffffffffffffda RBX: 00007fa7a3d56098 RCX: 00007fa7a3ace559 [ 141.116316][ T6236] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa7a3d5609c [ 141.116330][ T6236] RBP: 00007fa7a3d56090 R08: 3fffffffffffffff R09: 0000000000000000 [ 141.116343][ T6236] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 141.116355][ T6236] R13: 00007fa7a3d56128 R14: 00007ffdefba16e0 R15: 00007ffdefba17c8 [ 141.116387][ T6236] [ 141.129694][ T6228] syz.2.104 (6228): drop_caches: 2 [ 141.261289][ T6228] syz.2.104 (6228): drop_caches: 2 [ 142.729392][ T5984] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.668011][ T5984] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 143.713159][ T5984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.713189][ T5984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.713213][ T5984] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.647627][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 144.647657][ T5984] usb 1-1: Product: syz [ 144.690183][ T5984] usb 1-1: can't set config #1, error -71 [ 144.727312][ T5984] usb 1-1: USB disconnect, device number 7 [ 144.893981][ T6268] busy [ 146.338643][ T5792] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.673617][ T5984] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.794383][ T5792] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 146.797883][ T5792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 146.797912][ T5792] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 146.797952][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.811552][ T5792] usb 4-1: probing VID:PID(0424:012C) [ 146.814072][ T5792] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 146.814093][ T5792] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 146.814109][ T5792] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 146.814126][ T5792] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 146.814142][ T5792] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 146.993731][ T5984] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 147.073524][ T5984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 147.073597][ T5984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 147.073846][ T5984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.442889][ T5984] usb 1-1: probing VID:PID(0424:012C) [ 147.471791][ T5984] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 147.471820][ T5984] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 147.471838][ T5984] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 147.471856][ T5984] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 147.471874][ T5984] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 147.867713][ T6288] syz.1.117 (6288): drop_caches: 2 [ 147.868130][ T6288] syz.1.117 (6288): drop_caches: 2 [ 147.871171][ T5984] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 148.072337][ T5984] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 148.266904][ T5792] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 148.468034][ T5792] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 148.906450][ T5984] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 149.011314][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 149.779334][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 149.781062][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 150.143895][ T5917] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 150.163154][ T5917] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 150.177704][ T5917] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 150.386002][ T5792] usb 4-1: USB disconnect, device number 3 [ 150.587149][ T6289] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.118'. [ 150.618189][ T6301] syz.4.119 (6301): drop_caches: 2 [ 150.618608][ T6301] syz.4.119 (6301): drop_caches: 2 [ 150.698662][ T5984] usb 1-1: USB disconnect, device number 8 [ 151.112801][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 151.139245][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 151.482990][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 151.494114][ T1002] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 152.289308][ T5984] USB vub300 remote SDIO host controller[0] now disconnected [ 152.717432][ T5792] USB vub300 remote SDIO host controller[0] now disconnected [ 153.016743][ T65] ================================================================== [ 153.016763][ T65] BUG: KASAN: slab-use-after-free in mmc_host_classdev_release+0x7c/0x100 [ 153.016795][ T65] Read of size 8 at addr ffff88804e494580 by task kworker/u8:4/65 [ 153.016811][ T65] [ 153.016822][ T65] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.016843][ T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.016855][ T65] Workqueue: kvub300d vub300_deadwork_thread [ 153.016887][ T65] Call Trace: [ 153.016894][ T65] [ 153.016903][ T65] dump_stack_lvl+0xe8/0x150 [ 153.016931][ T65] print_address_description+0x55/0x1e0 [ 153.016958][ T65] ? mmc_host_classdev_release+0x7c/0x100 [ 153.016980][ T65] print_report+0x58/0x70 [ 153.017003][ T65] kasan_report+0x117/0x150 [ 153.017025][ T65] ? mmc_host_classdev_release+0x7c/0x100 [ 153.017050][ T65] mmc_host_classdev_release+0x7c/0x100 [ 153.017072][ T65] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 153.017094][ T65] device_release+0xc4/0x1f0 [ 153.017120][ T65] kobject_put+0x222/0x550 [ 153.017139][ T65] ? mmc_pwrseq_free+0x86/0xa0 [ 153.017163][ T65] ? process_scheduled_works+0x97a/0x1630 [ 153.017189][ T65] process_scheduled_works+0xc3d/0x1630 [ 153.017230][ T65] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.017258][ T65] ? assign_work+0x3cf/0x5d0 [ 153.017283][ T65] worker_thread+0xa47/0xfb0 [ 153.017319][ T65] kthread+0x38b/0x470 [ 153.017345][ T65] ? __pfx_worker_thread+0x10/0x10 [ 153.017369][ T65] ? __pfx_kthread+0x10/0x10 [ 153.017388][ T65] ret_from_fork+0x514/0xb70 [ 153.017408][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 153.017427][ T65] ? __switch_to+0xc89/0x1420 [ 153.017453][ T65] ? __pfx_kthread+0x10/0x10 [ 153.017472][ T65] ret_from_fork_asm+0x1a/0x30 [ 153.017497][ T65] [ 153.017504][ T65] [ 153.017509][ T65] Allocated by task 5792: [ 153.017517][ T65] kasan_save_track+0x3e/0x80 [ 153.017542][ T65] __kasan_kmalloc+0x93/0xb0 [ 153.017557][ T65] __kmalloc_cache_noprof+0x3d5/0x680 [ 153.017582][ T65] usb_alloc_dev+0x5f/0xf20 [ 153.017604][ T65] hub_event+0x2113/0x4cf0 [ 153.017623][ T65] process_scheduled_works+0xc3d/0x1630 [ 153.017644][ T65] worker_thread+0xa47/0xfb0 [ 153.017666][ T65] kthread+0x38b/0x470 [ 153.017681][ T65] ret_from_fork+0x514/0xb70 [ 153.017697][ T65] ret_from_fork_asm+0x1a/0x30 [ 153.017712][ T65] [ 153.017716][ T65] Freed by task 65: [ 153.017725][ T65] kasan_save_track+0x3e/0x80 [ 153.017749][ T65] kasan_save_free_info+0x40/0x50 [ 153.017769][ T65] __kasan_slab_free+0x5c/0x80 [ 153.017784][ T65] kfree+0x1c5/0x6d0 [ 153.017804][ T65] device_release+0xc4/0x1f0 [ 153.017826][ T65] kobject_put+0x222/0x550 [ 153.017842][ T65] vub300_deadwork_thread+0x2ba/0x530 [ 153.017866][ T65] process_scheduled_works+0xc3d/0x1630 [ 153.017888][ T65] worker_thread+0xa47/0xfb0 [ 153.017909][ T65] kthread+0x38b/0x470 [ 153.017925][ T65] ret_from_fork+0x514/0xb70 [ 153.017941][ T65] ret_from_fork_asm+0x1a/0x30 [ 153.017956][ T65] [ 153.017960][ T65] The buggy address belongs to the object at ffff88804e494000 [ 153.017960][ T65] which belongs to the cache kmalloc-4k of size 4096 [ 153.017976][ T65] The buggy address is located 1408 bytes inside of [ 153.017976][ T65] freed 4096-byte region [ffff88804e494000, ffff88804e495000) [ 153.017996][ T65] [ 153.018000][ T65] The buggy address belongs to the physical page: [ 153.018015][ T65] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e490 [ 153.018037][ T65] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.018053][ T65] flags: 0x80000000000040(head|node=0|zone=1) [ 153.018074][ T65] page_type: f5(slab) [ 153.018091][ T65] raw: 0080000000000040 ffff88813ff04140 dead000000000100 dead000000000122 [ 153.018106][ T65] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 153.018122][ T65] head: 0080000000000040 ffff88813ff04140 dead000000000100 dead000000000122 [ 153.018136][ T65] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 153.018152][ T65] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 153.018167][ T65] head: 00000007f6a3b621 0000000000000000 00000000ffffffff 0000000000000008 [ 153.018176][ T65] page dumped because: kasan: bad access detected [ 153.018190][ T65] page_owner tracks the page as allocated [ 153.018197][ T65] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3352, tgid 3352 (kworker/u8:13), ts 145113228528 [ 153.018226][ T65] post_alloc_hook+0x1f9/0x250 [ 153.018249][ T65] get_page_from_freelist+0x2591/0x2600 [ 153.018266][ T65] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 153.018282][ T65] allocate_slab+0x7d/0x620 [ 153.018302][ T65] refill_objects+0x2d8/0x350 [ 153.018321][ T65] __pcs_replace_empty_main+0x339/0x690 [ 153.018347][ T65] __kmalloc_node_track_caller_noprof+0x61e/0x7b0 [ 153.018372][ T65] __alloc_skb+0x2c1/0x7a0 [ 153.018392][ T65] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 153.018417][ T65] process_scheduled_works+0xc3d/0x1630 [ 153.018439][ T65] worker_thread+0xa47/0xfb0 [ 153.018461][ T65] kthread+0x38b/0x470 [ 153.018477][ T65] ret_from_fork+0x514/0xb70 [ 153.018492][ T65] ret_from_fork_asm+0x1a/0x30 [ 153.018507][ T65] page last free pid 5599 tgid 5599 ts 144984425091 stack trace: [ 153.018521][ T65] __free_frozen_pages+0xf8e/0x1070 [ 153.018544][ T65] __slab_free+0x250/0x2a0 [ 153.018558][ T65] qlist_free_all+0x99/0x100 [ 153.018581][ T65] kasan_quarantine_reduce+0x148/0x160 [ 153.018604][ T65] __kasan_slab_alloc+0x22/0x80 [ 153.018620][ T65] kmem_cache_alloc_noprof+0x360/0x690 [ 153.018643][ T65] anon_vma_clone+0x3f3/0x9f0 [ 153.018665][ T65] anon_vma_fork+0x177/0x540 [ 153.018687][ T65] dup_mmap+0x9ad/0x1d80 [ 153.018711][ T65] copy_mm+0x115/0x480 [ 153.018732][ T65] copy_process+0x1ea8/0x4490 [ 153.018753][ T65] kernel_clone+0x2d2/0x8d0 [ 153.018775][ T65] __x64_sys_clone+0x1b6/0x230 [ 153.018799][ T65] do_syscall_64+0x166/0x520 [ 153.018822][ T65] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.018839][ T65] [ 153.018844][ T65] Memory state around the buggy address: [ 153.018853][ T65] ffff88804e494480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.018865][ T65] ffff88804e494500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.018877][ T65] >ffff88804e494580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.018885][ T65] ^ [ 153.018895][ T65] ffff88804e494600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.018907][ T65] ffff88804e494680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.018915][ T65] ================================================================== [ 153.019056][ T65] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.689120][ T65] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.698929][ T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.708999][ T65] Workqueue: kvub300d vub300_deadwork_thread [ 153.714984][ T65] Call Trace: [ 153.718256][ T65] [ 153.721172][ T65] vpanic+0x56d/0xa60 [ 153.725152][ T65] ? __pfx_vpanic+0x10/0x10 [ 153.729666][ T65] ? __pfx___schedule+0x10/0x10 [ 153.734529][ T65] panic+0xc5/0xd0 [ 153.738236][ T65] ? __pfx_panic+0x10/0x10 [ 153.742632][ T65] ? preempt_schedule_thunk+0x16/0x40 [ 153.747995][ T65] ? mmc_host_classdev_release+0x7c/0x100 [ 153.753728][ T65] check_panic_on_warn+0x89/0xb0 [ 153.758680][ T65] ? mmc_host_classdev_release+0x7c/0x100 [ 153.764428][ T65] end_report+0x73/0x170 [ 153.768691][ T65] ? mmc_host_classdev_release+0x7c/0x100 [ 153.774433][ T65] kasan_report+0x128/0x150 [ 153.778967][ T65] ? mmc_host_classdev_release+0x7c/0x100 [ 153.784709][ T65] mmc_host_classdev_release+0x7c/0x100 [ 153.790278][ T65] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 153.796429][ T65] device_release+0xc4/0x1f0 [ 153.801048][ T65] kobject_put+0x222/0x550 [ 153.805466][ T65] ? mmc_pwrseq_free+0x86/0xa0 [ 153.810238][ T65] ? process_scheduled_works+0x97a/0x1630 [ 153.815978][ T65] process_scheduled_works+0xc3d/0x1630 [ 153.821551][ T65] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.827545][ T65] ? assign_work+0x3cf/0x5d0 [ 153.832136][ T65] worker_thread+0xa47/0xfb0 [ 153.836761][ T65] kthread+0x38b/0x470 [ 153.840861][ T65] ? __pfx_worker_thread+0x10/0x10 [ 153.845978][ T65] ? __pfx_kthread+0x10/0x10 [ 153.850584][ T65] ret_from_fork+0x514/0xb70 [ 153.855180][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 153.860376][ T65] ? __switch_to+0xc89/0x1420 [ 153.865046][ T65] ? __pfx_kthread+0x10/0x10 [ 153.869646][ T65] ret_from_fork_asm+0x1a/0x30 [ 153.874423][ T65] [ 153.877737][ T65] Kernel Offset: disabled [ 153.882077][ T65] Rebooting in 86400 seconds..