last executing test programs: 11m12.84595108s ago: executing program 2 (id=305): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x124, 0x14, 0x17, 0x0, 0x0) 11m11.848284854s ago: executing program 2 (id=308): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffd53}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r5, &(0x7f00000000c0)}, 0x20) close(r2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) 11m9.719168253s ago: executing program 2 (id=315): socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect(0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 11m5.227384015s ago: executing program 2 (id=328): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11m4.483570098s ago: executing program 2 (id=331): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10m59.796616324s ago: executing program 2 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 10m44.509430695s ago: executing program 32 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7m4.758900332s ago: executing program 3 (id=931): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x45ef00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000001c0)=0xa, 0x4) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$TIOCMGET(r0, 0x5415, 0x0) 6m58.591214404s ago: executing program 3 (id=942): socket$inet6(0xa, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x40050}, 0x24000010) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000500), &(0x7f0000000640)=r0}, 0x20) 6m56.181074879s ago: executing program 3 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 6m54.040536816s ago: executing program 3 (id=956): r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00009d0000/0x4000)=nil, 0x4000, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_emit_ethernet(0x56, &(0x7f0000000340)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@canfd={0xd, {{0x1, 0x0, 0x1, 0x1}, 0x25, 0x2, 0x0, 0x0, "bec915f00da89c807ad94f0a21fbf8a7f2a4dcf322c152bbe808792f0f97ecd9981bd667e7a18131025891d87fe90e5130f53d97bb11bc7d5440050bf4958bfa"}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000140)=0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing\x00', 0x61e4c0, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 6m50.61864881s ago: executing program 3 (id=963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) socket$packet(0x11, 0x2, 0x300) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) socket$netlink(0x10, 0x3, 0x0) io_setup(0x3ff, &(0x7f0000000300)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) ppoll(&(0x7f0000000440)=[{r0, 0x9001}], 0x1, 0x0, 0x0, 0x0) 6m48.445012878s ago: executing program 3 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='-3\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='-4.1\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='-4.2\n', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='1\n', 0x2) 6m32.384417836s ago: executing program 33 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-2\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='-3\n', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='-4.1\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='-4.2\n', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='tcp 2049\n', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='1\n', 0x2) 2m51.312951144s ago: executing program 0 (id=1329): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa8500, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m49.87094244s ago: executing program 0 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket(0xa, 0x3, 0xff) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1, 0x6, 0x0) 2m47.810029797s ago: executing program 0 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2m45.334663155s ago: executing program 0 (id=1338): syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6100000000103afffe8000000000000000000000000000aa0000000000000000000000000000000186009078002d0600990900003259000000ff65680f71d77c80ea1ac23c743d4836d93ce0fd1059de2dad4514c3f5dff47a35c8093a2c262b4729fc43eeeb3577b181060c"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close(r1) 2m43.844312893s ago: executing program 0 (id=1340): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x9, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 2m42.118803084s ago: executing program 0 (id=1341): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.035330997s ago: executing program 34 (id=1341): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.838717177s ago: executing program 1 (id=1389): openat(0xffffffffffffff9c, 0x0, 0x0, 0x48) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) sched_setattr(0x0, 0x0, 0x0) 1m57.718640204s ago: executing program 1 (id=1397): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0xfffffe00) 1m56.379265582s ago: executing program 1 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000000d000)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004440) 1m54.129079838s ago: executing program 1 (id=1400): userfaultfd(0x801) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xee65, 0x0, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89fb8, 0x20000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x0, 0x2a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x20000, 0x40040001, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x400001, 0xffffffff}}], 0x1, 0x0, 0x0) 1m52.569413696s ago: executing program 1 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1m49.791350572s ago: executing program 1 (id=1404): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000640)='rea', 0x3) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) 1m33.286302917s ago: executing program 35 (id=1404): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000640)='rea', 0x3) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) 35.03124828s ago: executing program 4 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r4, 0x28}, 0x0, &(0x7f00000008c0)="b0f5ec01e02085467da6d8b2b2a69c0000000000000001aa0eedaa25e8466819395b8df98f3c90a0", 0x0) 31.804510882s ago: executing program 4 (id=1470): io_uring_enter(0xffffffffffffffff, 0x52e6, 0x4e38, 0xd8, &(0x7f0000000100)={[0x10]}, 0x8) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 29.552030887s ago: executing program 8 (id=1474): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1162, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffc}, 0x2d, 0xfffffffffffffffa) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 26.761479133s ago: executing program 4 (id=1477): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) sched_setattr(0x0, 0x0, 0x0) 24.815369665s ago: executing program 4 (id=1481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) 23.170602292s ago: executing program 4 (id=1483): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa8500, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.840782924s ago: executing program 4 (id=1485): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) 18.21581746s ago: executing program 5 (id=1491): socket(0x200000000000011, 0x2, 0xd) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x200000000000011, 0x2, 0xd) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) 16.873784038s ago: executing program 8 (id=1494): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 15.708912053s ago: executing program 7 (id=1495): r0 = syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071122e00000000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_add_dev(r2, 0x0, r1, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r3, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x2000, 0x1, 0x243, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffffc, 0x1000, 0x0, 0x8004146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x2000, 0x4000, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x344a, 0x8, 0x2, 0xc5}}], 0x1, 0x0, 0x0) 15.707595539s ago: executing program 8 (id=1496): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f0000000280)='1', 0x1) 14.275000406s ago: executing program 8 (id=1497): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) 14.228266588s ago: executing program 5 (id=1498): openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) 14.07483275s ago: executing program 7 (id=1499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 12.307993382s ago: executing program 5 (id=1500): pwritev2(0xffffffffffffffff, &(0x7f0000003240)=[{&(0x7f0000000240)="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", 0x20a}], 0x1, 0x4, 0x10002, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x90980, 0x84) mkdirat(r1, &(0x7f0000000280)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1be) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000880)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x1, 0xff}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) 12.107776489s ago: executing program 7 (id=1501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_clone3(&(0x7f0000000740)={0x4000, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000300), {0x3f}, &(0x7f0000000500)=""/249, 0xf9, &(0x7f0000000600)=""/224, &(0x7f0000000700)=[r0, r0], 0x2}, 0x58) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r2 = openat$dir(0xffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x40, 0xc) getdents(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, 0x0, 0x4003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x4, &(0x7f0000000340), 0x4) 12.005645603s ago: executing program 6 (id=1502): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x1ff) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_fuse_handle_req(r3, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b7ed4f7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a7890814529440000004e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8046d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x100) ioctl$TIOCGETD(r0, 0x5424, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write(r5, &(0x7f0000000280)='{*', 0x2) 11.607991571s ago: executing program 6 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 9.198665963s ago: executing program 6 (id=1504): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xb, &(0x7f0000000100)={0x6, 0x8}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x4, &(0x7f0000000340), 0x4) 9.010661419s ago: executing program 7 (id=1505): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.725949068s ago: executing program 36 (id=1485): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) 5.37529129s ago: executing program 5 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x6, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x81, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.374260475s ago: executing program 6 (id=1508): ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a) r0 = syz_open_dev$rtc(0x0, 0x2c8f, 0x204200) ioctl$RTC_WIE_OFF(r0, 0x7010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 5.187980855s ago: executing program 8 (id=1509): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 3.558361653s ago: executing program 6 (id=1510): userfaultfd(0x801) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xee65, 0x0, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89fb8, 0x20000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x0, 0x2a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x20000, 0x40040001, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x400001, 0xffffffff}}], 0x1, 0x0, 0x0) 2.24126192s ago: executing program 5 (id=1511): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x802) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x5, [0x3, 0x400, 0x3, 0x5fbb2198, 0x2]}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) openat$autofs(0xffffffffffffff9c, 0x0, 0x400100, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 2.135186539s ago: executing program 7 (id=1512): userfaultfd(0x801) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89fb8, 0x20000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x0, 0x2a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x20000, 0x40040001, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x400001, 0xffffffff}}], 0x1, 0x0, 0x0) 342.054377ms ago: executing program 5 (id=1513): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000280)={0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) mlockall(0x2) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000500)='n', 0x1) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x1, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x92c, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8445, 0x6, 0x5, 0x1, 0x200], [0x1000000b, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x1e, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93695, 0x43, 0x9], [0x7, 0xa, 0x4, 0x8005, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x11, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xbb, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) 31.793543ms ago: executing program 8 (id=1514): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x1000, 0x2, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) mkdir(0x0, 0x111) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x1a0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) rmdir(&(0x7f0000000100)='./control\x00') 1.179603ms ago: executing program 6 (id=1515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646", 0x7e, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) mkdir(0x0, 0x2c) 0s ago: executing program 7 (id=1516): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_usb_connect(0x3, 0x32, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): T1385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.631896][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.646500][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.746719][ T1116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.746774][ T1116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.746815][ T1116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.746856][ T1116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.746895][ T1116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.746934][ T1116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.746975][ T1116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.747015][ T1116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.747054][ T1116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.747093][ T1116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.747133][ T1116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.747173][ T1116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.747214][ T1116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.747252][ T1116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.846432][ T5808] uprobe: syz.0.10:5808 failed to unregister, leaking uprobe [ 117.846541][ T5808] uprobe: syz.0.10:5808 failed to unregister, leaking uprobe [ 122.124812][ T5856] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 125.054471][ T5876] FAULT_INJECTION: forcing a failure. [ 125.054471][ T5876] name fail_futex, interval 1, probability 0, space 0, times 1 [ 125.054550][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz.4.30 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.054583][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.054607][ T5876] Call Trace: [ 125.054616][ T5876] [ 125.054626][ T5876] dump_stack_lvl+0xe8/0x150 [ 125.054674][ T5876] should_fail_ex+0x46b/0x600 [ 125.054713][ T5876] get_futex_key+0x1b4/0x1580 [ 125.054748][ T5876] ? rcu_is_watching+0x16/0xb0 [ 125.054793][ T5876] ? __pfx_get_futex_key+0x10/0x10 [ 125.054830][ T5876] ? update_se+0x90/0xf90 [ 125.054866][ T5876] futex_wait_setup+0x4a/0x590 [ 125.054900][ T5876] ? __futex_wait+0xe1/0x410 [ 125.054932][ T5876] __futex_wait+0x161/0x410 [ 125.054965][ T5876] ? __pfx___futex_wait+0x10/0x10 [ 125.054998][ T5876] ? __pfx_futex_wake_mark+0x10/0x10 [ 125.055030][ T5876] ? try_to_wake_up+0x887/0x1430 [ 125.055065][ T5876] futex_wait+0x121/0x390 [ 125.055094][ T5876] ? __pfx_futex_wait+0x10/0x10 [ 125.055130][ T5876] ? __local_bh_enable+0x1e3/0x2f0 [ 125.055168][ T5876] do_futex+0x3e7/0x4e0 [ 125.055195][ T5876] ? __pfx_do_futex+0x10/0x10 [ 125.055234][ T5876] ? __sys_bind+0x371/0x410 [ 125.055279][ T5876] __se_sys_futex+0x3a8/0x450 [ 125.055309][ T5876] ? __pfx___se_sys_futex+0x10/0x10 [ 125.055332][ T5876] ? rcu_is_watching+0x16/0xb0 [ 125.055373][ T5876] ? __x64_sys_futex+0x21/0xf0 [ 125.055400][ T5876] do_syscall_64+0x166/0x520 [ 125.055425][ T5876] ? trace_irq_disable+0x3b/0x140 [ 125.055456][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.055480][ T5876] ? clear_bhb_loop+0x70/0xc0 [ 125.055508][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.055532][ T5876] RIP: 0033:0x7f98967ae159 [ 125.055562][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.055580][ T5876] RSP: 002b:00007f9894a060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.055610][ T5876] RAX: ffffffffffffffda RBX: 00007f9896a35fa8 RCX: 00007f98967ae159 [ 125.055627][ T5876] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9896a35fa8 [ 125.055641][ T5876] RBP: 00007f9896a35fa0 R08: 0000000000000000 R09: 0000000000000000 [ 125.055656][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.055670][ T5876] R13: 00007f9896a36038 R14: 00007ffefb11cfe0 R15: 00007ffefb11d0c8 [ 125.055704][ T5876] [ 125.577338][ T5883] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.732335][ T38] audit: type=1326 audit(1791173133.411:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.35" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x7fc00000 [ 125.837535][ T38] audit: type=1326 audit(1791173133.521:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.35" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f737c61e159 code=0x7fc00000 [ 126.096317][ T38] audit: type=1326 audit(1791173133.811:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.35" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f737c617ed7 code=0x7fc00000 [ 126.097210][ T38] audit: type=1326 audit(1791173133.811:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.35" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f737c5bf4d9 code=0x7fc00000 [ 126.098301][ T38] audit: type=1326 audit(1791173133.811:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.35" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f737c5bf59d code=0x7fc00000 [ 126.181529][ T38] audit: type=1326 audit(1791173133.811:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5885 comm="syz.1.35" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f737c61e159 code=0x7fc00000 [ 126.535099][ T5816] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 126.745163][ T5816] usb 4-1: not running at top speed; connect to a high speed hub [ 126.745352][ T5816] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 126.749938][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.788644][ T5816] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 126.788677][ T5816] usb 4-1: Product: syz [ 126.788693][ T5816] usb 4-1: Manufacturer: syz [ 127.501827][ T5816] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 127.564309][ T5816] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 127.565987][ T5816] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 127.566127][ T5816] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 127.600596][ T5816] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 127.695876][ T5816] usb 4-1: USB disconnect, device number 2 [ 131.233258][ T5966] Bluetooth: ISO socket layer initialized [ 132.990152][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.990256][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.450093][ T6009] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 134.450129][ T6009] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.451042][ T6010] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 134.451070][ T6010] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.506229][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803aefe400: rx timeout, send abort [ 134.518173][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803aefe400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 134.583269][ T6007] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 134.583491][ T6010] vhci_hcd vhci_hcd.0: Device attached [ 134.621779][ T6007] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.621894][ T6007] vhci_hcd vhci_hcd.0: Device attached [ 134.625923][ T6006] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 134.625995][ T6006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.648995][ T6009] vhci_hcd vhci_hcd.0: Device attached [ 134.649505][ T6008] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 134.649567][ T6008] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.649755][ T6008] vhci_hcd vhci_hcd.0: Device attached [ 134.650350][ T6021] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(18) [ 134.650408][ T6021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.651105][ T6021] vhci_hcd vhci_hcd.0: Device attached [ 134.691290][ T6006] vhci_hcd vhci_hcd.0: Device attached [ 134.777021][ T6006] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(5) [ 134.777050][ T6006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.777110][ T6006] vhci_hcd vhci_hcd.0: Device attached [ 134.834269][ T6006] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(11) [ 134.834299][ T6006] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 134.834397][ T6006] vhci_hcd vhci_hcd.0: Device attached [ 134.846064][ T6022] vhci_hcd: connection closed [ 134.873072][ T6001] nvme nvme0: rdma connection establishment failed (-512) [ 134.899497][ T6014] vhci_hcd: connection closed [ 134.903177][ T6012] vhci_hcd: connection closed [ 134.916353][ T6019] vhci_hcd: connection closed [ 134.916491][ T6013] vhci_hcd: connection closed [ 134.918699][ T6011] vhci_hcd: connection closed [ 134.923132][ T6024] vhci_hcd: connection closed [ 135.034041][ T6026] vhci_hcd: connection closed [ 135.036640][ T1642] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 135.083144][ T57] vhci_hcd vhci_hcd.0: stop threads [ 135.084078][ T57] vhci_hcd vhci_hcd.0: release socket [ 135.130027][ T6017] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 135.165649][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 135.172495][ T57] vhci_hcd vhci_hcd.0: stop threads [ 135.172525][ T57] vhci_hcd vhci_hcd.0: release socket [ 135.172611][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 135.193729][ T57] vhci_hcd vhci_hcd.0: stop threads [ 135.193798][ T57] vhci_hcd vhci_hcd.0: release socket [ 135.193992][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 135.213115][ T57] vhci_hcd vhci_hcd.0: stop threads [ 135.213190][ T57] vhci_hcd vhci_hcd.0: release socket [ 135.213291][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 135.214753][ T57] vhci_hcd vhci_hcd.0: stop threads [ 135.214784][ T57] vhci_hcd vhci_hcd.0: release socket [ 135.214823][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 135.214893][ T57] vhci_hcd vhci_hcd.0: stop threads [ 135.214908][ T57] vhci_hcd vhci_hcd.0: release socket [ 135.214942][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 135.280377][ T57] vhci_hcd vhci_hcd.0: stop threads [ 135.280404][ T57] vhci_hcd vhci_hcd.0: release socket [ 135.280444][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 135.318678][ T57] vhci_hcd vhci_hcd.0: stop threads [ 135.318707][ T57] vhci_hcd vhci_hcd.0: release socket [ 135.318788][ T57] vhci_hcd vhci_hcd.0: disconnect device [ 135.484149][ T6034] FAULT_INJECTION: forcing a failure. [ 135.484149][ T6034] name failslab, interval 1, probability 0, space 0, times 1 [ 135.484188][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.4.72 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.484215][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.484228][ T6034] Call Trace: [ 135.484236][ T6034] [ 135.484246][ T6034] dump_stack_lvl+0xe8/0x150 [ 135.484284][ T6034] should_fail_ex+0x46b/0x600 [ 135.484323][ T6034] should_failslab+0xa8/0x100 [ 135.484348][ T6034] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 135.484384][ T6034] ? key_alloc+0x352/0xfe0 [ 135.484404][ T6034] ? key_alloc+0x352/0xfe0 [ 135.484430][ T6034] kmemdup_noprof+0x2b/0x70 [ 135.484459][ T6034] key_alloc+0x352/0xfe0 [ 135.484495][ T6034] keyring_alloc+0x45/0xb0 [ 135.484525][ T6034] lookup_user_key+0x428/0x1150 [ 135.484569][ T6034] ? __pfx_lookup_user_key+0x10/0x10 [ 135.484603][ T6034] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 135.484645][ T6034] __se_sys_add_key+0x315/0x420 [ 135.484671][ T6034] ? __pfx___se_sys_add_key+0x10/0x10 [ 135.484701][ T6034] ? __x64_sys_add_key+0x20/0xc0 [ 135.484726][ T6034] do_syscall_64+0x166/0x520 [ 135.484745][ T6034] ? trace_irq_disable+0x3b/0x140 [ 135.484770][ T6034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.484790][ T6034] ? clear_bhb_loop+0x70/0xc0 [ 135.484857][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.484876][ T6034] RIP: 0033:0x7f98967ae159 [ 135.484894][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.484909][ T6034] RSP: 002b:00007f9894a06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 135.484931][ T6034] RAX: ffffffffffffffda RBX: 00007f9896a35fa0 RCX: 00007f98967ae159 [ 135.484945][ T6034] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 135.484969][ T6034] RBP: 00007f989684506b R08: ffffffffffffffff R09: 0000000000000000 [ 135.484982][ T6034] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 135.484993][ T6034] R13: 00007f9896a36038 R14: 00007f9896a35fa0 R15: 00007ffefb11d0c8 [ 135.485022][ T6034] [ 138.378035][ T6087] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.651819][ T6112] netlink: 'syz.3.96': attribute type 12 has an invalid length. [ 139.872285][ T6120] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 139.940973][ T6120] CIFS: Attempting to mount //127.0.0.1/test [ 140.238770][ T6120] CIFS: VFS: Error connecting to socket. Aborting operation. [ 140.238944][ T6120] CIFS: VFS: cifs_mount failed w/return code = -111 [ 140.293732][ T1642] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 143.179715][ T6140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.351051][ T1238] usb usb34-port8: attempt power cycle [ 143.406299][ T6124] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 143.516903][ T6146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.574097][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.016546][ T1238] usb usb34-port8: unable to enumerate USB device [ 144.130733][ T6159] netlink: 'syz.2.107': attribute type 39 has an invalid length. [ 148.420443][ T6214] ptp ptp0: new virtual clock ptp1 [ 148.486212][ T6214] ptp ptp0: new virtual clock ptp2 [ 148.502523][ T6214] ptp ptp0: new virtual clock ptp3 [ 148.514925][ T6214] ptp ptp0: new virtual clock ptp4 [ 148.514943][ T6214] ptp ptp0: guarantee physical clock free running [ 148.515793][ T6221] ptp ptp0: delete virtual clock ptp4 [ 149.187128][ T6221] ptp ptp0: delete virtual clock ptp3 [ 149.350347][ T6221] ptp ptp0: delete virtual clock ptp2 [ 149.508240][ T6221] ptp ptp0: guarantee physical clock free running [ 150.741500][ T38] audit: type=1326 audit(1791173158.451:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 150.741557][ T38] audit: type=1326 audit(1791173158.451:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 150.742677][ T38] audit: type=1326 audit(1791173158.451:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 150.742729][ T38] audit: type=1326 audit(1791173158.451:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 150.743232][ T38] audit: type=1326 audit(1791173158.451:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 150.743282][ T38] audit: type=1326 audit(1791173158.451:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 150.902941][ T38] audit: type=1326 audit(1791173158.511:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 150.903003][ T38] audit: type=1326 audit(1791173158.611:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f98967adec2 code=0x7ffc0000 [ 150.903051][ T38] audit: type=1326 audit(1791173158.611:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f98967adf57 code=0x7ffc0000 [ 150.903099][ T38] audit: type=1326 audit(1791173158.611:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6248 comm="syz.4.134" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f989676ae51 code=0x7ffc0000 [ 151.407477][ T6263] netlink: 'syz.2.140': attribute type 1 has an invalid length. [ 151.590815][ T6263] bond1: (slave bridge1): making interface the new active one [ 151.594427][ T6263] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 151.737797][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 151.737828][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 152.725544][ T6287] bridge_slave_1: left allmulticast mode [ 152.725584][ T6287] bridge_slave_1: left promiscuous mode [ 152.746870][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.980444][ T5719] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 154.062280][ T6284] ceph: No mds server is up or the cluster is laggy [ 154.124348][ T5719] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 154.231999][ T6287] bridge_slave_0: left allmulticast mode [ 154.232040][ T6287] bridge_slave_0: left promiscuous mode [ 154.232303][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.315735][ T6306] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 154.747208][ T6302] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 155.381337][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'. [ 155.921657][ T6306] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 156.476153][ T6315] bond2 (unregistering): Released all slaves [ 158.267695][ T6345] fuse: fd is not a fuse device [ 159.692685][ T6368] file system registered [ 159.892907][ T6371] unloading [ 160.026109][ T6368] ffs_data_put(): freeing [ 163.712107][ T6411] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 163.712136][ T6411] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 167.989851][ T6468] 9p: Bad value for 'rfdno' [ 169.018393][ T6497] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 169.412250][ T6497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.668407][ T6499] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.926308][ T6500] bridge1: entered promiscuous mode [ 170.041626][ T6500] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 172.158830][ T6525] netlink: 'syz.2.208': attribute type 10 has an invalid length. [ 172.258951][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.407917][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.767400][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.767565][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.887186][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.887370][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.003911][ T6531] Bluetooth: MGMT ver 1.23 [ 173.011371][ T6525] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 183.058485][ T6595] overlayfs: failed to clone upperpath [ 188.719139][ T6642] overlayfs: failed to clone upperpath [ 192.736968][ T6711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.425834][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425937][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.176875][ T5605] Bluetooth: hci3: unexpected event 0x01 length: 14 > 1 [ 198.346325][ T38] kauditd_printk_skb: 44 callbacks suppressed [ 198.346351][ T38] audit: type=1800 audit(1791173206.011:62): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.270" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 198.960792][ T6770] overlayfs: failed to clone upperpath [ 199.111101][ T6749] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 199.111223][ T6749] Bluetooth: hci0: Failed to read MSFT supported features (-4) [ 200.743398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 201.771528][ T6805] netlink: 'syz.0.286': attribute type 39 has an invalid length. [ 202.937108][ T6817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.291'. [ 204.045987][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 208.831044][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 208.976599][ T6885] syz_tun: entered promiscuous mode [ 209.251817][ T38] audit: type=1326 audit(1791173216.941:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6882 comm="syz.3.311" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f026d53e159 code=0x0 [ 214.072650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 214.247108][ T6926] netlink: 56 bytes leftover after parsing attributes in process `syz.0.322'. [ 214.738248][ T6932] netlink: 'syz.3.323': attribute type 2 has an invalid length. [ 214.738276][ T6932] netlink: 'syz.3.323': attribute type 2 has an invalid length. [ 215.273909][ T6941] binder_alloc: 6940: binder_alloc_buf, no vma [ 221.262209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 222.002192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 225.034247][ T7008] ======================================================= [ 225.034247][ T7008] WARNING: The mand mount option has been deprecated and [ 225.034247][ T7008] and is ignored by this kernel. Remove the mand [ 225.034247][ T7008] option from the mount to silence this warning. [ 225.034247][ T7008] ======================================================= [ 226.406025][ T38] audit: type=1326 audit(1791173234.102:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.411001][ T38] audit: type=1326 audit(1791173234.112:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.487321][ T38] audit: type=1326 audit(1791173234.172:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.487366][ T38] audit: type=1326 audit(1791173234.192:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.487399][ T38] audit: type=1326 audit(1791173234.192:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.487430][ T38] audit: type=1326 audit(1791173234.192:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.595014][ T38] audit: type=1326 audit(1791173234.212:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.595080][ T38] audit: type=1326 audit(1791173234.292:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.595139][ T38] audit: type=1326 audit(1791173234.292:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 226.690010][ T38] audit: type=1326 audit(1791173234.392:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7027 comm="syz.0.355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 227.218403][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 227.218452][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 227.218483][ T5605] Bluetooth: hci1: command 0x0406 tx timeout [ 227.252055][ T5597] Bluetooth: hci3: command 0x0406 tx timeout [ 230.284496][ T7045] netlink: 'syz.3.360': attribute type 39 has an invalid length. [ 230.785642][ T7041] uprobe: syz.1.361:7041 failed to unregister, leaking uprobe [ 234.418159][ T7060] fuse: Bad value for 'fd' [ 236.814457][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.875093][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.877660][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.901218][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.923782][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.972464][ T5601] Bluetooth: hci5: command tx timeout [ 239.653789][ T7117] bridge0: port 3(syz_tun) entered blocking state [ 239.653929][ T7117] bridge0: port 3(syz_tun) entered disabled state [ 239.654124][ T7117] syz_tun: entered allmulticast mode [ 239.660341][ T7117] syz_tun: entered promiscuous mode [ 239.690284][ T7117] bridge0: port 3(syz_tun) entered blocking state [ 239.710769][ T7117] bridge0: port 3(syz_tun) entered listening state [ 241.075659][ T5601] Bluetooth: hci5: command tx timeout [ 242.288019][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.288332][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.288536][ T7080] bridge_slave_0: entered allmulticast mode [ 242.329280][ T7080] bridge_slave_0: entered promiscuous mode [ 242.350851][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.368115][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.368351][ T7080] bridge_slave_1: entered allmulticast mode [ 242.386687][ T7080] bridge_slave_1: entered promiscuous mode [ 242.581702][ T7157] netlink: 5856 bytes leftover after parsing attributes in process `syz.1.394'. [ 242.627825][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 242.627847][ T38] audit: type=1326 audit(1791173250.333:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 242.627898][ T38] audit: type=1326 audit(1791173250.333:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 242.627944][ T38] audit: type=1326 audit(1791173250.333:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 242.627990][ T38] audit: type=1326 audit(1791173250.333:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 242.628607][ T38] audit: type=1326 audit(1791173250.333:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x7ffc0000 [ 242.764283][ T38] audit: type=1326 audit(1791173250.463:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f426edee98e code=0x7ffc0000 [ 242.764452][ T38] audit: type=1326 audit(1791173250.473:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f426edee98e code=0x7ffc0000 [ 242.774248][ T38] audit: type=1326 audit(1791173250.483:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f426edee98e code=0x7ffc0000 [ 242.796713][ T38] audit: type=1326 audit(1791173250.503:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f426edee98e code=0x7ffc0000 [ 242.813982][ T38] audit: type=1326 audit(1791173250.523:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7154 comm="syz.0.391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f426edee98e code=0x7ffc0000 [ 243.228860][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.275240][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.436630][ T5601] Bluetooth: hci5: command tx timeout [ 243.667098][ T7080] team0: Port device team_slave_0 added [ 243.689670][ T7080] team0: Port device team_slave_1 added [ 243.956883][ T7170] netlink: ct family unspecified [ 243.956939][ T7170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.405650][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.405671][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.405700][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.416240][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.416260][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.416289][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.332115][ T7080] hsr_slave_0: entered promiscuous mode [ 245.394416][ T7080] hsr_slave_1: entered promiscuous mode [ 245.426216][ T7080] debugfs: 'hsr0' already exists in 'hsr' [ 245.426249][ T7080] Cannot create hsr debugfs directory [ 245.621517][ T5601] Bluetooth: hci5: command tx timeout [ 248.509961][ T7190] syz.0.405 (7190) used greatest stack depth: 18688 bytes left [ 251.205837][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 252.156037][ T7080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.223643][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.308679][ T7230] netlink: 'syz.0.417': attribute type 11 has an invalid length. [ 254.336661][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.429886][ T7080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.465741][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.468375][ T7080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.646390][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.656828][ T7080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.856658][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.212587][ C1] bridge0: port 3(syz_tun) entered learning state [ 255.492432][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.873022][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.873098][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.584414][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.351327][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.730286][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.734448][ T7312] netlink: 'syz.1.439': attribute type 4 has an invalid length. [ 258.789312][ T7314] netlink: 'syz.1.439': attribute type 4 has an invalid length. [ 259.135764][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.206143][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.206288][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.427805][ T1385] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.427955][ T1385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.561999][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:01 lost [ 260.563111][ C0] bridge0: topology change detected, propagating [ 261.836152][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 261.836329][ T7334] Zero length message leads to an empty skb [ 262.465948][ T33] bridge_slave_1: left allmulticast mode [ 262.467028][ T33] bridge_slave_1: left promiscuous mode [ 262.534633][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.869025][ T38] kauditd_printk_skb: 143 callbacks suppressed [ 263.869060][ T38] audit: type=1326 audit(1791173271.574:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 263.869113][ T38] audit: type=1326 audit(1791173271.574:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 263.927480][ T38] audit: type=1326 audit(1791173271.634:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 263.927825][ T38] audit: type=1326 audit(1791173271.634:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 263.928548][ T38] audit: type=1326 audit(1791173271.634:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 264.008485][ T38] audit: type=1326 audit(1791173271.714:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 264.009417][ T38] audit: type=1326 audit(1791173271.714:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 264.086788][ T38] audit: type=1326 audit(1791173271.794:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 264.116514][ T38] audit: type=1326 audit(1791173271.794:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 264.116578][ T38] audit: type=1326 audit(1791173271.804:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f026d53e159 code=0x7ffc0000 [ 264.186153][ T33] bridge_slave_0: left allmulticast mode [ 264.186193][ T33] bridge_slave_0: left promiscuous mode [ 264.205301][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.645054][ T7382] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 270.085602][ T33] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 270.244616][ T7439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.366648][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 274.366700][ C1] bridge0: topology change detected, propagating [ 275.108740][ T7452] xt_IDLETIMER: label is empty or not nul-terminated [ 275.382531][ T33] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 277.336654][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.611452][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.674149][ T33] bond0 (unregistering): Released all slaves [ 278.769018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 278.799019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 278.832594][ T33] bond1 (unregistering): Released all slaves [ 279.852038][ T38] kauditd_printk_skb: 17 callbacks suppressed [ 279.852067][ T38] audit: type=1326 audit(1791173287.565:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7495 comm="syz.4.497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 279.852117][ T38] audit: type=1326 audit(1791173287.565:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7495 comm="syz.4.497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 279.852162][ T38] audit: type=1326 audit(1791173287.565:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7495 comm="syz.4.497" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 281.533777][ T38] audit: type=1326 audit(1791173289.235:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7518 comm="syz.0.501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x0 [ 288.348626][ T5245] 8021q: adding VLAN 0 to HW filter on device eth2 [ 288.453575][ T7569] process 'syz.4.512' launched './file0' with NULL argv: empty string added [ 288.736707][ T7574] FAULT_INJECTION: forcing a failure. [ 288.736707][ T7574] name fail_futex, interval 1, probability 0, space 0, times 0 [ 288.736750][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.3.513 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 288.736794][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.736814][ T7574] Call Trace: [ 288.736824][ T7574] [ 288.736835][ T7574] dump_stack_lvl+0xe8/0x150 [ 288.736879][ T7574] should_fail_ex+0x46b/0x600 [ 288.736919][ T7574] get_futex_key+0x1b4/0x1580 [ 288.736969][ T7574] ? __pfx_get_futex_key+0x10/0x10 [ 288.737008][ T7574] ? lock_acquire+0x115/0x350 [ 288.737040][ T7574] ? futex_unqueue+0x22/0x240 [ 288.737079][ T7574] futex_wait_setup+0x4a/0x590 [ 288.737119][ T7574] ? __futex_wait+0xe1/0x410 [ 288.737153][ T7574] __futex_wait+0x161/0x410 [ 288.737190][ T7574] ? __pfx___futex_wait+0x10/0x10 [ 288.737225][ T7574] ? __pfx_futex_wake_mark+0x10/0x10 [ 288.737260][ T7574] ? futex_hash+0x4e/0x2b0 [ 288.737295][ T7574] ? futex_hash+0x4e/0x2b0 [ 288.737327][ T7574] ? futex_hash+0x275/0x2b0 [ 288.737368][ T7574] futex_wait+0x121/0x390 [ 288.737401][ T7574] ? __pfx_futex_wait+0x10/0x10 [ 288.737452][ T7574] do_futex+0x3e7/0x4e0 [ 288.737483][ T7574] ? __pfx_do_futex+0x10/0x10 [ 288.737516][ T7574] __se_sys_futex+0x3a8/0x450 [ 288.737555][ T7574] ? __pfx___se_sys_futex+0x10/0x10 [ 288.737580][ T7574] ? __pfx___se_sys_prctl+0x10/0x10 [ 288.737614][ T7574] ? __x64_sys_futex+0x21/0xf0 [ 288.737641][ T7574] do_syscall_64+0x166/0x520 [ 288.737668][ T7574] ? trace_irq_disable+0x3b/0x140 [ 288.737700][ T7574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.737724][ T7574] ? clear_bhb_loop+0x70/0xc0 [ 288.737754][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.737777][ T7574] RIP: 0033:0x7f026d53e159 [ 288.737799][ T7574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.737819][ T7574] RSP: 002b:00007f026b7960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.737844][ T7574] RAX: ffffffffffffffda RBX: 00007f026d7c5fa8 RCX: 00007f026d53e159 [ 288.737862][ T7574] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f026d7c5fa8 [ 288.737877][ T7574] RBP: 00007f026d7c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 288.737891][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.737904][ T7574] R13: 00007f026d7c6038 R14: 00007fffa0fda650 R15: 00007fffa0fda738 [ 288.737940][ T7574] [ 289.453353][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.613586][ T1385] IPVS: starting estimator thread 0... [ 289.780943][ T7590] IPVS: using max 7 ests per chain, 16800 per kthread [ 296.302768][ T5245] 8021q: adding VLAN 0 to HW filter on device eth1 [ 296.719050][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.754766][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.787056][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.815445][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.831079][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.544261][ T33] hsr_slave_0: left promiscuous mode [ 297.579480][ T33] hsr_slave_1: left promiscuous mode [ 297.663496][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.964937][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.851904][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.852007][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.048953][ T5601] Bluetooth: hci3: command tx timeout [ 299.967639][ T33] veth1_macvtap: left promiscuous mode [ 300.048359][ T33] veth0_macvtap: left promiscuous mode [ 300.109926][ T33] veth1_vlan: left promiscuous mode [ 300.110499][ T33] veth0_vlan: left promiscuous mode [ 301.272909][ T5601] Bluetooth: hci3: command tx timeout [ 303.253982][ T38] audit: type=1326 audit(1791173310.886:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7725 comm="syz.0.547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x0 [ 304.512638][ T38] audit: type=1326 audit(1791173312.227:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.513372][ T38] audit: type=1326 audit(1791173312.227:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.513686][ T38] audit: type=1326 audit(1791173312.227:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.514038][ T38] audit: type=1326 audit(1791173312.227:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.514568][ T38] audit: type=1326 audit(1791173312.227:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.514866][ T38] audit: type=1326 audit(1791173312.227:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.515381][ T38] audit: type=1326 audit(1791173312.227:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.515761][ T38] audit: type=1326 audit(1791173312.227:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.516050][ T38] audit: type=1326 audit(1791173312.227:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7739 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x7ffc0000 [ 304.760275][ T5601] Bluetooth: hci3: command tx timeout [ 307.663541][ T5601] Bluetooth: hci3: command tx timeout [ 310.770426][ T7776] futex_wake_op: syz.0.563 tries to shift op by 144; fix this program [ 311.153849][ T7785] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 311.272536][ T7786] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 313.544039][ T7802] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 313.575173][ T33] team0 (unregistering): Port device team_slave_1 removed [ 314.804719][ T33] team0 (unregistering): Port device team_slave_0 removed [ 314.913577][ T7817] openvswitch: netlink: IP tunnel dst address not specified [ 315.795346][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 315.795371][ T38] audit: type=1326 audit(1791173323.497:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7818 comm="syz.0.577" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f426ee2e159 code=0x0 [ 315.921577][ T5245] 8021q: adding VLAN 0 to HW filter on device eth3 [ 317.916162][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.916254][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.180980][ T7909] netlink: 'syz.0.591': attribute type 4 has an invalid length. [ 321.303586][ T7912] netlink: 'syz.0.591': attribute type 4 has an invalid length. [ 322.762357][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.595'. [ 323.785529][ T5245] 8021q: adding VLAN 0 to HW filter on device eth4 [ 325.092891][ T38] audit: type=1326 audit(1791173332.798:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.1.602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x7fc00000 [ 325.092951][ T38] audit: type=1326 audit(1791173332.798:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.1.602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f737c61e159 code=0x7fc00000 [ 326.448693][ T38] audit: type=1326 audit(1791173334.168:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7980 comm="syz.3.607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f026d53e159 code=0x0 [ 326.880331][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.882138][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.882342][ T7652] bridge_slave_0: entered allmulticast mode [ 326.906790][ T7652] bridge_slave_0: entered promiscuous mode [ 326.922565][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.922739][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.922942][ T7652] bridge_slave_1: entered allmulticast mode [ 326.955864][ T7652] bridge_slave_1: entered promiscuous mode [ 329.549404][ T7999] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.610'. [ 329.932806][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.925418][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.305384][ T7652] team0: Port device team_slave_0 added [ 332.451651][ T7652] team0: Port device team_slave_1 added [ 332.496390][ T5601] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 332.640124][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'. [ 332.691321][ T8054] vlan2: entered promiscuous mode [ 332.691345][ T8054] hsr0: entered promiscuous mode [ 332.966307][ T8057] hsr_slave_0: left promiscuous mode [ 333.006124][ T8057] hsr_slave_1: left promiscuous mode [ 333.287239][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.287260][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.287290][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.290223][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.290239][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.290269][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.701187][ T7652] hsr_slave_0: entered promiscuous mode [ 333.703088][ T7652] hsr_slave_1: entered promiscuous mode [ 333.704211][ T7652] debugfs: 'hsr0' already exists in 'hsr' [ 333.704238][ T7652] Cannot create hsr debugfs directory [ 333.939297][ T38] audit: type=1326 audit(1791173341.628:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.1.634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f737c61e159 code=0x0 [ 342.272991][ T38] audit: type=1326 audit(1791173349.649:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.4.648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x0 [ 343.460769][ T33] bridge_slave_1: left allmulticast mode [ 343.460810][ T33] bridge_slave_1: left promiscuous mode [ 343.461086][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.018229][ T33] bridge_slave_0: left allmulticast mode [ 344.018270][ T33] bridge_slave_0: left promiscuous mode [ 344.019126][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.823579][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 345.303817][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 345.303853][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 346.097149][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.156142][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.202412][ T33] bond0 (unregistering): Released all slaves [ 346.244792][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.358427][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.479168][ T8225] netlink: 300 bytes leftover after parsing attributes in process `syz.0.668'. [ 350.185098][ T33] hsr_slave_0: left promiscuous mode [ 350.328278][ T33] hsr_slave_1: left promiscuous mode [ 350.329630][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.427890][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.531336][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 350.926129][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 352.516929][ T33] team0 (unregistering): Port device team_slave_1 removed [ 352.673994][ T33] team0 (unregistering): Port device team_slave_0 removed [ 356.327795][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.369705][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.374235][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.464279][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.493791][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.964792][ T60] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 357.093323][ T60] Bluetooth: hci2: unexpected event for opcode 0x203c [ 357.103430][ T60] Bluetooth: hci2: unexpected event for opcode 0x2036 [ 357.107848][ T60] Bluetooth: hci2: unexpected event for opcode 0x2037 [ 357.402731][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 357.457708][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 357.952185][ T60] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 358.581660][ T60] Bluetooth: hci5: command tx timeout [ 360.030072][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 360.656040][ T5601] Bluetooth: hci5: command tx timeout [ 362.096208][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 362.724301][ T5601] Bluetooth: hci5: command tx timeout [ 362.971538][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.971770][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.972063][ T8299] bridge_slave_0: entered allmulticast mode [ 363.014748][ T8299] bridge_slave_0: entered promiscuous mode [ 363.095196][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.097025][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.097265][ T8299] bridge_slave_1: entered allmulticast mode [ 363.103404][ T8299] bridge_slave_1: entered promiscuous mode [ 363.341355][ T8413] futex_wake_op: syz.3.706 tries to shift op by 144; fix this program [ 363.393143][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.417713][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.851050][ T8299] team0: Port device team_slave_0 added [ 363.874504][ T8299] team0: Port device team_slave_1 added [ 364.175802][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 364.250435][ T8427] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 365.374084][ T5601] Bluetooth: hci5: command tx timeout [ 365.624708][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 366.034653][ T8427] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 366.038132][ T8434] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 366.127284][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.127308][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.127338][ T8299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.135181][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.135201][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.135231][ T8299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.538070][ T5849] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 366.551761][ T6666] bridge_slave_1: left allmulticast mode [ 366.551798][ T6666] bridge_slave_1: left promiscuous mode [ 366.552062][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.656059][ T6666] bridge_slave_0: left allmulticast mode [ 366.656112][ T6666] bridge_slave_0: left promiscuous mode [ 366.656404][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.840933][ T5849] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 367.604737][ T8457] ceph: No mds server is up or the cluster is laggy [ 368.333837][ T5849] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 368.479654][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 368.798874][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 368.805499][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.806829][ T31] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 368.833241][ T31] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 368.833272][ T31] usb 4-1: config 0 has no interface number 0 [ 368.833321][ T31] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 368.833350][ T31] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 368.833375][ T31] usb 4-1: config 0 interface 88 has no altsetting 0 [ 368.924111][ T31] usb 4-1: string descriptor 0 read error: -22 [ 368.924299][ T31] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 368.985826][ T31] usb 4-1: config 0 descriptor?? [ 369.539001][ T6666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.615837][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input5 [ 369.623728][ T6666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.781668][ T6666] bond0 (unregistering): Released all slaves [ 369.821584][ T31] usb 4-1: USB disconnect, device number 3 [ 369.831361][ T8482] jffs2: notice: (8482) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 369.905250][ T8472] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 369.905282][ T8472] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 369.905313][ T8472] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 369.909096][ T8472] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 369.918537][ T8472] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 370.619680][ T8299] hsr_slave_0: entered promiscuous mode [ 370.623639][ T8299] hsr_slave_1: entered promiscuous mode [ 370.627999][ T8307] udevd[8307]: Error opening device "/dev/input/event4": No such device [ 370.628145][ T8307] udevd[8307]: Unable to EVIOCGABS device "/dev/input/event4" [ 370.628266][ T8307] udevd[8307]: Unable to EVIOCGABS device "/dev/input/event4" [ 370.676693][ T8299] debugfs: 'hsr0' already exists in 'hsr' [ 370.676722][ T8299] Cannot create hsr debugfs directory [ 372.166335][ T6666] hsr_slave_0: left promiscuous mode [ 373.147572][ T6666] hsr_slave_1: left promiscuous mode [ 373.361623][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.396280][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.913272][ T8525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.983119][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 375.139041][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 378.675452][ T8299] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 379.666652][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.666729][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.311550][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.488011][ T8299] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.741508][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.762842][ T8299] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.960671][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.239355][ T8299] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.378296][ T8597] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 386.378345][ T8597] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 386.378367][ T8597] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 386.588800][ T8299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.942422][ T8610] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.274870][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.323172][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.352250][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.352469][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.396046][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.396232][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.592899][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.771'. [ 390.958110][ T8657] bridge0: port 3(syz_tun) entered blocking state [ 390.958647][ T8657] bridge0: port 3(syz_tun) entered disabled state [ 390.958876][ T8657] syz_tun: entered allmulticast mode [ 390.996196][ T8657] syz_tun: left allmulticast mode [ 392.206216][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.910798][ T8299] veth0_vlan: entered promiscuous mode [ 393.939947][ T8299] veth1_vlan: entered promiscuous mode [ 395.207930][ T8299] veth0_macvtap: entered promiscuous mode [ 395.238083][ T8299] veth1_macvtap: entered promiscuous mode [ 395.423197][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.468364][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.497938][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036bf9400: rx timeout, send abort [ 395.674413][ T6666] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.678455][ T6666] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.678500][ T6666] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.678535][ T6666] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.002729][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036bf9400: abort rx timeout. Force session deactivation [ 396.004868][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d8f2000: rx timeout, send abort [ 396.511222][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d8f2000: abort rx timeout. Force session deactivation [ 396.621819][ T6683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.621843][ T6683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.427519][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 400.688716][ T6667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.688739][ T6667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.787811][ T8769] syz_tun: entered allmulticast mode [ 404.913158][ T8767] syz_tun: left allmulticast mode [ 411.739114][ T8817] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 413.382456][ T8836] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 413.382721][ T8836] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 413.501391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 413.521416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 413.531405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 413.541393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 415.706139][ T8848] FAULT_INJECTION: forcing a failure. [ 415.706139][ T8848] name failslab, interval 1, probability 0, space 0, times 0 [ 415.706201][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.5.831 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 415.706229][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.706248][ T8848] Call Trace: [ 415.706258][ T8848] [ 415.706269][ T8848] dump_stack_lvl+0xe8/0x150 [ 415.706312][ T8848] should_fail_ex+0x46b/0x600 [ 415.706354][ T8848] should_failslab+0xa8/0x100 [ 415.706389][ T8848] __kvmalloc_node_noprof+0x176/0x890 [ 415.706430][ T8848] ? simple_xattr_alloc+0x5e/0x100 [ 415.706462][ T8848] ? simple_xattr_alloc+0x5e/0x100 [ 415.706503][ T8848] simple_xattr_alloc+0x5e/0x100 [ 415.706540][ T8848] shmem_initxattrs+0x2ad/0x530 [ 415.706573][ T8848] security_inode_init_security+0x29b/0x3e0 [ 415.706603][ T8848] ? __pfx_shmem_initxattrs+0x10/0x10 [ 415.706635][ T8848] ? __pfx_security_inode_init_security+0x10/0x10 [ 415.706665][ T8848] ? set_cached_acl+0xd2/0x180 [ 415.706695][ T8848] ? simple_acl_create+0x184/0x1b0 [ 415.706732][ T8848] shmem_mknod+0x1ea/0x340 [ 415.706761][ T8848] shmem_mkdir+0x33/0x70 [ 415.706786][ T8848] vfs_mkdir+0x408/0x620 [ 415.706828][ T8848] filename_mkdirat+0x289/0x520 [ 415.706869][ T8848] ? __pfx_filename_mkdirat+0x10/0x10 [ 415.706908][ T8848] ? do_getname+0x151/0x250 [ 415.706934][ T8848] __se_sys_mkdirat+0x35/0x150 [ 415.706971][ T8848] do_syscall_64+0x166/0x520 [ 415.706998][ T8848] ? trace_irq_disable+0x3b/0x140 [ 415.707030][ T8848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.707054][ T8848] ? clear_bhb_loop+0x70/0xc0 [ 415.707083][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.707112][ T8848] RIP: 0033:0x7f7acdb2e159 [ 415.707135][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.707154][ T8848] RSP: 002b:00007f7acbd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 415.707180][ T8848] RAX: ffffffffffffffda RBX: 00007f7acddb5fa0 RCX: 00007f7acdb2e159 [ 415.707197][ T8848] RDX: 00000000000001ff RSI: 0000200000000200 RDI: ffffffffffffff9c [ 415.707214][ T8848] RBP: 00007f7acdbc506b R08: 0000000000000000 R09: 0000000000000000 [ 415.707229][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.707243][ T8848] R13: 00007f7acddb6038 R14: 00007f7acddb5fa0 R15: 00007fffea80c058 [ 415.707282][ T8848] [ 420.807839][ T8870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.836'. [ 420.879809][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 423.042427][ T8882] syz.0.828 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 423.044576][ T38] audit: type=1326 audit(1791173430.763:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8881 comm="syz.0.828" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f426ee2e159 code=0x0 [ 430.756881][ T8952] bridge0: port 3(syz_tun) entered blocking state [ 430.757156][ T8952] bridge0: port 3(syz_tun) entered disabled state [ 430.757405][ T8952] syz_tun: entered allmulticast mode [ 430.844913][ T8952] syz_tun: entered promiscuous mode [ 430.870489][ T8952] bridge0: port 3(syz_tun) entered blocking state [ 430.875023][ T8952] bridge0: port 3(syz_tun) entered forwarding state [ 432.385780][ T8971] capability: warning: `syz.0.865' uses deprecated v2 capabilities in a way that may be insecure [ 434.385300][ T9002] bridge0: port 3(syz_tun) entered blocking state [ 434.385538][ T9002] bridge0: port 3(syz_tun) entered disabled state [ 434.385742][ T9002] syz_tun: entered allmulticast mode [ 434.388510][ T9002] syz_tun: entered promiscuous mode [ 434.389272][ T9002] bridge0: port 3(syz_tun) entered blocking state [ 434.389401][ T9002] bridge0: port 3(syz_tun) entered forwarding state [ 435.460396][ T9000] netlink: 'syz.1.884': attribute type 4 has an invalid length. [ 435.526321][ T9004] netlink: 'syz.1.884': attribute type 4 has an invalid length. [ 435.698139][ T9008] 9p: Bad value for 'wfdno' [ 439.925417][ T9043] tipc: Started in network mode [ 439.925443][ T9043] tipc: Node identity 4, cluster identity 4711 [ 439.925458][ T9043] tipc: Node number set to 4 [ 440.229369][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.229449][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.922726][ T9052] tipc: Started in network mode [ 440.922752][ T9052] tipc: Node identity ac1414aa, cluster identity 4711 [ 442.119276][ T9052] tipc: Enabled bearer , priority 10 [ 443.255964][ T5777] tipc: Node number set to 2886997162 [ 445.425509][ T9089] netlink: 'syz.3.900': attribute type 12 has an invalid length. [ 445.425534][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 445.425562][ T9089] bond0: option primary_reselect: invalid value (183) [ 446.483693][ T9100] fuse: fd is not a fuse device [ 447.847250][ T9105] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 447.847292][ T9105] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 447.847314][ T9105] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 447.895123][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 449.399477][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 449.599513][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 449.602674][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 449.602734][ T9] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 449.685976][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.685999][ T9] usb 4-1: Product: syz [ 449.686010][ T9] usb 4-1: Manufacturer: syz [ 449.686020][ T9] usb 4-1: SerialNumber: syz [ 449.722233][ T9139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.911'. [ 449.728903][ T9139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.911'. [ 450.149399][ T9] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 450.455598][ T9] usb 4-1: USB disconnect, device number 4 [ 452.340507][ T38] audit: type=1800 audit(1791173460.035:279): pid=9166 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.920" name="file1" dev="sda1" ino=2051 res=0 errno=0 [ 454.453819][ T9199] FAULT_INJECTION: forcing a failure. [ 454.453819][ T9199] name failslab, interval 1, probability 0, space 0, times 0 [ 454.453862][ T9199] CPU: 1 UID: 0 PID: 9199 Comm: syz.5.929 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.453891][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.453905][ T9199] Call Trace: [ 454.453914][ T9199] [ 454.453925][ T9199] dump_stack_lvl+0xe8/0x150 [ 454.453967][ T9199] should_fail_ex+0x46b/0x600 [ 454.454018][ T9199] should_failslab+0xa8/0x100 [ 454.454047][ T9199] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 454.454087][ T9199] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 454.454110][ T9199] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 454.454140][ T9199] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 454.454166][ T9199] krealloc_node_align_noprof+0x19a/0x390 [ 454.454202][ T9199] ? bpf_lsm_capable+0x9/0x20 [ 454.454232][ T9199] ? security_capable+0x7e/0x2c0 [ 454.454259][ T9199] kvrealloc_node_align_noprof+0x7b/0xf0 [ 454.454286][ T9199] bpf_iarray_realloc+0x34/0xa0 [ 454.454319][ T9199] bpf_check+0x1496/0x2f00 [ 454.454374][ T9199] ? __pfx_bpf_check+0x10/0x10 [ 454.454413][ T9199] ? bpf_obj_name_cpy+0x194/0x1e0 [ 454.454445][ T9199] bpf_prog_load+0x14d6/0x1c20 [ 454.454496][ T9199] ? __pfx_bpf_prog_load+0x10/0x10 [ 454.454561][ T9199] __sys_bpf+0xd0d/0xd90 [ 454.454606][ T9199] ? __pfx___sys_bpf+0x10/0x10 [ 454.454646][ T9199] ? do_futex+0x458/0x4e0 [ 454.454702][ T9199] ? rcu_is_watching+0x16/0xb0 [ 454.454746][ T9199] __x64_sys_bpf+0xba/0xd0 [ 454.454782][ T9199] do_syscall_64+0x166/0x520 [ 454.454808][ T9199] ? trace_irq_disable+0x3b/0x140 [ 454.454839][ T9199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.454864][ T9199] ? clear_bhb_loop+0x70/0xc0 [ 454.454893][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.454917][ T9199] RIP: 0033:0x7f7acdb2e159 [ 454.454939][ T9199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.454958][ T9199] RSP: 002b:00007f7acbd65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.454984][ T9199] RAX: ffffffffffffffda RBX: 00007f7acddb6090 RCX: 00007f7acdb2e159 [ 454.455009][ T9199] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 454.455024][ T9199] RBP: 00007f7acdbc506b R08: 0000000000000000 R09: 0000000000000000 [ 454.455040][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.455054][ T9199] R13: 00007f7acddb6128 R14: 00007f7acddb6090 R15: 00007fffea80c058 [ 454.455091][ T9199] [ 456.686918][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.932'. [ 458.620759][ T9217] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 466.418907][ T9295] tipc: Started in network mode [ 466.418930][ T9295] tipc: Node identity 2000004, cluster identity 4711 [ 466.418944][ T9295] tipc: Node number set to 33554436 [ 467.140399][ T8258] IPVS: starting estimator thread 0... [ 467.468128][ T9299] IPVS: using max 7 ests per chain, 16800 per kthread [ 471.180349][ T9330] openvswitch: netlink: Flow key attr not present in new flow. [ 471.227747][ T5601] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 472.897069][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.971'. [ 475.591247][ T9373] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 479.861535][ T9410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 483.550072][ T5601] Bluetooth: hci5: command 0x0406 tx timeout [ 485.915712][ T9457] X.509: Couldn't decode AuthKeyIdentifier [ 489.695784][ T9481] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1013'. [ 490.001125][ T9481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1013'. [ 490.173373][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 490.232887][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 490.238500][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 490.250736][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 490.264941][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 491.685243][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1017'. [ 492.498464][ T5601] Bluetooth: hci3: command tx timeout [ 494.824473][ T5601] Bluetooth: hci3: command tx timeout [ 497.950155][ T5601] Bluetooth: hci3: command tx timeout [ 499.996961][ T5601] Bluetooth: hci3: command tx timeout [ 500.138513][ T9579] netlink: 'syz.5.1042': attribute type 1 has an invalid length. [ 500.138575][ T9579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.138590][ T9579] IPv6: NLM_F_CREATE should be set when creating new route [ 502.512688][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.512771][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.922150][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.922679][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.922888][ T9483] bridge_slave_0: entered allmulticast mode [ 502.951187][ T9483] bridge_slave_0: entered promiscuous mode [ 502.966762][ T9602] futex_wake_op: syz.4.1047 tries to shift op by 144; fix this program [ 502.969807][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.970039][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.970255][ T9483] bridge_slave_1: entered allmulticast mode [ 503.067256][ T9483] bridge_slave_1: entered promiscuous mode [ 503.385820][ T9483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.479790][ T9483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.580310][ T9483] team0: Port device team_slave_0 added [ 503.592191][ T9483] team0: Port device team_slave_1 added [ 505.103400][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.103422][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.103451][ T9483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.180221][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.180241][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.180278][ T9483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.062941][ T9483] hsr_slave_0: entered promiscuous mode [ 507.064366][ T9483] hsr_slave_1: entered promiscuous mode [ 507.073615][ T9483] debugfs: 'hsr0' already exists in 'hsr' [ 507.073643][ T9483] Cannot create hsr debugfs directory [ 507.789388][ T9633] netlink: 'syz.0.1060': attribute type 2 has an invalid length. [ 507.789411][ T9633] netlink: 'syz.0.1060': attribute type 2 has an invalid length. [ 509.304296][ T9637] trusted_key: encrypted_key: insufficient parameters specified [ 509.612875][ T9637] FAULT_INJECTION: forcing a failure. [ 509.612875][ T9637] name failslab, interval 1, probability 0, space 0, times 0 [ 509.612914][ T9637] CPU: 0 UID: 0 PID: 9637 Comm: syz.5.1061 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 509.612940][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.612953][ T9637] Call Trace: [ 509.612961][ T9637] [ 509.612970][ T9637] dump_stack_lvl+0xe8/0x150 [ 509.613008][ T9637] should_fail_ex+0x46b/0x600 [ 509.613045][ T9637] should_failslab+0xa8/0x100 [ 509.613068][ T9637] ? alloc_empty_file+0x5b/0x1d0 [ 509.613087][ T9637] kmem_cache_alloc_noprof+0x9e/0x690 [ 509.613120][ T9637] ? alloc_empty_file+0x5b/0x1d0 [ 509.613147][ T9637] alloc_empty_file+0x5b/0x1d0 [ 509.613169][ T9637] path_openat+0xa2/0x1d60 [ 509.613219][ T9637] do_file_open+0x23e/0x4a0 [ 509.613255][ T9637] ? __pfx_do_file_open+0x10/0x10 [ 509.613309][ T9637] ? alloc_fd+0x654/0x6d0 [ 509.613353][ T9637] do_sys_openat2+0x115/0x200 [ 509.613375][ T9637] ? __se_sys_futex+0x3a8/0x450 [ 509.613397][ T9637] ? __pfx_do_sys_openat2+0x10/0x10 [ 509.613419][ T9637] ? __fget_files+0x2a/0x420 [ 509.613444][ T9637] ? __pfx___se_sys_futex+0x10/0x10 [ 509.613468][ T9637] ? fput+0xa0/0xd0 [ 509.613492][ T9637] __x64_sys_openat+0x138/0x170 [ 509.613521][ T9637] do_syscall_64+0x166/0x520 [ 509.613546][ T9637] ? trace_irq_disable+0x3b/0x140 [ 509.613576][ T9637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.613599][ T9637] ? clear_bhb_loop+0x70/0xc0 [ 509.613626][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.613649][ T9637] RIP: 0033:0x7f7acdaee98e [ 509.613671][ T9637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.613690][ T9637] RSP: 002b:00007f7acbd85ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 509.613715][ T9637] RAX: ffffffffffffffda RBX: 00007f7acbd866c0 RCX: 00007f7acdaee98e [ 509.613733][ T9637] RDX: 0000000000000002 RSI: 00007f7acbd85f90 RDI: ffffffffffffff9c [ 509.613750][ T9637] RBP: 00007f7acdbc506b R08: 0000000000000000 R09: 0000000000000000 [ 509.613765][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.613779][ T9637] R13: 00007f7acddb6038 R14: 00007f7acddb5fa0 R15: 00007fffea80c058 [ 509.613814][ T9637] [ 512.015224][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.015248][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.414098][ T9483] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 513.416056][ T9667] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1066'. [ 513.493170][ T9483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.494725][ T9483] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 513.547463][ T9483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.550147][ T9483] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 513.625951][ T9483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.736724][ T9483] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 513.924034][ T9483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.627902][ T9687] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 514.730457][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 514.964290][ T9687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.329271][ T9692] bond1: (slave bridge1): making interface the new active one [ 515.994090][ T9692] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 516.673641][ T9483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.402593][ T9483] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.655586][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.655731][ T8264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.733276][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.733539][ T8264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.367016][ T9800] overlayfs: failed to clone lowerpath [ 533.931814][ T9483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.521188][ T9483] veth0_vlan: entered promiscuous mode [ 541.728561][ T9483] veth1_vlan: entered promiscuous mode [ 544.349116][ T9483] veth0_macvtap: entered promiscuous mode [ 544.400270][ T9483] veth1_macvtap: entered promiscuous mode [ 546.572416][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.640355][ T9483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.734805][ T6685] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.734859][ T6685] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.734900][ T6685] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.275313][ T1116] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.070146][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 551.139151][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 551.143015][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 551.179909][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 551.183499][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 552.123786][ T9933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 554.701295][ T60] Bluetooth: hci6: command tx timeout [ 556.883518][ T60] Bluetooth: hci6: command tx timeout [ 559.115764][ T60] Bluetooth: hci6: command tx timeout [ 561.204580][ T60] Bluetooth: hci6: command tx timeout [ 563.132437][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.132513][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.940915][ T8264] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.640502][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 571.876861][ T8264] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.812649][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 577.602537][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 578.098124][ T8264] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.605671][ T8264] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.596162][ T68] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 594.383433][ T38] audit: type=1800 audit(1791173602.103:280): pid=10143 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1179" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 595.590483][T10150] tipc: Enabled bearer , priority 0 [ 597.034991][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.035161][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.035449][ T9915] bridge_slave_0: entered allmulticast mode [ 597.050493][ T9915] bridge_slave_0: entered promiscuous mode [ 597.074790][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.074949][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.075188][ T9915] bridge_slave_1: entered allmulticast mode [ 597.093698][ T9915] bridge_slave_1: entered promiscuous mode [ 601.805304][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.969425][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.473919][ T8264] bridge_slave_1: left allmulticast mode [ 604.473961][ T8264] bridge_slave_1: left promiscuous mode [ 604.474241][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.894015][T10206] hfsplus: unable to find HFS+ superblock [ 605.732630][ T8264] bridge_slave_0: left allmulticast mode [ 605.732673][ T8264] bridge_slave_0: left promiscuous mode [ 605.732932][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.992522][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 616.035759][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 616.039116][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 616.059421][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 616.077834][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 622.381289][ T5601] Bluetooth: hci3: command tx timeout [ 622.630642][ T8264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.680548][ T8264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.722957][ T8264] bond0 (unregistering): Released all slaves [ 624.478959][ T5601] Bluetooth: hci3: command tx timeout [ 624.486017][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.486091][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.360957][ T5601] Bluetooth: hci3: command tx timeout [ 629.430722][ T5601] Bluetooth: hci3: command tx timeout [ 631.235291][T10351] overlayfs: failed to clone lowerpath [ 634.133314][T10375] overlayfs: conflicting options: nfs_export=on,index=off [ 634.167179][ T5245] 8021q: adding VLAN 0 to HW filter on device eth5 [ 639.402774][ T8264] hsr_slave_0: left promiscuous mode [ 639.451491][ T8264] hsr_slave_1: left promiscuous mode [ 639.452848][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.452877][ T8264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.689539][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.689572][ T8264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.724163][ T8264] veth1_macvtap: left promiscuous mode [ 640.759203][ T8264] veth0_macvtap: left promiscuous mode [ 640.759528][ T8264] veth1_vlan: left promiscuous mode [ 640.759734][ T8264] veth0_vlan: left promiscuous mode [ 652.053205][ T8264] team0 (unregistering): Port device team_slave_1 removed [ 653.454102][ T8264] team0 (unregistering): Port device team_slave_0 removed [ 655.467402][T10487] syz.4.1259 (10487) used greatest stack depth: 17760 bytes left [ 661.795613][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.795846][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.796035][T10257] bridge_slave_0: entered allmulticast mode [ 661.840802][T10257] bridge_slave_0: entered promiscuous mode [ 661.930055][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.930194][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.930439][T10257] bridge_slave_1: entered allmulticast mode [ 662.045760][T10257] bridge_slave_1: entered promiscuous mode [ 662.320186][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.943419][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.959113][ T5245] 8021q: adding VLAN 0 to HW filter on device eth6 [ 665.853201][T10257] team0: Port device team_slave_0 added [ 665.886302][T10257] team0: Port device team_slave_1 added [ 667.397070][T10257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.397091][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.397122][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.409570][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.409588][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.409618][T10257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.591267][ T8264] bridge_slave_1: left allmulticast mode [ 673.591313][ T8264] bridge_slave_1: left promiscuous mode [ 673.591616][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.639476][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 673.683174][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 673.692067][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 673.722508][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 673.744783][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 676.071044][ T60] Bluetooth: hci6: command tx timeout [ 677.084801][ T8264] bridge_slave_0: left allmulticast mode [ 677.084842][ T8264] bridge_slave_0: left promiscuous mode [ 677.085168][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.361092][ T60] Bluetooth: hci6: command tx timeout [ 681.295975][ T5601] Bluetooth: hci6: command tx timeout [ 683.500295][ T5601] Bluetooth: hci6: command tx timeout [ 685.173101][ T8264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.939758][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.939836][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.957189][ T8264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.999584][ T8264] bond0 (unregistering): Released all slaves [ 687.076510][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1294'. [ 687.076594][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1294'. [ 689.444766][T10699] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1299'. [ 690.328864][ T5245] 8021q: adding VLAN 0 to HW filter on device eth7 [ 690.822508][ T38] audit: type=1326 audit(1791173698.538:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.4.1301" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 690.822958][ T38] audit: type=1326 audit(1791173698.548:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.4.1301" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 690.823356][ T38] audit: type=1326 audit(1791173698.548:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.4.1301" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 690.824096][ T38] audit: type=1326 audit(1791173698.548:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10707 comm="syz.4.1301" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 704.430452][ T5245] 8021q: adding VLAN 0 to HW filter on device eth8 [ 705.659314][T10810] fuse: fd is not a fuse device [ 706.846153][ T8265] bridge_slave_1: left allmulticast mode [ 706.846192][ T8265] bridge_slave_1: left promiscuous mode [ 706.846454][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.180379][ T8265] bridge_slave_0: left allmulticast mode [ 707.180420][ T8265] bridge_slave_0: left promiscuous mode [ 707.180702][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.999907][ T8265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.081818][ T8265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.155798][ T8265] bond0 (unregistering): Released all slaves [ 714.652559][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.695774][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.629106][ T8265] team0 (unregistering): Port device team_slave_1 removed [ 717.917292][ T8265] team0 (unregistering): Port device team_slave_0 removed [ 719.347985][T10900] fuse: fd is not a fuse device [ 720.368263][T10602] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.368402][T10602] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.368599][T10602] bridge_slave_0: entered allmulticast mode [ 720.402194][T10602] bridge_slave_0: entered promiscuous mode [ 720.448055][T10602] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.448327][T10602] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.448557][T10602] bridge_slave_1: entered allmulticast mode [ 720.454480][T10602] bridge_slave_1: entered promiscuous mode [ 720.721657][T10602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.742535][T10602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.877302][T10602] team0: Port device team_slave_0 added [ 720.881207][T10602] team0: Port device team_slave_1 added [ 721.719170][T10602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.719192][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.719222][T10602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.725090][T10602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.725109][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.812795][T10602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.039230][T10602] hsr_slave_0: entered promiscuous mode [ 722.044848][T10602] hsr_slave_1: entered promiscuous mode [ 722.062889][T10602] debugfs: 'hsr0' already exists in 'hsr' [ 722.062922][T10602] Cannot create hsr debugfs directory [ 727.897203][ T38] audit: type=1326 audit(1791173735.629:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f98967aef49 code=0x7ffc0000 [ 727.897264][ T38] audit: type=1326 audit(1791173735.639:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f989676aebb code=0x7ffc0000 [ 727.897309][ T38] audit: type=1326 audit(1791173735.639:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 727.897355][ T38] audit: type=1326 audit(1791173735.639:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 727.899853][ T38] audit: type=1326 audit(1791173735.639:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f989676a5ac code=0x7ffc0000 [ 727.899913][ T38] audit: type=1326 audit(1791173735.639:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f989676a60e code=0x7ffc0000 [ 727.899962][ T38] audit: type=1326 audit(1791173735.639:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98967addeb code=0x7ffc0000 [ 727.903482][ T38] audit: type=1326 audit(1791173735.639:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 727.903543][ T38] audit: type=1326 audit(1791173735.639:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 727.903590][ T38] audit: type=1326 audit(1791173735.639:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10943 comm="syz.4.1355" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98967ae159 code=0x7ffc0000 [ 736.426692][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 736.462483][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 736.502634][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 736.669000][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 736.695553][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.049690][ T5601] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 737.094126][ T5601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 737.107104][ T5601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 737.116137][ T5601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 737.122220][ T5601] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 738.781847][ T60] Bluetooth: hci3: command tx timeout [ 740.119006][ T60] Bluetooth: hci7: command tx timeout [ 740.875127][ T60] Bluetooth: hci3: command tx timeout [ 741.059126][T11035] kAFS: unable to lookup cell 'syz0' [ 741.770176][ T5589] bridge0: port 3(syz_tun) entered disabled state [ 742.118480][ T60] Bluetooth: hci7: command tx timeout [ 742.909998][ T60] Bluetooth: hci3: command tx timeout [ 743.102747][ T5589] syz_tun (unregistering): left allmulticast mode [ 743.102789][ T5589] syz_tun (unregistering): left promiscuous mode [ 743.102894][ T5589] bridge0: port 3(syz_tun) entered disabled state [ 744.180775][ T60] Bluetooth: hci7: command tx timeout [ 745.721711][ T60] Bluetooth: hci3: command tx timeout [ 746.329302][ T60] Bluetooth: hci7: command tx timeout [ 747.416301][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.416381][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.098405][ T8265] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.165105][T11170] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1393'. [ 761.301270][ T8265] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.161150][T11187] MTD: Couldn't look up './dev/mtdblock0': -2 [ 769.200775][ T8265] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.296178][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 771.401492][ T8265] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.965581][ T60] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 777.449500][T11295] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 779.538720][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.539219][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.539433][T11007] bridge_slave_0: entered allmulticast mode [ 779.542428][T11007] bridge_slave_0: entered promiscuous mode [ 781.005374][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.005518][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.005697][T11007] bridge_slave_1: entered allmulticast mode [ 781.009025][T11007] bridge_slave_1: entered promiscuous mode [ 782.321755][T11335] overlayfs: failed to clone lowerpath [ 783.643337][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.643487][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.643721][T11004] bridge_slave_0: entered allmulticast mode [ 783.647567][T11004] bridge_slave_0: entered promiscuous mode [ 783.968584][T11346] warning: `syz.5.1419' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 784.551277][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.551410][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.551639][T11004] bridge_slave_1: entered allmulticast mode [ 784.554524][T11004] bridge_slave_1: entered promiscuous mode [ 784.630215][T11007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.528279][T11007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.784912][T11004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.460363][ T8265] bridge_slave_1: left allmulticast mode [ 789.460414][ T8265] bridge_slave_1: left promiscuous mode [ 789.460686][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.946244][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 790.007659][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 790.012539][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 790.048301][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 790.050444][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 790.355327][ T8265] bridge_slave_0: left allmulticast mode [ 790.355369][ T8265] bridge_slave_0: left promiscuous mode [ 790.355590][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.179216][ T60] Bluetooth: hci4: command tx timeout [ 795.777279][ T60] Bluetooth: hci4: command tx timeout [ 796.213590][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 796.300192][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 796.316544][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 796.317834][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 796.320355][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 798.653481][ T5601] Bluetooth: hci4: command tx timeout [ 798.653552][ T60] Bluetooth: hci6: command tx timeout [ 799.066538][ T5601] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 799.700268][ T5601] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 799.702935][ T5601] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 799.722823][ T5601] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 799.723638][ T5601] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 800.742463][ T60] Bluetooth: hci4: command tx timeout [ 801.395319][ T60] Bluetooth: hci6: command tx timeout [ 801.422297][ T8265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.755420][ T8265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.792752][ T8265] bond0 (unregistering): Released all slaves [ 801.947632][ T5601] Bluetooth: hci8: command tx timeout [ 802.841721][T11004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.285228][ T60] Bluetooth: hci6: command tx timeout [ 804.285273][ T60] Bluetooth: hci8: command tx timeout [ 804.451066][ T8265] tipc: Disabling bearer [ 804.655098][ T8265] tipc: Left network mode [ 806.327068][ T5601] Bluetooth: hci8: command tx timeout [ 806.327110][ T5601] Bluetooth: hci6: command tx timeout [ 808.840407][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.840486][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.914901][ T60] Bluetooth: hci8: command tx timeout [ 813.849023][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 819.964385][ T8265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.964412][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.989320][ T8265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.989363][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.098482][ T8265] veth1_macvtap: left promiscuous mode [ 820.098572][ T8265] veth0_macvtap: left promiscuous mode [ 820.098748][ T8265] veth1_vlan: left promiscuous mode [ 820.098883][ T8265] veth0_vlan: left promiscuous mode [ 822.280549][T11591] fuse: fd is not a fuse device [ 823.796372][ T8265] team0 (unregistering): Port device team_slave_1 removed [ 823.985484][ T8265] team0 (unregistering): Port device team_slave_0 removed [ 825.906664][T11608] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 827.208941][ T5245] 8021q: adding VLAN 0 to HW filter on device eth5 [ 827.391592][T11425] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.391754][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.391924][T11425] bridge_slave_0: entered allmulticast mode [ 827.393910][T11425] bridge_slave_0: entered promiscuous mode [ 827.443384][ T8265] IPVS: stop unused estimator thread 0... [ 827.463387][T11425] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.463502][T11425] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.463666][T11425] bridge_slave_1: entered allmulticast mode [ 827.465607][T11425] bridge_slave_1: entered promiscuous mode [ 827.646185][T11425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.665059][T11408] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.665260][T11408] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.665413][T11408] bridge_slave_0: entered allmulticast mode [ 827.667884][T11408] bridge_slave_0: entered promiscuous mode [ 827.699498][T11425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.777585][ T8265] bridge_slave_1: left allmulticast mode [ 827.777616][ T8265] bridge_slave_1: left promiscuous mode [ 827.777810][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.898505][ T8265] bridge_slave_0: left allmulticast mode [ 827.898536][ T8265] bridge_slave_0: left promiscuous mode [ 827.898764][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.116993][ T8265] bridge_slave_1: left allmulticast mode [ 828.117024][ T8265] bridge_slave_1: left promiscuous mode [ 828.117235][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.237994][ T8265] bridge_slave_0: left allmulticast mode [ 828.238039][ T8265] bridge_slave_0: left promiscuous mode [ 828.238315][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.456366][ T8265] bridge_slave_1: left allmulticast mode [ 828.456397][ T8265] bridge_slave_1: left promiscuous mode [ 828.456601][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.598605][ T8265] bridge_slave_0: left allmulticast mode [ 828.598649][ T8265] bridge_slave_0: left promiscuous mode [ 828.602058][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.065830][ T8265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.178295][ T8265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.236508][ T8265] bond0 (unregistering): Released all slaves [ 829.514792][ T8265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.594937][ T8265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.655910][ T8265] bond0 (unregistering): Released all slaves [ 829.926062][ T8265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.003919][ T8265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.065133][ T8265] bond0 (unregistering): Released all slaves [ 830.096551][T11408] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.096682][T11408] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.096830][T11408] bridge_slave_1: entered allmulticast mode [ 830.098762][T11408] bridge_slave_1: entered promiscuous mode [ 830.361955][T11385] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.362132][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.362467][T11385] bridge_slave_0: entered allmulticast mode [ 830.364441][T11385] bridge_slave_0: entered promiscuous mode [ 830.452835][T11425] team0: Port device team_slave_0 added [ 830.453277][T11385] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.453433][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.453619][T11385] bridge_slave_1: entered allmulticast mode [ 830.456226][T11385] bridge_slave_1: entered promiscuous mode [ 830.519723][T11408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.521849][T11425] team0: Port device team_slave_1 added [ 830.637381][T11408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.803623][T11385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.804660][T11425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.804678][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.804709][T11425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.870067][T11385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.871134][T11425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.871152][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.871188][T11425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.910762][T11408] team0: Port device team_slave_0 added [ 831.047173][T11408] team0: Port device team_slave_1 added [ 831.173435][T11385] team0: Port device team_slave_0 added [ 831.228557][T11385] team0: Port device team_slave_1 added [ 831.661629][T11408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.661644][T11408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.661665][T11408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.757299][ T5245] 8021q: adding VLAN 0 to HW filter on device eth6 [ 831.758948][T11408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.758961][T11408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.758982][T11408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.832826][T11425] hsr_slave_0: entered promiscuous mode [ 831.833717][T11425] hsr_slave_1: entered promiscuous mode [ 831.834343][T11425] debugfs: 'hsr0' already exists in 'hsr' [ 831.834361][T11425] Cannot create hsr debugfs directory [ 831.876394][T11385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.876409][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.876430][T11385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.925769][T11385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.925824][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.925941][T11385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.072553][T11408] hsr_slave_0: entered promiscuous mode [ 832.073524][T11408] hsr_slave_1: entered promiscuous mode [ 832.074197][T11408] debugfs: 'hsr0' already exists in 'hsr' [ 832.074227][T11408] Cannot create hsr debugfs directory [ 832.229186][ T8265] hsr_slave_0: left promiscuous mode [ 832.269153][ T8265] hsr_slave_1: left promiscuous mode [ 832.270179][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.300158][ T8265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.100798][ T8265] team0 (unregistering): Port device team_slave_1 removed [ 833.148223][ T8265] team0 (unregistering): Port device team_slave_0 removed [ 833.455253][T11385] hsr_slave_0: entered promiscuous mode [ 833.456236][T11385] hsr_slave_1: entered promiscuous mode [ 833.458464][T11385] debugfs: 'hsr0' already exists in 'hsr' [ 833.458552][T11385] Cannot create hsr debugfs directory [ 834.910079][ T5245] 8021q: adding VLAN 0 to HW filter on device eth7 [ 835.080519][T11425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 835.167630][T11425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 835.186794][T11425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 835.227181][T11425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 835.240468][T11425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 835.398118][T11425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 835.402830][T11425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 835.544420][T11425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 836.284051][T11408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 836.358978][T11408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 836.431379][T11408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 836.457756][T11408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 836.489053][T11408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 836.614816][T11408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 836.634160][T11408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 836.705127][T11408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 837.160039][ T5245] 8021q: adding VLAN 0 to HW filter on device eth8 [ 837.411656][T11385] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 837.456177][T11385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 837.476897][T11385] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 837.587041][T11385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 837.605913][T11385] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 837.659165][T11385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 837.677577][T11385] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 837.724622][T11385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 837.761843][T11425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.935476][T11425] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.973065][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.973238][ T8265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.044770][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.044923][ T6683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.164376][T11408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.238209][T11408] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.302092][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.302232][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.361825][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.361921][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.396529][T11385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.494983][T11385] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.535400][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.535637][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.610193][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.610429][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.818832][T11425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.083492][T11408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.222976][T11385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.968403][T11385] veth0_vlan: entered promiscuous mode [ 840.970504][T11425] veth0_vlan: entered promiscuous mode [ 841.009500][T11385] veth1_vlan: entered promiscuous mode [ 841.019833][T11425] veth1_vlan: entered promiscuous mode [ 841.069680][T11408] veth0_vlan: entered promiscuous mode [ 841.113114][T11408] veth1_vlan: entered promiscuous mode [ 841.174767][T11385] veth0_macvtap: entered promiscuous mode [ 841.178191][T11425] veth0_macvtap: entered promiscuous mode [ 841.199743][T11385] veth1_macvtap: entered promiscuous mode [ 841.201639][T11425] veth1_macvtap: entered promiscuous mode [ 841.256481][T11408] veth0_macvtap: entered promiscuous mode [ 841.261236][T11385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.294243][T11425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.321382][T11408] veth1_macvtap: entered promiscuous mode [ 841.332145][T11385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.354788][T11425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.442301][T11408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.597020][T11408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.496872][ T8258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.496897][ T8258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.556148][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.568090][ T1116] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.568379][ T1116] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.568613][ T1116] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.568842][ T1116] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.569220][ T1116] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.569440][ T1116] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.569481][ T1116] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.569521][ T1116] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.569554][ T1116] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.569592][ T1116] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.569630][ T1116] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.778389][ T6685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.778412][ T6685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.002745][ T8265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.002767][ T8265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.188106][ T6685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.188136][ T6685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.575971][ T6685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.575998][ T6685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.025216][ T6685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.025244][ T6685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.527521][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1468'. [ 853.620505][T11823] trusted_key: encrypted_key: key trusted:syz not found [ 853.873754][T11828] MTD: Couldn't look up './dev/mtdblock0': -2 [ 861.143552][T11876] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1488'. [ 861.613550][T11882] vlan2: entered promiscuous mode [ 861.613579][T11882] hsr0: entered promiscuous mode [ 861.613940][T11882] vlan2: entered allmulticast mode [ 861.613957][T11882] hsr0: entered allmulticast mode [ 861.613971][T11882] hsr_slave_0: entered allmulticast mode [ 861.614002][T11882] hsr_slave_1: entered allmulticast mode [ 865.979087][T11923] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1497'. [ 865.979819][T11923] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1497'. [ 865.980707][T11923] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1497'. [ 867.665001][T11712] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 867.971438][T11712] usb 9-1: device descriptor read/64, error -71 [ 868.473279][T11712] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 870.622517][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.622596][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.717989][T11712] usb 9-1: device descriptor read/64, error -71 [ 870.928685][T11712] usb usb9-port1: attempt power cycle [ 874.933377][T11712] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 875.151808][T11978] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 876.361951][T11712] usb 9-1: device not accepting address 4, error -71 [ 877.954174][T11388] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 878.015740][T11388] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 878.022217][T11388] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 878.027067][T11388] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 878.049052][T11388] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 879.642523][ T5601] Bluetooth: hci3: command 0x1003 tx timeout [ 879.644584][ T60] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 880.174500][ T38] kauditd_printk_skb: 74 callbacks suppressed [ 880.174527][ T38] audit: type=1800 audit(1791173888.356:369): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1513" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 881.387816][ T39] INFO: task syz.0.1341:10889 blocked for more than 145 seconds. [ 881.387841][ T39] Not tainted syzkaller #0 [ 881.387851][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 881.387858][ T39] task:syz.0.1341 state:D stack:28512 pid:10889 t ** replaying previous printk message ** [ 881.387858][ T39] task:syz.0.1341 state:D stack:28512 pid:10889 tgid:10887 ppid:5589 task_flags:0x400140 flags:0x00080002 [ 881.387912][ T39] Call Trace: [ 881.387918][ T39] [ 881.387929][ T39] __schedule+0x16d9/0x5700 [ 881.387974][ T39] ? __pfx___schedule+0x10/0x10 [ 881.388003][ T39] rt_mutex_schedule+0x76/0xf0 [ 881.388025][ T39] rt_mutex_slowlock_block+0x55e/0x690 [ 881.388056][ T39] ? rt_mutex_slowlock_block+0x33c/0x690 [ 881.388082][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 881.388108][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 881.388132][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 881.388169][ T39] ? nfsd_shutdown_threads+0x4e/0xd0 [ 881.388199][ T39] ? nfsd_shutdown_threads+0x4e/0xd0 [ 881.388222][ T39] mutex_lock_nested+0x168/0x1d0 [ 881.388250][ T39] nfsd_shutdown_threads+0x4e/0xd0 [ 881.388275][ T39] nfsd_umount+0x41/0x60 [ 881.388292][ T39] deactivate_locked_super+0xbe/0x110 [ 881.388314][ T39] cleanup_mnt+0x3d3/0x460 [ 881.388339][ T39] task_work_run+0x1d9/0x270 [ 881.388360][ T39] ? __pfx_task_work_run+0x10/0x10 [ 881.388386][ T39] exit_to_user_mode_loop+0x204/0x770 [ 881.388409][ T39] ? rcu_is_watching+0x16/0xb0 [ 881.388438][ T39] do_syscall_64+0x328/0x520 [ 881.388462][ T39] ? trace_irq_disable+0x3b/0x140 [ 881.388484][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.388501][ T39] ? clear_bhb_loop+0x70/0xc0 [ 881.388522][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.388539][ T39] RIP: 0033:0x7f426ee2e159 [ 881.388554][ T39] RSP: 002b:00007f426d065028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 881.388570][ T39] RAX: fffffffffffffffe RBX: 00007f426f0b6090 RCX: 00007f426ee2e159 [ 881.388583][ T39] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 881.388594][ T39] RBP: 00007f426eec506b R08: 0000000000000000 R09: 0000000000000000 [ 881.388604][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.388614][ T39] R13: 00007f426f0b6128 R14: 00007f426f0b6090 R15: 00007ffde65459b8 [ 881.388639][ T39] [ 881.388674][ T39] [ 881.388674][ T39] Showing all locks held in the system: [ 881.388685][ T39] locks held by kworker/u8:0/12: 3, last CPU#0: [ 881.388697][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.388743][ T39] #1: ffffc90000117c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.388788][ T39] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 881.388831][ T39] locks held by kworker/1:0/31: 3, last CPU#1: [ 881.388842][ T39] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.388886][ T39] #1: ffffc90000a5fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.389108][ T39] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 881.389153][ T39] locks held by khungtaskd/39: 1, last CPU#1: [ 881.389165][ T39] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 881.389227][ T39] locks held by getty/5339: 2, on CPU#1: [ 881.389238][ T39] #0: ffff888035f4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 881.390220][ T39] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 881.390274][ T39] locks held by kworker/u8:19/6667: 6, last CPU#1: [ 881.390286][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.390331][ T39] #1: ffffc900066dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.390377][ T39] #2: ffff88803d356310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 881.390424][ T39] #3: ffff88805f19c920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 881.390477][ T39] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 881.390522][ T39] #5: ffff8880b8737350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 881.390564][ T39] locks held by syz.3.970/9338: 2, on CPU#0: [ 881.390575][ T39] #0: ffff8880627b80e0 (&type->s_umount_key#89){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 881.390618][ T39] #1: ffffffff8e4f8778 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 881.390665][ T39] locks held by syz.0.1341/10889: 2, on CPU#0: [ 881.390676][ T39] #0: ffff888025a360e0 (&type->s_umount_key#89){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 881.390719][ T39] #1: ffffffff8e4f8778 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 881.390764][ T39] locks held by syz.1.1404/11225: 1, on CPU#0: [ 881.390775][ T39] #0: ffff8880627b80e0 (&type->s_umount_key#89){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 881.390819][ T39] locks held by syz.1.1404/11227: 1, on CPU#0: [ 881.390830][ T39] #0: ffff8880627b80e0 (&type->s_umount_key#89){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 881.390887][ T39] locks held by syz.1.1404/11228: 1, on CPU#0: [ 881.390898][ T39] #0: ffff8880627b80e0 (&type->s_umount_key#89){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 881.390944][ T39] locks held by kworker/u8:4/11810: 6, last CPU#1: [ 881.390956][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.391000][ T39] #1: ffffc90004a17c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 881.391045][ T39] #2: ffff888021b5c310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 881.391091][ T39] #3: ffff888055d46920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 881.391134][ T39] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 881.391178][ T39] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 881.391222][ T39] locks held by syz.4.1485/11863: 2, on CPU#1: [ 881.391233][ T39] #0: ffff88803d3620e0 (&type->s_umount_key#89){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 881.391276][ T39] #1: ffffffff8e4f8778 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 881.391323][ T39] locks held by dhcpcd-run-hook/12022: 1, on CPU#1: [ 881.391334][ T39] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: pidfs_remove_pid+0x63/0x990 [ 881.391373][ T39] locks held by syz.5.1513/12023: 1, on CPU#1: [ 881.391384][ T39] #0: ffff88803ad051b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 881.391425][ T39] locks held by syz.5.1513/12024: 1, last CPU#1: [ 881.391436][ T39] #0: ffff88803ad051b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 881.391481][ T39] locks held by iou-sqp-12024/12026: 4, last CPU#0: [ 881.391493][ T39] #0: ffff888060eb1860 (&sqd->lock){+.+.}-{4:4}, at: io_sq_thread+0x13ac/0x1cf0 [ 881.391540][ T39] #1: ffff8880b8629410 ((lock)#3){+.+.}-{3:3}, at: kcov_remote_stop+0xce/0x680 [ 881.391586][ T39] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 881.391629][ T39] #3: ffffffff8e2223d8 (kcov_remote_lock){+.+.}-{3:3}, at: kcov_remote_stop+0x40d/0x680 [ 881.391672][ T39] locks held by syz.6.1515/12033: 1, last CPU#0: [ 881.391683][ T39] #0: ffff88802a892ab8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 881.391727][ T39] locks held by syz.8.1514/12028: 1, last CPU#1: [ 881.391738][ T39] #0: ffffffff8e204570 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2904/0x4410 [ 881.394215][ T39] locks held by syz.7.1516/12032: 2, last CPU#1: [ 881.394231][ T39] #0: ffff8880286b6f60 (_T->lock#3){+.+.}-{3:3}, at: kcov_ioctl+0x110/0x650 [ 881.394282][ T39] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 881.394328][ T39] locks held by syz.6.1515/12034: 5, last CPU#0: [ 881.394339][ T39] #0: ffff88805fc3c510 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x376a/0x4520 [ 881.394393][ T39] #1: ffff8880400e0390 (&sb->s_type->i_mutex_key#14){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 881.394435][ T39] #2: ffff8880400e04c8 (&xa->xa_lock#8){+.+.}-{3:3}, at: shmem_add_to_page_cache+0x76f/0xc10 [ 881.394488][ T39] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 881.394532][ T39] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: lruvec_stat_mod_folio+0x6e/0x3e0 [ 881.394575][ T39] [ 881.394580][ T39] ============================================= [ 881.394580][ T39] [ 881.394588][ T39] NMI backtrace for cpu 1 [ 881.394601][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 881.394619][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 881.394630][ T39] Call Trace: [ 881.394636][ T39] [ 881.394643][ T39] dump_stack_lvl+0xe8/0x150 [ 881.394668][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 881.394693][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 881.394711][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 881.394738][ T39] sys_info+0x135/0x170 [ 881.394759][ T39] watchdog+0xfd7/0x1030 [ 881.394786][ T39] ? watchdog+0x1c7/0x1030 [ 881.394813][ T39] kthread+0x38b/0x470 [ 881.394829][ T39] ? __pfx_watchdog+0x10/0x10 [ 881.394849][ T39] ? __pfx_kthread+0x10/0x10 [ 881.394866][ T39] ret_from_fork+0x514/0xb70 [ 881.394885][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 881.394901][ T39] ? __switch_to+0xc89/0x1420 [ 881.394926][ T39] ? __pfx_kthread+0x10/0x10 [ 881.394943][ T39] ret_from_fork_asm+0x1a/0x30 [ 881.394970][ T39] [ 881.394976][ T39] Sending NMI from CPU 1 to CPUs 0: [ 881.395036][ C0] NMI backtrace for cpu 0 [ 881.395051][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 881.395071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 881.395082][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 881.395105][ C0] Code: 8b 59 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 7c 10 00 fb f4 7c d8 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 881.395126][ C0] RSP: 0018:ffffffff8de07ca0 EFLAGS: 00000246 [ 881.395142][ C0] RAX: 00000000003e41b1 RBX: ffffffff819abbfc RCX: 8000000000000001 [ 881.395156][ C0] RDX: 0000000000000001 RSI: ffffffff8d86df9e RDI: ffffffff8bcc4c80 [ 881.395169][ C0] RBP: ffffffff8de07d78 R08: ffff8880b8633e9b R09: 1ffff110170c67d3 [ 881.395183][ C0] R10: dffffc0000000000 R11: ffffed10170c67d4 R12: 0000000000000000 [ 881.395203][ C0] R13: 1ffffffff1bdee00 R14: 1ffffffff1bc0f9c R15: dffffc0000000000 [ 881.395217][ C0] FS: 0000000000000000(0000) GS:ffff888125bc2000(0000) knlGS:0000000000000000 [ 881.395232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 881.395245][ C0] CR2: 0000001b2e518ff8 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 881.395261][ C0] Call Trace: [ 881.395268][ C0] [ 881.395275][ C0] default_idle+0x9/0x20 [ 881.395296][ C0] default_idle_call+0x72/0xb0 [ 881.395319][ C0] do_idle+0x1cc/0x540 [ 881.395345][ C0] ? __pfx_do_idle+0x10/0x10 [ 881.395374][ C0] cpu_startup_entry+0x43/0x60 [ 881.395399][ C0] rest_init+0x378/0x3a0 [ 881.395422][ C0] ? __pfx_rest_init+0x10/0x10 [ 881.395450][ C0] ? __pfx_kernel_init+0x10/0x10 [ 881.395476][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 881.395498][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 881.395524][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 881.395551][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 881.395579][ C0] start_kernel+0x392/0x3e0 [ 881.395599][ C0] x86_64_start_reservations+0x24/0x30 [ 881.395623][ C0] x86_64_start_kernel+0x137/0x1b0 [ 881.395646][ C0] common_startup_64+0x13e/0x157 [ 881.395679][ C0] [ 881.424833][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 882.561514][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 882.571188][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 882.581290][ T39] Call Trace: [ 882.584624][ T39] [ 882.587586][ T39] vpanic+0x56d/0xa60 [ 882.591615][ T39] ? __pfx___schedule+0x10/0x10 [ 882.596509][ T39] ? __pfx_vpanic+0x10/0x10 [ 882.601055][ T39] panic+0xc5/0xd0 [ 882.604810][ T39] ? __pfx_panic+0x10/0x10 [ 882.609257][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 882.614756][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 882.620171][ T39] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 882.626465][ T39] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 882.632668][ T39] watchdog+0x1030/0x1030 [ 882.637057][ T39] ? watchdog+0x1c7/0x1030 [ 882.641536][ T39] kthread+0x38b/0x470 [ 882.645642][ T39] ? __pfx_watchdog+0x10/0x10 [ 882.650392][ T39] ? __pfx_kthread+0x10/0x10 [ 882.655032][ T39] ret_from_fork+0x514/0xb70 [ 882.659663][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 882.664810][ T39] ? __switch_to+0xc89/0x1420 [ 882.669535][ T39] ? __pfx_kthread+0x10/0x10 [ 882.674169][ T39] ret_from_fork_asm+0x1a/0x30 [ 882.678993][ T39] [ 882.682671][ T39] Kernel Offset: disabled [ 882.687046][ T39] Rebooting in 86400 seconds..