last executing test programs: 4m48.367832896s ago: executing program 0 (id=898): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000480)="2399", 0x2}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) 4m48.106647112s ago: executing program 0 (id=901): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0xfffffffffffffffe, 0x4000) socket$kcm(0x29, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000880)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x8, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xd, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xf}, {0x1}, {0xfce0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r7], 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000d, 0x11, r6, 0x0) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'lo\x00', &(0x7f0000000540)=@ethtool_channels={0x3d, 0x9, 0x2, 0xf, 0x7, 0x7, 0x7, 0x4, 0xa}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) 4m45.793457917s ago: executing program 0 (id=904): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002740)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @loopback, [0xffffffff, 0xffffff00, 0x0, 0xff], [0x0, 0xffffff00, 0xffffff00, 0xffffff00], 'veth1_vlan\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x33, 0x1, 0x4, 0xc2cbd4347179a0d3}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @private0, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff, 0xffffff00, 0x0, 0xffffff00], 'pimreg\x00', 'ip6erspan0\x00', {}, {0xff}, 0x3a, 0xfd, 0x4, 0x40}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0x0, 0xffffffff], 'erspan0\x00', '\x00', {}, {}, 0x89, 0xae, 0x1}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1, [0xff, 0xffffffff, 0xffffff00], 0x4e23, 0x4e20, 0x10, 0x4e22, 0x1, 0x3ff, 0x5, 0x4, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) syz_mount_image$ext4(&(0x7f0000002b40)='ext4\x00', &(0x7f0000002b80)='./file1\x00', 0x0, &(0x7f0000002bc0)={[{@quota}, {@noload}, {@init_itable}], [{@appraise_type}, {@obj_type={'obj_type', 0x3d, '//)}#&'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x33, 0x61, 0x63, 0x32, 0x0, 0x63, 0x38], 0x2d, [0x65, 0x36, 0x37, 0x36], 0x2d, [0x65, 0x33, 0x33, 0x34], 0x2d, [0x64, 0x30, 0x64, 0x37], 0x2d, [0x39, 0x66, 0xd49f802e42015721, 0x35, 0x0, 0x39, 0x33, 0x31]}}}]}, 0x4, 0x4da, &(0x7f0000002c40)="$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") socket$igmp(0x2, 0x3, 0x2) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) prlimit64(0x0, 0xe, &(0x7f00000032c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000003340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000033c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000003440), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000034c0)=0x6) setpriority(0x0, r0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = fsopen(&(0x7f0000003500)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003540)='gid', &(0x7f0000003580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001040)='ext4\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000001180)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@errors_continue}]}, 0xfa, 0x493, &(0x7f0000001240)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000001700)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000001740)=""/4096, 0x1000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) 4m44.723215833s ago: executing program 0 (id=906): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000100)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xb}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f000002f000/0x2000)=nil) getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@initdev, @in=@empty}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) statx(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x800, &(0x7f0000000580)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r5, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0x8) 4m43.359812495s ago: executing program 0 (id=907): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x8, 0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0xa20, 0x8000c65) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r8, r8, 0x0, 0x8000000f3aa6ea) 4m41.04328821s ago: executing program 0 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) pipe2$9p(0x0, 0x80800) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000100)={0x0, 0x83e56, 0x10, 0x0, 0x3}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x103) write(r0, &(0x7f0000000040)='9', 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='syz0:127.0.', 0xb) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000440)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) 4m25.025365639s ago: executing program 32 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) pipe2$9p(0x0, 0x80800) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000100)={0x0, 0x83e56, 0x10, 0x0, 0x3}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x103) write(r0, &(0x7f0000000040)='9', 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='syz0:127.0.', 0xb) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000440)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) 5.000842022s ago: executing program 3 (id=1670): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000140)={[{@shortname_win95}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_winnt}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uni_xlate}, {@fat=@nfs_stale_rw}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@utf8}, {@shortname_win95}]}, 0x7, 0x2ac, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 4.802655017s ago: executing program 3 (id=1673): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, 0x0, 0xc42}, [@IFAL_LABEL={0x2a, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) 4.64886539s ago: executing program 3 (id=1677): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x21, 0x0, 0x2f, 0x0, @multicast2, @empty}}}}) 4.551965173s ago: executing program 3 (id=1679): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r7, 0x407, 0x100004) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f390768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xf8d}}, 0x96d) 2.13064953s ago: executing program 2 (id=1694): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="cfffffff526f23d428d56756b842401e9ce8a5"], 0x24}, 0x1, 0x0, 0x0, 0x24044010}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @value=0xde90}) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x1, 0x1000000, 0x1e0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x20, 0x1, 0x2000144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6b, 0x6449, 0x1000, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 2.001411063s ago: executing program 3 (id=1695): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="f7dd3d66e48db3be80b9d361583c670bd627a561145f7edae2c0086f", 0x1c}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000001c0)="b32035d620db165b227fc150d8cbb2", 0xf}, {&(0x7f00000011c0)="50d5281135", 0x5}], 0x2}}], 0x2, 0x488c4) 1.803981408s ago: executing program 3 (id=1698): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x60, 0x1403, 0x1, 0x2, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20000100) 1.71061979s ago: executing program 2 (id=1699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1]}}]}}]}, 0x8c}}, 0x0) 1.70240442s ago: executing program 4 (id=1700): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x4}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c80)="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", 0xff0}], 0x1}, 0x4000) 1.657492711s ago: executing program 1 (id=1701): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) 1.582855403s ago: executing program 1 (id=1702): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x2, 0x1, 0xad, 0xad}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0xb, 0x200, 0x38e41e63, 0x64}) 1.568389234s ago: executing program 2 (id=1703): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x480, 0x30, 0x0, 0x1, 0x4db, 0x18, 0x0, {0x1, 0x40, 0xfffffffd}, {0x0, 0x20000004}, {0x0, 0xfffffffe}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0xc, 0x3}) 1.565574674s ago: executing program 4 (id=1704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 1.449600176s ago: executing program 4 (id=1705): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x4c, 0x1a, 0x2f8, 0x73, 0x2f8, 0x258, 0x258, 0x2f8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x6c4, 0x7, 0x1, '\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x128, 0x190, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@inet=@hashlimit1={{0x58}, {'wg0\x00', {0x4, 0x1000, 0x10000, 0x86, 0x276, 0xd58a, 0x7, 0x0, 0x78}, {0x9}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x40, 0x5, 0x5, 'snmp\x00', 'syz1\x00', {0x1000000000754}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x428) 1.426995537s ago: executing program 1 (id=1706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000019c0)={0x18, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x7, 0x13b, 0x0, 0x0, @str=':}\x00'}]}, 0x18}], 0x1}, 0x0) 1.355982078s ago: executing program 2 (id=1707): syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x1000008, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000680)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0) 1.28156204s ago: executing program 4 (id=1708): r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sec/tomoyo/query\x00', 0xa00c0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000006c0)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec52989eabbaaafeeabfa127263666810e14acf4d9714218b3a06c65664e37fdcb38bd01776f9b94c794b799288ee4c49bad9722", 0x66, r1) keyctl$revoke(0x3, r7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.219390372s ago: executing program 2 (id=1709): r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000340)='\x00'/11, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sec/tomoyo/query\x00', 0xa00c0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000006c0)="a9be6420edee6e6b228f0751afc7b27eb73586213ba3213856a6f45b425d9a5a9c863f5e396e5ac0a321242b75a02b975929ec52989eabbaaafeeabfa127263666810e14acf4d9714218b3a06c65664e37fdcb38bd01776f9b94c794b799288ee4c49bad9722", 0x66, r1) keyctl$revoke(0x3, r7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.203122892s ago: executing program 1 (id=1710): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000480)="2399", 0x2}], 0x1) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) 1.098544155s ago: executing program 4 (id=1711): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="cfffffff526f23d428d56756b842401e9ce8a5"], 0x24}, 0x1, 0x0, 0x0, 0x24044010}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @value=0xde90}) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x1, 0x1000000, 0x1e0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x20, 0x1, 0x2000144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6b, 0x6449, 0x1000, 0xfffffffd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 1.053854126s ago: executing program 2 (id=1712): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x640, 0x40, 0xbbb9, 0x0, 0xf, 0x0, {0x2}, {0x7, 0xfffffffd, 0xfffffffe}, {0x6, 0xffff0004, 0xfffffffc}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd619, 0x1, 0x1002, 0x4000001, 0x6, 0x4c11b0c5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x6}) 210.383956ms ago: executing program 1 (id=1713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x2a, 0x0, &(0x7f0000000300)="06fa03076844babeb89e14f00806", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.01502ms ago: executing program 4 (id=1714): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c92012000e00050014010a002300400000"], 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c9"], 0xf) 0s ago: executing program 1 (id=1715): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): load_image+0x420/0x420 [ 377.835338][ T8429] ? __might_sleep+0xe0/0xe0 [ 377.839964][ T8429] ? __lock_acquire+0x7eb0/0x7eb0 [ 377.845022][ T8429] should_fail_ex+0x394/0x4c0 [ 377.849735][ T8429] should_failslab+0x9/0x20 [ 377.854271][ T8429] slab_pre_alloc_hook+0x59/0x300 [ 377.859323][ T8429] ? d_instantiate+0x6f/0x90 [ 377.863958][ T8429] kmem_cache_alloc+0x5a/0x2c0 [ 377.868753][ T8429] ? alloc_empty_file+0x9e/0x1d0 [ 377.873721][ T8429] alloc_empty_file+0x9e/0x1d0 [ 377.878515][ T8429] alloc_file+0x5b/0x600 [ 377.883139][ T8429] alloc_file_pseudo+0x184/0x210 [ 377.888112][ T8429] ? fput+0x1a0/0x1a0 [ 377.892120][ T8429] ? alloc_fd+0x590/0x640 [ 377.896484][ T8429] sock_alloc_file+0xb7/0x280 [ 377.901199][ T8429] __sys_socket+0x140/0x1b0 [ 377.905738][ T8429] __x64_sys_socket+0x7a/0x90 [ 377.910446][ T8429] do_syscall_64+0x55/0xb0 [ 377.914885][ T8429] ? clear_bhb_loop+0x40/0x90 [ 377.919585][ T8429] ? clear_bhb_loop+0x40/0x90 [ 377.924251][ T8429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.930142][ T8429] RIP: 0033:0x7fa80fd9e559 [ 377.934550][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.954162][ T8429] RSP: 002b:00007fa810d52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 377.962561][ T8429] RAX: ffffffffffffffda RBX: 00007fa810025fa0 RCX: 00007fa80fd9e559 [ 377.970517][ T8429] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 377.978474][ T8429] RBP: 00007fa80fe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 377.986433][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.994390][ T8429] R13: 00007fa810026038 R14: 00007fa810025fa0 R15: 00007fffedd789c8 [ 378.002360][ T8429] [ 378.717230][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.723604][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.562777][ T8480] FAULT_INJECTION: forcing a failure. [ 382.562777][ T8480] name failslab, interval 1, probability 5, space 0, times 9991 [ 382.575829][ T8480] CPU: 1 PID: 8480 Comm: syz.1.601 Not tainted syzkaller #0 [ 382.583141][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 382.593214][ T8480] Call Trace: [ 382.596514][ T8480] [ 382.599459][ T8480] dump_stack_lvl+0x18c/0x250 [ 382.604166][ T8480] ? show_regs_print_info+0x20/0x20 [ 382.609385][ T8480] ? load_image+0x420/0x420 [ 382.613917][ T8480] ? __might_sleep+0xe0/0xe0 [ 382.618540][ T8480] ? __lock_acquire+0x7eb0/0x7eb0 [ 382.623591][ T8480] should_fail_ex+0x394/0x4c0 [ 382.628299][ T8480] should_failslab+0x9/0x20 [ 382.632831][ T8480] slab_pre_alloc_hook+0x59/0x300 [ 382.637873][ T8480] ? d_instantiate+0x6f/0x90 [ 382.642486][ T8480] kmem_cache_alloc+0x5a/0x2c0 [ 382.647278][ T8480] ? alloc_empty_file+0x9e/0x1d0 [ 382.652234][ T8480] alloc_empty_file+0x9e/0x1d0 [ 382.657014][ T8480] alloc_file+0x5b/0x600 [ 382.661280][ T8480] alloc_file_pseudo+0x184/0x210 [ 382.666239][ T8480] ? fput+0x1a0/0x1a0 [ 382.670247][ T8480] ? alloc_fd+0x590/0x640 [ 382.674602][ T8480] sock_alloc_file+0xb7/0x280 [ 382.679305][ T8480] __sys_socket+0x140/0x1b0 [ 382.683831][ T8480] __x64_sys_socket+0x7a/0x90 [ 382.688531][ T8480] do_syscall_64+0x55/0xb0 [ 382.692962][ T8480] ? clear_bhb_loop+0x40/0x90 [ 382.697658][ T8480] ? clear_bhb_loop+0x40/0x90 [ 382.702353][ T8480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.708271][ T8480] RIP: 0033:0x7fa80fd9e559 [ 382.712705][ T8480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.732326][ T8480] RSP: 002b:00007fa810d52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 382.740746][ T8480] RAX: ffffffffffffffda RBX: 00007fa810025fa0 RCX: 00007fa80fd9e559 [ 382.748715][ T8480] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 382.756680][ T8480] RBP: 00007fa80fe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 382.764644][ T8480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.772610][ T8480] R13: 00007fa810026038 R14: 00007fa810025fa0 R15: 00007fffedd789c8 [ 382.780592][ T8480] [ 388.131606][ T8510] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 388.131606][ T8510] [ 388.145666][ T8510] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 388.159120][ T8510] CIFS: Attempting to mount //172.20.20.170/share [ 388.187762][ T8510] CIFS: VFS: Error connecting to socket. Aborting operation. [ 388.197129][ T8510] CIFS: VFS: cifs_mount failed w/return code = -4 [ 390.398320][ T8537] FAULT_INJECTION: forcing a failure. [ 390.398320][ T8537] name failslab, interval 1, probability 5, space 0, times 9990 [ 390.518878][ T8537] CPU: 1 PID: 8537 Comm: syz.3.614 Not tainted syzkaller #0 [ 390.526222][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 390.536292][ T8537] Call Trace: [ 390.539587][ T8537] [ 390.542533][ T8537] dump_stack_lvl+0x18c/0x250 [ 390.547234][ T8537] ? show_regs_print_info+0x20/0x20 [ 390.552444][ T8537] ? load_image+0x420/0x420 [ 390.556970][ T8537] ? __might_sleep+0xe0/0xe0 [ 390.561579][ T8537] ? __lock_acquire+0x7eb0/0x7eb0 [ 390.566625][ T8537] should_fail_ex+0x394/0x4c0 [ 390.571329][ T8537] should_failslab+0x9/0x20 [ 390.575858][ T8537] slab_pre_alloc_hook+0x59/0x300 [ 390.580901][ T8537] ? d_instantiate+0x6f/0x90 [ 390.585513][ T8537] kmem_cache_alloc+0x5a/0x2c0 [ 390.590298][ T8537] ? alloc_empty_file+0x9e/0x1d0 [ 390.595256][ T8537] alloc_empty_file+0x9e/0x1d0 [ 390.600032][ T8537] alloc_file+0x5b/0x600 [ 390.604296][ T8537] alloc_file_pseudo+0x184/0x210 [ 390.609249][ T8537] ? fput+0x1a0/0x1a0 [ 390.613250][ T8537] ? alloc_fd+0x590/0x640 [ 390.617603][ T8537] sock_alloc_file+0xb7/0x280 [ 390.622302][ T8537] __sys_socket+0x140/0x1b0 [ 390.626826][ T8537] __x64_sys_socket+0x7a/0x90 [ 390.631519][ T8537] do_syscall_64+0x55/0xb0 [ 390.635946][ T8537] ? clear_bhb_loop+0x40/0x90 [ 390.640634][ T8537] ? clear_bhb_loop+0x40/0x90 [ 390.645323][ T8537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.651238][ T8537] RIP: 0033:0x7f8cbdf9e559 [ 390.655663][ T8537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.675288][ T8537] RSP: 002b:00007f8cbedc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 390.683720][ T8537] RAX: ffffffffffffffda RBX: 00007f8cbe225fa0 RCX: 00007f8cbdf9e559 [ 390.691716][ T8537] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 390.699704][ T8537] RBP: 00007f8cbe0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 390.707687][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.715668][ T8537] R13: 00007f8cbe226038 R14: 00007f8cbe225fa0 R15: 00007ffe0a849ee8 [ 390.723666][ T8537] [ 393.729329][ T8560] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 395.288964][ T8589] FAULT_INJECTION: forcing a failure. [ 395.288964][ T8589] name failslab, interval 1, probability 5, space 0, times 9989 [ 395.311998][ T8589] CPU: 0 PID: 8589 Comm: syz.1.625 Not tainted syzkaller #0 [ 395.319327][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 395.329409][ T8589] Call Trace: [ 395.332721][ T8589] [ 395.335643][ T8589] dump_stack_lvl+0x18c/0x250 [ 395.340314][ T8589] ? show_regs_print_info+0x20/0x20 [ 395.345502][ T8589] ? load_image+0x420/0x420 [ 395.349996][ T8589] ? __might_sleep+0xe0/0xe0 [ 395.354579][ T8589] ? __lock_acquire+0x7eb0/0x7eb0 [ 395.359596][ T8589] should_fail_ex+0x394/0x4c0 [ 395.364270][ T8589] should_failslab+0x9/0x20 [ 395.368766][ T8589] slab_pre_alloc_hook+0x59/0x300 [ 395.373776][ T8589] ? d_instantiate+0x6f/0x90 [ 395.378356][ T8589] kmem_cache_alloc+0x5a/0x2c0 [ 395.383125][ T8589] ? alloc_empty_file+0x9e/0x1d0 [ 395.388092][ T8589] alloc_empty_file+0x9e/0x1d0 [ 395.392881][ T8589] alloc_file+0x5b/0x600 [ 395.397137][ T8589] alloc_file_pseudo+0x184/0x210 [ 395.402069][ T8589] ? fput+0x1a0/0x1a0 [ 395.406047][ T8589] ? alloc_fd+0x590/0x640 [ 395.410368][ T8589] sock_alloc_file+0xb7/0x280 [ 395.415059][ T8589] __sys_socket+0x140/0x1b0 [ 395.419558][ T8589] __x64_sys_socket+0x7a/0x90 [ 395.424225][ T8589] do_syscall_64+0x55/0xb0 [ 395.428626][ T8589] ? clear_bhb_loop+0x40/0x90 [ 395.433291][ T8589] ? clear_bhb_loop+0x40/0x90 [ 395.437956][ T8589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.443851][ T8589] RIP: 0033:0x7fa80fd9e559 [ 395.448255][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.467852][ T8589] RSP: 002b:00007fa810d52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 395.476254][ T8589] RAX: ffffffffffffffda RBX: 00007fa810025fa0 RCX: 00007fa80fd9e559 [ 395.484220][ T8589] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 395.492190][ T8589] RBP: 00007fa80fe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 395.500162][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.508124][ T8589] R13: 00007fa810026038 R14: 00007fa810025fa0 R15: 00007fffedd789c8 [ 395.516094][ T8589] [ 397.227277][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.243748][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.508331][ T8653] FAULT_INJECTION: forcing a failure. [ 399.508331][ T8653] name failslab, interval 1, probability 5, space 0, times 9988 [ 399.526298][ T8653] CPU: 1 PID: 8653 Comm: syz.1.635 Not tainted syzkaller #0 [ 399.533622][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 399.543667][ T8653] Call Trace: [ 399.546943][ T8653] [ 399.549860][ T8653] dump_stack_lvl+0x18c/0x250 [ 399.554532][ T8653] ? show_regs_print_info+0x20/0x20 [ 399.559716][ T8653] ? load_image+0x420/0x420 [ 399.564214][ T8653] ? __lock_acquire+0x7eb0/0x7eb0 [ 399.569231][ T8653] should_fail_ex+0x394/0x4c0 [ 399.573901][ T8653] should_failslab+0x9/0x20 [ 399.578396][ T8653] slab_pre_alloc_hook+0x59/0x300 [ 399.583406][ T8653] ? __lock_acquire+0x7eb0/0x7eb0 [ 399.588422][ T8653] ? security_sk_alloc+0x4b/0x130 [ 399.593465][ T8653] ? security_sk_alloc+0x4b/0x130 [ 399.598479][ T8653] __kmem_cache_alloc_node+0x53/0x250 [ 399.603844][ T8653] ? security_sk_alloc+0x4b/0x130 [ 399.608857][ T8653] __kmalloc+0xa7/0x240 [ 399.613004][ T8653] security_sk_alloc+0x4b/0x130 [ 399.617842][ T8653] sk_prot_alloc+0x101/0x210 [ 399.622419][ T8653] sk_alloc+0x3a/0x350 [ 399.626474][ T8653] ? phonet_proto_get+0x252/0x2a0 [ 399.631530][ T8653] pn_socket_create+0xf5/0x510 [ 399.636288][ T8653] __sock_create+0x49e/0x940 [ 399.640937][ T8653] __sys_socket+0xd7/0x1b0 [ 399.645344][ T8653] __x64_sys_socket+0x7a/0x90 [ 399.650026][ T8653] do_syscall_64+0x55/0xb0 [ 399.654431][ T8653] ? clear_bhb_loop+0x40/0x90 [ 399.659107][ T8653] ? clear_bhb_loop+0x40/0x90 [ 399.663771][ T8653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.669653][ T8653] RIP: 0033:0x7fa80fd9e559 [ 399.674053][ T8653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.693648][ T8653] RSP: 002b:00007fa810d52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 399.702048][ T8653] RAX: ffffffffffffffda RBX: 00007fa810025fa0 RCX: 00007fa80fd9e559 [ 399.710010][ T8653] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 399.717964][ T8653] RBP: 00007fa80fe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 399.725928][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.733888][ T8653] R13: 00007fa810026038 R14: 00007fa810025fa0 R15: 00007fffedd789c8 [ 399.741858][ T8653] [ 401.462071][ T8658] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 401.462071][ T8658] [ 401.475863][ T8658] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 401.488765][ T8658] CIFS: Attempting to mount //172.20.20.170/share [ 401.762249][ T8658] CIFS: VFS: error -4 create cifsd thread [ 401.825772][ T8658] CIFS: VFS: cifs_mount failed w/return code = -4 [ 406.582031][ T8708] netlink: 'syz.1.648': attribute type 10 has an invalid length. [ 406.605822][ T8708] netlink: 48 bytes leftover after parsing attributes in process `syz.1.648'. [ 408.523622][ T8732] IPVS: Error connecting to the multicast addr [ 408.711994][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 411.803798][ T8749] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 411.803798][ T8749] [ 411.817760][ T8749] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 411.830576][ T8749] CIFS: Attempting to mount //172.20.20.170/share [ 412.055677][ T8749] CIFS: VFS: error -4 create cifsd thread [ 412.062297][ T8749] CIFS: VFS: cifs_mount failed w/return code = -4 [ 413.454908][ T8764] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 413.702863][ T8764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.661'. [ 418.971040][ T8832] FAULT_INJECTION: forcing a failure. [ 418.971040][ T8832] name failslab, interval 1, probability 5, space 0, times 9987 [ 418.984520][ T8832] CPU: 0 PID: 8832 Comm: syz.1.671 Not tainted syzkaller #0 [ 418.991844][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 419.001916][ T8832] Call Trace: [ 419.005210][ T8832] [ 419.008152][ T8832] dump_stack_lvl+0x18c/0x250 [ 419.012840][ T8832] ? show_regs_print_info+0x20/0x20 [ 419.018027][ T8832] ? load_image+0x420/0x420 [ 419.022522][ T8832] ? __lock_acquire+0x7eb0/0x7eb0 [ 419.027536][ T8832] should_fail_ex+0x394/0x4c0 [ 419.032203][ T8832] should_failslab+0x9/0x20 [ 419.036697][ T8832] slab_pre_alloc_hook+0x59/0x300 [ 419.041719][ T8832] ? __lock_acquire+0x7eb0/0x7eb0 [ 419.046758][ T8832] ? security_sk_alloc+0x4b/0x130 [ 419.051770][ T8832] ? security_sk_alloc+0x4b/0x130 [ 419.056778][ T8832] __kmem_cache_alloc_node+0x53/0x250 [ 419.062140][ T8832] ? security_sk_alloc+0x4b/0x130 [ 419.067163][ T8832] __kmalloc+0xa7/0x240 [ 419.071354][ T8832] security_sk_alloc+0x4b/0x130 [ 419.076234][ T8832] sk_prot_alloc+0x101/0x210 [ 419.080840][ T8832] sk_alloc+0x3a/0x350 [ 419.084904][ T8832] ? phonet_proto_get+0x252/0x2a0 [ 419.089922][ T8832] pn_socket_create+0xf5/0x510 [ 419.094677][ T8832] __sock_create+0x49e/0x940 [ 419.099265][ T8832] __sys_socket+0xd7/0x1b0 [ 419.103674][ T8832] __x64_sys_socket+0x7a/0x90 [ 419.108342][ T8832] do_syscall_64+0x55/0xb0 [ 419.112754][ T8832] ? clear_bhb_loop+0x40/0x90 [ 419.117432][ T8832] ? clear_bhb_loop+0x40/0x90 [ 419.122096][ T8832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.127983][ T8832] RIP: 0033:0x7fa80fd9e559 [ 419.132386][ T8832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.151993][ T8832] RSP: 002b:00007fa810d52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 419.160396][ T8832] RAX: ffffffffffffffda RBX: 00007fa810025fa0 RCX: 00007fa80fd9e559 [ 419.168356][ T8832] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 419.176312][ T8832] RBP: 00007fa80fe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 419.184282][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.192255][ T8832] R13: 00007fa810026038 R14: 00007fa810025fa0 R15: 00007fffedd789c8 [ 419.200224][ T8832] [ 419.763275][ T8847] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 419.763275][ T8847] [ 419.777378][ T8847] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 419.790462][ T8847] CIFS: Attempting to mount //172.20.20.170/share [ 420.110762][ T8847] CIFS: VFS: cifs_mount failed w/return code = -112 [ 423.296069][ T8880] netlink: 'syz.1.679': attribute type 10 has an invalid length. [ 423.532408][ T8880] netlink: 48 bytes leftover after parsing attributes in process `syz.1.679'. [ 428.025793][ T8931] netlink: 'syz.1.692': attribute type 10 has an invalid length. [ 428.154644][ T8930] netlink: 48 bytes leftover after parsing attributes in process `syz.1.692'. [ 429.090011][ T8940] netlink: 'syz.0.694': attribute type 10 has an invalid length. [ 429.107547][ T8940] netlink: 48 bytes leftover after parsing attributes in process `syz.0.694'. [ 432.659333][ T8949] bridge0: port 3(syz_tun) entered disabled state [ 432.681411][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.690979][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.986967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 439.546655][ T9005] ip_tables: iptables: counters copy to user failed while replacing table [ 440.125715][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.132140][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.290556][ T9074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.724'. [ 446.708464][ T5782] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 447.226124][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.245779][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.290470][ T9111] ipt_REJECT: TCP_RESET invalid for non-tcp [ 452.008767][ T9132] tipc: Resetting bearer [ 452.018419][ T9132] tipc: Resetting bearer [ 452.034643][ T9132] dummy0: left promiscuous mode [ 452.187364][ T9132] syzkaller0: left promiscuous mode [ 452.196784][ T9132] bond1: left promiscuous mode [ 457.054466][ T9172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.698755][ T9198] overlayfs: missing 'lowerdir' [ 461.877264][ T9212] netlink: 'syz.0.759': attribute type 10 has an invalid length. [ 461.925518][ T9212] netlink: 48 bytes leftover after parsing attributes in process `syz.0.759'. [ 467.215478][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 467.286857][ T9250] netlink: 44 bytes leftover after parsing attributes in process `syz.2.770'. [ 469.732707][ T9283] tipc: Resetting bearer [ 474.517366][ T9] IPVS: starting estimator thread 0... [ 474.707015][ T9319] IPVS: using max 19 ests per chain, 45600 per kthread [ 475.353650][ T9335] vivid-002: disconnect [ 475.897850][ T9329] vivid-002: reconnect [ 476.131465][ T9334] vxcan1: tx drop: invalid sa for name 0xfffffffffffffff7 [ 486.938863][ T9442] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 487.046501][ T9447] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 487.907127][ T9461] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 487.918170][ T9461] IPVS: sh: FWM 3 0x00000003 - no destination available [ 487.944227][ T9461] autofs4:pid:9461:autofs_fill_super: called with bogus options [ 489.226184][ T9468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.830'. [ 490.069634][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 490.083285][ T9477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.829'. [ 490.265175][ T9487] netlink: 'syz.3.833': attribute type 10 has an invalid length. [ 490.693622][ T9494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 490.710477][ T9494] fuse: Bad value for 'fd' [ 496.228245][ T9540] tc_dump_action: action bad kind [ 496.604072][ T9543] netlink: 10 bytes leftover after parsing attributes in process `syz.1.844'. [ 496.785550][ T9555] netlink: 25 bytes leftover after parsing attributes in process `syz.0.850'. [ 496.798161][ T9555] eql: entered promiscuous mode [ 497.381554][ T9570] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 497.395246][ T9570] team0: Port device netdevsim0 added [ 497.437670][ T5943] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 497.455456][ T9570] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 497.473180][ T9570] team0: Port device netdevsim0 removed [ 497.483606][ T9570] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 497.732650][ T5873] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 497.767028][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 497.778292][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 497.795678][ T5943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 498.463917][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 498.474332][ T5943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 498.484510][ T5943] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.500312][ T60] rpcbind: server 127.0.0.1 not responding, timed out [ 498.507917][ T5943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.607314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #14a!!! [ 498.639266][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.662291][ T5943] usbtmc: probe of 2-1:16.0 failed with error -22 [ 498.669068][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 498.676096][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 498.812509][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.859'. [ 499.831865][ T5873] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 499.850955][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.863080][ T5873] usb 3-1: Product: syz [ 499.867321][ T5873] usb 3-1: Manufacturer: syz [ 499.871935][ T5873] usb 3-1: SerialNumber: syz [ 499.898013][ T5873] usb 3-1: config 0 descriptor?? [ 499.906073][ T5873] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 499.929534][ T5873] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 499.944587][ T5873] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 499.975118][ T5873] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 500.004457][ T5873] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 500.020146][ T5873] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 500.031284][ T5873] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 500.044122][ T5873] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 500.077769][ T5873] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 500.120327][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.134675][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.152895][ T27] usb 3-1: USB disconnect, device number 10 [ 500.171207][ T27] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 500.183015][ T27] keyspan 3-1:0.0: device disconnected [ 501.712688][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 502.429067][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.435420][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.853379][ T27] usb 2-1: USB disconnect, device number 11 [ 506.573475][ T9658] ebt_among: dst integrity fail: 100 [ 508.832483][ T9687] Cannot find del_set index 4 as target [ 509.691825][ T9694] overlayfs: conflicting options: nfs_export=on,index=off [ 510.099886][ T9701] FAULT_INJECTION: forcing a failure. [ 510.099886][ T9701] name failslab, interval 1, probability 5, space 0, times 9986 [ 510.118248][ T9701] CPU: 0 PID: 9701 Comm: syz.2.888 Not tainted syzkaller #0 [ 510.125583][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 510.135659][ T9701] Call Trace: [ 510.138960][ T9701] [ 510.141905][ T9701] dump_stack_lvl+0x18c/0x250 [ 510.146605][ T9701] ? show_regs_print_info+0x20/0x20 [ 510.151828][ T9701] ? load_image+0x420/0x420 [ 510.156356][ T9701] ? __might_sleep+0xe0/0xe0 [ 510.160967][ T9701] ? __lock_acquire+0x7eb0/0x7eb0 [ 510.166012][ T9701] should_fail_ex+0x394/0x4c0 [ 510.170722][ T9701] should_failslab+0x9/0x20 [ 510.175249][ T9701] slab_pre_alloc_hook+0x59/0x300 [ 510.180296][ T9701] kmem_cache_alloc_lru+0x4d/0x2b0 [ 510.185443][ T9701] ? __d_alloc+0x31/0x710 [ 510.189800][ T9701] __d_alloc+0x31/0x710 [ 510.193970][ T9701] ? alloc_fd+0x590/0x640 [ 510.198322][ T9701] d_alloc_pseudo+0x1d/0x70 [ 510.202841][ T9701] alloc_file_pseudo+0xe4/0x210 [ 510.207718][ T9701] ? fput+0x1a0/0x1a0 [ 510.211735][ T9701] ? alloc_fd+0x590/0x640 [ 510.216090][ T9701] sock_alloc_file+0xb7/0x280 [ 510.220794][ T9701] __sys_socket+0x140/0x1b0 [ 510.225321][ T9701] __x64_sys_socket+0x7a/0x90 [ 510.230025][ T9701] do_syscall_64+0x55/0xb0 [ 510.234455][ T9701] ? clear_bhb_loop+0x40/0x90 [ 510.239165][ T9701] ? clear_bhb_loop+0x40/0x90 [ 510.243872][ T9701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.249800][ T9701] RIP: 0033:0x7fc57af9e559 [ 510.254238][ T9701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.273868][ T9701] RSP: 002b:00007fc5791f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 510.282309][ T9701] RAX: ffffffffffffffda RBX: 00007fc57b225fa0 RCX: 00007fc57af9e559 [ 510.290300][ T9701] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000023 [ 510.298291][ T9701] RBP: 00007fc57b0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 510.306278][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.314263][ T9701] R13: 00007fc57b226038 R14: 00007fc57b225fa0 R15: 00007ffc8f0605c8 [ 510.322274][ T9701] [ 510.325315][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.137649][ T9720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.892'. [ 517.959252][ T9320] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 519.588521][ T9320] usb 2-1: Using ep0 maxpacket: 16 [ 519.656531][ T9320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.756163][ T9320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.851690][ T9320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.001000][ T9320] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 520.137779][ T9320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.287912][ T9320] usb 2-1: config 0 descriptor?? [ 520.527382][ T9320] usb 2-1: can't set config #0, error -71 [ 520.548524][ T9320] usb 2-1: USB disconnect, device number 12 [ 521.274032][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.910'. [ 521.646940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 525.653920][ T9840] comedi comedi3: board detection failed [ 525.725683][ T9841] bridge0: port 1(netdevsim0) entered blocking state [ 525.733904][ T9841] bridge0: port 1(netdevsim0) entered disabled state [ 525.742220][ T9841] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 525.758819][ T9841] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 525.850093][ T9842] netlink: 'syz.2.922': attribute type 10 has an invalid length. [ 527.890779][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.924'. [ 532.098033][ T51] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 532.694745][ T9887] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 532.702978][ T9887] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 532.712058][ T9887] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 532.720090][ T9887] bridge0: port 1(netdevsim0) entered disabled state [ 532.755436][ T9887] netlink: 48 bytes leftover after parsing attributes in process `syz.2.933'. [ 532.773020][ T9889] can: request_module (can-proto-3) failed. [ 533.145323][ T9899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.934'. [ 535.095010][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 535.095024][ T28] audit: type=1326 audit(1792166090.898:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 535.205156][ T28] audit: type=1326 audit(1792166090.898:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 535.229822][ T28] audit: type=1326 audit(1792166090.958:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 535.467000][ T5846] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 535.599552][ T28] audit: type=1326 audit(1792166090.958:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 535.856460][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.897371][ T28] audit: type=1326 audit(1792166090.958:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 535.921723][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 535.944132][ T28] audit: type=1326 audit(1792166090.958:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 535.972458][ T28] audit: type=1326 audit(1792166090.958:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 535.980820][ T5846] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 535.997849][ T28] audit: type=1326 audit(1792166090.968:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc57af5ed8e code=0x7ffc0000 [ 536.017061][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.041359][ T28] audit: type=1326 audit(1792166090.968:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc57af9e1eb code=0x7ffc0000 [ 536.073944][ T28] audit: type=1326 audit(1792166090.968:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9918 comm="syz.2.941" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc57af9e1eb code=0x7ffc0000 [ 536.207016][ T5846] usb 3-1: Product: syz [ 536.211254][ T5846] usb 3-1: Manufacturer: syz [ 536.215921][ T5846] usb 3-1: SerialNumber: syz [ 536.251131][ T5846] sisusb 3-1:1.0: Invalid USB2VGA device [ 536.256836][ T5846] sisusb: probe of 3-1:1.0 failed with error -22 [ 539.327592][ T9320] usb 3-1: USB disconnect, device number 11 [ 539.546683][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 539.564346][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 539.575343][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 539.586011][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 539.597237][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 539.605181][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 539.658752][ T9945] rxe_eth0 speed is unknown, defaulting to 1000 [ 540.982627][ T9945] chnl_net:caif_netlink_parms(): no params data found [ 541.250330][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.263689][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.272687][ T9945] bridge_slave_0: entered allmulticast mode [ 541.285131][ T9945] bridge_slave_0: entered promiscuous mode [ 541.295535][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.311705][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.323215][ T9945] bridge_slave_1: entered allmulticast mode [ 541.333382][ T9945] bridge_slave_1: entered promiscuous mode [ 541.393315][ T9945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.560820][ T9945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.709186][ T5782] Bluetooth: hci4: command tx timeout [ 542.299383][ T9945] team0: Port device team_slave_0 added [ 542.370030][ T9945] team0: Port device team_slave_1 added [ 542.616790][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.645055][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.740296][ T9945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.763212][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.773697][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.837174][ T9945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.951087][ T9945] hsr_slave_0: entered promiscuous mode [ 543.143142][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.955'. [ 544.125450][ T5782] Bluetooth: hci4: command tx timeout [ 544.217881][ T9945] hsr_slave_1: entered promiscuous mode [ 544.232331][ T9945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.241186][ T9945] Cannot create hsr debugfs directory [ 546.517103][ T5782] Bluetooth: hci4: command tx timeout [ 546.566212][ T9945] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 546.599301][ T9945] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 546.687926][ T9945] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.718219][ T9945] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 547.842740][ T2999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.874119][ T2999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.036255][ T2999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.076916][ T2999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.229293][ T2999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.256918][ T2999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.351672][ T2999] bond0: (slave netdevsim0): Releasing backup interface [ 548.379686][ T2999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.436915][ T2999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.500526][ T9945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.535917][ T9945] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.563422][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.570598][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.582502][ T5782] Bluetooth: hci4: command tx timeout [ 548.602473][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.609652][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.742525][ T9945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 549.798254][T10034] bridge0: port 4(netdevsim0) entered blocking state [ 549.805013][T10034] bridge0: port 4(netdevsim0) entered disabled state [ 549.812585][T10034] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 549.820782][T10034] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 549.841537][T10034] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 549.872973][T10034] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 550.301178][T10044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.967'. [ 552.032677][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.577737][ T8] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 552.863427][ T8] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 552.910293][ T8] usb 2-1: config 0 has no interface number 0 [ 552.945996][ T8] usb 2-1: config 0 interface 41 has no altsetting 0 [ 552.968220][ T8] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 553.006966][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.212856][ T8] usb 2-1: Product: syz [ 553.217993][ T8] usb 2-1: Manufacturer: syz [ 553.222621][ T8] usb 2-1: SerialNumber: syz [ 553.238070][ T8] usb 2-1: config 0 descriptor?? [ 553.959762][ T9945] veth0_vlan: entered promiscuous mode [ 554.076296][ T8] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 554.100266][ T9945] veth1_vlan: entered promiscuous mode [ 554.113159][ T8] CoreChips: probe of 2-1:0.41 failed with error -71 [ 554.153476][ T8] usb 2-1: USB disconnect, device number 13 [ 554.358234][ T9945] veth0_macvtap: entered promiscuous mode [ 554.389345][ T9945] veth1_macvtap: entered promiscuous mode [ 554.465955][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.518046][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.547099][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.575710][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.598384][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.636934][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.646783][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.696967][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.730984][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.760002][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.796994][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.807185][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.846921][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.856763][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.896607][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.917000][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.936893][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.958197][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.991245][ T2999] hsr_slave_0: left promiscuous mode [ 555.009024][ T2999] hsr_slave_1: left promiscuous mode [ 555.016592][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.033040][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.043560][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.063672][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.081992][ T2999] bridge_slave_1: left allmulticast mode [ 555.088365][ T2999] bridge_slave_1: left promiscuous mode [ 555.096216][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.112245][ T2999] bridge_slave_0: left allmulticast mode [ 555.120441][ T2999] bridge_slave_0: left promiscuous mode [ 555.126255][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.169828][ T2999] veth1_macvtap: left promiscuous mode [ 555.176015][ T2999] veth0_macvtap: left promiscuous mode [ 555.182231][ T2999] veth1_vlan: left promiscuous mode [ 555.189305][ T2999] veth0_vlan: left promiscuous mode [ 555.827188][ T5873] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 555.991229][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 556.033519][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 556.050183][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 556.051785][ T5873] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 556.072463][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.081013][ T5873] usb 2-1: Product: syz [ 556.085285][ T5873] usb 2-1: Manufacturer: syz [ 556.090044][ T5873] usb 2-1: SerialNumber: syz [ 556.128153][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.189106][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.314599][ T5873] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 556.364324][ T5873] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 556.380459][ T5873] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 556.390854][ T5873] usb 2-1: media controller created [ 556.419940][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.693171][ T5873] zl10353_read_register: readreg error (reg=127, ret==-110) [ 556.773733][ T2999] bond0 (unregistering): Released all slaves [ 556.775325][ T5873] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 556.798527][ T5873] usb 2-1: USB disconnect, device number 14 [ 556.935824][ T9945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.954373][ T9945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.965917][ T9945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.979721][ T9945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.994736][T10108] netlink: 'syz.2.976': attribute type 9 has an invalid length. [ 557.009113][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 557.292199][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.329746][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.422928][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.439727][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.574029][ T2999] IPVS: stop unused estimator thread 0... [ 558.191425][T10137] overlayfs: missing 'workdir' [ 560.177580][T10149] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 562.970796][T10185] netlink: 'syz.3.991': attribute type 4 has an invalid length. [ 563.024393][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.037910][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.802604][T10206] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 564.426867][ C1] hrtimer: interrupt took 47476 ns [ 564.899613][T10206] team0 (unregistering): Port device team_slave_0 removed [ 565.038603][T10206] team0 (unregistering): Port device team_slave_1 removed [ 565.680317][ T5782] Bluetooth: Frame is too long (len 16, expected len 4) [ 566.197299][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.996'. [ 566.209859][T10218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.996'. [ 566.320184][T10228] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 566.355761][T10228] netlink: 56 bytes leftover after parsing attributes in process `syz.2.998'. [ 566.469894][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 566.469910][ T28] audit: type=1400 audit(1792166121.274:1532): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=10227 comm="syz.2.998" [ 567.582382][T10237] netlink: 'syz.1.1000': attribute type 16 has an invalid length. [ 567.590355][T10237] netlink: 'syz.1.1000': attribute type 17 has an invalid length. [ 567.849824][ T5782] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 568.093535][T10255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.784847][T10268] netlink: 'syz.1.1006': attribute type 10 has an invalid length. [ 568.803960][T10268] team0: Port device netdevsim0 added [ 569.273662][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1009'. [ 569.282991][T10280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1009'. [ 569.351062][T10268] netlink: 'syz.1.1006': attribute type 10 has an invalid length. [ 569.624105][T10268] team0: Port device netdevsim0 removed [ 570.344850][T10291] sctp: [Deprecated]: syz.4.1011 (pid 10291) Use of int in max_burst socket option. [ 570.344850][T10291] Use struct sctp_assoc_value instead [ 570.868349][T10268] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 571.143786][ T28] audit: type=1326 audit(1792166125.944:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 571.292709][ T28] audit: type=1326 audit(1792166125.944:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 571.404679][T10307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1014'. [ 571.431522][ T28] audit: type=1326 audit(1792166125.944:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 571.486972][ T28] audit: type=1326 audit(1792166125.944:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 571.815249][ T28] audit: type=1326 audit(1792166125.944:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.091992][T10297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.107020][ T28] audit: type=1326 audit(1792166125.944:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.196957][ T28] audit: type=1326 audit(1792166125.994:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.225157][ T28] audit: type=1326 audit(1792166126.004:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.235529][T10303] netlink: 'syz.2.1014': attribute type 10 has an invalid length. [ 572.255839][ T28] audit: type=1326 audit(1792166126.014:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.282599][ T28] audit: type=1326 audit(1792166126.014:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.400683][ T28] audit: type=1326 audit(1792166126.014:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.427095][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 572.452328][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 572.459318][ T28] audit: type=1326 audit(1792166126.014:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.494908][ T28] audit: type=1326 audit(1792166126.014:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.3.1012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 572.527465][T10304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.704167][T10304] bond1: (slave bond0): making interface the new active one [ 572.839434][T10304] bond1: (slave bond0): Enslaving as an active interface with an up link [ 573.377809][ T9320] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 573.573131][ T9320] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 573.587178][ T9320] usb 5-1: config 0 has no interface number 0 [ 573.597416][ T9320] usb 5-1: config 0 interface 41 has no altsetting 0 [ 573.617072][ T9320] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 573.636588][ T9320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.654866][ T9320] usb 5-1: Product: syz [ 573.678206][ T9320] usb 5-1: Manufacturer: syz [ 573.682837][ T9320] usb 5-1: SerialNumber: syz [ 573.770679][ T9320] usb 5-1: config 0 descriptor?? [ 573.895597][T10341] overlayfs: missing 'lowerdir' [ 574.702302][ T9320] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 574.915104][ T9320] CoreChips: probe of 5-1:0.41 failed with error -71 [ 575.221277][ T9320] usb 5-1: USB disconnect, device number 2 [ 578.631561][T10402] comedi comedi3: board detection failed [ 578.709062][T10403] bridge0: port 3(netdevsim0) entered blocking state [ 578.716159][T10403] bridge0: port 3(netdevsim0) entered disabled state [ 578.723653][T10403] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 578.736617][T10403] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 578.745739][T10403] bridge0: port 3(netdevsim0) entered blocking state [ 578.752557][T10403] bridge0: port 3(netdevsim0) entered forwarding state [ 578.797108][T10403] netlink: 'syz.4.1024': attribute type 10 has an invalid length. [ 579.096899][T10403] bridge0: port 3(netdevsim0) entered disabled state [ 579.103831][T10403] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.111797][T10403] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.132782][T10403] bridge0: port 3(netdevsim0) entered blocking state [ 579.139664][T10403] bridge0: port 3(netdevsim0) entered forwarding state [ 579.146809][T10403] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.154036][T10403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.161563][T10403] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.168774][T10403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.186518][T10403] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 580.924077][T10421] FAULT_INJECTION: forcing a failure. [ 580.924077][T10421] name failslab, interval 1, probability 5, space 0, times 9985 [ 580.924156][T10421] CPU: 1 PID: 10421 Comm: syz.4.1028 Not tainted syzkaller #0 [ 580.924178][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 580.924192][T10421] Call Trace: [ 580.924200][T10421] [ 580.924210][T10421] dump_stack_lvl+0x18c/0x250 [ 580.924240][T10421] ? show_regs_print_info+0x20/0x20 [ 580.924262][T10421] ? load_image+0x420/0x420 [ 580.924292][T10421] ? __might_sleep+0xe0/0xe0 [ 580.924319][T10421] ? __lock_acquire+0x7eb0/0x7eb0 [ 580.924349][T10421] should_fail_ex+0x394/0x4c0 [ 580.924384][T10421] should_failslab+0x9/0x20 [ 580.924411][T10421] slab_pre_alloc_hook+0x59/0x300 [ 580.924438][T10421] kmem_cache_alloc+0x5a/0x2c0 [ 580.924464][T10421] ? __kernfs_new_node+0xe5/0x7f0 [ 580.924499][T10421] __kernfs_new_node+0xe5/0x7f0 [ 580.924534][T10421] ? kernfs_new_node+0x260/0x260 [ 580.924575][T10421] ? up_write+0x1be/0x410 [ 580.924600][T10421] kernfs_new_node+0x14c/0x260 [ 580.924633][T10421] __kernfs_create_file+0x4b/0x2e0 [ 580.924657][T10421] sysfs_add_file_mode_ns+0x237/0x2f0 [ 580.924688][T10421] sysfs_merge_group+0x184/0x320 [ 580.924714][T10421] ? sysfs_remove_groups+0xa0/0xa0 [ 580.924735][T10421] ? device_add_attrs+0x725/0x830 [ 580.924764][T10421] ? device_add_class_symlinks+0x240/0x240 [ 580.924796][T10421] dpm_sysfs_add+0xd2/0x270 [ 580.924825][T10421] device_add+0x55c/0xc40 [ 580.924853][T10421] device_create+0x26a/0x300 [ 580.924884][T10421] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 580.924911][T10421] ? _raw_spin_unlock+0x40/0x40 [ 580.924938][T10421] ? root_device_unregister+0x100/0x100 [ 580.924962][T10421] ? update_attr+0x550/0x730 [ 580.924996][T10421] ? is_console_locked+0x9/0x20 [ 580.925018][T10421] ? csi_J+0xa16/0xea0 [ 580.925047][T10421] vcs_make_sysfs+0x32/0x80 [ 580.925069][T10421] vc_allocate+0x5a7/0x680 [ 580.925098][T10421] ? vc_cons_allocated+0x70/0x70 [ 580.925140][T10421] con_install+0xa0/0x720 [ 580.925169][T10421] ? mutex_lock_nested+0x20/0x20 [ 580.925197][T10421] ? show_tty_active+0x30/0x30 [ 580.925236][T10421] tty_init_dev+0xd3/0x4c0 [ 580.925266][T10421] tty_open+0x7dd/0xcc0 [ 580.925300][T10421] ? __lock_acquire+0x7eb0/0x7eb0 [ 580.925327][T10421] ? tty_compat_ioctl+0x8b0/0x8b0 [ 580.925359][T10421] ? do_raw_spin_unlock+0x121/0x230 [ 580.925391][T10421] chrdev_open+0x58c/0x600 [ 580.925418][T10421] ? cd_forget+0x160/0x160 [ 580.925446][T10421] ? fsnotify_perm+0x3ed/0x5e0 [ 580.925479][T10421] do_dentry_open+0x880/0x14b0 [ 580.925509][T10421] ? cd_forget+0x160/0x160 [ 580.925539][T10421] path_openat+0x284f/0x3270 [ 580.925585][T10421] ? do_sys_openat2+0xda/0x1d0 [ 580.925608][T10421] ? __x64_sys_openat+0x139/0x160 [ 580.925636][T10421] ? verify_lock_unused+0x140/0x140 [ 580.925665][T10421] ? do_filp_open+0x430/0x430 [ 580.925708][T10421] do_filp_open+0x1f2/0x430 [ 580.925736][T10421] ? vfs_tmpfile+0x620/0x620 [ 580.925784][T10421] ? _raw_spin_unlock+0x28/0x40 [ 580.925809][T10421] ? alloc_fd+0x590/0x640 [ 580.925845][T10421] do_sys_openat2+0x134/0x1d0 [ 580.925874][T10421] ? do_sys_open+0xe0/0xe0 [ 580.925900][T10421] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 580.925928][T10421] ? lock_chain_count+0x20/0x20 [ 580.925957][T10421] __x64_sys_openat+0x139/0x160 [ 580.925990][T10421] do_syscall_64+0x55/0xb0 [ 580.926008][T10421] ? clear_bhb_loop+0x40/0x90 [ 580.926028][T10421] ? clear_bhb_loop+0x40/0x90 [ 580.926051][T10421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.926081][T10421] RIP: 0033:0x7f5ca155ed8e [ 580.926105][T10421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 580.926124][T10421] RSP: 002b:00007f5ca239eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.926149][T10421] RAX: ffffffffffffffda RBX: 00007f5ca239f6c0 RCX: 00007f5ca155ed8e [ 580.926165][T10421] RDX: 0000000000000002 RSI: 00007f5ca239ec00 RDI: ffffffffffffff9c [ 580.926180][T10421] RBP: 00007f5ca16358b0 R08: 0000000000000000 R09: 0000000000000000 [ 580.926195][T10421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.926208][T10421] R13: 00007f5ca1826218 R14: 00007f5ca1826180 R15: 00007fffdd2a0e68 [ 580.926242][T10421] [ 581.605159][T10422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 581.614610][T10422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1027'. [ 583.611533][T10451] netlink: 'syz.3.1034': attribute type 10 has an invalid length. [ 584.711297][T10451] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 584.729181][T10451] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 584.736617][T10451] bridge0: port 4(netdevsim0) entered disabled state [ 584.792716][T10451] team0: Port device netdevsim0 added [ 585.559651][T10451] netlink: 'syz.3.1034': attribute type 10 has an invalid length. [ 585.693030][T10462] comedi comedi3: board detection failed [ 585.870175][T10451] team0: Port device netdevsim0 removed [ 585.879632][T10451] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 585.897764][T10467] netlink: 'syz.1.1035': attribute type 10 has an invalid length. [ 585.926259][T10467] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 588.119396][ T5873] IPVS: starting estimator thread 0... [ 588.287178][T10493] IPVS: using max 18 ests per chain, 43200 per kthread [ 591.248092][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 591.617266][ T60] rpcbind: server 127.0.0.1 not responding, timed out [ 592.053660][ T8] logitech-hidpp-device 0005:046D:B012.0003: item fetching failed at offset 3/4 [ 592.064572][ T8] logitech-hidpp-device 0005:046D:B012.0003: hidpp_probe:parse failed [ 592.074046][ T8] logitech-hidpp-device: probe of 0005:046D:B012.0003 failed with error -22 [ 597.091266][T10604] binder: 10601:10604 ioctl c00c6211 0 returned -14 [ 597.688286][T10609] bond1: entered allmulticast mode [ 597.695789][T10609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 597.784270][T10609] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1069'. [ 598.242883][T10609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.334485][T10609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.378343][T10609] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 598.402366][T10609] bridge0: port 3(netdevsim0) entered disabled state [ 598.409348][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.416606][T10609] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.441303][T10609] bond0 (unregistering): Released all slaves [ 602.568965][ T176] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 603.392475][ T176] usb 3-1: device descriptor read/all, error -71 [ 606.867277][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 607.024436][ T56] logitech-hidpp-device 0005:046D:B012.0004: item fetching failed at offset 3/4 [ 607.061926][ T23] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 607.100225][ T56] logitech-hidpp-device 0005:046D:B012.0004: hidpp_probe:parse failed [ 607.247822][ T23] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 607.319197][ T56] logitech-hidpp-device: probe of 0005:046D:B012.0004 failed with error -22 [ 607.519362][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.542477][ T23] usb 2-1: Product: syz [ 607.546686][ T23] usb 2-1: Manufacturer: syz [ 607.561970][ T23] usb 2-1: SerialNumber: syz [ 607.807514][ T23] usb 2-1: Cannot retrieve CPort count: -32 [ 607.813517][ T23] usb 2-1: Cannot retrieve CPort count: -32 [ 607.821311][T10737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1090'. [ 607.850093][ T23] es2_ap_driver: probe of 2-1:1.0 failed with error -32 [ 608.622258][ T5873] IPVS: starting estimator thread 0... [ 608.710637][ T23] usb 2-1: USB disconnect, device number 15 [ 608.749233][T10759] IPVS: using max 19 ests per chain, 45600 per kthread [ 611.415387][T10660] udevd[10660]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 611.745746][T10814] overlayfs: missing 'lowerdir' [ 612.523969][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 612.523984][ T28] audit: type=1326 audit(1792166167.324:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.142965][ T28] audit: type=1326 audit(1792166167.324:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.266256][ T28] audit: type=1326 audit(1792166167.394:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.316405][ T28] audit: type=1326 audit(1792166167.394:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.356464][ T28] audit: type=1326 audit(1792166167.394:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.380671][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.438558][ T28] audit: type=1326 audit(1792166167.454:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.473557][ T28] audit: type=1326 audit(1792166167.584:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.591693][ T28] audit: type=1326 audit(1792166167.614:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.657034][ T28] audit: type=1326 audit(1792166167.874:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 613.707795][ T28] audit: type=1326 audit(1792166167.904:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.3.1095" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 614.698476][T10842] syz.4.1106 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 619.259442][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 619.587185][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 619.668074][ T23] usb 3-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 619.692055][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 619.759878][ T23] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.904768][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 619.913979][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.935069][ T23] usb 3-1: Product: syz [ 619.945156][ T23] usb 3-1: Manufacturer: syz [ 619.949956][ T23] usb 3-1: SerialNumber: syz [ 620.677976][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 620.677990][ T28] audit: type=1326 audit(1792166175.484:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca159e559 code=0x7ffc0000 [ 620.776965][ T28] audit: type=1326 audit(1792166175.484:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca159e559 code=0x7ffc0000 [ 620.801155][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.810480][ T28] audit: type=1326 audit(1792166175.494:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5ca159e559 code=0x7ffc0000 [ 620.834642][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.841841][ T28] audit: type=1326 audit(1792166175.494:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca159e559 code=0x7ffc0000 [ 620.866020][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.007548][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 622.061971][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 622.111805][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.126385][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 622.150428][ T28] audit: type=1326 audit(1792166175.494:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca159e559 code=0x7ffc0000 [ 622.224592][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 622.248303][ T28] audit: type=1326 audit(1792166175.514:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ca159e559 code=0x7ffc0000 [ 622.273791][ T28] audit: type=1326 audit(1792166175.514:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca159e559 code=0x7ffc0000 [ 622.297959][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.301891][ T23] usb 3-1: USB disconnect, device number 14 [ 622.322964][ T5844] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 622.337501][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.345596][ T5844] usb 5-1: Product: syz [ 622.349890][ T5844] usb 5-1: Manufacturer: syz [ 622.354656][ T5844] usb 5-1: SerialNumber: syz [ 622.361379][ T28] audit: type=1326 audit(1792166175.514:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca159e559 code=0x7ffc0000 [ 622.385527][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.415358][ T5844] sisusb 5-1:1.0: Invalid USB2VGA device [ 622.444372][ T5844] sisusb: probe of 5-1:1.0 failed with error -22 [ 623.061039][T10918] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 623.098064][ T28] audit: type=1326 audit(1792166175.524:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ca155ed8e code=0x7ffc0000 [ 623.181214][ T28] audit: type=1326 audit(1792166175.524:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.4.1108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ca159e1eb code=0x7ffc0000 [ 623.560104][ T5844] usb 5-1: USB disconnect, device number 3 [ 624.423968][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.433277][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.757261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 628.800767][ T5846] logitech-hidpp-device 0005:046D:B012.0005: item fetching failed at offset 3/4 [ 628.877626][ T5846] logitech-hidpp-device 0005:046D:B012.0005: hidpp_probe:parse failed [ 628.901764][ T5846] logitech-hidpp-device: probe of 0005:046D:B012.0005 failed with error -22 [ 631.444005][T10993] netlink: 'syz.1.1131': attribute type 10 has an invalid length. [ 631.578651][T10993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1131'. [ 632.054946][T11006] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1134'. [ 632.111156][T11013] udevd[11013]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 634.006018][T11042] kernel profiling enabled (shift: 23) [ 635.244981][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'. [ 636.673288][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 637.266787][T11073] sctp_transport_update_pmtu: 49 callbacks suppressed [ 637.266805][T11073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 637.603114][T11084] udevd[11084]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 637.718479][T11088] netlink: 'syz.4.1147': attribute type 1 has an invalid length. [ 637.786811][T11072] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1145'. [ 638.166483][T11085] syzkaller0: entered promiscuous mode [ 638.197456][T11085] syzkaller0: entered allmulticast mode [ 638.254114][T11103] misc userio: Invalid payload size [ 638.638879][T11111] misc userio: No port type given on /dev/userio [ 641.156772][T11132] veth1_to_bond: entered promiscuous mode [ 641.164435][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 641.978689][T11132] bond0: (slave bond_slave_1): Releasing backup interface [ 642.155896][T11139] netlink: 'syz.2.1153': attribute type 10 has an invalid length. [ 642.865177][T11139] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1153'. [ 643.086334][T11152] sctp: failed to load transform for md5: -2 [ 644.465489][T11083] udevd[11083]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 645.418695][T11182] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1160'. [ 647.464538][T11212] syz_tun: entered allmulticast mode [ 647.581048][T11182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1160'. [ 648.579426][T11221] Bluetooth: ISO socket layer initialized [ 648.603060][T11221] FAULT_INJECTION: forcing a failure. [ 648.603060][T11221] name failslab, interval 1, probability 5, space 0, times 9984 [ 648.616031][T11221] CPU: 1 PID: 11221 Comm: syz.2.1166 Not tainted syzkaller #0 [ 648.623512][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 648.633581][T11221] Call Trace: [ 648.636872][T11221] [ 648.639821][T11221] dump_stack_lvl+0x18c/0x250 [ 648.644539][T11221] ? show_regs_print_info+0x20/0x20 [ 648.649749][T11221] ? load_image+0x420/0x420 [ 648.654276][T11221] ? __lock_acquire+0x7eb0/0x7eb0 [ 648.659329][T11221] should_fail_ex+0x394/0x4c0 [ 648.664035][T11221] should_failslab+0x9/0x20 [ 648.668562][T11221] slab_pre_alloc_hook+0x59/0x300 [ 648.673605][T11221] ? alloc_ucounts+0x159/0x4c0 [ 648.678393][T11221] __kmem_cache_alloc_node+0x53/0x250 [ 648.683796][T11221] ? alloc_ucounts+0x159/0x4c0 [ 648.688573][T11221] kmalloc_trace+0x2a/0xe0 [ 648.693013][T11221] alloc_ucounts+0x159/0x4c0 [ 648.697628][T11221] inc_ucount+0x28/0x2a0 [ 648.701887][T11221] copy_pid_ns+0x265/0x9d0 [ 648.706328][T11221] ? cmp_extents_reverse+0x90/0x90 [ 648.711463][T11221] ? copy_ipcs+0x92/0x500 [ 648.715808][T11221] ? copy_utsname+0x97/0x430 [ 648.720426][T11221] create_new_namespaces+0x2a6/0x700 [ 648.725750][T11221] unshare_nsproxy_namespaces+0x11a/0x160 [ 648.731495][T11221] ksys_unshare+0x4fa/0x8f0 [ 648.736025][T11221] ? sighand_ctor+0x50/0x50 [ 648.740544][T11221] ? lock_chain_count+0x20/0x20 [ 648.745412][T11221] ? syscall_enter_from_user_mode+0x25/0x80 [ 648.751326][T11221] __x64_sys_unshare+0x38/0x40 [ 648.756109][T11221] do_syscall_64+0x55/0xb0 [ 648.757951][ T5782] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 648.760524][T11221] ? clear_bhb_loop+0x40/0x90 [ 648.769452][ T51] Bluetooth: hci4: command tx timeout [ 648.771932][T11221] ? clear_bhb_loop+0x40/0x90 [ 648.782020][T11221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.787951][T11221] RIP: 0033:0x7fc57af9e559 [ 648.792384][T11221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.812012][T11221] RSP: 002b:00007fc5791d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 648.820432][T11221] RAX: ffffffffffffffda RBX: 00007fc57b226090 RCX: 00007fc57af9e559 [ 648.828409][T11221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 648.836380][T11221] RBP: 00007fc57b0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 648.844351][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.852321][T11221] R13: 00007fc57b226128 R14: 00007fc57b226090 R15: 00007ffc8f0605c8 [ 648.860305][T11221] [ 648.863411][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.968411][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 649.167457][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 649.202791][ T5844] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 649.261738][ T5844] usb 5-1: config 0 has no interface number 0 [ 649.405854][ T5844] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 650.100200][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.136186][ T5844] usb 5-1: Product: syz [ 650.197597][ T5844] usb 5-1: Manufacturer: syz [ 650.255253][ T5844] usb 5-1: SerialNumber: syz [ 650.272684][ T5844] usb 5-1: config 0 descriptor?? [ 650.379700][T11212] syz_tun: left allmulticast mode [ 650.399706][ T5844] usb 5-1: USB disconnect, device number 4 [ 653.349592][T11251] udevd[11251]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 655.075089][T11265] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 655.509772][T11244] udevd[11244]: inotify_add_watch(7, /dev/loop1088, 10) failed: Not a directory [ 661.664075][T11244] udevd[11244]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 662.883391][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 663.293848][T11345] x_tables: duplicate underflow at hook 1 [ 663.662052][T11354] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1195'. [ 664.638112][T11358] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 665.495262][T11371] FAULT_INJECTION: forcing a failure. [ 665.495262][T11371] name failslab, interval 1, probability 5, space 0, times 9983 [ 665.508391][T11371] CPU: 1 PID: 11371 Comm: syz.1.1198 Not tainted syzkaller #0 [ 665.515872][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 665.525948][T11371] Call Trace: [ 665.529254][T11371] [ 665.532203][T11371] dump_stack_lvl+0x18c/0x250 [ 665.536907][T11371] ? show_regs_print_info+0x20/0x20 [ 665.542124][T11371] ? load_image+0x420/0x420 [ 665.546654][T11371] ? __might_sleep+0xe0/0xe0 [ 665.551263][T11371] ? __lock_acquire+0x7eb0/0x7eb0 [ 665.556314][T11371] should_fail_ex+0x394/0x4c0 [ 665.561031][T11371] should_failslab+0x9/0x20 [ 665.565566][T11371] slab_pre_alloc_hook+0x59/0x300 [ 665.570620][T11371] ? tomoyo_encode+0x2ad/0x570 [ 665.575413][T11371] ? tomoyo_encode+0x2ad/0x570 [ 665.580196][T11371] __kmem_cache_alloc_node+0x53/0x250 [ 665.585612][T11371] ? tomoyo_encode+0x2ad/0x570 [ 665.590398][T11371] __kmalloc+0xa7/0x240 [ 665.594584][T11371] tomoyo_encode+0x2ad/0x570 [ 665.599198][T11371] tomoyo_mount_permission+0x3a2/0x9d0 [ 665.604680][T11371] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 665.610326][T11371] ? kasan_set_track+0x5f/0x70 [ 665.615105][T11371] ? kasan_set_track+0x4e/0x70 [ 665.619890][T11371] ? kasan_save_free_info+0x28/0x40 [ 665.625117][T11371] ? tomoyo_get_name+0x570/0x570 [ 665.630074][T11371] ? user_path_at_empty+0x4c/0x60 [ 665.635163][T11371] ? kasan_quarantine_put+0xd8/0x220 [ 665.640475][T11371] ? lockdep_hardirqs_on+0x98/0x150 [ 665.645707][T11371] security_sb_mount+0x87/0xc0 [ 665.650501][T11371] path_mount+0xbc/0xfa0 [ 665.654762][T11371] ? kmem_cache_free+0xf8/0x290 [ 665.659649][T11371] __se_sys_mount+0x2e7/0x3d0 [ 665.664356][T11371] ? __x64_sys_mount+0xc0/0xc0 [ 665.669147][T11371] ? lockdep_hardirqs_on+0x98/0x150 [ 665.674365][T11371] ? __x64_sys_mount+0x20/0xc0 [ 665.679154][T11371] do_syscall_64+0x55/0xb0 [ 665.683586][T11371] ? clear_bhb_loop+0x40/0x90 [ 665.688282][T11371] ? clear_bhb_loop+0x40/0x90 [ 665.692988][T11371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.698906][T11371] RIP: 0033:0x7fa80fd9e559 [ 665.703336][T11371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.722959][T11371] RSP: 002b:00007fa810d10028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 665.731392][T11371] RAX: ffffffffffffffda RBX: 00007fa810026180 RCX: 00007fa80fd9e559 [ 665.739382][T11371] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 665.747365][T11371] RBP: 00007fa80fe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 665.755346][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.763325][T11371] R13: 00007fa810026218 R14: 00007fa810026180 R15: 00007fffedd789c8 [ 665.771330][T11371] [ 665.774372][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.064833][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 667.064847][ T28] audit: type=1800 audit(1792166223.869:1712): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1200" name="addr_trtype" dev="configfs" ino=24370 res=0 errno=0 [ 667.121801][T11385] nvmet_tcp: address family 255 not supported [ 667.167070][ T28] audit: type=1800 audit(1792166223.919:1713): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1200" name="addr_traddr" dev="configfs" ino=24372 res=0 errno=0 [ 667.221853][ T28] audit: type=1800 audit(1792166223.919:1714): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1200" name="addr_trsvcid" dev="configfs" ino=24373 res=0 errno=0 [ 668.320829][T11244] udevd[11244]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 668.459815][T11402] fuse: Bad value for 'fd' [ 668.491064][T11402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1205'. [ 668.523558][T11405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1207'. [ 668.543543][T11405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1207'. [ 668.706067][T11405] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1207'. [ 668.844344][T11410] overlayfs: missing 'workdir' [ 669.499272][T11405] vlan2: entered allmulticast mode [ 669.782744][T11418] overlayfs: failed to resolve './file0': -2 [ 671.295346][T11429] tcpci: probe of 0-0002 failed with error -5 [ 671.374033][T11429] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 671.393791][ T51] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 673.154458][T11084] udevd[11084]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 673.457455][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 674.430533][T11461] rxe_eth0 speed is unknown, defaulting to 1000 [ 676.655648][T11473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1222'. [ 676.730647][T11477] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 676.922939][T11483] overlayfs: failed to clone upperpath [ 676.994436][T11483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1225'. [ 677.639606][T11244] udevd[11244]: inotify_add_watch(7, /dev/nbd64, 10) failed: Not a directory [ 677.690226][T11084] udevd[11084]: inotify_add_watch(7, /dev/nbd64, 10) failed: Not a directory [ 678.049251][T11493] netlink: 'syz.2.1228': attribute type 3 has an invalid length. [ 678.083592][T11493] syzkaller1: entered promiscuous mode [ 678.093317][T11493] syzkaller1: entered allmulticast mode [ 678.814335][T11084] udevd[11084]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 682.402099][T11530] C: renamed from team_slave_0 [ 682.710991][T11530] netlink: 'syz.4.1237': attribute type 2 has an invalid length. [ 682.727269][T11530] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1237'. [ 683.237396][T11535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.549425][T11530] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 685.862638][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.330324][T11579] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 688.341760][T11579] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 688.524879][ T9320] libceph: connect (1)[c::]:6789 error -101 [ 688.544678][ T9320] libceph: mon0 (1)[c::]:6789 connect error [ 688.654231][T11583] ceph: No mds server is up or the cluster is laggy [ 689.087203][T11602] overlayfs: failed to clone upperpath [ 690.128903][T11608] lo speed is unknown, defaulting to 1000 [ 690.149529][T11608] lo speed is unknown, defaulting to 1000 [ 690.164893][T11608] lo speed is unknown, defaulting to 1000 [ 690.213250][T11608] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 690.258827][T11608] lo speed is unknown, defaulting to 1000 [ 690.267743][T11608] lo speed is unknown, defaulting to 1000 [ 690.689974][ T51] Bluetooth: hci4: unexpected event for opcode 0x0035 [ 690.830714][T11608] lo speed is unknown, defaulting to 1000 [ 690.915373][T11608] lo speed is unknown, defaulting to 1000 [ 691.264565][ T51] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 692.814732][ T28] audit: type=1326 audit(1792166249.619:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 692.875301][ T28] audit: type=1326 audit(1792166249.619:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 692.899536][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.917498][ T28] audit: type=1326 audit(1792166249.619:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 692.973140][ T28] audit: type=1326 audit(1792166249.619:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 693.027919][ T28] audit: type=1326 audit(1792166249.659:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 693.077155][ T28] audit: type=1326 audit(1792166249.659:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 693.106827][ T28] audit: type=1326 audit(1792166249.659:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 693.133620][ T28] audit: type=1326 audit(1792166249.669:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 693.159764][ T28] audit: type=1326 audit(1792166249.669:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 693.186100][ T28] audit: type=1326 audit(1792166249.669:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11639 comm="syz.2.1263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 694.861890][T11656] bridge0: port 4(wlan1) entered blocking state [ 694.897453][T11656] bridge0: port 4(wlan1) entered disabled state [ 694.903916][T11656] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 695.002500][T11656] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 695.039780][T11664] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 695.052232][T11664] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 695.121219][T11668] IPv6: NLM_F_CREATE should be specified when creating new route [ 695.130009][T11668] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1272'. [ 696.107604][ T5873] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 696.394387][T11678] mmap: syz.2.1274 (11678): VmData 49479680 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 697.142847][ T5873] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 697.167430][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 697.190500][ T5873] usb 2-1: Product: syz [ 697.205173][ T5873] usb 2-1: SerialNumber: syz [ 697.221897][ T5873] usb 2-1: config 0 descriptor?? [ 697.499410][ T5873] hso 2-1:0.0: Failed to find BULK IN ep [ 697.574518][ T51] Bluetooth: hci4: unexpected event for opcode 0x0401 [ 698.153248][T11690] overlayfs: failed to clone upperpath [ 698.176834][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1277'. [ 698.210165][T11669] udevd[11669]: inotify_add_watch(7, /dev/nbd64, 10) failed: Not a directory [ 698.239409][T11669] udevd[11669]: inotify_add_watch(7, /dev/nbd64, 10) failed: Not a directory [ 698.871862][ T5846] usb 2-1: USB disconnect, device number 16 [ 699.650664][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 699.650679][ T28] audit: type=1326 audit(1792166256.459:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80fd9e559 code=0x7ffc0000 [ 699.824640][ T28] audit: type=1326 audit(1792166256.459:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80fd9e559 code=0x7ffc0000 [ 699.855902][ T28] audit: type=1326 audit(1792166256.539:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.3.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 699.936669][ T28] audit: type=1326 audit(1792166256.549:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80fd9e559 code=0x7ffc0000 [ 700.595803][ T28] audit: type=1326 audit(1792166256.549:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80fd9e559 code=0x7ffc0000 [ 700.622413][ T28] audit: type=1326 audit(1792166256.549:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80fd9e559 code=0x7ffc0000 [ 700.660306][ T28] audit: type=1326 audit(1792166256.549:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.1.1281" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa80fd9e559 code=0x7ffc0000 [ 700.734479][ T28] audit: type=1326 audit(1792166256.659:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.3.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 700.760168][ T5943] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 700.767455][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 700.777890][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 700.785283][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 700.795338][ T51] Workqueue: hci4 hci_rx_work [ 700.800030][ T51] Call Trace: [ 700.803327][ T51] [ 700.806264][ T51] dump_stack_lvl+0x18c/0x250 [ 700.810963][ T51] ? show_regs_print_info+0x20/0x20 [ 700.816171][ T51] ? load_image+0x420/0x420 [ 700.820701][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 700.825839][ T51] ? __lock_acquire+0x7eb0/0x7eb0 [ 700.830900][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 700.835608][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 700.840844][ T51] kobject_add_internal+0x617/0xc90 [ 700.846081][ T51] kobject_add+0x164/0x240 [ 700.850534][ T51] ? kobject_init+0x1d0/0x1d0 [ 700.855226][ T51] ? get_device_parent+0x366/0x390 [ 700.860350][ T51] device_add+0x3fa/0xc40 [ 700.864687][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 700.869628][ T51] le_conn_complete_evt+0xe9a/0x1480 [ 700.874924][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 700.881175][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 700.886808][ T51] ? mutex_unlock+0x10/0x10 [ 700.891307][ T51] ? skb_pull_data+0xf0/0x1f0 [ 700.895990][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 700.901889][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 700.908312][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 700.914383][ T51] hci_event_packet+0x7b4/0x1280 [ 700.919326][ T51] ? __lock_acquire+0x7eb0/0x7eb0 [ 700.924354][ T51] ? lock_chain_count+0x20/0x20 [ 700.929204][ T51] ? bis_list+0x290/0x290 [ 700.933532][ T51] ? kcov_remote_start+0x513/0x810 [ 700.938641][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 700.943847][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 700.949055][ T51] hci_rx_work+0x43a/0xd60 [ 700.953496][ T51] ? process_scheduled_works+0x975/0x1600 [ 700.959223][ T51] process_scheduled_works+0xa60/0x1600 [ 700.964792][ T51] ? worker_attach_to_pool+0x370/0x370 [ 700.970256][ T51] ? assign_work+0x3cc/0x5d0 [ 700.974851][ T51] worker_thread+0xa5e/0xfe0 [ 700.979473][ T51] kthread+0x2fa/0x390 [ 700.983543][ T51] ? pr_cont_work+0x550/0x550 [ 700.988223][ T51] ? kthread_blkcg+0xd0/0xd0 [ 700.992813][ T51] ret_from_fork+0x48/0x80 [ 700.997234][ T51] ? kthread_blkcg+0xd0/0xd0 [ 701.001830][ T51] ret_from_fork_asm+0x11/0x20 [ 701.006606][ T51] [ 701.010582][ T51] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 701.024642][ T51] Bluetooth: hci4: failed to register connection device [ 701.035464][ T28] audit: type=1326 audit(1792166256.659:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.3.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 701.061486][ T28] audit: type=1326 audit(1792166256.689:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.3.1283" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cbdf9e559 code=0x7ffc0000 [ 701.268212][ T5943] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 701.277649][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 701.285752][ T5943] usb 2-1: Product: syz [ 701.314681][ T5943] usb 2-1: Manufacturer: syz [ 701.339999][ T5943] usb 2-1: SerialNumber: syz [ 701.361865][ T5943] usb 2-1: config 0 descriptor?? [ 701.410272][ T5943] usb 2-1: selecting invalid altsetting 1 [ 701.416542][ T5943] comedi comedi5: could not switch to alternate setting 1 [ 701.478120][ T5943] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 702.107291][T11732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 703.213715][ T51] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 703.238068][ T23] usb 2-1: USB disconnect, device number 17 [ 703.392708][T11735] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 703.561566][T11735] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 704.674486][T11773] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1293'. [ 704.730500][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 707.220496][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 707.229177][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 707.237687][ T51] Bluetooth: hci3: hardware error 0x00 [ 709.376996][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 709.794253][T11825] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 709.859584][ T51] Bluetooth: hci0: unexpected event for opcode 0x202a [ 709.866709][T11825] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 710.946146][ T51] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 711.136731][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 711.136746][ T28] audit: type=1326 audit(1792166267.939:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.168314][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.179595][ T28] audit: type=1326 audit(1792166267.939:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.203750][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.218535][ T28] audit: type=1326 audit(1792166267.959:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.247904][ T28] audit: type=1326 audit(1792166267.959:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.272070][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.283816][ T28] audit: type=1326 audit(1792166267.959:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.315635][ T28] audit: type=1326 audit(1792166267.959:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.339619][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.354172][ T28] audit: type=1326 audit(1792166267.959:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.383755][T11849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.386098][ T28] audit: type=1326 audit(1792166267.959:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.437875][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 711.447646][ T28] audit: type=1326 audit(1792166267.959:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.471809][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.498399][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1313'. [ 711.574129][ T28] audit: type=1326 audit(1792166267.959:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.2.1313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc57af9e559 code=0x7ffc0000 [ 711.611778][T11852] bond0: left allmulticast mode [ 711.622903][T11852] bond_slave_0: left allmulticast mode [ 711.658420][T11852] bond_slave_1: left allmulticast mode [ 711.736842][T11852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.789491][T11852] bond2: (slave bond0): making interface the new active one [ 711.843699][T11852] bond2: (slave bond0): Enslaving as an active interface with an up link [ 713.452688][T11870] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 714.876053][T11884] IPv6: NLM_F_CREATE should be specified when creating new route [ 714.884838][T11884] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1311'. [ 716.978954][ T51] Bluetooth: hci0: unexpected event for opcode 0x203c [ 717.267549][ T5943] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 717.478699][ T5943] usb 3-1: unable to get BOS descriptor or descriptor too short [ 717.550364][ T5943] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 717.989630][ T5943] usb 3-1: config 1 interface 0 has no altsetting 0 [ 718.019237][ T5943] usb 3-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 718.044443][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.067469][ T5943] usb 3-1: Product: syz [ 718.071879][ T5943] usb 3-1: Manufacturer: syz [ 718.076492][ T5943] usb 3-1: SerialNumber: syz [ 718.098472][ T51] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 718.334224][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 718.364200][ T5943] usb 3-1: USB disconnect, device number 15 [ 718.662138][ T51] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 718.903947][ T51] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 719.081541][ T51] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 719.504328][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 719.967531][ T5873] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 720.149565][ T5873] usb 2-1: unable to get BOS descriptor or descriptor too short [ 720.173104][ T5873] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 720.213425][ T5873] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 720.242767][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.255006][ T5873] usb 2-1: Product: syz [ 720.263067][ T5873] usb 2-1: Manufacturer: syz [ 720.268761][ T5873] usb 2-1: SerialNumber: syz [ 720.283330][T11942] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 720.286582][T11949] netlink: 'syz.4.1337': attribute type 10 has an invalid length. [ 720.304398][T11949] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 720.312179][T11949] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 720.320701][T11949] bridge0: port 3(netdevsim0) entered disabled state [ 720.340904][T11949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1337'. [ 720.842654][ T5873] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 720.881358][ T5873] usb 2-1: USB disconnect, device number 18 [ 721.008790][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 721.009879][T11960] udevd[11960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.130159][ T51] Bluetooth: hci2: unexpected event for opcode 0x041c [ 721.587256][ T51] Bluetooth: hci4: unexpected event for opcode 0x200a [ 722.074479][T11921] udevd[11921]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 722.680268][ T2999] Bluetooth: hci1: Frame reassembly failed (-84) [ 723.047779][ T5782] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 723.259297][T11996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1354'. [ 723.668910][T11921] udevd[11921]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 724.737119][ T5782] Bluetooth: hci1: command 0x1003 tx timeout [ 724.745064][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 725.012304][T12017] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 725.036176][T12017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1361'. [ 725.137005][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 725.146478][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 725.158607][ T51] Bluetooth: hci2: hardware error 0x00 [ 725.797343][ T5782] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 725.820054][ T5782] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 726.182465][T11902] udevd[11902]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 726.417516][T12041] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 726.495352][T12040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'. [ 726.642201][ T5782] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 727.237624][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 727.442493][T12060] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 728.492325][T12070] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 729.923564][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 732.880898][T12106] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 732.913697][T12106] syzkaller0: entered promiscuous mode [ 732.973119][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 733.065609][T12113] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1397'. [ 733.089800][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 733.909328][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 734.240014][T12137] netlink: 'syz.3.1405': attribute type 10 has an invalid length. [ 734.318027][T12137] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1405'. [ 734.978259][ T5873] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 735.080267][ T51] Bluetooth: hci4: unexpected event 0x0f length: 84 > 4 [ 735.168491][ T5873] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 735.184969][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.199216][ T5873] usb 2-1: config 0 descriptor?? [ 735.206450][ T5873] cp210x 2-1:0.0: cp210x converter detected [ 735.411926][ T5873] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 735.420076][ T5873] cp210x 2-1:0.0: querying part number failed [ 735.442302][ T5873] usb 2-1: cp210x converter now attached to ttyUSB0 [ 735.772222][T12153] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 736.667358][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop1088, 10) failed: Not a directory [ 737.418855][ T23] usb 2-1: USB disconnect, device number 19 [ 737.463466][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 737.479708][ T23] cp210x 2-1:0.0: device disconnected [ 738.929435][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 739.442769][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 740.130198][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 740.227013][ T5844] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 740.417492][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 740.426645][ T5844] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 740.434863][ T5844] usb 3-1: config 0 has no interface number 0 [ 740.445407][ T5844] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 740.454716][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.465324][ T5844] usb 3-1: Product: syz [ 740.469631][ T5844] usb 3-1: Manufacturer: syz [ 740.474343][ T5844] usb 3-1: SerialNumber: syz [ 740.484125][ T5844] usb 3-1: config 0 descriptor?? [ 740.687554][T12198] netlink: 'syz.4.1424': attribute type 10 has an invalid length. [ 740.710579][T12198] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1424'. [ 742.929042][ T5844] usb 3-1: USB disconnect, device number 16 [ 743.080917][T12227] binder: BC_ACQUIRE_RESULT not supported [ 743.094140][T12227] binder: 12226:12227 ioctl c0306201 200000004a40 returned -22 [ 744.504710][ T51] Bluetooth: hci4: unexpected cc 0x100c length: 65 > 3 [ 744.530499][ T51] Bluetooth: hci4: unexpected event for opcode 0x100c [ 744.824511][T12222] udevd[12222]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 746.967361][ T9320] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 747.128078][T12274] netlink: 'syz.1.1445': attribute type 10 has an invalid length. [ 747.145110][T12270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1445'. [ 747.163826][ T9320] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 747.184249][ T9320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.434148][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.443919][ T9320] usb 3-1: config 0 descriptor?? [ 748.491819][ T9320] cp210x 3-1:0.0: cp210x converter detected [ 748.552878][ T9320] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 748.574203][ T9320] cp210x 3-1:0.0: querying part number failed [ 748.664823][ T9320] usb 3-1: cp210x converter now attached to ttyUSB0 [ 748.719481][ T9320] usb 3-1: USB disconnect, device number 17 [ 748.754376][ T9320] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 748.774823][ T9320] cp210x 3-1:0.0: device disconnected [ 749.011626][T12290] FAULT_INJECTION: forcing a failure. [ 749.011626][T12290] name failslab, interval 1, probability 5, space 0, times 9982 [ 749.025166][T12290] CPU: 0 PID: 12290 Comm: syz.1.1448 Not tainted syzkaller #0 [ 749.032669][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 749.042743][T12290] Call Trace: [ 749.046035][T12290] [ 749.048984][T12290] dump_stack_lvl+0x18c/0x250 [ 749.053700][T12290] ? show_regs_print_info+0x20/0x20 [ 749.058920][T12290] ? load_image+0x420/0x420 [ 749.063453][T12290] ? __lock_acquire+0x7eb0/0x7eb0 [ 749.068505][T12290] should_fail_ex+0x394/0x4c0 [ 749.073216][T12290] should_failslab+0x9/0x20 [ 749.077749][T12290] slab_pre_alloc_hook+0x59/0x300 [ 749.082794][T12290] ? alloc_ucounts+0x159/0x4c0 [ 749.087578][T12290] __kmem_cache_alloc_node+0x53/0x250 [ 749.092985][T12290] ? alloc_ucounts+0x159/0x4c0 [ 749.097771][T12290] kmalloc_trace+0x2a/0xe0 [ 749.102212][T12290] alloc_ucounts+0x159/0x4c0 [ 749.106825][T12290] inc_ucount+0x28/0x2a0 [ 749.111100][T12290] copy_pid_ns+0x265/0x9d0 [ 749.115549][T12290] ? cmp_extents_reverse+0x90/0x90 [ 749.120688][T12290] ? copy_ipcs+0x92/0x500 [ 749.125042][T12290] ? copy_utsname+0x97/0x430 [ 749.129655][T12290] create_new_namespaces+0x2a6/0x700 [ 749.134989][T12290] unshare_nsproxy_namespaces+0x11a/0x160 [ 749.140739][T12290] ksys_unshare+0x4fa/0x8f0 [ 749.145290][T12290] ? sighand_ctor+0x50/0x50 [ 749.149824][T12290] ? lock_chain_count+0x20/0x20 [ 749.154702][T12290] ? syscall_enter_from_user_mode+0x25/0x80 [ 749.160626][T12290] __x64_sys_unshare+0x38/0x40 [ 749.165417][T12290] do_syscall_64+0x55/0xb0 [ 749.169854][T12290] ? clear_bhb_loop+0x40/0x90 [ 749.174550][T12290] ? clear_bhb_loop+0x40/0x90 [ 749.179249][T12290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.185172][T12290] RIP: 0033:0x7fa80fd9e559 [ 749.189629][T12290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.209261][T12290] RSP: 002b:00007fa810d10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 749.217698][T12290] RAX: ffffffffffffffda RBX: 00007fa810026180 RCX: 00007fa80fd9e559 [ 749.225689][T12290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 749.233681][T12290] RBP: 00007fa80fe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 749.241669][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.249656][T12290] R13: 00007fa810026218 R14: 00007fa810026180 R15: 00007fffedd789c8 [ 749.257663][T12290] [ 749.288172][ T51] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 750.980616][ T51] Bluetooth: hci4: unexpected event for opcode 0x2002 [ 752.378903][T12321] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 752.402347][T12321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1458'. [ 755.958127][T12351] macvlan1: entered promiscuous mode [ 760.567651][T12394] netlink: 'syz.3.1477': attribute type 10 has an invalid length. [ 760.711455][T12394] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1477'. [ 761.590488][ T51] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 764.872105][T12449] netlink: 'syz.1.1489': attribute type 10 has an invalid length. [ 764.882655][T12443] siw: device registration error -23 [ 764.974337][T12449] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1489'. [ 765.057202][T12452] FAULT_INJECTION: forcing a failure. [ 765.057202][T12452] name failslab, interval 1, probability 5, space 0, times 9981 [ 765.057233][T12452] CPU: 1 PID: 12452 Comm: syz.2.1487 Not tainted syzkaller #0 [ 765.057255][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 765.057268][T12452] Call Trace: [ 765.057276][T12452] [ 765.057285][T12452] dump_stack_lvl+0x18c/0x250 [ 765.057314][T12452] ? show_regs_print_info+0x20/0x20 [ 765.057336][T12452] ? load_image+0x420/0x420 [ 765.057365][T12452] ? __might_sleep+0xe0/0xe0 [ 765.057390][T12452] ? __lock_acquire+0x7eb0/0x7eb0 [ 765.057419][T12452] should_fail_ex+0x394/0x4c0 [ 765.057453][T12452] should_failslab+0x9/0x20 [ 765.057481][T12452] slab_pre_alloc_hook+0x59/0x300 [ 765.057507][T12452] kmem_cache_alloc+0x5a/0x2c0 [ 765.057535][T12452] ? __kernfs_new_node+0xe5/0x7f0 [ 765.057569][T12452] __kernfs_new_node+0xe5/0x7f0 [ 765.057605][T12452] ? kernfs_new_node+0x260/0x260 [ 765.057647][T12452] ? up_write+0x1be/0x410 [ 765.057673][T12452] kernfs_new_node+0x14c/0x260 [ 765.057707][T12452] __kernfs_create_file+0x4b/0x2e0 [ 765.057731][T12452] sysfs_add_file_mode_ns+0x237/0x2f0 [ 765.057763][T12452] sysfs_merge_group+0x184/0x320 [ 765.057789][T12452] ? sysfs_remove_groups+0xa0/0xa0 [ 765.057810][T12452] ? device_add_attrs+0x725/0x830 [ 765.057840][T12452] ? device_add_class_symlinks+0x240/0x240 [ 765.057872][T12452] dpm_sysfs_add+0xd2/0x270 [ 765.057902][T12452] device_add+0x55c/0xc40 [ 765.057931][T12452] device_create+0x26a/0x300 [ 765.057961][T12452] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 765.057983][T12452] ? lockdep_hardirqs_on+0x98/0x150 [ 765.058016][T12452] ? root_device_unregister+0x100/0x100 [ 765.058050][T12452] ? vcs_make_sysfs+0xd/0x80 [ 765.058079][T12452] vcs_make_sysfs+0x32/0x80 [ 765.058100][T12452] vc_allocate+0x5a7/0x680 [ 765.058130][T12452] ? vc_cons_allocated+0x70/0x70 [ 765.058168][T12452] con_install+0xa0/0x720 [ 765.058196][T12452] ? lockdep_hardirqs_on+0x98/0x150 [ 765.058221][T12452] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 765.058244][T12452] ? show_tty_active+0x30/0x30 [ 765.058283][T12452] tty_init_dev+0xd3/0x4c0 [ 765.058314][T12452] tty_open+0x7dd/0xcc0 [ 765.058349][T12452] ? __lock_acquire+0x7eb0/0x7eb0 [ 765.058377][T12452] ? tty_compat_ioctl+0x8b0/0x8b0 [ 765.058409][T12452] ? do_raw_spin_unlock+0x121/0x230 [ 765.058441][T12452] chrdev_open+0x58c/0x600 [ 765.058469][T12452] ? cd_forget+0x160/0x160 [ 765.058495][T12452] ? cd_forget+0x160/0x160 [ 765.058525][T12452] do_dentry_open+0x880/0x14b0 [ 765.058555][T12452] ? cd_forget+0x160/0x160 [ 765.058585][T12452] path_openat+0x284f/0x3270 [ 765.058637][T12452] ? verify_lock_unused+0x140/0x140 [ 765.058662][T12452] ? do_filp_open+0x430/0x430 [ 765.058705][T12452] do_filp_open+0x1f2/0x430 [ 765.058733][T12452] ? vfs_tmpfile+0x620/0x620 [ 765.058782][T12452] ? _raw_spin_unlock+0x28/0x40 [ 765.058808][T12452] ? alloc_fd+0x590/0x640 [ 765.058843][T12452] do_sys_openat2+0x134/0x1d0 [ 765.058872][T12452] ? do_sys_open+0xe0/0xe0 [ 765.058898][T12452] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 765.058926][T12452] ? lock_chain_count+0x20/0x20 [ 765.058947][T12452] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 765.058977][T12452] __x64_sys_openat+0x139/0x160 [ 765.059015][T12452] do_syscall_64+0x55/0xb0 [ 765.059033][T12452] ? clear_bhb_loop+0x40/0x90 [ 765.059053][T12452] ? clear_bhb_loop+0x40/0x90 [ 765.059076][T12452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.059106][T12452] RIP: 0033:0x7fc57af5ed8e [ 765.059125][T12452] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 765.059144][T12452] RSP: 002b:00007fc5791b3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 765.059168][T12452] RAX: ffffffffffffffda RBX: 00007fc5791b46c0 RCX: 00007fc57af5ed8e [ 765.059184][T12452] RDX: 0000000000000002 RSI: 00007fc5791b3c00 RDI: ffffffffffffff9c [ 765.059199][T12452] RBP: 00007fc57b0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 765.059213][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.059227][T12452] R13: 00007fc57b226218 R14: 00007fc57b226180 R15: 00007ffc8f0605c8 [ 765.059260][T12452] [ 766.689339][T12454] udevd[12454]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 770.152606][T12503] block device autoloading is deprecated and will be removed. [ 770.180841][T12489] udevd[12489]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 771.373849][T12523] siw: device registration error -23 [ 771.647094][ T5844] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 771.922049][ T5844] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 772.153135][ T5844] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 772.162846][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 772.171295][ T5844] usb 3-1: Product: syz [ 772.206775][ T5844] usb 3-1: Manufacturer: syz [ 772.212492][ T5844] usb 3-1: SerialNumber: syz [ 772.220457][ T5844] usb 3-1: config 0 descriptor?? [ 772.440817][ T5873] usb 3-1: USB disconnect, device number 18 [ 772.500794][T12535] bond1: option all_slaves_active: invalid value (179) [ 772.510423][T12535] bond1 (unregistering): Released all slaves [ 773.408102][T12549] cgroup: name respecified [ 775.861797][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 777.657258][ T5846] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 777.897063][ T5846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 777.927030][ T5846] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 777.979132][ T5846] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 777.992963][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.018063][ T5846] usb 3-1: Product: syz [ 778.032454][ T5846] usb 3-1: Manufacturer: syz [ 778.057354][ T5846] usb 3-1: SerialNumber: syz [ 778.309998][ T5846] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 778.708059][ T5873] usb 3-1: USB disconnect, device number 19 [ 778.764877][ T5873] usblp0: removed [ 779.022205][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 779.246539][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 779.415138][T12641] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 779.426134][T12639] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 779.447389][T12639] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 779.460565][T12639] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1551'. [ 779.492964][T12641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1552'. [ 779.717510][ T5873] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 780.613096][T12662] xt_l2tp: missing protocol rule (udp|l2tpip) [ 780.628330][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 780.648022][ T5873] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 780.661796][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.676951][ T5873] usb 2-1: Product: syz [ 780.687688][ T5873] usb 2-1: Manufacturer: syz [ 780.698530][ T5873] usb 2-1: SerialNumber: syz [ 780.928531][ T5873] usb 2-1: config 0 descriptor?? [ 780.955991][ T5873] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 782.257085][ T5873] gspca_sonixj: reg_r err -71 [ 782.261973][ T5873] sonixj: probe of 2-1:0.0 failed with error -71 [ 782.276471][ T5873] usb 2-1: USB disconnect, device number 20 [ 782.466157][T12697] netlink: 'syz.4.1571': attribute type 10 has an invalid length. [ 782.504329][T12697] macvlan1: entered allmulticast mode [ 782.540653][T12702] netlink: 'syz.1.1574': attribute type 10 has an invalid length. [ 782.564409][T12702] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1574'. [ 782.737796][T12715] xt_recent: hitcount (262143) is larger than allowed maximum (255) [ 784.089776][T12489] udevd[12489]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 784.470084][T12739] netlink: 'syz.1.1587': attribute type 10 has an invalid length. [ 784.502836][T12739] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1587'. [ 784.882287][T12745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1589'. [ 784.916979][T12745] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 784.927888][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 785.507345][T12489] udevd[12489]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 786.069824][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1600'. [ 787.301593][T12786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.400420][T12813] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1618'. [ 788.411893][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1618'. [ 789.385934][T12821] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.922121][T12858] udevd[12858]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 792.056328][T12865] vlan0: entered promiscuous mode [ 792.404497][T12879] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1638'. [ 792.437722][T12879] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1638'. [ 792.468236][T12879] netlink: 'syz.4.1638': attribute type 3 has an invalid length. [ 792.482895][T12879] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1638'. [ 794.897643][ T9320] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 795.085114][T12921] netlink: 'syz.4.1653': attribute type 10 has an invalid length. [ 795.099421][ T9320] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 795.109113][ T9320] usb 3-1: config 0 has no interface number 0 [ 795.115250][ T9320] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 795.130106][T12921] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1653'. [ 795.147491][ T9320] usb 3-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.176945][ T9320] usb 3-1: config 0 interface 216 has no altsetting 0 [ 795.186195][ T9320] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 795.213011][ T9320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.247005][ T9320] usb 3-1: config 0 descriptor?? [ 795.253580][T12906] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 795.281830][ T9320] usb 3-1: NFC: intf ffff888019e8f000 id ffffffff8e85bde0 [ 795.336419][T12923] cgroup: name respecified [ 795.430325][T12925] netlink: 'syz.3.1655': attribute type 8 has an invalid length. [ 795.454743][T12925] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 795.498530][ T8] usb 3-1: USB disconnect, device number 20 [ 795.673826][T12931] IPv6: Can't replace route, no match found [ 796.689748][T12942] netlink: 'syz.3.1663': attribute type 10 has an invalid length. [ 796.704210][T12942] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1663'. [ 796.763705][ T51] Bluetooth: hci0: Malformed LE Event: 0x0d [ 797.877275][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1673'. [ 797.894433][T12966] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1675'. [ 799.803294][T13000] netlink: 'syz.1.1685': attribute type 10 has an invalid length. [ 799.841413][T13000] bond0: (slave netdevsim0): Releasing backup interface [ 799.859934][T13000] batman_adv: batadv0: Adding interface: netdevsim0 [ 799.866811][T13000] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.901862][T13000] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 800.163558][T13008] ip6tnl1: entered allmulticast mode [ 800.900264][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 800.910231][T13026] (null): rxe_set_mtu: Set mtu to 4096 [ 800.940456][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 800.948631][ T5844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 800.965405][T13026] ip6_vti0 speed is unknown, defaulting to 1000 [ 801.008689][T13026] ip6_vti0 speed is unknown, defaulting to 1000 [ 801.038193][T13026] ip6_vti0 speed is unknown, defaulting to 1000 [ 801.139507][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1704'. [ 801.257553][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.277407][T13040] No such timeout policy "syz1" [ 801.488489][T13026] infiniband syz0: set active [ 801.493315][ T23] ip6_vti0 speed is unknown, defaulting to 1000 [ 801.509988][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 801.518591][T13026] infiniband syz0: added ip6_vti0 [ 801.733945][T13026] RDS/IB: syz0: added [ 802.305433][T13026] smc: adding ib device syz0 with port count 1 [ 802.475934][T13026] smc: ib device syz0 port 1 has pnetid [ 802.478119][T13026] ip6_vti0 speed is unknown, defaulting to 1000 [ 802.485436][ T23] ip6_vti0 speed is unknown, defaulting to 1000 [ 802.493463][T13060] udevd[13060]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 802.523196][ T8] [ 802.523207][ T8] ====================================================== [ 802.523213][ T8] WARNING: possible circular locking dependency detected [ 802.523232][ T8] syzkaller #0 Not tainted [ 802.523241][ T8] ------------------------------------------------------ [ 802.523247][ T8] kworker/0:0/8 is trying to acquire lock: [ 802.523256][ T8] ffffffff8f408690 (rds_trans_sem){++++}-{3:3}, at: rds_trans_get_preferred+0x133/0x3b0 [ 802.523304][ T8] [ 802.523304][ T8] but task is already holding lock: [ 802.523309][ T8] ffff888032539420 (&id_priv->handler_mutex/1){+.+.}-{3:3}, at: cma_ib_req_handler+0x2dd4/0x50b0 [ 802.523355][ T8] [ 802.523355][ T8] which lock already depends on the new lock. [ 802.523355][ T8] [ 802.523360][ T8] [ 802.523360][ T8] the existing dependency chain (in reverse order) is: [ 802.523365][ T8] [ 802.523365][ T8] -> #2 (&id_priv->handler_mutex/1){+.+.}-{3:3}: [ 802.523391][ T8] __mutex_lock+0x135/0xc80 [ 802.523411][ T8] cma_ib_req_handler+0x2dd4/0x50b0 [ 802.523429][ T8] cm_process_work+0x4b/0x410 [ 802.523449][ T8] cm_work_handler+0x9bbe/0xea50 [ 802.523467][ T8] process_scheduled_works+0xa60/0x1600 [ 802.523486][ T8] worker_thread+0xa5e/0xfe0 [ 802.523503][ T8] kthread+0x2fa/0x390 [ 802.523517][ T8] ret_from_fork+0x48/0x80 [ 802.523535][ T8] ret_from_fork_asm+0x11/0x20 [ 802.523554][ T8] [ 802.523554][ T8] -> #1 (&id_priv->handler_mutex){+.+.}-{3:3}: [ 802.523578][ T8] __mutex_lock+0x135/0xc80 [ 802.523594][ T8] rdma_destroy_id+0x1b/0x30 [ 802.523611][ T8] rds_ib_laddr_check+0x3e1/0x6b0 [ 802.523628][ T8] rds_trans_get_preferred+0x173/0x3b0 [ 802.523645][ T8] rds_bind+0x690/0x870 [ 802.523665][ T8] __sys_bind+0x2f0/0x3f0 [ 802.523683][ T8] __x64_sys_bind+0x7a/0x90 [ 802.523701][ T8] do_syscall_64+0x55/0xb0 [ 802.523715][ T8] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.523739][ T8] [ 802.523739][ T8] -> #0 (rds_trans_sem){++++}-{3:3}: [ 802.523764][ T8] __lock_acquire+0x3a07/0x7eb0 [ 802.523782][ T8] lock_acquire+0x19e/0x420 [ 802.523798][ T8] down_read+0x46/0x2e0 [ 802.523814][ T8] rds_trans_get_preferred+0x133/0x3b0 [ 802.523831][ T8] __rds_conn_create+0xa1e/0x1fe0 [ 802.523852][ T8] rds_conn_create+0x43/0x60 [ 802.523872][ T8] rds_ib_cm_handle_connect+0x478/0x10d0 [ 802.523890][ T8] rds_rdma_cm_event_handler_cmn+0x648/0x9a0 [ 802.523909][ T8] cma_cm_event_handler+0xa6/0x290 [ 802.523926][ T8] cma_ib_req_handler+0x3435/0x50b0 [ 802.523945][ T8] cm_process_work+0x4b/0x410 [ 802.523964][ T8] cm_work_handler+0x9bbe/0xea50 [ 802.523982][ T8] process_scheduled_works+0xa60/0x1600 [ 802.523999][ T8] worker_thread+0xa5e/0xfe0 [ 802.524017][ T8] kthread+0x2fa/0x390 [ 802.524041][ T8] ret_from_fork+0x48/0x80 [ 802.524058][ T8] ret_from_fork_asm+0x11/0x20 [ 802.524076][ T8] [ 802.524076][ T8] other info that might help us debug this: [ 802.524076][ T8] [ 802.524082][ T8] Chain exists of: [ 802.524082][ T8] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 802.524082][ T8] [ 802.524115][ T8] Possible unsafe locking scenario: [ 802.524115][ T8] [ 802.524120][ T8] CPU0 CPU1 [ 802.524125][ T8] ---- ---- [ 802.524130][ T8] lock(&id_priv->handler_mutex/1); [ 802.524147][ T8] lock(&id_priv->handler_mutex); [ 802.524161][ T8] lock(&id_priv->handler_mutex/1); [ 802.524179][ T8] rlock(rds_trans_sem); [ 802.524190][ T8] [ 802.524190][ T8] *** DEADLOCK *** [ 802.524190][ T8] [ 802.524195][ T8] 4 locks held by kworker/0:0/8: [ 802.524205][ T8] #0: ffff88802bef5138 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 802.524253][ T8] #1: ffffc900000d7d00 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 802.524301][ T8] #2: ffff888061601420 (&id_priv->handler_mutex){+.+.}-{3:3}, at: cma_ib_req_handler+0x2186/0x50b0 [ 802.524348][ T8] #3: ffff888032539420 (&id_priv->handler_mutex/1){+.+.}-{3:3}, at: cma_ib_req_handler+0x2dd4/0x50b0 [ 802.524405][ T8] [ 802.524405][ T8] stack backtrace: [ 802.524411][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 [ 802.524429][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 802.524440][ T8] Workqueue: ib_cm cm_work_handler [ 802.524462][ T8] Call Trace: [ 802.524469][ T8] [ 802.524476][ T8] dump_stack_lvl+0x18c/0x250 [ 802.524494][ T8] ? load_image+0x420/0x420 [ 802.524516][ T8] ? show_regs_print_info+0x20/0x20 [ 802.524536][ T8] ? print_circular_bug+0x12b/0x1a0 [ 802.524557][ T8] check_noncircular+0x2fc/0x400 [ 802.524581][ T8] ? print_deadlock_bug+0x5d0/0x5d0 [ 802.524599][ T8] ? lockdep_lock+0xf5/0x230 [ 802.524621][ T8] ? _find_first_zero_bit+0xd6/0x100 [ 802.524640][ T8] __lock_acquire+0x3a07/0x7eb0 [ 802.524666][ T8] ? slab_free_freelist_hook+0x130/0x1a0 [ 802.524685][ T8] ? rds_cong_get_maps+0x53/0xb0 [ 802.524708][ T8] ? cma_ib_req_handler+0x3435/0x50b0 [ 802.524729][ T8] ? cm_process_work+0x4b/0x410 [ 802.524750][ T8] ? cm_work_handler+0x9bbe/0xea50 [ 802.524771][ T8] ? worker_thread+0xa5e/0xfe0 [ 802.524791][ T8] ? kthread+0x2fa/0x390 [ 802.524807][ T8] ? verify_lock_unused+0x140/0x140 [ 802.524831][ T8] ? mark_lock+0x94/0x320 [ 802.524855][ T8] lock_acquire+0x19e/0x420 [ 802.524873][ T8] ? rds_trans_get_preferred+0x133/0x3b0 [ 802.524892][ T8] ? kasan_quarantine_put+0xd8/0x220 [ 802.524916][ T8] ? __might_sleep+0xe0/0xe0 [ 802.524937][ T8] ? read_lock_is_recursive+0x20/0x20 [ 802.524955][ T8] ? slab_free_freelist_hook+0x130/0x1a0 [ 802.524970][ T8] ? do_raw_spin_unlock+0x121/0x230 [ 802.524991][ T8] ? __kmem_cache_free+0xba/0x1f0 [ 802.525013][ T8] down_read+0x46/0x2e0 [ 802.525035][ T8] ? rds_trans_get_preferred+0x133/0x3b0 [ 802.525050][ T8] rds_trans_get_preferred+0x133/0x3b0 [ 802.525067][ T8] __rds_conn_create+0xa1e/0x1fe0 [ 802.525089][ T8] ? __rds_conn_create+0x2f3/0x1fe0 [ 802.525109][ T8] ? rds_conn_create+0x60/0x60 [ 802.525127][ T8] ? __lock_acquire+0x36dd/0x7eb0 [ 802.525146][ T8] rds_conn_create+0x43/0x60 [ 802.525166][ T8] rds_ib_cm_handle_connect+0x478/0x10d0 [ 802.525186][ T8] ? rds_ib_cm_connect_complete+0x8c0/0x8c0 [ 802.525207][ T8] ? xas_store+0xcb1/0x19e0 [ 802.525230][ T8] rds_rdma_cm_event_handler_cmn+0x648/0x9a0 [ 802.525247][ T8] ? rdma_restrack_add+0x36b/0x8b0 [ 802.525262][ T8] ? rds_rdma_cm_event_handler+0x20/0x20 [ 802.525278][ T8] ? trace_cm_event_handler+0x7f/0x1c0 [ 802.525295][ T8] ? rds_cmsg_atomic+0xc30/0xc30 [ 802.525310][ T8] ? cma_listen_handler+0xfb/0x150 [ 802.525329][ T8] cma_cm_event_handler+0xa6/0x290 [ 802.525347][ T8] cma_ib_req_handler+0x3435/0x50b0 [ 802.525369][ T8] ? __lock_acquire+0x36dd/0x7eb0 [ 802.525384][ T8] ? cma_addr_cmp+0x240/0x240 [ 802.525421][ T8] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 802.525436][ T8] ? cm_queue_work_unlock+0x54/0x1c0 [ 802.525454][ T8] ? lock_chain_count+0x20/0x20 [ 802.525472][ T8] cm_process_work+0x4b/0x410 [ 802.525490][ T8] ? _raw_spin_unlock_irq+0x2e/0x50 [ 802.525510][ T8] cm_work_handler+0x9bbe/0xea50 [ 802.525539][ T8] ? refcount_inc+0x70/0x70 [ 802.525558][ T8] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 802.525573][ T8] ? __lock_acquire+0x7eb0/0x7eb0 [ 802.525588][ T8] ? read_lock_is_recursive+0x20/0x20 [ 802.525606][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 802.525622][ T8] ? process_scheduled_works+0x975/0x1600 [ 802.525639][ T8] ? process_scheduled_works+0x975/0x1600 [ 802.525656][ T8] process_scheduled_works+0xa60/0x1600 [ 802.525682][ T8] ? worker_attach_to_pool+0x370/0x370 [ 802.525700][ T8] ? assign_work+0x3cc/0x5d0 [ 802.525718][ T8] worker_thread+0xa5e/0xfe0 [ 802.525742][ T8] kthread+0x2fa/0x390 [ 802.525755][ T8] ? pr_cont_work+0x550/0x550 [ 802.525771][ T8] ? kthread_blkcg+0xd0/0xd0 [ 802.525784][ T8] ret_from_fork+0x48/0x80 [ 802.525799][ T8] ? kthread_blkcg+0xd0/0xd0 [ 802.525813][ T8] ret_from_fork_asm+0x11/0x20 [ 802.525834][ T8] [ 802.533812][T13063] udevd[13063]: inotify_add_watch(7, /dev/loop1536, 10) failed: Not a directory [ 802.554188][ T8] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 802.595612][ T8] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 802.645498][ T51] Bluetooth: Wrong link type (-71) [ 802.850660][T13026] ip6_vti0 speed is unknown, defaulting to 1000 [ 802.853566][ T51] Bluetooth: Frame is too long (len 10, expected len 4) [ 803.054660][T13026] ip6_vti0 speed is unknown, defaulting to 1000 [ 803.603307][T13026] ip6_vti0 speed is unknown, defaulting to 1000 [ 805.377165][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 808.739207][ T1292] ieee802154 phy0 wpan0: encryption failed: -22