last executing test programs: 4m23.012790958s ago: executing program 1 (id=1615): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000079800200280012800e00010069703667726574617000000014000280080004000400000095f162ff82290e000a000100087934e9cff90000a6a2ef5d16c697066ec1694204cdd7c6c382a3b8d5a3a66f9dcf3c8303c4ad40e48c89abb3eb2a1789a3579e2f66e4f2506bdb2922e8d1ec09f802f2e0d17e2a27cb40b568c9069e7d22b38ac59b385796487576c830efddaf05bf127c960ae6daea3afcecb5c193e3bb8504e44880b97e"], 0x54}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000010000000000ffff7f000001ac1e000100000000000000000000000000000000000000000a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac14143a0000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be00000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r2}], 0x1, &(0x7f00000002c0), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m21.435486285s ago: executing program 1 (id=1619): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x24000044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000440)=0x91) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r4 = open$dir(0x0, 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f00000000c0)='c:::\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bf) syz_open_dev$ndb(0x0, 0x0, 0x8000) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/memory33/state\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='offlin', 0x6) 4m20.512833969s ago: executing program 1 (id=1621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 4m19.580357114s ago: executing program 1 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) 4m19.488002742s ago: executing program 1 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000002e") 4m16.848204799s ago: executing program 1 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="04", 0x1}], 0x1}}], 0x1, 0x2401c4c5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea}, [@IFLA_ADDRESS={0xa}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="97", 0x1}], 0x1}}], 0x1, 0x84) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000002c0)=@generic={0x4, 0x2, 0x0, "f1c99655"}) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) socket(0x1, 0x80802, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$kcm(0x2, 0xa, 0x2) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4m16.114546767s ago: executing program 32 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x80}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="04", 0x1}], 0x1}}], 0x1, 0x2401c4c5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0ea}, [@IFLA_ADDRESS={0xa}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440d0}, 0x4050) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="97", 0x1}], 0x1}}], 0x1, 0x84) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000002c0)=@generic={0x4, 0x2, 0x0, "f1c99655"}) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) socket(0x1, 0x80802, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$kcm(0x2, 0xa, 0x2) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 18.136245535s ago: executing program 2 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) setrlimit(0x2, &(0x7f0000000040)={0xffffffff, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffb, 0x4}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1ff}, 0x0, 0x0, 0x4, 0xb, 0x2, 0x51bbc576, 0x40, 0x7}}], 0xb0}, 0x0) 16.124252154s ago: executing program 2 (id=2062): openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r5, r5, 0x2e, 0x8, 0x4, @void, @value, @void, @void, r6}, 0x20) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000002c0), 0x5005) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.789189014s ago: executing program 4 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) io_uring_setup(0x1b7f, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)={0x0, 0x3938700}) 12.888546184s ago: executing program 2 (id=2067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r5 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r5, r5, 0x2e, 0x8, 0x4, @void, @value, @void, @void, r6}, 0x20) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) 11.147939841s ago: executing program 0 (id=2069): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_INPUT(r2, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) 11.004094618s ago: executing program 4 (id=2071): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r2, 0x37, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x24048801) recvmmsg(r3, &(0x7f0000000980)=[{{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000600)=""/165, 0xa5}, {0x0}, {&(0x7f0000000740)=""/220, 0xdc}], 0x4, &(0x7f0000000880)=""/215, 0xd7}, 0x1ff}], 0x1, 0x20002002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x2000a0, &(0x7f0000000080)={0x0, 0xb9d8, 0x8, 0x1}) mkdir(0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_getattr(0xffffffffffffffff, &(0x7f00000003c0)={0x38}, 0x38, 0x0) semget(0x0, 0x0, 0x479) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x800) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0x40045613, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000a0a0101000000000000000005000005080005400000002bb9c30acaf05ed788701227d322abe1b7a02fb85b85850ee93bfd52f713a0fbc568fb30f8f70fd9d6f5baa1873c811fb641d0ec51aa9af9dcfd14549f"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) 9.998634147s ago: executing program 3 (id=2072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327d", 0x23}], 0x1}, 0x4005) 8.28776856s ago: executing program 2 (id=2073): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8885) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x8, 0x5, 0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000200)={0x3, 0x2, 0x1, 0x1}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) 7.944231224s ago: executing program 0 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x3, {0xa, 0x4e24, 0xcdf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x32) 7.839604044s ago: executing program 3 (id=2075): unshare(0x6a040000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) syz_emit_vhci(0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.730761153s ago: executing program 4 (id=2076): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000d0000000d0000001bf7690200000001"], &(0x7f0000001b00)=""/3, 0x2a, 0x3, 0x1, 0x6}, 0x28) 6.58822265s ago: executing program 0 (id=2077): openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r5, r5, 0x2e, 0x8, 0x4, @void, @value, @void, @void, r6}, 0x20) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) 6.568335374s ago: executing program 4 (id=2078): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x403, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 5.668240323s ago: executing program 0 (id=2079): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) io_uring_setup(0x1b7f, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)={0x0, 0x3938700}) 3.616258189s ago: executing program 4 (id=2080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffb, 0x4}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1ff}, 0x0, 0x0, 0x4, 0xb, 0x2, 0x51bbc576, 0x40, 0x7}}], 0xb0}, 0x0) 2.679767676s ago: executing program 2 (id=2081): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000940)=""/102384, 0x18ff0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r7, 0x111, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.618091177s ago: executing program 4 (id=2082): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$UHID_INPUT(r2, &(0x7f0000001180)={0x8, {"f2c11c88004fabb27f225fa25305a9ce1ff89fc55f8e8cdfe7f57ed2a6f01d22c88083e48a888efc50eb87a7c132df7b51219b6281c1e8b33ad42cbcc483e2767834948feb3ebd737c9827009287879363204dfc1b9cad585df1f30481ee198a4858580f5abaaf8699eac5e99eb0a34f4c6b68102b04d47069ab1d031e05d4ccbab700507f47918d83d4cc129da60d0463be38243d9e0b6bf53fa0e6e59d22e43ee0961c846d1a4c7d9243bd14491c27b887bd3f42bc15bd075ba422c564c6f5e27e94bc13677ca5ff4544768ef015801243a0b7da2e055788c179b032f9d818e48c926a0e49ed3923d99539362d54ad7d46317cadaf09a2e2fce49b2eee1ad02e1967b80d832ec5518c122ee4d8a3450d8adfc5875790198612c65295cdb79d9b2ab039a0e0c672438c29f0900aeb94998e35c4901834d31e0cbd6375f0465419c9920442c53215979bb7ec22b51169780262e83a8091cb403d1a4f3597ae722696db6d03c17fce6596fbe6d895281ced7b315400666c52fbd96e615e68290ff0454c8e51dd44a291f9fc08d17a202ffa31d2573b072665fad21fe2aad66c77a17121fb10877e1d51ae6ec83f347b74e61b22987d5a5d207930eb4344d029258b444bd6f8f72d4300bf54974467affd0d585bfc317b90065206f0a062226d4a481a6d6a016668b8d4a42157d0e388e05810b394b609aac124b33032247a2b2c66409a6cddf4ecdb76292aa3b4057ac4c77f94fb87dbbd680a470cfd9d152fa780ea1a5ea413f97a7a132f0e7800113a28dc429907a49dc048f037db1b10c9689d2b6c209872001cbdb4b411bd6bc86abc05f8c116729dbde10c6ae4bbe055032a948b6337e53211eea0e06d54df66cd6bc55c3bfc90a067c4e369a2d7f6b7f09d7160bcdc8e63bc3e82812f943de37a318ca7ce503a917e76bdb5c08bb4f098648ec1be96f87aa3fe21d3b2693169d097ee6d3c98bddfdb0f44b3f0b658bfc3cd3e2b7d532ce0f60a3e1989f4e81f7690f35577dacd6896ee1ec3729d18346ab50ea9db44c30814da1f188e477026d008803fab090dd15df7748b06f5f3c8c7c1ef2d3801d05527536871447b41a2e3b3237fdc29f3b1f4371a4cf0087afb5c425b3ba8630380bdae4fbd9beeb39541eb21a2f58da96a813cf3c361085119f6c7bb4650e3f5ddc09add2a6e0970bd47aecea719cfa214e318a14fe2ffd73bf78323be05444537ee4af43a4fbc5e26628d095913bac8feb923b4f2753b0b7c01f81cfffc1cc202e4f4edd4f9adc38a517fd235f0d4106181c9fbe6f720da92fd44c390e993835028192eaad7769c1d689bc777fb3e27c4bae11870094a18a49067735c71fd188b45720a2b8c86de75ad3ffe922be4bf7fdbcf789f78f21df710bbdd82a6541f6ffa90ea2795edbd482e9b8866e4e26b2902e6fa01c264b4e7c8422a7c4f32872b220c663ccb3b7067aee2e388aa925ef0cf583facb514a5662d28fffa78d45637b2b48bb19057b87809b59e586d23f409d3c39fef20be5cfddd5c588ba35bf5623f265d4b9445903172067a50fc598db60274ca0f4fe9359c2387493b850dbc7e8b0d434504e8799b0376181f45e102ad423656f1d864ec06a74da868fd26b44379cd53c36b764c45a5dd3bb506a0b9834bd42bc9f009762b287debf3ce63d52d1e367d0ca362e8454f033c84a75b30413235841265b8cba047fd272aafe17139b25bc186c5e8b1e50f55c4ae58019e7f5029dbad02823ecf131e9fbb6fb9477bbd5e51a833b6d698299c62abd2e1e59ee6b745abb249de56acbd5c46fcdd5d0e2824baad6bf4ce847fb7b066140c12623a66bf57f324fa3335ed0d61dbd77255fb0d72c9a09d341bf7217d76d4453ded25d178fe4fa98b222e175f799c312c08e4f2db2d3690e52c065e9b0494b02c535ab4b26440870d57f36134b251cdafb50a6be50e8b908b18504707256578bfb1b5a559334e7ee3d6de5eb2c0834962bf5b91f3f2e08cfa2ef1c8ef9df5a791367f6c90b5cbbc8f420c60248b98fb7e7a1d29fe99d261c7bedaf72404c27178b845c0855f0b7b9edfc972c142c9ec931f8b2670d4cfc4df2e2e51563ae577e02a5c674d37c1d065b2de2c54c0ca1b0483733dfed55ac50d904ee5548f8f801bc945b84448c80e49d4dcec2c4c3f55310eb814621d224f6747f17335588524a218f04095c3f783985eecf21322642c9858d545914bddd299a772338039459a564e2474adebbbbd9544d6d5a424caf4b4377d10f80deb0cf1babeb67e445c075a2eefdff49e91ea78ad6f31daea361cdb4f60c1f17d9fb0efbc3ad7e9df45b0bd7e0d4a179b2231f7b9414f417ffabcaf72664056ea8b06f7ec8c7db71fe477533583fa8114b13c8ad88a4a5493f9ea0ad05cddb725fa5bee014987b020e526b281efe8394e8207fdeb452332a9127fef03c5890589478517a155e1920723cb9ad555e2184939bccb867bd7b9546099ba59f8b02ab9ad0d160b9019e25b61849e50579e07eedfd1f0350d3ad923f264ad39ffc2c5e8abb05498d71870d3a76f9764433d27c8d6edf0af44189de43af65d5473b1c75aaca869a8b3b0a06c2303ace881b0f294ce1ba2acc611eff0f38d1614ac761ce1a19256bee039817605b0929aefc3bbab57c9629e771afd7a21b9168253a98c5f935f6ff7651f97eff7497f16b61f19e4a29ae424a94838c5b6b805b88c8014b738574ceedbbec616c537aad543de3ea59317292504ebf65350107f37285f27b8a496699136264ee944253e65840f41f8ac08b3e2627d3a02ee94dbbdecd5f6c4de0e204e324d499821d131a4a81ebd53082a5cf50007a21651858bf66749d4f9d533eabd4e6a74affcf1cf3ac68865f5763c50236bb4a57b56e0ffbc795638d94fa68fca2c313f9b946a1df3f98422d164498f1d0b995b3ac03b8e228ab311f78db61b1f009b53835c1b21babbc0e9882b115b47d508716b8728861f2680864c59dbabf0921ba17e700e565bcdf1bee4efea6632ab0d85c0cc37bf4baf52e1defbbe105411ac73839ec3d106c3e86c83e22cbd5ce97841fc1c90a2545b486bf6b63b4156582a817e5f0d062a2c396bd075ce9c23c47fe3900b796f27e53ceb2ab285d1e7dc822f535aab3f6e161cfeb9a31d44d8c2111085051f759e27758ce1a89bc4edb94c5d7fb3ab13e908047019f5d6c7629d74cd4354d14397e5fe08485aff17e872b726878da4bb0ff0e85d8635600b7507a3fe6e9a06c22c177eae6051653d9aab1cd58aa10961efa4b2a4bbe14d92d4ee5fdb511b836de27cff0e6a577bebe4ff9da07e055a10e404a3fc4ab3593c97f6baefb31c1774196ae67a9696421ceb61b763d3f02578debe2d6f651d4a10b92b6b3e94e31e48561d92da699544823d4b1ce12d2f649b0288d61ab7cbeb6d556caf91ae79fc1844b88a43192c4cd4710c8ae46500c87923044ddc391258e80868471a750b7521b3a0491a0c62cb8d7c5c45f5e9419e145eeba1e743f414234902dafc510c712d9218a37c91181214a9f85a0108cf84362bbe405a2f7b8cc06e36f1111338b8649f691cbba97042c5a220638a927bfea6877524a49c5f83251bd4690b77970ddce46e18a0021c9ef1429b568c4293d86c463b59765a680447a017e51ec31f7dc64ec49a7683c9029bc52237f7fd224c2815003a531695b371ebeca2b3f1049150782dd99cd27e9e168b026b6aeba5ec513ba2d0dbf0d2e76588a00632bab3efe2f235f607be0cac153dea6a07d3fe001242da40643eb324628dd7a656a268be8626b699cda86de70b6ef0bf32eec99bb6d405a1136f2a8794a9797ef56c8e87e79fa48a9a3615be497b230ac68b8361d1eea45f2e0af7c8fe388ae105c22000e9c4b0cc7fe301046935f6765d9b15dd77f17b85265fbdd56ffd2239571d9971d891742a36106abce31898b76f71213ee391d8d5ec31770c65892104f4960cea268cc3614e5721316b029d04bc6622d67cf3006cd1431f6077b353acdb9262097793bcc83a1ff62df200ed7465d26f3267cf5234b46c5991643939ef7a4cce66e40e140882ad16ac9ce3a313294196c0a041608b5fd1328a131e2e00d904f2671969b950302c55108110a47691d3c315de86a4dab2e90c9e81039dc6bb23576ce28f41e9aabbb99e09612b77255bfc79a28bc9b3e48101aa7f0129df734f053eb421ba7f37a9b14773f561dd51e6910765a5cd13f0b781257775e7629ea9a9cbb7ef817ec9c34e7a064a546c0f3426bc03719acb844bcf6e5ad6e58724d7972d222f7bbf9e53ab92477b88079f57e51295ddde5064496953c54c5fb32c7be742f184daf3e24efc0489c2ce17ed36342148112eaba4426c457a6ddd9a56c9d7506994967dfdea56330a6f0d55b5ab16983535d316f7b5abb69c28f2fe889d8bd4d2d0eb0ede25af1f33859dc482f54a75ed5932b9a5e2313cc7714dae8ac04e72a40e5a018d7c7023ccaf74bb426ddc5eae55c230ab99319db198f6c33ab0518a64a3211b5d7beba864a43b94c3de6f7f81e3c995ff3f6f2a8af604df6929ec4df1d0646685621f1835816d93cb183c567957f296700a9017d014fc939705d674f99b9cd5d2fc64966362dfee359caabc0d922fe6bd7ce8b008ddf0aa0e78f3ade2ba0b6873f233dadd4a961776ed734e0228d18f2ec9db3f3bc0fa7d732edfcdb2396878877907b3cfe856253eb0dcb83196e308fdd917fb3c14a3d3da0d361de5f9deae8ea647d57a71e33b366ba74e41e419bcdcbabfc5312ca964724e1cef29a95f0a2762718ecf35e06170a9dc6e65aba6d73f553214a85589925a8ee07001b1bb8110c6139c3f65760a14ad97ca65a57b2c45addce7d7205c504da47653f26a1dfc4fa1c7249d9e0d5c95a9e3b859b6d8d688b70c50e29d93b5e09144548d96ec4b4316eb0b0e2d092d2000ea8d8f525bc437b8ed333664814697be8055c033a722c2c61b1227758b8e675a1bb5fa9e754ebfde9be69a00289b128d088d4b4f7cd9a1761bf212335516060af19638ac6df0e9749cb2dc062909677b2b276fbca80938df114f359d9d4c6405354473804c5830089f7f28b64bf4cfe87b94a7b315accc4c531d459180b30800c9398f80c463fa5d15a1ab5ff90813ce99c97ebda4b710874c0741b93448bc5860b1cc08f9c35390b637da2fe80ddc57eccef2409e88263c5abcd6766c76c88fb02982305c60c47c0c8e0a1c00ccd3ebfd005efb2278169ce1e756e57511fb633cab89c68115b1fa58634d8f9d96fa207eb68944c5b6fb37d640d5806215ab2b0632adc04f912e7452b37d5bdb93ee6e728e9be954e940a8dcb9e2aa1fc3b4741d2eaa826352bcf463ccaa1e38c53eb8e57f581cb9d2caab87ff8ad595eb79820c8a7014e47b1810a0a5e81613bf40f358e3669d12f353088dd2334999f522a3d2a57f61521813c9f6e163313034513a792fe00f551e55959f02e107a580917aa48927d799d229b4fc5bfa363b8e2bfbaeacf39ae837552d38f2ec41776ff5861c9bf14f4cd281ebc788c73c37a7779b2512eb3580803c5b448520315527bdb9101e65d6499c613d3796d07a4a4684feac952261deeb060c5186ffed5736387a3a3fe578b8fe33d6611314004ae85f18536655e8d0a877238928992df10d3fd78fe3612f1c050b2d4c7f955e12bda48b9c08e36941605841119119f365f0418639d833161599961d90b3da3efb6c682ac80f98c87eb3f48318006ab87bce6f22713e3630f2418ad7fb699d1e8b", 0x1000}}, 0x1006) 1.657568808s ago: executing program 2 (id=2083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f4000000", 0x29}], 0x1}, 0x4005) 1.564352826s ago: executing program 3 (id=2084): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 1.441603409s ago: executing program 3 (id=2085): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r2, 0x37, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x24048801) recvmmsg(r3, &(0x7f0000000980)=[{{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000600)=""/165, 0xa5}, {0x0}, {&(0x7f0000000740)=""/220, 0xdc}], 0x4, &(0x7f0000000880)=""/215, 0xd7}, 0x1ff}], 0x1, 0x20002002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x2000a0, &(0x7f0000000080)={0x0, 0xb9d8, 0x8, 0x1}) mkdir(0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_getattr(0xffffffffffffffff, &(0x7f00000003c0)={0x38}, 0x38, 0x0) semget(0x0, 0x0, 0x479) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x800) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0x40045613, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000a0a0101000000000000000005000005080005400000002bb9c30acaf05ed788701227d322abe1b7a02fb85b85850ee93bfd52f713a0fbc568fb30f8f70fd9d6f5baa1873c811fb641d0ec51aa9af9dcfd14549f"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) 317.89508ms ago: executing program 3 (id=2086): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000d0000000d0000001bf7690200000001"], &(0x7f0000001b00)=""/3, 0x2a, 0x3, 0x1, 0x6}, 0x28) 247.480664ms ago: executing program 0 (id=2087): openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r5, r5, 0x2e, 0x8, 0x4, @void, @value, @void, @void, r6}, 0x20) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) 0s ago: executing program 3 (id=2088): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x4, 0x302, 0xd, 0xe, 0x15, 0x75, 0x3, 0x80008, 0x0, 0xa, 0x1000006c, 0x7, 0x8, 0x10001, 0xfd, 0x1, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x1000000, 0x268, 0xffffffff, 0xf3de, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffffc]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 63.551474][ T5760] cgroup: Unknown subsys name 'net' [ 63.743140][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.077259][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.553900][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.563391][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.571378][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.581831][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.586279][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.590274][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.598488][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.603941][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.612004][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.618298][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.626516][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.639669][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.648486][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.656116][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.656878][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.676044][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.684702][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.692437][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.692713][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.700214][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.714440][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.722984][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.746320][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.755570][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.167786][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 67.239733][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 67.249759][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 67.303755][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 67.402662][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.410985][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.420250][ T5772] bridge_slave_0: entered allmulticast mode [ 67.428117][ T5772] bridge_slave_0: entered promiscuous mode [ 67.437240][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.444377][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.451674][ T5772] bridge_slave_1: entered allmulticast mode [ 67.458454][ T5772] bridge_slave_1: entered promiscuous mode [ 67.536578][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.543774][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.551842][ T5774] bridge_slave_0: entered allmulticast mode [ 67.559148][ T5774] bridge_slave_0: entered promiscuous mode [ 67.571632][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.578947][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.586191][ T5771] bridge_slave_0: entered allmulticast mode [ 67.592865][ T5771] bridge_slave_0: entered promiscuous mode [ 67.602732][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.616444][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.625755][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.633104][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.640725][ T5774] bridge_slave_1: entered allmulticast mode [ 67.648067][ T5774] bridge_slave_1: entered promiscuous mode [ 67.659891][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.667064][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.674365][ T5771] bridge_slave_1: entered allmulticast mode [ 67.681256][ T5771] bridge_slave_1: entered promiscuous mode [ 67.755473][ T5772] team0: Port device team_slave_0 added [ 67.763822][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.786842][ T5772] team0: Port device team_slave_1 added [ 67.793455][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.801089][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.808615][ T5773] bridge_slave_0: entered allmulticast mode [ 67.815349][ T5773] bridge_slave_0: entered promiscuous mode [ 67.824206][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.843989][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.870618][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.879696][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.888023][ T5773] bridge_slave_1: entered allmulticast mode [ 67.894711][ T5773] bridge_slave_1: entered promiscuous mode [ 67.922363][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.932814][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.942303][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.968527][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.995078][ T5774] team0: Port device team_slave_0 added [ 68.011828][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.018921][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.044897][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.058172][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.070520][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.081544][ T5774] team0: Port device team_slave_1 added [ 68.117390][ T5771] team0: Port device team_slave_0 added [ 68.151958][ T5773] team0: Port device team_slave_0 added [ 68.160955][ T5773] team0: Port device team_slave_1 added [ 68.170029][ T5771] team0: Port device team_slave_1 added [ 68.214520][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.221660][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.248291][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.271010][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.278302][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.304663][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.331701][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.338862][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.365566][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.385045][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.394454][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.420583][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.432136][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.439541][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.465471][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.478233][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.485205][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.511149][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.542716][ T5772] hsr_slave_0: entered promiscuous mode [ 68.550182][ T5772] hsr_slave_1: entered promiscuous mode [ 68.582767][ T5774] hsr_slave_0: entered promiscuous mode [ 68.589228][ T5774] hsr_slave_1: entered promiscuous mode [ 68.595335][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.603441][ T5774] Cannot create hsr debugfs directory [ 68.723308][ T5773] hsr_slave_0: entered promiscuous mode [ 68.730259][ T5773] hsr_slave_1: entered promiscuous mode [ 68.737086][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.744677][ T5773] Cannot create hsr debugfs directory [ 68.773966][ T5771] hsr_slave_0: entered promiscuous mode [ 68.780921][ T5771] hsr_slave_1: entered promiscuous mode [ 68.787594][ T5779] Bluetooth: hci3: command tx timeout [ 68.787607][ T5089] Bluetooth: hci0: command tx timeout [ 68.798614][ T5786] Bluetooth: hci2: command tx timeout [ 68.798828][ T5089] Bluetooth: hci1: command tx timeout [ 68.809975][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.818170][ T5771] Cannot create hsr debugfs directory [ 69.125164][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.138001][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.148311][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.159277][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.218991][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.240472][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.255090][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.272875][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.377752][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.418211][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.430778][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.476794][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.493155][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.504767][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.523655][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.531457][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.551391][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.588828][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.614635][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.622145][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.665672][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.673726][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.680998][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.751471][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.789726][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.796919][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.807445][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.814552][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.849620][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.914259][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.947711][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.959218][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.966439][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.990599][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.004877][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.012049][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.112747][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.159261][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.166521][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.178467][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.185579][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.255714][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.293601][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.448428][ T5772] veth0_vlan: entered promiscuous mode [ 70.468220][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.498105][ T5772] veth1_vlan: entered promiscuous mode [ 70.601878][ T5772] veth0_macvtap: entered promiscuous mode [ 70.629464][ T5774] veth0_vlan: entered promiscuous mode [ 70.648854][ T5774] veth1_vlan: entered promiscuous mode [ 70.665207][ T5772] veth1_macvtap: entered promiscuous mode [ 70.743859][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.754525][ T5774] veth0_macvtap: entered promiscuous mode [ 70.767957][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.787736][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.795361][ T5774] veth1_macvtap: entered promiscuous mode [ 70.822312][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.843979][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.855006][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.864623][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.867621][ T5089] Bluetooth: hci1: command tx timeout [ 70.874943][ T5779] Bluetooth: hci2: command tx timeout [ 70.878796][ T5089] Bluetooth: hci0: command tx timeout [ 70.884612][ T5786] Bluetooth: hci3: command tx timeout [ 70.896550][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.952239][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.963446][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.976995][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.988714][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.999600][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.010830][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.024532][ T5773] veth0_vlan: entered promiscuous mode [ 71.039407][ T5771] veth0_vlan: entered promiscuous mode [ 71.066701][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075421][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.085938][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.094651][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.110409][ T5771] veth1_vlan: entered promiscuous mode [ 71.138077][ T5773] veth1_vlan: entered promiscuous mode [ 71.199247][ T393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.215329][ T393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.263909][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.279276][ T5771] veth0_macvtap: entered promiscuous mode [ 71.289133][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.332924][ T5771] veth1_macvtap: entered promiscuous mode [ 71.354057][ T5773] veth0_macvtap: entered promiscuous mode [ 71.386165][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.394039][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.423778][ T5773] veth1_macvtap: entered promiscuous mode [ 71.470630][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.481652][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.494211][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.503867][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.514884][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.527320][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.533885][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.542937][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.544360][ T5834] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.554657][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.577598][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.590958][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.601166][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.611676][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.622092][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.632911][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.647750][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.672333][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.695570][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.706230][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.717095][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.731844][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.754508][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.767315][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.778818][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.789976][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.803279][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.814195][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.829229][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.840183][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.855554][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.864619][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.878287][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.895654][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.912501][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.929542][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.958335][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.066323][ T5813] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.522134][ T5813] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.587235][ T5813] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 72.643387][ T5813] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.760496][ T5813] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 72.836411][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 72.883221][ T5813] usb 2-1: Product: syz [ 72.909752][ T5813] usb 2-1: Manufacturer: syz [ 73.058785][ T5786] Bluetooth: hci0: command tx timeout [ 73.058844][ T5779] Bluetooth: hci1: command tx timeout [ 73.064281][ T5786] Bluetooth: hci3: command tx timeout [ 73.070060][ T5089] Bluetooth: hci2: command tx timeout [ 73.082779][ T5838] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.092950][ T5813] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 73.105424][ T393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.127475][ T393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.143962][ T5813] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 73.159347][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.195877][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.252542][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.283075][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.317891][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.326630][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.418722][ T5844] usb 2-1: USB disconnect, device number 2 [ 73.437665][ T5844] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 73.480930][ T5844] garmin_gps 2-1:1.0: device disconnected [ 73.487983][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.709790][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.722994][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.737535][ T5813] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 73.749471][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.766464][ T5813] usb 1-1: config 0 descriptor?? [ 73.816471][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.999179][ T27] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 74.008212][ T27] usb 3-1: config 0 has no interface number 0 [ 74.014392][ T27] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.031363][ T27] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 74.041018][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.049265][ T27] usb 3-1: Product: syz [ 74.053744][ T27] usb 3-1: Manufacturer: syz [ 74.059644][ T27] usb 3-1: SerialNumber: syz [ 74.068330][ T27] usb 3-1: config 0 descriptor?? [ 74.091279][ T27] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 74.212630][ T5813] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.219916][ T5813] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.239760][ T5813] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.247626][ T5813] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.256168][ T5813] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.263819][ T5813] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.277960][ T5813] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 74.344298][ T5813] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 74.477532][ T5813] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 74.614406][ T27] usb 3-1: USB disconnect, device number 2 [ 74.632043][ T27] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 74.696349][ T970] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.928469][ T970] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.964526][ T970] usb 2-1: config 0 has no interface number 0 [ 74.995645][ T970] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 75.025495][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.079417][ T970] usb 2-1: Product: syz [ 75.108258][ T5779] Bluetooth: hci1: command tx timeout [ 75.110659][ T5846] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 75.113825][ T5089] Bluetooth: hci2: command tx timeout [ 75.125977][ T970] usb 2-1: Manufacturer: syz [ 75.131981][ T5786] Bluetooth: hci0: command tx timeout [ 75.152233][ T5783] Bluetooth: hci3: command tx timeout [ 75.192179][ T970] usb 2-1: SerialNumber: syz [ 75.331327][ T970] usb 2-1: config 0 descriptor?? [ 75.564010][ T5813] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 75.981888][ T5813] usb 1-1: USB disconnect, device number 2 [ 76.482403][ T970] dvb_usb_ec168: probe of 2-1:0.1 failed with error -32 [ 76.513880][ T5859] Bluetooth: MGMT ver 1.22 [ 76.614355][ T5871] ======================================================= [ 76.614355][ T5871] WARNING: The mand mount option has been deprecated and [ 76.614355][ T5871] and is ignored by this kernel. Remove the mand [ 76.614355][ T5871] option from the mount to silence this warning. [ 76.614355][ T5871] ======================================================= [ 77.780791][ T5813] usb 2-1: USB disconnect, device number 3 [ 78.659046][ T5885] FAULT_INJECTION: forcing a failure. [ 78.659046][ T5885] name failslab, interval 1, probability 0, space 0, times 1 [ 78.672134][ T5885] CPU: 1 PID: 5885 Comm: syz.3.15 Not tainted syzkaller #0 [ 78.679358][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.689444][ T5885] Call Trace: [ 78.692741][ T5885] [ 78.695687][ T5885] dump_stack_lvl+0x18c/0x250 [ 78.700402][ T5885] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 78.706065][ T5885] ? show_regs_print_info+0x20/0x20 [ 78.711293][ T5885] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 78.716962][ T5885] ? dump_stack+0x9/0x20 [ 78.721234][ T5885] should_fail_ex+0x394/0x4c0 [ 78.725941][ T5885] should_failslab+0x9/0x20 [ 78.730472][ T5885] slab_pre_alloc_hook+0x59/0x300 [ 78.735535][ T5885] ? netstat_seq_show+0x105/0xd90 [ 78.740583][ T5885] __kmem_cache_alloc_node+0x53/0x250 [ 78.745986][ T5885] ? netstat_seq_show+0x105/0xd90 [ 78.751030][ T5885] kmalloc_trace+0x2a/0xe0 [ 78.755475][ T5885] netstat_seq_show+0x105/0xd90 [ 78.760362][ T5885] seq_read_iter+0x464/0xc50 [ 78.764993][ T5885] seq_read+0x175/0x220 [ 78.769175][ T5885] ? seq_open+0x140/0x140 [ 78.773546][ T5885] ? end_current_label_crit_section+0x149/0x170 [ 78.779812][ T5885] ? seq_open+0x140/0x140 [ 78.784155][ T5885] proc_reg_read+0x1e4/0x2d0 [ 78.788774][ T5885] ? proc_reg_get_unmapped_area+0x380/0x380 [ 78.794695][ T5885] vfs_read+0x298/0x990 [ 78.798880][ T5885] ? kernel_read+0x1e0/0x1e0 [ 78.803501][ T5885] ? __fget_files+0x28/0x460 [ 78.808117][ T5885] ? __fget_files+0x3fc/0x460 [ 78.812834][ T5885] ? __fdget_pos+0x2a3/0x330 [ 78.817444][ T5885] ? ksys_read+0x74/0x260 [ 78.821800][ T5885] ksys_read+0x151/0x260 [ 78.826071][ T5885] ? vfs_write+0x9a0/0x9a0 [ 78.830510][ T5885] ? lockdep_hardirqs_on+0x98/0x150 [ 78.835739][ T5885] do_syscall_64+0x55/0xb0 [ 78.840178][ T5885] ? clear_bhb_loop+0x40/0x90 [ 78.844877][ T5885] ? clear_bhb_loop+0x40/0x90 [ 78.849582][ T5885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.855510][ T5885] RIP: 0033:0x7f8fe139e159 [ 78.859950][ T5885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.879583][ T5885] RSP: 002b:00007f8fdf5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.888029][ T5885] RAX: ffffffffffffffda RBX: 00007f8fe1626180 RCX: 00007f8fe139e159 [ 78.896030][ T5885] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005 [ 78.904027][ T5885] RBP: 00007f8fe143506b R08: 0000000000000000 R09: 0000000000000000 [ 78.912001][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.919971][ T5885] R13: 00007f8fe1626218 R14: 00007f8fe1626180 R15: 00007ffe0f3754e8 [ 78.927961][ T5885] [ 79.249973][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.620526][ T5893] printk: console [ttyS0] disabled [ 80.397087][ T5898] printk: console [ttyS0] enabled [ 80.407770][ T5901] random: crng reseeded on system resumption [ 81.479464][ T5901] Falling back ldisc for ttyS3. [ 81.894461][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 85.504616][ T5932] random: crng reseeded on system resumption [ 87.249395][ T176] cfg80211: failed to load regulatory.db [ 89.820449][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 90.637906][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 90.788666][ T5956] Cannot find add_set index 0 as target [ 91.507908][ T5951] random: crng reseeded on system resumption [ 91.831893][ T5951] Falling back ldisc for ttyS3. [ 92.706154][ T5089] Bluetooth: hci2: command tx timeout [ 94.523590][ T5974] random: crng reseeded on system resumption [ 94.665896][ T176] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.095894][ T176] usb 1-1: Using ep0 maxpacket: 8 [ 96.568543][ T176] usb 1-1: device descriptor read/all, error -71 [ 96.590542][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 96.688203][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'. [ 97.385336][ T5992] Cannot find add_set index 0 as target [ 98.359470][ T5999] random: crng reseeded on system resumption [ 98.625901][ T5089] Bluetooth: hci0: command tx timeout [ 98.637613][ T5999] Falling back ldisc for ttyS3. [ 100.738077][ T6018] random: crng reseeded on system resumption [ 102.719360][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 102.847846][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'. [ 103.519564][ T6035] Cannot find add_set index 0 as target [ 104.478942][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.521143][ T6042] random: crng reseeded on system resumption [ 104.679264][ T6042] Falling back ldisc for ttyS3. [ 104.746073][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 104.753299][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.768908][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.787336][ T5089] Bluetooth: hci0: command tx timeout [ 104.813779][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.855153][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.906028][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.915134][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.877691][ T9] usb 2-1: usb_control_msg returned -71 [ 105.891562][ T9] usbtmc 2-1:16.0: can't read capabilities [ 105.909749][ T9] usb 2-1: USB disconnect, device number 4 [ 107.206753][ T6065] random: crng reseeded on system resumption [ 107.996084][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 108.162208][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 108.785949][ T6079] Cannot find add_set index 0 as target [ 109.475588][ T6081] random: crng reseeded on system resumption [ 109.779938][ T6081] Falling back ldisc for ttyS3. [ 110.065878][ T5089] Bluetooth: hci3: command tx timeout [ 114.713194][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.76'. [ 115.795119][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 115.932597][ T6124] Cannot find add_set index 0 as target [ 117.826327][ T5089] Bluetooth: hci0: command tx timeout [ 119.643397][ T6133] random: crng reseeded on system resumption [ 120.557677][ T6133] Falling back ldisc for ttyS3. [ 123.201187][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'. [ 124.144561][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 124.458585][ T6172] Cannot find add_set index 0 as target [ 126.486307][ T5089] Bluetooth: hci2: command tx timeout [ 126.493656][ T6181] random: crng reseeded on system resumption [ 126.686727][ T6181] Falling back ldisc for ttyS3. [ 128.367450][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 129.304401][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 130.350910][ T6216] Cannot find add_set index 0 as target [ 131.355974][ T5089] Bluetooth: hci3: command tx timeout [ 132.959395][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.480136][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.966574][ T6233] random: crng reseeded on system resumption [ 136.121530][ T6233] Falling back ldisc for ttyS3. [ 137.483448][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 138.309564][ T6258] random: crng reseeded on system resumption [ 139.881434][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 139.986186][ T6272] Cannot find add_set index 0 as target [ 141.497480][ T6278] random: crng reseeded on system resumption [ 141.644145][ T6278] Falling back ldisc for ttyS3. [ 141.986089][ T5089] Bluetooth: hci3: command tx timeout [ 142.754417][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 144.393029][ T6305] jffs2: notice: (6305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.211013][ T6313] syz.2.128 (6313) used greatest stack depth: 16552 bytes left [ 145.610384][ T6323] random: crng reseeded on system resumption [ 148.886825][ T6332] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 150.148595][ T6332] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 150.211005][ T6332] page_type: 0xffffffff() [ 150.215394][ T6332] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 150.251113][ T6332] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 150.260337][ T6332] page dumped because: unmovable page [ 150.265987][ T6332] page_owner info is not present (never set?) [ 150.621499][ T6358] random: crng reseeded on system resumption [ 151.573067][ T5089] Bluetooth: to_multiplier 8192 > 3200 [ 151.712318][ T6366] Cannot find add_set index 0 as target [ 153.615925][ T5089] Bluetooth: hci3: command tx timeout [ 153.661415][ T6376] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 153.671809][ T6376] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 153.679890][ T6376] page_type: 0xffffffff() [ 153.684253][ T6376] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 153.693677][ T6376] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 153.702453][ T6376] page dumped because: unmovable page [ 153.707966][ T6376] page_owner info is not present (never set?) [ 153.757046][ T6386] printk: console [ttyS0] disabled [ 780.154316][T11459] printk: console [ttyS0] enabled [ 780.251999][ T970] usbhid 5-1:0.0: can't add hid device: -71 [ 780.286807][ T970] usbhid: probe of 5-1:0.0 failed with error -71 [ 780.365651][ T970] usb 5-1: USB disconnect, device number 2 [ 783.806015][ T5832] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 784.057243][ T5832] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 784.105692][ T5832] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 784.157576][ T5832] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 784.185565][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.233988][ T5832] usb 4-1: Product: syz [ 784.254700][ T5832] usb 4-1: Manufacturer: syz [ 784.269875][ T5832] usb 4-1: SerialNumber: syz [ 785.837939][ T5832] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 786.053810][ T5775] usb 4-1: USB disconnect, device number 23 [ 786.079354][ T5775] usblp0: removed [ 789.056910][T11559] dyndbg: bad flag-op d, at start of dr?vers/md/raid5.c [ 789.086706][T11559] dyndbg: flags parse failed [ 789.293175][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 789.293191][ T28] audit: type=1800 audit(1790948441.194:52): pid=11567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1677" name="syzkaller1" dev="sda1" ino=2046 res=0 errno=0 [ 793.905730][ T5832] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 794.120346][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 794.170849][ T5832] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 794.232220][ T5832] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 794.265748][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.290172][ T5832] usb 3-1: Product: syz [ 794.322098][ T5832] usb 3-1: Manufacturer: syz [ 794.331004][ T5832] usb 3-1: SerialNumber: syz [ 794.577753][ T5832] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 795.505323][ T5832] usb 3-1: USB disconnect, device number 36 [ 795.517422][ T5832] usblp0: removed [ 795.695600][ T5775] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 796.444026][ T5775] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.468698][ T5775] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 796.485957][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.504932][ T5775] usb 4-1: config 0 descriptor?? [ 796.596397][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 797.575367][ T5775] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.000F/input/input23 [ 797.749167][ T5775] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.000F/input/input24 [ 797.851980][ T5775] kye 0003:0458:5005.000F: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 797.887967][ T5775] usb 4-1: USB disconnect, device number 24 [ 797.896782][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 797.964385][T11653] fido_id[11653]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 798.086058][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 798.111973][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.987796][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 798.997098][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 253, using maximum allowed: 30 [ 799.025730][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 799.042996][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 799.061996][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 799.086060][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.110687][ T9] usb 1-1: Product: syz [ 799.115476][ T9] usb 1-1: Manufacturer: syz [ 799.126507][ T9] usb 1-1: SerialNumber: syz [ 799.962387][ T9] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 800.000044][ T9] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 800.048088][ T9] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 800.268179][ T9] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 800.321313][ T9] usb 1-1: USB disconnect, device number 41 [ 800.423205][T11654] udevd[11654]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.845797][ T5832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 801.981315][T11703] file system registered [ 802.011241][T11703] unloading [ 802.095721][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 802.116251][ T5832] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.186368][ T5832] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.217040][ T5832] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 802.243625][ T5832] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 802.263193][ T5832] usb 5-1: Product: syz [ 802.267821][ T5832] usb 5-1: Manufacturer: syz [ 802.314484][ T5771] ffs_data_put(): freeing [ 802.327372][ T5832] hub 5-1:4.0: USB hub found [ 802.538145][ T5832] hub 5-1:4.0: 2 ports detected [ 802.595663][ T23] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 802.717292][T11716] Invalid argument reading file caps for ./file0 [ 802.755330][ T5832] hub 5-1:4.0: hub_hub_status failed (err = 0) [ 802.787195][ T5832] hub 5-1:4.0: config failed, can't get hub status (err -5) [ 802.818411][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 802.838384][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.871343][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.912143][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 802.937712][ T23] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 802.950995][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.981704][ T23] usb 1-1: config 0 descriptor?? [ 803.206029][ T5832] usb 5-1: USB disconnect, device number 3 [ 803.461355][ T23] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 803.512014][ T23] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 803.532092][ T23] holtek_kbd 0003:04D9:A055.0010: collection stack underflow [ 803.552330][ T23] holtek_kbd 0003:04D9:A055.0010: item 0 0 0 12 parsing failed [ 803.596459][ T23] holtek_kbd: probe of 0003:04D9:A055.0010 failed with error -22 [ 803.695770][ T23] usb 1-1: USB disconnect, device number 42 [ 808.792057][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.799937][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.115628][ T23] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 814.345980][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 814.352600][ T23] usb 1-1: config 135 interface 0 has no altsetting 0 [ 814.361480][ T23] usb 1-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 814.385613][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.415603][ T23] usb 1-1: Product: syz [ 814.419823][ T23] usb 1-1: Manufacturer: syz [ 814.475303][ T23] usb 1-1: SerialNumber: syz [ 814.724091][ T23] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 814.774715][ T23] dvb_usb_af9015: probe of 1-1:135.0 failed with error -22 [ 814.828108][ T23] usb 1-1: USB disconnect, device number 43 [ 815.947988][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 819.304838][T11867] ubi0: attaching mtd0 [ 819.310184][T11867] ubi0: scanning is finished [ 819.314799][T11867] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 819.365575][T11867] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 819.758552][ T28] audit: type=1326 audit(1790948471.644:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11853 comm="syz.3.1730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fe139e159 code=0x0 [ 822.302800][T11903] loop3: detected capacity change from 0 to 16 [ 822.349718][T11903] erofs: (device loop3): mounted with root inode @ nid 36. [ 822.374944][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1738'. [ 822.425075][T11907] FAULT_INJECTION: forcing a failure. [ 822.425075][T11907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 822.464573][T11907] CPU: 1 PID: 11907 Comm: syz.4.1739 Not tainted syzkaller #0 [ 822.472099][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 822.482177][T11907] Call Trace: [ 822.485473][T11907] [ 822.488417][T11907] dump_stack_lvl+0x18c/0x250 [ 822.493128][T11907] ? show_regs_print_info+0x20/0x20 [ 822.498357][T11907] ? load_image+0x420/0x420 [ 822.502888][T11907] ? __lock_acquire+0x7d80/0x7d80 [ 822.507943][T11907] ? __virt_addr_valid+0x10c/0x380 [ 822.513120][T11907] should_fail_ex+0x394/0x4c0 [ 822.517833][T11907] _copy_to_user+0x2f/0xa0 [ 822.522283][T11907] bpf_vlog_reverse_ubuf+0x2ad/0x3a0 [ 822.527613][T11907] bpf_vlog_finalize+0x1b3/0x3e0 [ 822.532601][T11907] btf_new_fd+0x4ca/0x9e0 [ 822.536977][T11907] ? bpf_btf_show_fdinfo+0x80/0x80 [ 822.542116][T11907] ? capable+0x88/0xe0 [ 822.546248][T11907] __sys_bpf+0x670/0x890 [ 822.550529][T11907] ? bpf_link_show_fdinfo+0x560/0x560 [ 822.555947][T11907] ? lock_chain_count+0x20/0x20 [ 822.560835][T11907] __x64_sys_bpf+0x7c/0x90 [ 822.565282][T11907] do_syscall_64+0x55/0xb0 [ 822.569732][T11907] ? clear_bhb_loop+0x40/0x90 [ 822.574437][T11907] ? clear_bhb_loop+0x40/0x90 [ 822.579152][T11907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.585065][T11907] RIP: 0033:0x7ff211f9e159 [ 822.589473][T11907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.609073][T11907] RSP: 002b:00007ff212ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 822.617491][T11907] RAX: ffffffffffffffda RBX: 00007ff212225fa0 RCX: 00007ff211f9e159 [ 822.625468][T11907] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 822.633435][T11907] RBP: 00007ff21203506b R08: 0000000000000000 R09: 0000000000000000 [ 822.641394][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.649377][T11907] R13: 00007ff212226038 R14: 00007ff212225fa0 R15: 00007ffcd6f9c5c8 [ 822.657346][T11907] [ 823.644671][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 823.845882][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 824.038790][ T9] usb 3-1: too many configurations: 87, using maximum allowed: 8 [ 824.130446][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 824.170129][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.191776][T11936] loop4: detected capacity change from 0 to 1024 [ 824.222709][ T9] usb 3-1: Product: syz [ 824.248137][ T9] usb 3-1: Manufacturer: syz [ 824.315524][ T9] usb 3-1: SerialNumber: syz [ 824.385692][ T28] audit: type=1800 audit(1790948476.274:54): pid=11936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1744" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 825.152808][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 828.666757][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -71 [ 828.696045][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 828.727674][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 828.801905][ T9] lan78xx: probe of 3-1:1.0 failed with error -71 [ 829.216317][ T9] usb 3-1: USB disconnect, device number 37 [ 831.702669][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 834.625802][ T5814] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 834.825855][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 834.901153][ T5814] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 834.964589][ T5814] usb 5-1: config 0 has no interface number 0 [ 835.042047][ T5814] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 835.107920][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.174202][ T5814] usb 5-1: Product: syz [ 835.205146][ T5814] usb 5-1: Manufacturer: syz [ 835.240998][ T5814] usb 5-1: SerialNumber: syz [ 835.321290][ T5814] usb 5-1: config 0 descriptor?? [ 835.427773][ T5814] smsc95xx v2.0.0 [ 838.736630][ T5814] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 838.794093][ T5814] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 838.846598][ T5814] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 838.915779][ T5814] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 838.960935][ T5814] usb 5-1: USB disconnect, device number 4 [ 840.544346][ T5832] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 840.735688][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 840.743737][ T5832] usb 1-1: config 135 interface 0 has no altsetting 0 [ 840.757999][ T5832] usb 1-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 840.775781][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.786543][ T5832] usb 1-1: Product: syz [ 840.791376][ T5832] usb 1-1: Manufacturer: syz [ 840.805665][ T5832] usb 1-1: SerialNumber: syz [ 842.314421][ T5832] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 842.327519][ T5832] dvb_usb_af9015: probe of 1-1:135.0 failed with error -22 [ 842.357728][ T5832] usb 1-1: USB disconnect, device number 44 [ 842.487163][T12078] ip_tables: iptables: counters copy to user failed while replacing table [ 844.242976][T12085] FAULT_INJECTION: forcing a failure. [ 844.242976][T12085] name failslab, interval 1, probability 0, space 0, times 0 [ 844.255623][T12085] CPU: 1 PID: 12085 Comm: syz.0.1775 Not tainted syzkaller #0 [ 844.263064][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 844.273112][T12085] Call Trace: [ 844.276400][T12085] [ 844.279318][T12085] dump_stack_lvl+0x18c/0x250 [ 844.283990][T12085] ? show_regs_print_info+0x20/0x20 [ 844.289184][T12085] ? load_image+0x420/0x420 [ 844.293679][T12085] ? __lock_acquire+0x7d80/0x7d80 [ 844.298695][T12085] should_fail_ex+0x394/0x4c0 [ 844.303364][T12085] should_failslab+0x9/0x20 [ 844.307856][T12085] slab_pre_alloc_hook+0x59/0x300 [ 844.312871][T12085] ? netstat_seq_show+0x105/0xd90 [ 844.317889][T12085] __kmem_cache_alloc_node+0x53/0x250 [ 844.323250][T12085] ? netstat_seq_show+0x105/0xd90 [ 844.328278][T12085] kmalloc_trace+0x2a/0xe0 [ 844.332685][T12085] netstat_seq_show+0x105/0xd90 [ 844.337523][T12085] ? __kmalloc_node+0xe4/0x240 [ 844.342279][T12085] seq_read_iter+0x464/0xc50 [ 844.346864][T12085] seq_read+0x175/0x220 [ 844.351007][T12085] ? seq_open+0x140/0x140 [ 844.355324][T12085] ? __mutex_trylock_common+0x160/0x270 [ 844.360860][T12085] ? trace_raw_output_contention_end+0xd0/0xd0 [ 844.367000][T12085] ? end_current_label_crit_section+0x149/0x170 [ 844.373247][T12085] ? seq_open+0x140/0x140 [ 844.377607][T12085] proc_reg_read+0x1e4/0x2d0 [ 844.382186][T12085] ? proc_reg_get_unmapped_area+0x380/0x380 [ 844.388074][T12085] vfs_read+0x298/0x990 [ 844.392222][T12085] ? kernel_read+0x1e0/0x1e0 [ 844.396798][T12085] ? __fget_files+0x28/0x460 [ 844.401374][T12085] ? __fget_files+0x3fc/0x460 [ 844.406041][T12085] ? __fdget_pos+0x2a3/0x330 [ 844.410626][T12085] ? ksys_read+0x74/0x260 [ 844.414940][T12085] ksys_read+0x151/0x260 [ 844.419172][T12085] ? vfs_write+0x9a0/0x9a0 [ 844.423579][T12085] ? lockdep_hardirqs_on+0x98/0x150 [ 844.428766][T12085] do_syscall_64+0x55/0xb0 [ 844.433172][T12085] ? clear_bhb_loop+0x40/0x90 [ 844.437837][T12085] ? clear_bhb_loop+0x40/0x90 [ 844.442498][T12085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.448379][T12085] RIP: 0033:0x7fd4d639e159 [ 844.452778][T12085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.472375][T12085] RSP: 002b:00007fd4d72ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 844.480790][T12085] RAX: ffffffffffffffda RBX: 00007fd4d6626090 RCX: 00007fd4d639e159 [ 844.488783][T12085] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005 [ 844.496776][T12085] RBP: 00007fd4d643506b R08: 0000000000000000 R09: 0000000000000000 [ 844.504776][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.512775][T12085] R13: 00007fd4d6626128 R14: 00007fd4d6626090 R15: 00007ffd3c641328 [ 844.520793][T12085] [ 849.375619][ T5775] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 849.565675][ T5775] usb 5-1: Using ep0 maxpacket: 8 [ 849.582802][ T5775] usb 5-1: config 135 interface 0 has no altsetting 0 [ 849.602757][ T5775] usb 5-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 849.623472][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.654349][ T5775] usb 5-1: Product: syz [ 849.674474][ T5775] usb 5-1: Manufacturer: syz [ 849.693174][ T5775] usb 5-1: SerialNumber: syz [ 849.955599][ T5775] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 849.986325][ T5775] dvb_usb_af9015: probe of 5-1:135.0 failed with error -22 [ 850.049539][ T5775] usb 5-1: USB disconnect, device number 5 [ 850.110290][T12119] FAULT_INJECTION: forcing a failure. [ 850.110290][T12119] name failslab, interval 1, probability 0, space 0, times 0 [ 850.123055][T12119] CPU: 1 PID: 12119 Comm: syz.3.1784 Not tainted syzkaller #0 [ 850.130535][T12119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 850.140607][T12119] Call Trace: [ 850.143893][T12119] [ 850.146837][T12119] dump_stack_lvl+0x18c/0x250 [ 850.151549][T12119] ? show_regs_print_info+0x20/0x20 [ 850.156775][T12119] ? load_image+0x420/0x420 [ 850.161304][T12119] ? __lock_acquire+0x7d80/0x7d80 [ 850.166353][T12119] should_fail_ex+0x394/0x4c0 [ 850.171058][T12119] should_failslab+0x9/0x20 [ 850.175584][T12119] slab_pre_alloc_hook+0x59/0x300 [ 850.180631][T12119] ? netstat_seq_show+0x105/0xd90 [ 850.185677][T12119] __kmem_cache_alloc_node+0x53/0x250 [ 850.191081][T12119] ? netstat_seq_show+0x105/0xd90 [ 850.196126][T12119] kmalloc_trace+0x2a/0xe0 [ 850.200564][T12119] netstat_seq_show+0x105/0xd90 [ 850.205429][T12119] ? __kmalloc_node+0xe4/0x240 [ 850.210222][T12119] seq_read_iter+0x464/0xc50 [ 850.214854][T12119] seq_read+0x175/0x220 [ 850.219037][T12119] ? seq_open+0x140/0x140 [ 850.223385][T12119] ? lockdep_hardirqs_on+0x98/0x150 [ 850.228617][T12119] ? seq_open+0x140/0x140 [ 850.232967][T12119] proc_reg_read+0x1e4/0x2d0 [ 850.237577][T12119] ? proc_reg_get_unmapped_area+0x380/0x380 [ 850.243488][T12119] vfs_read+0x298/0x990 [ 850.247672][T12119] ? kernel_read+0x1e0/0x1e0 [ 850.252298][T12119] ? __fget_files+0x28/0x460 [ 850.256923][T12119] ? __fget_files+0x3fc/0x460 [ 850.261632][T12119] ? __fdget_pos+0x2a3/0x330 [ 850.266244][T12119] ? ksys_read+0x74/0x260 [ 850.270603][T12119] ksys_read+0x151/0x260 [ 850.274877][T12119] ? vfs_write+0x9a0/0x9a0 [ 850.279321][T12119] ? lockdep_hardirqs_on+0x98/0x150 [ 850.284550][T12119] do_syscall_64+0x55/0xb0 [ 850.288988][T12119] ? clear_bhb_loop+0x40/0x90 [ 850.293688][T12119] ? clear_bhb_loop+0x40/0x90 [ 850.298389][T12119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.304300][T12119] RIP: 0033:0x7f8fe139e159 [ 850.308731][T12119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.328364][T12119] RSP: 002b:00007f8fdf5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 850.336808][T12119] RAX: ffffffffffffffda RBX: 00007f8fe1626180 RCX: 00007f8fe139e159 [ 850.344815][T12119] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005 [ 850.352776][T12119] RBP: 00007f8fe143506b R08: 0000000000000000 R09: 0000000000000000 [ 850.360737][T12119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.368697][T12119] R13: 00007f8fe1626218 R14: 00007f8fe1626180 R15: 00007ffe0f3754e8 [ 850.376673][T12119] [ 854.019868][T10795] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 854.218387][T10795] usb 3-1: no configurations [ 854.223122][T10795] usb 3-1: can't read configurations, error -22 [ 854.397195][T10795] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 854.459639][ T5832] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 854.499393][T12150] loop3: detected capacity change from 0 to 512 [ 854.510405][T12150] EXT4-fs: Ignoring removed nobh option [ 854.549342][T12150] EXT4-fs (loop3): Test dummy encryption mode enabled [ 854.558906][T12150] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 854.572513][T12150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 854.594665][T12150] EXT4-fs (loop3): 1 truncate cleaned up [ 854.602363][T10795] usb 3-1: no configurations [ 854.606710][T12150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.607148][T10795] usb 3-1: can't read configurations, error -22 [ 854.626943][T10795] usb usb3-port1: attempt power cycle [ 854.655619][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 854.662564][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.683513][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 854.699307][ T5832] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 854.712650][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.721627][ T5832] usb 5-1: Product: syz [ 854.725935][ T5832] usb 5-1: Manufacturer: syz [ 854.730552][ T5832] usb 5-1: SerialNumber: syz [ 854.809358][T12150] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 854.899242][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.927021][ T5832] usb 5-1: config 0 descriptor?? [ 855.066677][T12163] FAULT_INJECTION: forcing a failure. [ 855.066677][T12163] name failslab, interval 1, probability 0, space 0, times 0 [ 855.079446][T12163] CPU: 1 PID: 12163 Comm: syz.0.1795 Not tainted syzkaller #0 [ 855.086925][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 855.097001][T12163] Call Trace: [ 855.100290][T12163] [ 855.103230][T12163] dump_stack_lvl+0x18c/0x250 [ 855.107938][T12163] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 855.113635][T12163] ? show_regs_print_info+0x20/0x20 [ 855.118871][T12163] ? load_image+0x420/0x420 [ 855.123414][T12163] should_fail_ex+0x394/0x4c0 [ 855.128140][T12163] should_failslab+0x9/0x20 [ 855.132672][T12163] slab_pre_alloc_hook+0x59/0x300 [ 855.137721][T12163] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 855.143377][T12163] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 855.149032][T12163] __kmem_cache_alloc_node+0x53/0x250 [ 855.154436][T12163] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 855.160085][T12163] __kmalloc_node+0xa6/0x240 [ 855.164703][T12163] memcg_alloc_slab_cgroups+0x85/0x120 [ 855.170182][T12163] slab_post_alloc_hook+0xec/0x4d0 [ 855.175330][T12163] __kmem_cache_alloc_node+0x194/0x250 [ 855.180812][T12163] ? kvmalloc_node+0x70/0x180 [ 855.185510][T12163] ? kvmalloc_node+0x70/0x180 [ 855.190207][T12163] __kmalloc_node+0xa6/0x240 [ 855.194825][T12163] kvmalloc_node+0x70/0x180 [ 855.199350][T12163] seq_read_iter+0x1e2/0xc50 [ 855.203972][T12163] seq_read+0x175/0x220 [ 855.208155][T12163] ? seq_open+0x140/0x140 [ 855.212501][T12163] ? preempt_schedule+0xc0/0xd0 [ 855.217375][T12163] ? schedule_preempt_disabled+0x20/0x20 [ 855.223031][T12163] ? __mutex_trylock_common+0x160/0x270 [ 855.228594][T12163] ? trace_raw_output_contention_end+0xd0/0xd0 [ 855.234771][T12163] ? end_current_label_crit_section+0x149/0x170 [ 855.241039][T12163] ? seq_open+0x140/0x140 [ 855.245381][T12163] proc_reg_read+0x1e4/0x2d0 [ 855.249988][T12163] ? proc_reg_get_unmapped_area+0x380/0x380 [ 855.255911][T12163] vfs_read+0x298/0x990 [ 855.260108][T12163] ? kernel_read+0x1e0/0x1e0 [ 855.264734][T12163] ? __fget_files+0x28/0x460 [ 855.269352][T12163] ? __fget_files+0x3fc/0x460 [ 855.274061][T12163] ? __fdget_pos+0x2a3/0x330 [ 855.278681][T12163] ? ksys_read+0x74/0x260 [ 855.283046][T12163] ksys_read+0x151/0x260 [ 855.287317][T12163] ? vfs_write+0x9a0/0x9a0 [ 855.291763][T12163] ? lockdep_hardirqs_on+0x98/0x150 [ 855.296982][T12163] do_syscall_64+0x55/0xb0 [ 855.301423][T12163] ? clear_bhb_loop+0x40/0x90 [ 855.306121][T12163] ? clear_bhb_loop+0x40/0x90 [ 855.310826][T12163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.316738][T12163] RIP: 0033:0x7fd4d639e159 [ 855.321166][T12163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.340797][T12163] RSP: 002b:00007fd4d72ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 855.349242][T12163] RAX: ffffffffffffffda RBX: 00007fd4d6626180 RCX: 00007fd4d639e159 [ 855.357217][T12163] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005 [ 855.365183][T12163] RBP: 00007fd4d643506b R08: 0000000000000000 R09: 0000000000000000 [ 855.373149][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.381116][T12163] R13: 00007fd4d6626218 R14: 00007fd4d6626180 R15: 00007ffd3c641328 [ 855.389098][T12163] [ 855.475616][T10795] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 855.506994][T10795] usb 3-1: no configurations [ 855.511741][T10795] usb 3-1: can't read configurations, error -22 [ 855.665731][T10795] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 855.756584][T10795] usb 3-1: no configurations [ 855.762016][T10795] usb 3-1: can't read configurations, error -22 [ 855.771362][T10795] usb usb3-port1: unable to enumerate USB device [ 856.473614][T12177] kernel profiling enabled (shift: 9) [ 857.945621][ T5775] IPVS: starting estimator thread 0... [ 857.958582][T10795] usb 5-1: USB disconnect, device number 6 [ 858.035595][T12191] IPVS: using max 23 ests per chain, 55200 per kthread [ 858.395688][ T5775] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 858.645708][ T5775] usb 3-1: Using ep0 maxpacket: 8 [ 858.728388][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.864818][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.932529][ T5775] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.000562][ T5775] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 859.040675][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.076608][ T5775] usb 3-1: config 0 descriptor?? [ 859.566240][ T5775] usbhid 3-1:0.0: can't add hid device: -71 [ 859.572287][ T5775] usbhid: probe of 3-1:0.0 failed with error -71 [ 859.635650][ T5775] usb 3-1: USB disconnect, device number 42 [ 861.889116][T12228] loop2: detected capacity change from 0 to 1024 [ 861.995644][ T5832] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 862.196411][ T5832] usb 5-1: no configurations [ 862.201187][ T5832] usb 5-1: can't read configurations, error -22 [ 862.365596][ T5832] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 862.605673][ T5814] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 862.747595][ T5832] usb 5-1: no configurations [ 862.752608][ T5832] usb 5-1: can't read configurations, error -22 [ 862.759210][ T5832] usb usb5-port1: attempt power cycle [ 862.810126][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 862.823204][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.849373][ T5814] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 862.919052][ T5814] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 863.041274][ T5814] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 863.103728][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.180464][ T5814] usb 1-1: Product: syz [ 863.229260][ T5814] usb 1-1: Manufacturer: syz [ 863.276431][ T5814] usb 1-1: SerialNumber: syz [ 863.606296][ T5814] usb 1-1: Can't get UAC3 power state for id 10 [ 863.623669][ T5814] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 863.652355][ T5814] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 863.685776][ T5832] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 863.732351][ T5814] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 863.746710][ T5814] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 863.761206][ T5814] usb 1-1: USB disconnect, device number 45 [ 865.061331][ T5832] usb 5-1: device not accepting address 9, error -71 [ 865.092471][T12258] udevd[12258]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.249777][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 865.279352][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 865.301886][T12263] binder: BINDER_SET_CONTEXT_MGR already set [ 865.313253][T12263] binder: 12262:12263 ioctl 4018620d 200000004a80 returned -16 [ 865.463967][T12268] binder: BINDER_SET_CONTEXT_MGR already set [ 865.474544][T12268] binder: 12267:12268 ioctl 4018620d 200000004a80 returned -16 [ 867.257717][ T5832] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 867.477939][ T5832] usb 3-1: no configurations [ 867.563884][ T5832] usb 3-1: can't read configurations, error -22 [ 867.726923][ T5832] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 869.144737][ T5832] usb 3-1: no configurations [ 869.155643][ T5832] usb 3-1: can't read configurations, error -22 [ 869.171865][ T5832] usb usb3-port1: attempt power cycle [ 869.255722][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 869.469703][ T23] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 869.479527][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.585799][ T5832] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 869.639068][ T5832] usb 3-1: no configurations [ 869.643780][ T5832] usb 3-1: can't read configurations, error -22 [ 869.829458][ T5832] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 869.872730][ T5832] usb 3-1: no configurations [ 870.258426][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.265062][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.348532][ T23] usb 5-1: Firmware: major: 0, minor: 64, hardware type: UNKNOWN (183) [ 870.381697][ T5832] usb 3-1: can't read configurations, error -22 [ 870.418405][ T5832] usb usb3-port1: unable to enumerate USB device [ 870.562219][ T23] usb 5-1: failed to fetch extended address, random address set [ 870.590472][ T23] usb 5-1: atusb_probe: initialization failed, error = -524 [ 870.618409][ T23] atusb: probe of 5-1:1.0 failed with error -524 [ 870.647149][ T23] usb 5-1: USB disconnect, device number 11 [ 870.933322][T12324] binder: BINDER_SET_CONTEXT_MGR already set [ 870.949811][T12324] binder: 12323:12324 ioctl 4018620d 200000004a80 returned -16 [ 873.395755][ T5814] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 873.632508][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.695589][ T5814] usb 1-1: config 0 has no interfaces? [ 873.723191][ T5814] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 873.732373][ T5814] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 873.756976][ T5814] usb 1-1: Product: syz [ 873.761193][ T5814] usb 1-1: Manufacturer: syz [ 873.825243][ T5814] usb 1-1: SerialNumber: syz [ 873.856291][ T5814] usb 1-1: config 0 descriptor?? [ 874.066063][ T5814] IPVS: starting estimator thread 0... [ 874.165984][T12356] IPVS: using max 35 ests per chain, 84000 per kthread [ 876.185747][ T5814] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 876.187438][ T23] usb 1-1: USB disconnect, device number 46 [ 876.251623][T12380] binder: BINDER_SET_CONTEXT_MGR already set [ 876.266804][T12380] binder: 12379:12380 ioctl 4018620d 200000004a80 returned -16 [ 876.420852][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.455590][ T5814] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 876.464691][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.536435][ T5814] usb 4-1: config 0 descriptor?? [ 876.548418][ T5814] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 876.811699][ T5832] usb 4-1: USB disconnect, device number 25 [ 884.835414][T12431] ubi0: attaching mtd0 [ 884.846499][T12431] ubi0: scanning is finished [ 884.851343][T12431] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 885.550576][T12431] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 887.668769][T11296] Bluetooth: hci1: command 0x0406 tx timeout [ 889.338746][T12450] FAULT_INJECTION: forcing a failure. [ 889.338746][T12450] name failslab, interval 1, probability 0, space 0, times 0 [ 889.382248][T12450] CPU: 1 PID: 12450 Comm: syz.0.1865 Not tainted syzkaller #0 [ 889.389773][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 889.399855][T12450] Call Trace: [ 889.403147][T12450] [ 889.406092][T12450] dump_stack_lvl+0x18c/0x250 [ 889.410807][T12450] ? show_regs_print_info+0x20/0x20 [ 889.416039][T12450] ? load_image+0x420/0x420 [ 889.420570][T12450] ? __might_sleep+0xe0/0xe0 [ 889.425183][T12450] ? __lock_acquire+0x7d80/0x7d80 [ 889.430240][T12450] ? rcu_is_watching+0x15/0xb0 [ 889.435040][T12450] should_fail_ex+0x394/0x4c0 [ 889.439758][T12450] should_failslab+0x9/0x20 [ 889.444285][T12450] slab_pre_alloc_hook+0x59/0x300 [ 889.449338][T12450] ? snd_timer_open+0x50/0x10b0 [ 889.454336][T12450] ? snd_hrtimer_open+0x51/0xf0 [ 889.459222][T12450] __kmem_cache_alloc_node+0x53/0x250 [ 889.464627][T12450] ? snd_hrtimer_open+0x51/0xf0 [ 889.469510][T12450] kmalloc_trace+0x2a/0xe0 [ 889.473953][T12450] snd_hrtimer_open+0x51/0xf0 [ 889.478662][T12450] snd_timer_open+0xc13/0x10b0 [ 889.483462][T12450] ? kstrdup+0x65/0x80 [ 889.487561][T12450] snd_seq_timer_open+0x2db/0x610 [ 889.492697][T12450] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 889.498093][T12450] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 889.504012][T12450] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 889.509926][T12450] ? _raw_spin_unlock+0x40/0x40 [ 889.514800][T12450] ? snd_seq_timer_defaults+0x35/0x530 [ 889.520289][T12450] snd_seq_queue_alloc+0x3b7/0x740 [ 889.525436][T12450] snd_seq_ioctl_create_queue+0x7f/0x3b0 [ 889.531088][T12450] ? snd_seq_ioctl_unsubscribe_port+0x6e0/0x6e0 [ 889.537356][T12450] snd_seq_oss_open+0x658/0xf10 [ 889.542313][T12450] ? snd_seq_oss_delete_client+0x50/0x50 [ 889.548012][T12450] ? trace_raw_output_contention_end+0xd0/0xd0 [ 889.554219][T12450] ? soundcore_open+0x274/0x4c0 [ 889.559186][T12450] ? odev_open+0x5c/0xa0 [ 889.563451][T12450] ? __lock_acquire+0x7d80/0x7d80 [ 889.568536][T12450] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 889.574546][T12450] ? async_call_lookup_ports+0x20/0x20 [ 889.580036][T12450] ? do_raw_spin_unlock+0x121/0x230 [ 889.585275][T12450] ? soundcore_open+0x310/0x4c0 [ 889.590162][T12450] odev_open+0x67/0xa0 [ 889.594255][T12450] chrdev_open+0x58c/0x600 [ 889.598704][T12450] ? cd_forget+0x160/0x160 [ 889.603148][T12450] ? fsnotify_perm+0x3ed/0x5e0 [ 889.607949][T12450] do_dentry_open+0x880/0x14b0 [ 889.612741][T12450] ? cd_forget+0x160/0x160 [ 889.617188][T12450] path_openat+0x284f/0x3270 [ 889.621822][T12450] ? do_sys_openat2+0xda/0x1d0 [ 889.626609][T12450] ? __x64_sys_openat+0x139/0x160 [ 889.631657][T12450] ? verify_lock_unused+0x140/0x140 [ 889.636885][T12450] ? do_filp_open+0x430/0x430 [ 889.641605][T12450] do_filp_open+0x1f2/0x430 [ 889.646139][T12450] ? vfs_tmpfile+0x620/0x620 [ 889.650772][T12450] ? _raw_spin_unlock+0x28/0x40 [ 889.655646][T12450] ? alloc_fd+0x590/0x640 [ 889.660010][T12450] do_sys_openat2+0x134/0x1d0 [ 889.664727][T12450] ? do_sys_open+0xe0/0xe0 [ 889.669172][T12450] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 889.675174][T12450] ? lock_chain_count+0x20/0x20 [ 889.680056][T12450] __x64_sys_openat+0x139/0x160 [ 889.684941][T12450] do_syscall_64+0x55/0xb0 [ 889.689385][T12450] ? clear_bhb_loop+0x40/0x90 [ 889.694086][T12450] ? clear_bhb_loop+0x40/0x90 [ 889.698785][T12450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 889.704727][T12450] RIP: 0033:0x7fd4d639e159 [ 889.709161][T12450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.728790][T12450] RSP: 002b:00007fd4d7310028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 889.737233][T12450] RAX: ffffffffffffffda RBX: 00007fd4d6625fa0 RCX: 00007fd4d639e159 [ 889.745217][T12450] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 889.753183][T12450] RBP: 00007fd4d643506b R08: 0000000000000000 R09: 0000000000000000 [ 889.761149][T12450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.769119][T12450] R13: 00007fd4d6626038 R14: 00007fd4d6625fa0 R15: 00007ffd3c641328 [ 889.777100][T12450] [ 891.521129][T12454] binder: BINDER_SET_CONTEXT_MGR already set [ 891.551709][T12454] binder: 12453:12454 ioctl 4018620d 200000004a80 returned -16 [ 892.912223][T12470] ubi0: attaching mtd0 [ 892.923018][T12470] ubi0: scanning is finished [ 892.927932][T12470] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 893.424656][T12470] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 900.674435][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 900.692731][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 900.805696][T10978] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 901.766193][T10978] usb 5-1: Using ep0 maxpacket: 8 [ 901.800645][T10978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.822119][T10978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.845331][T10978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.079540][T10978] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 903.089293][T10978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.100774][T10978] usb 5-1: config 0 descriptor?? [ 905.009603][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 905.024481][T10978] usbhid 5-1:0.0: can't add hid device: -71 [ 905.036308][T10978] usbhid: probe of 5-1:0.0 failed with error -71 [ 905.066397][ T23] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 905.067608][T10978] usb 5-1: USB disconnect, device number 12 [ 905.245658][ T23] usb 1-1: device descriptor read/64, error -71 [ 906.752185][ T23] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 906.922751][ T970] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 907.161888][ T970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.199764][ T970] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 907.221919][ T970] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 907.245666][ T970] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 907.269638][ T970] usb 4-1: Product: syz [ 907.273858][ T970] usb 4-1: Manufacturer: syz [ 907.295517][ T970] usb 4-1: SerialNumber: syz [ 907.310945][ T970] usb 4-1: config 0 descriptor?? [ 907.872607][T12552] binder: BINDER_SET_CONTEXT_MGR already set [ 907.883272][T12552] binder: 12551:12552 ioctl 4018620d 200000004a80 returned -16 [ 909.174358][ T5775] usb 4-1: USB disconnect, device number 26 [ 909.406592][T10978] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 910.755646][T10978] usb 5-1: Using ep0 maxpacket: 8 [ 910.804178][T10978] usb 5-1: config 135 interface 0 has no altsetting 0 [ 910.834404][T10978] usb 5-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 910.849881][T10978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.876031][T10978] usb 5-1: Product: syz [ 910.880254][T10978] usb 5-1: Manufacturer: syz [ 910.884871][T10978] usb 5-1: SerialNumber: syz [ 910.980211][T10978] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 911.006378][T10978] dvb_usb_af9015: probe of 5-1:135.0 failed with error -22 [ 911.021318][T10978] usb 5-1: USB disconnect, device number 13 [ 915.148408][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 915.179079][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 916.473987][ T23] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 916.686601][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.705658][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 916.722202][ T23] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 916.731558][ T23] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 916.745840][ T23] usb 3-1: Product: syz [ 916.750049][ T23] usb 3-1: Manufacturer: syz [ 916.771156][ T23] usb 3-1: SerialNumber: syz [ 916.788194][ T23] usb 3-1: config 0 descriptor?? [ 916.955652][T10978] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 918.250106][ T5775] usb 3-1: USB disconnect, device number 47 [ 918.307775][ T5814] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 919.558824][T10978] usb 4-1: Using ep0 maxpacket: 8 [ 919.576561][T10978] usb 4-1: config 135 interface 0 has no altsetting 0 [ 919.587873][T10978] usb 4-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 919.605934][T10978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.624583][T10978] usb 4-1: Product: syz [ 919.634702][T10978] usb 4-1: Manufacturer: syz [ 919.654903][T10978] usb 4-1: SerialNumber: syz [ 919.696022][T10978] usb 4-1: can't set config #135, error -71 [ 919.723879][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 919.737849][T10978] usb 4-1: USB disconnect, device number 27 [ 919.763081][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.792144][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.804655][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.817752][ T5814] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 919.828181][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.044754][ T5814] usb 1-1: config 0 descriptor?? [ 920.055863][ T5814] usb 1-1: can't set config #0, error -71 [ 920.075851][ T5814] usb 1-1: USB disconnect, device number 49 [ 920.211465][T12623] binder: BINDER_SET_CONTEXT_MGR already set [ 920.233196][T12623] binder: 12622:12623 ioctl 4018620d 200000004a80 returned -16 [ 921.858422][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 924.524151][ T28] audit: type=1326 audit(1790948576.424:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12643 comm="syz.0.1927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4d639e159 code=0x0 [ 926.500772][T12667] FAULT_INJECTION: forcing a failure. [ 926.500772][T12667] name failslab, interval 1, probability 0, space 0, times 0 [ 926.513418][T12667] CPU: 1 PID: 12667 Comm: syz.3.1931 Not tainted syzkaller #0 [ 926.520868][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 926.530911][T12667] Call Trace: [ 926.534177][T12667] [ 926.537095][T12667] dump_stack_lvl+0x18c/0x250 [ 926.541783][T12667] ? show_regs_print_info+0x20/0x20 [ 926.546988][T12667] ? load_image+0x420/0x420 [ 926.551492][T12667] ? __lock_acquire+0x7d80/0x7d80 [ 926.556508][T12667] ? refill_obj_stock+0xef/0x6a0 [ 926.561438][T12667] should_fail_ex+0x394/0x4c0 [ 926.566160][T12667] should_failslab+0x9/0x20 [ 926.570683][T12667] slab_pre_alloc_hook+0x59/0x300 [ 926.575703][T12667] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 926.581322][T12667] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 926.586937][T12667] __kmem_cache_alloc_node+0x53/0x250 [ 926.592302][T12667] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 926.597921][T12667] __kmalloc_node+0xa6/0x240 [ 926.602510][T12667] memcg_alloc_slab_cgroups+0x85/0x120 [ 926.607982][T12667] slab_post_alloc_hook+0xec/0x4d0 [ 926.613103][T12667] __kmem_cache_alloc_node+0x194/0x250 [ 926.618564][T12667] ? kvmalloc_node+0x70/0x180 [ 926.623240][T12667] ? kvmalloc_node+0x70/0x180 [ 926.627911][T12667] __kmalloc_node+0xa6/0x240 [ 926.632493][T12667] kvmalloc_node+0x70/0x180 [ 926.636987][T12667] seq_read_iter+0x1e2/0xc50 [ 926.641575][T12667] seq_read+0x175/0x220 [ 926.645721][T12667] ? seq_open+0x140/0x140 [ 926.650037][T12667] ? __mutex_trylock_common+0x160/0x270 [ 926.655570][T12667] ? trace_raw_output_contention_end+0xd0/0xd0 [ 926.661713][T12667] ? end_current_label_crit_section+0x149/0x170 [ 926.667947][T12667] ? seq_open+0x140/0x140 [ 926.672264][T12667] proc_reg_read+0x1e4/0x2d0 [ 926.676841][T12667] ? proc_reg_get_unmapped_area+0x380/0x380 [ 926.682720][T12667] vfs_read+0x298/0x990 [ 926.686866][T12667] ? kernel_read+0x1e0/0x1e0 [ 926.691446][T12667] ? __fget_files+0x28/0x460 [ 926.696029][T12667] ? __fget_files+0x3fc/0x460 [ 926.700698][T12667] ? __fdget_pos+0x2a3/0x330 [ 926.705279][T12667] ? ksys_read+0x74/0x260 [ 926.709601][T12667] ksys_read+0x151/0x260 [ 926.713833][T12667] ? vfs_write+0x9a0/0x9a0 [ 926.718255][T12667] ? lockdep_hardirqs_on+0x98/0x150 [ 926.723445][T12667] do_syscall_64+0x55/0xb0 [ 926.727853][T12667] ? clear_bhb_loop+0x40/0x90 [ 926.732521][T12667] ? clear_bhb_loop+0x40/0x90 [ 926.737189][T12667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.743082][T12667] RIP: 0033:0x7f8fe139e159 [ 926.747483][T12667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.767079][T12667] RSP: 002b:00007f8fdf5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 926.775490][T12667] RAX: ffffffffffffffda RBX: 00007f8fe1626090 RCX: 00007f8fe139e159 [ 926.783459][T12667] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005 [ 926.791415][T12667] RBP: 00007f8fe143506b R08: 0000000000000000 R09: 0000000000000000 [ 926.799372][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.807329][T12667] R13: 00007f8fe1626128 R14: 00007f8fe1626090 R15: 00007ffe0f3754e8 [ 926.815292][T12667] [ 929.045415][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 929.058423][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 932.860397][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.875555][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.190439][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 942.610856][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 942.673939][T12768] binder: BINDER_SET_CONTEXT_MGR already set [ 942.719809][T12768] binder: 12767:12768 ioctl 4018620d 200000004a80 returned -16 [ 947.533681][T12819] FAULT_INJECTION: forcing a failure. [ 947.533681][T12819] name failslab, interval 1, probability 0, space 0, times 0 [ 947.547230][T12819] CPU: 1 PID: 12819 Comm: syz.2.1970 Not tainted syzkaller #0 [ 947.554733][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 947.564816][T12819] Call Trace: [ 947.568123][T12819] [ 947.571073][T12819] dump_stack_lvl+0x18c/0x250 [ 947.575787][T12819] ? show_regs_print_info+0x20/0x20 [ 947.581016][T12819] ? load_image+0x420/0x420 [ 947.585555][T12819] ? __lock_acquire+0x7d80/0x7d80 [ 947.590615][T12819] should_fail_ex+0x394/0x4c0 [ 947.595330][T12819] should_failslab+0x9/0x20 [ 947.599862][T12819] slab_pre_alloc_hook+0x59/0x300 [ 947.604968][T12819] ? netstat_seq_show+0x105/0xd90 [ 947.610028][T12819] __kmem_cache_alloc_node+0x53/0x250 [ 947.615433][T12819] ? netstat_seq_show+0x105/0xd90 [ 947.620484][T12819] kmalloc_trace+0x2a/0xe0 [ 947.624937][T12819] netstat_seq_show+0x105/0xd90 [ 947.629815][T12819] ? __kmalloc_node+0xe4/0x240 [ 947.634617][T12819] seq_read_iter+0x464/0xc50 [ 947.639256][T12819] seq_read+0x175/0x220 [ 947.643440][T12819] ? seq_open+0x140/0x140 [ 947.647799][T12819] ? __mutex_trylock_common+0x160/0x270 [ 947.653381][T12819] ? trace_raw_output_contention_end+0xd0/0xd0 [ 947.659559][T12819] ? end_current_label_crit_section+0x149/0x170 [ 947.665830][T12819] ? seq_open+0x140/0x140 [ 947.670185][T12819] proc_reg_read+0x1e4/0x2d0 [ 947.674797][T12819] ? proc_reg_get_unmapped_area+0x380/0x380 [ 947.680711][T12819] vfs_read+0x298/0x990 [ 947.684895][T12819] ? kernel_read+0x1e0/0x1e0 [ 947.689506][T12819] ? __fget_files+0x28/0x460 [ 947.694117][T12819] ? __fget_files+0x3fc/0x460 [ 947.698830][T12819] ? __fdget_pos+0x2a3/0x330 [ 947.703441][T12819] ? ksys_read+0x74/0x260 [ 947.707796][T12819] ksys_read+0x151/0x260 [ 947.712067][T12819] ? vfs_write+0x9a0/0x9a0 [ 947.716506][T12819] ? lockdep_hardirqs_on+0x98/0x150 [ 947.721730][T12819] do_syscall_64+0x55/0xb0 [ 947.726166][T12819] ? clear_bhb_loop+0x40/0x90 [ 947.730872][T12819] ? clear_bhb_loop+0x40/0x90 [ 947.735571][T12819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.741489][T12819] RIP: 0033:0x7f49cd59e159 [ 947.745920][T12819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.765552][T12819] RSP: 002b:00007f49cb7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 947.773984][T12819] RAX: ffffffffffffffda RBX: 00007f49cd826180 RCX: 00007f49cd59e159 [ 947.781971][T12819] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000005 [ 947.789960][T12819] RBP: 00007f49cd63506b R08: 0000000000000000 R09: 0000000000000000 [ 947.797948][T12819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.805935][T12819] R13: 00007f49cd826218 R14: 00007f49cd826180 R15: 00007fffda99a7b8 [ 947.813938][T12819] [ 948.683315][T12824] netlink: 'syz.0.1973': attribute type 4 has an invalid length. [ 948.691972][T12824] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1973'. [ 954.492284][ T970] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 954.690656][T12857] loop4: detected capacity change from 0 to 164 [ 954.690903][ T970] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 954.711494][T12857] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 954.720868][T12857] isofs_fill_super: root inode is not a directory. Corrupted media? [ 954.733133][ T970] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 954.770868][ T970] usb 1-1: Product: syz [ 954.780702][T12847] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 954.956701][ T970] usb 1-1: Manufacturer: syz [ 954.961750][ T970] usb 1-1: SerialNumber: syz [ 954.981013][ T970] usb 1-1: config 0 descriptor?? [ 955.015730][ T970] ch341 1-1:0.0: ch341-uart converter detected [ 955.841426][ T970] usb 1-1: failed to receive control message: -32 [ 955.961008][ T970] ch341-uart: probe of ttyUSB0 failed with error -32 [ 958.073502][ T5832] usb 1-1: USB disconnect, device number 50 [ 958.098679][ T5832] ch341 1-1:0.0: device disconnected [ 958.176248][T12880] syzkaller0: entered promiscuous mode [ 958.181773][T12880] syzkaller0: entered allmulticast mode [ 959.833002][T12892] loop2: detected capacity change from 0 to 164 [ 959.860920][T12892] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 959.870090][T12892] isofs_fill_super: root inode is not a directory. Corrupted media? [ 964.855671][T10978] smpboot: CPU 1 is now offline [ 966.041991][T12928] syzkaller0: entered promiscuous mode [ 966.061919][T12928] syzkaller0: entered allmulticast mode [ 966.185560][T10978] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 966.350904][T12935] loop3: detected capacity change from 0 to 164 [ 966.368755][T12935] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 966.377591][T12935] isofs_fill_super: root inode is not a directory. Corrupted media? [ 966.507046][T10978] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 967.538315][T10978] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 968.498121][T10978] usb 1-1: Product: syz [ 968.502324][T10978] usb 1-1: Manufacturer: syz [ 968.560623][T10978] usb 1-1: SerialNumber: syz [ 969.480661][T10978] usb 1-1: config 0 descriptor?? [ 969.529474][T10978] usb 1-1: can't set config #0, error -71 [ 969.585768][T10978] usb 1-1: USB disconnect, device number 51 [ 972.385203][T12964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2012'. [ 973.356809][T12969] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2012'. [ 977.803202][T12985] syzkaller0: entered promiscuous mode [ 977.825728][T12985] syzkaller0: entered allmulticast mode [ 980.185549][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 980.399554][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 980.429213][ T9] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 980.462412][ T9] usb 5-1: Product: syz [ 980.485722][ T9] usb 5-1: Manufacturer: syz [ 980.515683][ T9] usb 5-1: SerialNumber: syz [ 980.537291][ T9] usb 5-1: config 0 descriptor?? [ 980.557664][ T9] ch341 5-1:0.0: ch341-uart converter detected [ 981.641018][ T28] audit: type=1800 audit(1790948633.534:56): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2025" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 981.722151][ T9] usb 5-1: failed to receive control message: -32 [ 981.760188][ T9] ch341-uart: probe of ttyUSB0 failed with error -32 [ 984.385927][ T9] usb 5-1: USB disconnect, device number 14 [ 984.419095][ T9] ch341 5-1:0.0: device disconnected [ 984.517247][T13021] syzkaller0: entered promiscuous mode [ 984.535803][T13021] syzkaller0: entered allmulticast mode [ 988.485581][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 989.527309][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 989.555807][ T9] usb 3-1: config 135 interface 0 has no altsetting 0 [ 989.593863][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 989.613203][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.655655][ T9] usb 3-1: Product: syz [ 989.659835][ T9] usb 3-1: Manufacturer: syz [ 990.535663][ T9] usb 3-1: SerialNumber: syz [ 990.861158][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 990.906365][ T9] dvb_usb_af9015: probe of 3-1:135.0 failed with error -22 [ 990.937574][ T9] usb 3-1: USB disconnect, device number 48 [ 991.843062][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.851464][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.576223][ T28] audit: type=1326 audit(1790948645.484:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13058 comm="syz.3.2042" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fe139e159 code=0x0 [ 993.795945][T10978] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 993.904256][T13062] syzkaller0: entered promiscuous mode [ 993.911050][T13062] syzkaller0: entered allmulticast mode [ 993.988353][T10978] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 993.999216][T10978] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 994.008446][T10978] usb 5-1: Product: syz [ 994.012709][T10978] usb 5-1: Manufacturer: syz [ 994.019329][T10978] usb 5-1: SerialNumber: syz [ 994.029802][T10978] usb 5-1: config 0 descriptor?? [ 994.039352][T10978] ch341 5-1:0.0: ch341-uart converter detected [ 995.119039][T10978] usb 5-1: failed to receive control message: -32 [ 995.170337][T10978] ch341-uart: probe of ttyUSB0 failed with error -32 [ 997.285797][ T5775] usb 5-1: USB disconnect, device number 15 [ 997.299233][ T5775] ch341 5-1:0.0: device disconnected [ 1003.063480][T13113] binder: BINDER_SET_CONTEXT_MGR already set [ 1003.110727][T13113] binder: 13112:13113 ioctl 4018620d 200000004a80 returned -16 [ 1003.665194][T13116] syzkaller0: entered promiscuous mode [ 1003.690460][T13116] syzkaller0: entered allmulticast mode [ 1011.378464][T13152] syzkaller0: entered promiscuous mode [ 1011.398631][T13152] syzkaller0: entered allmulticast mode [ 1013.725522][ T28] audit: type=1326 audit(1790948665.624:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm="syz.3.2075" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fe139e159 code=0x0 [ 1013.756990][T13168] random: crng reseeded on system resumption [ 1019.438480][T13196] ================================================================== [ 1019.446596][T13196] BUG: KASAN: slab-use-after-free in string+0x204/0x290 [ 1019.453521][T13196] Read of size 1 at addr ffff8880212a0028 by task syz.3.2088/13196 [ 1019.461395][T13196] [ 1019.463705][T13196] CPU: 0 PID: 13196 Comm: syz.3.2088 Not tainted syzkaller #0 [ 1019.471136][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1019.481176][T13196] Call Trace: [ 1019.484441][T13196] [ 1019.487354][T13196] dump_stack_lvl+0x18c/0x250 [ 1019.492019][T13196] ? __lock_acquire+0x7d80/0x7d80 [ 1019.497026][T13196] ? show_regs_print_info+0x20/0x20 [ 1019.502222][T13196] ? load_image+0x420/0x420 [ 1019.506729][T13196] ? __virt_addr_valid+0x10c/0x380 [ 1019.511835][T13196] ? __virt_addr_valid+0x10c/0x380 [ 1019.516934][T13196] ? __virt_addr_valid+0x10c/0x380 [ 1019.522032][T13196] print_report+0xa8/0x210 [ 1019.526477][T13196] ? string+0x204/0x290 [ 1019.530648][T13196] kasan_report+0x117/0x150 [ 1019.535143][T13196] ? string+0x204/0x290 [ 1019.539287][T13196] string+0x204/0x290 [ 1019.543255][T13196] vsnprintf+0xf72/0x1ba0 [ 1019.547575][T13196] vprintk_store+0x3d9/0xd50 [ 1019.552153][T13196] ? printk_parse_prefix+0x3d0/0x3d0 [ 1019.557557][T13196] ? verify_lock_unused+0x140/0x140 [ 1019.562765][T13196] vprintk_emit+0x117/0x610 [ 1019.567263][T13196] ? printk_sprint+0x460/0x460 [ 1019.572028][T13196] ? do_raw_spin_lock+0x11f/0x2b0 [ 1019.577049][T13196] _printk+0xde/0x130 [ 1019.581022][T13196] ? load_image+0x420/0x420 [ 1019.585509][T13196] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1019.590964][T13196] __setup_irq+0xf92/0x1f30 [ 1019.595456][T13196] request_threaded_irq+0x2c1/0x3a0 [ 1019.600662][T13196] ? pcl818_detach+0xa0/0xa0 [ 1019.605341][T13196] pcl818_attach+0x18c/0x15c0 [ 1019.610006][T13196] ? __raw_spin_lock_init+0x45/0x100 [ 1019.615272][T13196] comedi_device_attach+0x526/0x710 [ 1019.620457][T13196] comedi_unlocked_ioctl+0x6c4/0x1170 [ 1019.625829][T13196] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 1019.631472][T13196] ? comedi_poll+0x8e0/0x8e0 [ 1019.636075][T13196] ? __fget_files+0x28/0x460 [ 1019.640659][T13196] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1019.645578][T13196] ? security_file_ioctl+0x80/0xa0 [ 1019.650677][T13196] ? comedi_poll+0x8e0/0x8e0 [ 1019.655246][T13196] __se_sys_ioctl+0xfd/0x170 [ 1019.659823][T13196] do_syscall_64+0x55/0xb0 [ 1019.664226][T13196] ? clear_bhb_loop+0x40/0x90 [ 1019.668886][T13196] ? clear_bhb_loop+0x40/0x90 [ 1019.673549][T13196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.679443][T13196] RIP: 0033:0x7f8fe139e159 [ 1019.683844][T13196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.703437][T13196] RSP: 002b:00007f8fe218e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.711832][T13196] RAX: ffffffffffffffda RBX: 00007f8fe1625fa0 RCX: 00007f8fe139e159 [ 1019.719788][T13196] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1019.727762][T13196] RBP: 00007f8fe143506b R08: 0000000000000000 R09: 0000000000000000 [ 1019.735714][T13196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.743662][T13196] R13: 00007f8fe1626038 R14: 00007f8fe1625fa0 R15: 00007ffe0f3754e8 [ 1019.751619][T13196] [ 1019.754618][T13196] [ 1019.756920][T13196] Allocated by task 5774: [ 1019.761227][T13196] kasan_set_track+0x4e/0x70 [ 1019.765820][T13196] __kasan_kmalloc+0x8f/0xa0 [ 1019.770394][T13196] __kmalloc_node+0xb6/0x240 [ 1019.774983][T13196] __vmalloc_node_range+0x598/0x1320 [ 1019.780250][T13196] vzalloc+0x79/0x90 [ 1019.784128][T13196] alloc_counters+0xcb/0x6c0 [ 1019.788883][T13196] do_ipt_get_ctl+0xad5/0x1210 [ 1019.793626][T13196] nf_getsockopt+0x262/0x280 [ 1019.798232][T13196] ip_getsockopt+0x19f/0x230 [ 1019.802857][T13196] do_sock_getsockopt+0x379/0x450 [ 1019.807864][T13196] __x64_sys_getsockopt+0x1d6/0x280 [ 1019.813044][T13196] do_syscall_64+0x55/0xb0 [ 1019.817445][T13196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.823326][T13196] [ 1019.825636][T13196] The buggy address belongs to the object at ffff8880212a0028 [ 1019.825636][T13196] which belongs to the cache kmalloc-8 of size 8 [ 1019.839320][T13196] The buggy address is located 0 bytes inside of [ 1019.839320][T13196] freed 8-byte region [ffff8880212a0028, ffff8880212a0030) [ 1019.852768][T13196] [ 1019.855091][T13196] The buggy address belongs to the physical page: [ 1019.861538][T13196] page:ffffea000084a800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880212a03c0 pfn:0x212a0 [ 1019.872973][T13196] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1019.880508][T13196] page_type: 0xffffffff() [ 1019.884841][T13196] raw: 00fff00000000800 ffff888017c41280 ffffea00009832d0 ffffea0000978950 [ 1019.893414][T13196] raw: ffff8880212a03c0 000000000066005b 00000001ffffffff 0000000000000000 [ 1019.901974][T13196] page dumped because: kasan: bad access detected [ 1019.908366][T13196] page_owner tracks the page as allocated [ 1019.914059][T13196] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 6218026263, free_ts 6207786073 [ 1019.931405][T13196] post_alloc_hook+0x1c1/0x200 [ 1019.936160][T13196] get_page_from_freelist+0x2181/0x22a0 [ 1019.941685][T13196] __alloc_pages+0x1f0/0x460 [ 1019.946261][T13196] alloc_page_interleave+0x24/0x1e0 [ 1019.951480][T13196] alloc_slab_page+0x5d/0x180 [ 1019.956156][T13196] new_slab+0x87/0x2d0 [ 1019.960231][T13196] ___slab_alloc+0xc5c/0x12f0 [ 1019.964894][T13196] __kmem_cache_alloc_node+0x11f/0x250 [ 1019.970359][T13196] __kmalloc_node_track_caller+0xa4/0x230 [ 1019.976080][T13196] kstrdup+0x3b/0x80 [ 1019.979961][T13196] __kernfs_new_node+0xaa/0x7f0 [ 1019.984798][T13196] kernfs_new_node+0x14c/0x260 [ 1019.989547][T13196] kernfs_create_link+0xa7/0x200 [ 1019.994462][T13196] sysfs_do_create_link_sd+0x83/0x110 [ 1019.999815][T13196] driver_sysfs_add+0x89/0x210 [ 1020.004660][T13196] really_probe+0x13c/0xae0 [ 1020.009166][T13196] page last free stack trace: [ 1020.013835][T13196] free_unref_page_prepare+0x7d7/0x8f0 [ 1020.019289][T13196] free_unref_page_list+0xbe/0x860 [ 1020.024382][T13196] release_pages+0x208a/0x2300 [ 1020.029130][T13196] tlb_flush_mmu+0x379/0x510 [ 1020.033704][T13196] tlb_finish_mmu+0xf4/0x220 [ 1020.038280][T13196] exit_mmap+0x428/0xb90 [ 1020.042519][T13196] __mmput+0x118/0x3a0 [ 1020.046568][T13196] free_bprm+0x144/0x390 [ 1020.050795][T13196] kernel_execve+0x3e9/0x980 [ 1020.055366][T13196] call_usermodehelper_exec_async+0x20b/0x350 [ 1020.061412][T13196] ret_from_fork+0x48/0x80 [ 1020.065809][T13196] ret_from_fork_asm+0x11/0x20 [ 1020.070597][T13196] [ 1020.072903][T13196] Memory state around the buggy address: [ 1020.078508][T13196] ffff88802129ff00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1020.086563][T13196] ffff88802129ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1020.094600][T13196] >ffff8880212a0000: fb fc fc fc fc fb fc fc fc fc 00 fc fc fc fc 00 [ 1020.102634][T13196] ^ [ 1020.107983][T13196] ffff8880212a0080: fc fc fc fc fb fc fc fc fc 06 fc fc fc fc fb fc [ 1020.116021][T13196] ffff8880212a0100: fc fc fc fb fc fc fc fc 00 fc fc fc fc 00 fc fc [ 1020.124056][T13196] ================================================================== [ 1020.132103][T13196] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1020.139273][T13196] CPU: 0 PID: 13196 Comm: syz.3.2088 Not tainted syzkaller #0 [ 1020.146713][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1020.156767][T13196] Call Trace: [ 1020.160030][T13196] [ 1020.162943][T13196] dump_stack_lvl+0x18c/0x250 [ 1020.167609][T13196] ? show_regs_print_info+0x20/0x20 [ 1020.172788][T13196] ? load_image+0x420/0x420 [ 1020.177275][T13196] panic+0x2ca/0x720 [ 1020.181155][T13196] ? bpf_jit_dump+0xd0/0xd0 [ 1020.185641][T13196] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1020.191518][T13196] ? _raw_spin_unlock+0x40/0x40 [ 1020.196347][T13196] ? print_memory_metadata+0x314/0x400 [ 1020.201788][T13196] ? string+0x204/0x290 [ 1020.205939][T13196] check_panic_on_warn+0x84/0xa0 [ 1020.210861][T13196] ? string+0x204/0x290 [ 1020.215007][T13196] end_report+0x6f/0x130 [ 1020.219239][T13196] kasan_report+0x128/0x150 [ 1020.223722][T13196] ? string+0x204/0x290 [ 1020.227857][T13196] string+0x204/0x290 [ 1020.231820][T13196] vsnprintf+0xf72/0x1ba0 [ 1020.236150][T13196] vprintk_store+0x3d9/0xd50 [ 1020.240724][T13196] ? printk_parse_prefix+0x3d0/0x3d0 [ 1020.246011][T13196] ? verify_lock_unused+0x140/0x140 [ 1020.251208][T13196] vprintk_emit+0x117/0x610 [ 1020.255725][T13196] ? printk_sprint+0x460/0x460 [ 1020.260500][T13196] ? do_raw_spin_lock+0x11f/0x2b0 [ 1020.265516][T13196] _printk+0xde/0x130 [ 1020.269486][T13196] ? load_image+0x420/0x420 [ 1020.273994][T13196] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1020.279439][T13196] __setup_irq+0xf92/0x1f30 [ 1020.283942][T13196] request_threaded_irq+0x2c1/0x3a0 [ 1020.289147][T13196] ? pcl818_detach+0xa0/0xa0 [ 1020.293737][T13196] pcl818_attach+0x18c/0x15c0 [ 1020.298401][T13196] ? __raw_spin_lock_init+0x45/0x100 [ 1020.303687][T13196] comedi_device_attach+0x526/0x710 [ 1020.308868][T13196] comedi_unlocked_ioctl+0x6c4/0x1170 [ 1020.314226][T13196] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 1020.319847][T13196] ? comedi_poll+0x8e0/0x8e0 [ 1020.324425][T13196] ? __fget_files+0x28/0x460 [ 1020.329001][T13196] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1020.333918][T13196] ? security_file_ioctl+0x80/0xa0 [ 1020.339013][T13196] ? comedi_poll+0x8e0/0x8e0 [ 1020.343582][T13196] __se_sys_ioctl+0xfd/0x170 [ 1020.348160][T13196] do_syscall_64+0x55/0xb0 [ 1020.352563][T13196] ? clear_bhb_loop+0x40/0x90 [ 1020.357222][T13196] ? clear_bhb_loop+0x40/0x90 [ 1020.361904][T13196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.367779][T13196] RIP: 0033:0x7f8fe139e159 [ 1020.372183][T13196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.391791][T13196] RSP: 002b:00007f8fe218e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.400184][T13196] RAX: ffffffffffffffda RBX: 00007f8fe1625fa0 RCX: 00007f8fe139e159 [ 1020.408150][T13196] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1020.416104][T13196] RBP: 00007f8fe143506b R08: 0000000000000000 R09: 0000000000000000 [ 1020.424069][T13196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.432036][T13196] R13: 00007f8fe1626038 R14: 00007f8fe1625fa0 R15: 00007ffe0f3754e8 [ 1020.439995][T13196] [ 1020.443086][T13196] Kernel Offset: disabled [ 1020.447414][T13196] Rebooting in 86400 seconds..