last executing test programs: 2m47.116593657s ago: executing program 1 (id=517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='sour\x01\x00\x00\x00U8C\x83\xeb\xf0T\x85\xd0\xb1\x16\x90\xd5\xd1\'', 0x0, 0x0) socket(0x10, 0x803, 0x0) io_setup(0xd0b, &(0x7f0000000180)=0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[0x0]) userfaultfd(0x80001) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x0) epoll_create1(0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0xff84, 0x0, 0x53}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x10001, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'caif0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 2m43.71297468s ago: executing program 1 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2m40.571528417s ago: executing program 1 (id=526): gettid() syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4040, 0xa, 0x3, 0x40000000, 0x10}) 2m36.753584291s ago: executing program 1 (id=532): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r0, &(0x7f0000000240)='1\x00', 0x1) r2 = syz_open_procfs(0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x8946, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/my_zoned_dev/zoned\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) read(r4, &(0x7f0000000400), 0x200) 2m24.365323935s ago: executing program 1 (id=552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500000000000000150511203fb0882e4d2daf4d63c71dd50a282e707847831514b53142a30e4ed5c31d601563438e1c516544fc658f1244f1567b811985d944c76ca91fea9db4ea826b053069a291b3f309e74aba82192ea57289673ca6453a02ea143410c30a3236daf9a6"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b15dd7cf1c000004000000000000", 0x0, 0x5845, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() getpgrp(0x0) 2m22.746503565s ago: executing program 1 (id=554): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) userfaultfd(0x80001) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0xb0}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m6.042326765s ago: executing program 32 (id=554): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) userfaultfd(0x80001) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0xb0}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 19.084263991s ago: executing program 4 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r3, &(0x7f0000000300)="89", 0x3f80) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x4, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x80040, 0x0) read(r6, 0x0, 0x0) 17.827958902s ago: executing program 4 (id=760): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0xb96e0453b2f36300) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) write(r0, &(0x7f0000000240)='1\x00', 0x1) r2 = syz_open_procfs(0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x8946, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/my_zoned_dev/zoned\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) read(r4, &(0x7f0000000400), 0x200) 16.019405577s ago: executing program 4 (id=764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500000000000000150511203fb0882e4d2daf4d63c71dd50a282e707847831514b53142a30e4ed5c31d601563438e1c516544fc658f1244f1567b811985d944c76ca91fea9db4ea826b053069a291b3f309e74aba82192ea57289673ca6453a02ea143410c30a3236daf9a6"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b15dd7cf1c000004000000000000", 0x0, 0x5845, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.095095584s ago: executing program 4 (id=765): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='sour\x01\x00\x00\x00U8C\x83\xeb\xf0T\x85\xd0\xb1\x16\x90\xd5\xd1\'', 0x0, 0x0) socket(0x10, 0x803, 0x0) io_setup(0xd0b, &(0x7f0000000180)=0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[0x0]) userfaultfd(0x80001) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0xff84, 0x0, 0x53}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x10001, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'caif0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 13.85154117s ago: executing program 2 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/memory/memory41/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='offline', 0x7) write(0xffffffffffffffff, 0x0, 0x0) 13.246852715s ago: executing program 2 (id=771): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x40000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) 12.933536692s ago: executing program 5 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0xb, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "0011aabbccddee0101000000000000112233445566778899aabbccddeeff001122334455668e8899aabbccddeeff00", 0x40}, 0x48, r3) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r3) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00113233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334470778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x26}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x39, 0x30, 0x30, 0x30, 0x30, 0x18, 0x30, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x30, 0x35, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r3) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) 11.549233826s ago: executing program 5 (id=774): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) 11.548615166s ago: executing program 2 (id=775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500000000000000150511203fb0882e4d2daf4d63c71dd50a282e707847831514b53142a30e4ed5c31d601563438e1c516544fc658f1244f1567b811985d944c76ca91fea9db4ea826b053069a291b3f309e74aba82192ea57289673ca6453a02ea143410c30a3236daf9a6"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b15dd7cf1c000004000000000000", 0x0, 0x5845, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.453245518s ago: executing program 2 (id=777): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x42042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x158}}, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 8.627546048s ago: executing program 0 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000001c0)=0x3, 0x4) sendmmsg(r3, 0x0, 0x0, 0x4000041) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) 8.55779419s ago: executing program 4 (id=780): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) getpeername$unix(r2, &(0x7f0000000440), 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x32, 0xfe80, 0xffffffff}) 8.306452666s ago: executing program 5 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) 7.244433442s ago: executing program 0 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r3, &(0x7f0000000300)="89", 0x3f80) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x4, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x80040, 0x0) read(r6, 0x0, 0x0) 7.203175463s ago: executing program 5 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0) 7.144580334s ago: executing program 3 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0xb, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "0011aabbccddee0101000000000000112233445566778899aabbccddeeff001122334455668e8899aabbccddeeff00", 0x40}, 0x48, r3) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r3) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00113233445566778899aabbccddeeff00112233445566778899aabbccddeeff001122334470778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x26}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x39, 0x30, 0x30, 0x30, 0x30, 0x18, 0x30, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x30, 0x35, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r3) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) 5.130179514s ago: executing program 0 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x8, 0x0, &(0x7f0000000340), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e27, @multicast1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='lz4', 0x3) lseek(r0, 0x76d, 0x2) 5.129655204s ago: executing program 5 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500000000000000150511203fb0882e4d2daf4d63c71dd50a282e707847831514b53142a30e4ed5c31d601563438e1c516544fc658f1244f1567b811985d944c76ca91fea9db4ea826b053069a291b3f309e74aba82192ea57289673ca6453a02ea143410c30a3236daf9a6"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b15dd7cf1c000004000000000000", 0x0, 0x5845, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.054490465s ago: executing program 2 (id=788): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xa6, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x60}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) sendmsg$inet(0xffffffffffffffff, 0x0, 0x140060c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x97d830f2facfb6f1, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000000}, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r7, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0}], 0x10000000000000e1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x46, 0x1, 0x8, "b1de2400"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4.87565896s ago: executing program 4 (id=789): r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x109881, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x6d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e63046d42ca0a5c15b37adac15084dbaf736b"}, {0x19, 0x1, "000000000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0xfffffffa, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d07, 0x0, 0x8001}]}) ppoll(&(0x7f0000000140)=[{r2, 0x6008}, {r2, 0x22}, {r2, 0x8412}], 0x3, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={[0x4]}, 0x8) ptrace(0x4206, r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) socket$netlink(0x10, 0x3, 0x0) tkill(r1, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040580487000000000000010902243b0100001000090400060203000200092107000001220300090581030004"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0x3, {[@local=@item_012={0x1, 0x2, 0xa, "8f"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) 4.211404406s ago: executing program 3 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @empty}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='team_slave_0\x00', 0x6, 0xffffffff, 0x2}) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0xf20, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x6, 0xfffffff7, 0xffffffff, 0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x8805}, 0x20000090) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) setitimer(0x3, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)='#', 0x1}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000000040)=""/40, 0x28}, {0x0}], 0x3}}], 0x1, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000002fc0)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x11}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x4) 2.887558979s ago: executing program 0 (id=791): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) 2.676257494s ago: executing program 2 (id=792): syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x8, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x79f1, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x1, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x8, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x8, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x4, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xbfff, 0x100, 0x196, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xffff, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0xb4, 0x800001, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfff8, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x10, 0xe8b, 0x5, 0x0, 0x48, 0x3f92, 0x1000, 0x45ae, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x1, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x3005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x3, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x80000000, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x98, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0x5, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x4, 0xf, 0x8002, 0xf, 0xf, 0x136, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.675222714s ago: executing program 3 (id=793): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socket$nl_audit(0x10, 0x3, 0x9) 1.759518437s ago: executing program 0 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) 1.24216123s ago: executing program 3 (id=795): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002300)={0x0, 0x0, "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", "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"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) preadv(r1, &(0x7f0000001500)=[{&(0x7f0000000380)=""/109, 0x6d}, {0x0}], 0x2, 0x3, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/meminfo\x00', 0x0, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x800) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.021116215s ago: executing program 5 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000000, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r3, &(0x7f0000000300)="89", 0x3f80) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x4, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x80040, 0x0) read(r6, 0x0, 0x0) 846.877669ms ago: executing program 3 (id=797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0) 783.457431ms ago: executing program 0 (id=798): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write(r0, 0x0, 0xfffffc9f) 0s ago: executing program 3 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) getpeername$unix(r2, &(0x7f0000000440), 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x32, 0xfe80, 0xffffffff}) kernel console output (not intermixed with test programs): x8A has invalid wMaxPacketSize 0 [ 116.048294][ T4373] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 116.850438][ T129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.139404][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.147743][ T4373] usb 2-1: Product: syz [ 118.152066][ T4373] usb 2-1: Manufacturer: syz [ 118.156762][ T4373] usb 2-1: SerialNumber: syz [ 118.190585][ T4373] usb 2-1: config 0 descriptor?? [ 118.258276][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 120.038112][ T4287] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.084746][ T4373] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 120.151103][ T129] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 120.160281][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.178235][ T4373] usb 2-1: USB disconnect, device number 3 [ 120.220187][ T129] usb 1-1: config 0 descriptor?? [ 120.246826][ T129] usb 1-1: can't set config #0, error -71 [ 120.307424][ T129] usb 1-1: USB disconnect, device number 2 [ 121.060621][ T4373] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.215819][ T4578] netlink: 156 bytes leftover after parsing attributes in process `syz.0.59'. [ 121.258131][ T4373] usb 2-1: Using ep0 maxpacket: 16 [ 121.291004][ T4373] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.346568][ T4373] usb 2-1: config 1 interface 0 has no altsetting 0 [ 121.380408][ T4373] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 121.418762][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.442708][ T4373] usb 2-1: Product: syz [ 121.473269][ T4373] usb 2-1: Manufacturer: syz [ 121.506168][ T4373] usb 2-1: SerialNumber: syz [ 123.158669][ T4373] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 123.199635][ T3624] bcm5974 2-1:1.0: could not read from device [ 123.218691][ T3624] bcm5974 2-1:1.0: could not read from device [ 123.263178][ T4373] usb 2-1: USB disconnect, device number 4 [ 123.281786][ T3624] bcm5974 2-1:1.0: could not read from device [ 123.844425][ T4596] tmpfs: Unknown parameter 'quota' [ 125.107607][ T4601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 125.167214][ T4601] device macvlan2 entered promiscuous mode [ 128.508237][ T4324] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.905631][ T4324] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 128.956482][ T4324] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 129.057676][ T4630] FAULT_INJECTION: forcing a failure. [ 129.057676][ T4630] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.071048][ T4630] CPU: 0 PID: 4630 Comm: syz.2.73 Not tainted syzkaller #0 [ 129.078317][ T4630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.088439][ T4630] Call Trace: [ 129.091933][ T4630] [ 129.094918][ T4630] dump_stack_lvl+0x188/0x24e [ 129.099656][ T4630] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 129.105388][ T4630] ? show_regs_print_info+0x12/0x12 [ 129.110639][ T4630] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 129.116344][ T4630] should_fail_ex+0x390/0x4c0 [ 129.121132][ T4630] _copy_from_user+0x2c/0x170 [ 129.125858][ T4630] csum_and_copy_from_iter+0x204/0x1380 [ 129.131545][ T4630] ? release_firmware_map_entry+0x187/0x187 [ 129.137490][ T4630] ? lock_chain_count+0x20/0x20 [ 129.142395][ T4630] ? preempt_schedule_irq+0xe6/0x160 [ 129.147733][ T4630] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 129.153425][ T4630] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 129.159457][ T4630] ? preempt_schedule_notrace+0x120/0x120 [ 129.165229][ T4630] ? lock_chain_count+0x20/0x20 [ 129.170140][ T4630] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 129.175818][ T4630] ip_generic_getfrag+0x150/0x2e0 [ 129.180913][ T4630] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 129.186595][ T4630] ? ip_skb_dst_mtu+0x870/0x870 [ 129.191530][ T4630] ? skb_put+0x10e/0x200 [ 129.195819][ T4630] __ip_append_data+0x2a73/0x38d0 [ 129.200930][ T4630] ? ip_skb_dst_mtu+0x870/0x870 [ 129.205863][ T4630] ? ip_setup_cork+0x850/0x850 [ 129.210704][ T4630] ? ip_setup_cork+0x528/0x850 [ 129.215536][ T4630] ip_make_skb+0x227/0x440 [ 129.220013][ T4630] ? ip_skb_dst_mtu+0x870/0x870 [ 129.224910][ T4630] ? ip_flush_pending_frames+0x250/0x250 [ 129.230600][ T4630] ? lockdep_hardirqs_on+0x94/0x140 [ 129.235874][ T4630] udp_sendmsg+0x1b04/0x23d0 [ 129.240540][ T4630] ? ip_skb_dst_mtu+0x870/0x870 [ 129.245442][ T4630] ? udp_cmsg_send+0x350/0x350 [ 129.250281][ T4630] ? read_lock_is_recursive+0x10/0x10 [ 129.255743][ T4630] ? finish_task_switch+0x262/0x8e0 [ 129.261013][ T4630] ? __schedule+0x1087/0x4030 [ 129.265756][ T4630] udpv6_sendmsg+0x7df/0x22c0 [ 129.270582][ T4630] ? release_firmware_map_entry+0x187/0x187 [ 129.276525][ T4630] ? udp_v6_early_demux+0xf00/0xf00 [ 129.281779][ T4630] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 129.287831][ T4630] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 129.293545][ T4630] ? sock_rps_record_flow+0x19/0x3f0 [ 129.298926][ T4630] ? inet_send_prepare+0x57/0x250 [ 129.304032][ T4630] ? inet6_sendmsg+0x5b/0xd0 [ 129.308689][ T4630] sock_write_iter+0x2d5/0x3e0 [ 129.313606][ T4630] ? sock_read_iter+0x3a0/0x3a0 [ 129.318532][ T4630] ? lockdep_hardirqs_on+0x94/0x140 [ 129.323829][ T4630] ? security_file_permission+0x30/0xa0 [ 129.329449][ T4630] vfs_write+0x482/0x9a0 [ 129.333778][ T4630] ? file_end_write+0x250/0x250 [ 129.338696][ T4630] ? __fget_files+0x3fc/0x460 [ 129.343437][ T4630] ? __fdget_pos+0x1d4/0x360 [ 129.348099][ T4630] ? ksys_write+0x70/0x260 [ 129.352591][ T4630] ksys_write+0x14d/0x260 [ 129.357024][ T4630] ? __ia32_sys_read+0x80/0x80 [ 129.361879][ T4630] ? lockdep_hardirqs_on+0x94/0x140 [ 129.367157][ T4630] do_syscall_64+0x4c/0xa0 [ 129.371636][ T4630] ? clear_bhb_loop+0x60/0xb0 [ 129.376373][ T4630] ? clear_bhb_loop+0x60/0xb0 [ 129.381116][ T4630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.387078][ T4630] RIP: 0033:0x7f0d9eb9e199 [ 129.391558][ T4630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.411226][ T4630] RSP: 002b:00007f0d9f9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.419712][ T4630] RAX: ffffffffffffffda RBX: 00007f0d9ee26180 RCX: 00007f0d9eb9e199 [ 129.427737][ T4630] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 129.435761][ T4630] RBP: 00007f0d9ec350b8 R08: 0000000000000000 R09: 0000000000000000 [ 129.443793][ T4630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.451817][ T4630] R13: 00007f0d9ee26218 R14: 00007f0d9ee26180 R15: 00007ffeecd21238 [ 129.459861][ T4630] [ 129.670093][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.703256][ T4621] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.720023][ T4324] opticon 1-1:1.0: opticon converter detected [ 129.731245][ T4324] usb 1-1: opticon converter now attached to ttyUSB0 [ 131.494258][ T4349] usb 1-1: USB disconnect, device number 3 [ 131.547937][ T4349] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 132.449877][ T4645] sched: RT throttling activated [ 133.443671][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.450437][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.463853][ T4349] opticon 1-1:1.0: device disconnected [ 135.402792][ T4660] FAULT_INJECTION: forcing a failure. [ 135.402792][ T4660] name failslab, interval 1, probability 0, space 0, times 1 [ 135.444264][ T4660] CPU: 0 PID: 4660 Comm: syz.2.83 Not tainted syzkaller #0 [ 135.451629][ T4660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.461700][ T4660] Call Trace: [ 135.464999][ T4660] [ 135.467966][ T4660] dump_stack_lvl+0x188/0x24e [ 135.472708][ T4660] ? show_regs_print_info+0x12/0x12 [ 135.477934][ T4660] ? load_image+0x410/0x410 [ 135.482491][ T4660] ? __might_sleep+0xd0/0xd0 [ 135.487095][ T4660] ? __lock_acquire+0x7ea0/0x7ea0 [ 135.492167][ T4660] should_fail_ex+0x390/0x4c0 [ 135.496882][ T4660] should_failslab+0x5/0x20 [ 135.501398][ T4660] slab_pre_alloc_hook+0x59/0x300 [ 135.506443][ T4660] kmem_cache_alloc+0x56/0x2f0 [ 135.511226][ T4660] ? mempool_init_node+0x1e5/0x480 [ 135.516361][ T4660] ? mempool_free+0x320/0x320 [ 135.521148][ T4660] mempool_init_node+0x1e5/0x480 [ 135.526139][ T4660] ? mempool_alloc_slab+0x60/0x60 [ 135.531557][ T4660] ? mempool_free+0x320/0x320 [ 135.536261][ T4660] mempool_create+0x7d/0xc0 [ 135.541329][ T4660] ceph_osdc_init+0x4cb/0x8a0 [ 135.546050][ T4660] ceph_create_client+0x242/0x300 [ 135.551102][ T4660] ceph_get_tree+0x1c1/0x1350 [ 135.555811][ T4660] ? bpf_lsm_capable+0x5/0x10 [ 135.560518][ T4660] ? security_capable+0x85/0xb0 [ 135.565405][ T4660] vfs_get_tree+0x88/0x270 [ 135.569839][ T4660] vfs_fsconfig_locked+0x22f/0x400 [ 135.574974][ T4660] __se_sys_fsconfig+0x69e/0x7e0 [ 135.579970][ T4660] ? __x64_sys_fsconfig+0xc0/0xc0 [ 135.585025][ T4660] ? lockdep_hardirqs_on+0x94/0x140 [ 135.590245][ T4660] ? __x64_sys_fsconfig+0x1c/0xc0 [ 135.595294][ T4660] do_syscall_64+0x4c/0xa0 [ 135.599728][ T4660] ? clear_bhb_loop+0x60/0xb0 [ 135.604424][ T4660] ? clear_bhb_loop+0x60/0xb0 [ 135.609214][ T4660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.615154][ T4660] RIP: 0033:0x7f0d9eb9e199 [ 135.619604][ T4660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.639328][ T4660] RSP: 002b:00007f0d9fa2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 135.647763][ T4660] RAX: ffffffffffffffda RBX: 00007f0d9ee25fa0 RCX: 00007f0d9eb9e199 [ 135.655752][ T4660] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 135.663742][ T4660] RBP: 00007f0d9ec350b8 R08: 0000000000000000 R09: 0000000000000000 [ 135.671750][ T4660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.679749][ T4660] R13: 00007f0d9ee26038 R14: 00007f0d9ee25fa0 R15: 00007ffeecd21238 [ 135.687778][ T4660] [ 136.057490][ T4664] FAULT_INJECTION: forcing a failure. [ 136.057490][ T4664] name failslab, interval 1, probability 0, space 0, times 1 [ 136.089857][ T4664] CPU: 0 PID: 4664 Comm: syz.3.78 Not tainted syzkaller #0 [ 136.097156][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.107272][ T4664] Call Trace: [ 136.110606][ T4664] [ 136.113595][ T4664] dump_stack_lvl+0x188/0x24e [ 136.118352][ T4664] ? show_regs_print_info+0x12/0x12 [ 136.123618][ T4664] ? load_image+0x410/0x410 [ 136.128637][ T4664] ? __might_sleep+0xd0/0xd0 [ 136.133815][ T4664] ? __lock_acquire+0x7ea0/0x7ea0 [ 136.138915][ T4664] should_fail_ex+0x390/0x4c0 [ 136.143684][ T4664] should_failslab+0x5/0x20 [ 136.148241][ T4664] slab_pre_alloc_hook+0x59/0x300 [ 136.153347][ T4664] kmem_cache_alloc+0x56/0x2f0 [ 136.158155][ T4664] ? __alloc_file+0x25/0x230 [ 136.162771][ T4664] __alloc_file+0x25/0x230 [ 136.167207][ T4664] alloc_empty_file+0x90/0x180 [ 136.171987][ T4664] alloc_file+0x5b/0x5f0 [ 136.176285][ T4664] alloc_file_pseudo+0x180/0x200 [ 136.181272][ T4664] ? alloc_empty_file_noaccount+0x80/0x80 [ 136.187027][ T4664] ? do_raw_spin_unlock+0x11d/0x230 [ 136.192267][ T4664] ? _raw_spin_unlock+0x24/0x40 [ 136.197171][ T4664] anon_inode_getfile+0xc1/0x1a0 [ 136.202173][ T4664] do_epoll_create+0x27d/0x340 [ 136.207373][ T4664] __x64_sys_epoll_create1+0x33/0x40 [ 136.212693][ T4664] do_syscall_64+0x4c/0xa0 [ 136.217142][ T4664] ? clear_bhb_loop+0x60/0xb0 [ 136.221848][ T4664] ? clear_bhb_loop+0x60/0xb0 [ 136.226568][ T4664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.232891][ T4664] RIP: 0033:0x7f57f6b9e199 [ 136.237461][ T4664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.257385][ T4664] RSP: 002b:00007f57f7a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 136.266120][ T4664] RAX: ffffffffffffffda RBX: 00007f57f6e25fa0 RCX: 00007f57f6b9e199 [ 136.274133][ T4664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.282394][ T4664] RBP: 00007f57f6c350b8 R08: 0000000000000000 R09: 0000000000000000 [ 136.290747][ T4664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.298847][ T4664] R13: 00007f57f6e26038 R14: 00007f57f6e25fa0 R15: 00007ffc4f7d6a48 [ 136.306867][ T4664] [ 136.575411][ T4673] netlink: 156 bytes leftover after parsing attributes in process `syz.1.82'. [ 138.512500][ T4691] netlink: 'syz.4.88': attribute type 5 has an invalid length. [ 138.678912][ T4696] JFS: discard option not supported on device [ 138.685526][ T4696] syz.0.90: attempt to access beyond end of device [ 138.685526][ T4696] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 140.191912][ T4696] syz.0.90: attempt to access beyond end of device [ 140.191912][ T4696] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 140.238234][ T4696] Mount JFS Failure: -5 [ 140.261608][ T4696] jfs_mount failed w/return code = -5 [ 141.091038][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.523265][ T4709] vivid-002: kernel_thread() failed [ 142.600723][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 142.638887][ T14] usb 4-1: config 0 has no interfaces? [ 143.089327][ T14] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 143.203854][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.457390][ T14] usb 4-1: Product: syz [ 143.514372][ T14] usb 4-1: Manufacturer: syz [ 143.520367][ T14] usb 4-1: SerialNumber: syz [ 143.529552][ T14] usb 4-1: config 0 descriptor?? [ 143.556551][ T14] usb 4-1: can't set config #0, error -71 [ 143.573812][ T14] usb 4-1: USB disconnect, device number 3 [ 145.625442][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 147.989630][ T4774] tipc: Enabled bearer , priority 0 [ 148.042019][ T4776] device syzkaller0 entered promiscuous mode [ 148.113546][ T4774] tipc: Resetting bearer [ 148.258525][ T4773] tipc: Resetting bearer [ 149.117839][ T4773] tipc: Disabling bearer [ 149.142640][ T27] tipc: Node number set to 3645431306 [ 151.218248][ T4285] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.728150][ T4285] usb 5-1: Using ep0 maxpacket: 8 [ 152.783740][ T4285] usb 5-1: config 0 has no interfaces? [ 152.994272][ T4285] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 153.058110][ T4285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.058165][ T4285] usb 5-1: Product: syz [ 153.058183][ T4285] usb 5-1: Manufacturer: syz [ 153.058200][ T4285] usb 5-1: SerialNumber: syz [ 153.060060][ T4285] usb 5-1: config 0 descriptor?? [ 153.899351][ T4820] syz.2.120 uses obsolete (PF_INET,SOCK_PACKET) [ 154.695889][ T4373] usb 5-1: USB disconnect, device number 4 [ 154.848396][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.249697][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 155.418122][ T7] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 155.427261][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.283636][ T7] usb 2-1: can't set config #1, error -71 [ 156.345720][ T7] usb 2-1: USB disconnect, device number 5 [ 157.517617][ T4850] netlink: 156 bytes leftover after parsing attributes in process `syz.0.125'. [ 158.309640][ T4855] device team0 entered promiscuous mode [ 158.326058][ T4855] device team_slave_0 entered promiscuous mode [ 158.348317][ T4855] device team_slave_1 entered promiscuous mode [ 158.564708][ T4855] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 158.575554][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.781402][ T7] usb 5-1: config 0 has no interfaces? [ 158.786965][ T7] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 158.824717][ T4867] JFS: discard option not supported on device [ 158.831499][ T4867] syz.1.131: attempt to access beyond end of device [ 158.831499][ T4867] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 158.844421][ T4867] syz.1.131: attempt to access beyond end of device [ 158.844421][ T4867] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 158.857324][ T4867] Mount JFS Failure: -5 [ 158.861601][ T4867] jfs_mount failed w/return code = -5 [ 159.598112][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.643010][ T7] usb 5-1: config 0 descriptor?? [ 160.063126][ T4883] tipc: Enabled bearer , priority 1 [ 161.495645][ T4320] usb 5-1: USB disconnect, device number 5 [ 162.612574][ T4912] FAULT_INJECTION: forcing a failure. [ 162.612574][ T4912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.625828][ T4912] CPU: 0 PID: 4912 Comm: syz.4.144 Not tainted syzkaller #0 [ 162.633250][ T4912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.643351][ T4912] Call Trace: [ 162.646676][ T4912] [ 162.649643][ T4912] dump_stack_lvl+0x188/0x24e [ 162.654371][ T4912] ? show_regs_print_info+0x12/0x12 [ 162.659723][ T4912] ? load_image+0x410/0x410 [ 162.664294][ T4912] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.669402][ T4912] should_fail_ex+0x390/0x4c0 [ 162.674152][ T4912] _copy_from_user+0x2c/0x170 [ 162.678885][ T4912] csum_and_copy_from_iter+0x204/0x1380 [ 162.684508][ T4912] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 162.690210][ T4912] ip_generic_getfrag+0x150/0x2e0 [ 162.695285][ T4912] ? ip_skb_dst_mtu+0x870/0x870 [ 162.700191][ T4912] ? __alloc_skb+0x4e6/0x7d0 [ 162.704821][ T4912] ? skb_put+0x10e/0x200 [ 162.709112][ T4912] __ip_append_data+0x2a73/0x38d0 [ 162.714218][ T4912] ? ip_skb_dst_mtu+0x870/0x870 [ 162.719145][ T4912] ? ip_setup_cork+0x850/0x850 [ 162.723970][ T4912] ? ip_setup_cork+0x528/0x850 [ 162.728788][ T4912] ip_make_skb+0x227/0x440 [ 162.733259][ T4912] ? ip_skb_dst_mtu+0x870/0x870 [ 162.738159][ T4912] ? ip_flush_pending_frames+0x250/0x250 [ 162.743856][ T4912] udp_sendmsg+0x1b04/0x23d0 [ 162.748532][ T4912] ? ip_skb_dst_mtu+0x870/0x870 [ 162.753441][ T4912] ? udp_cmsg_send+0x350/0x350 [ 162.758273][ T4912] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.764317][ T4912] ? read_lock_is_recursive+0x10/0x10 [ 162.769749][ T4912] ? finish_task_switch+0x262/0x8e0 [ 162.775020][ T4912] udpv6_sendmsg+0x7df/0x22c0 [ 162.779755][ T4912] ? __might_sleep+0xd0/0xd0 [ 162.784402][ T4912] ? udp_v6_early_demux+0xf00/0xf00 [ 162.789737][ T4912] ? lock_chain_count+0x20/0x20 [ 162.794659][ T4912] ? inet_send_prepare+0x1c/0x250 [ 162.799735][ T4912] ? sock_rps_record_flow+0x19/0x3f0 [ 162.805073][ T4912] ? inet_send_prepare+0x57/0x250 [ 162.810150][ T4912] ? inet6_sendmsg+0x5b/0xd0 [ 162.814821][ T4912] sock_write_iter+0x2d5/0x3e0 [ 162.819644][ T4912] ? sock_read_iter+0x3a0/0x3a0 [ 162.824566][ T4912] ? vfs_write+0x23b/0x9a0 [ 162.829044][ T4912] vfs_write+0x482/0x9a0 [ 162.833349][ T4912] ? file_end_write+0x250/0x250 [ 162.838280][ T4912] ? __fget_files+0x3fc/0x460 [ 162.843021][ T4912] ? __fdget_pos+0x1d4/0x360 [ 162.847662][ T4912] ? ksys_write+0x70/0x260 [ 162.852137][ T4912] ksys_write+0x14d/0x260 [ 162.856531][ T4912] ? __ia32_sys_read+0x80/0x80 [ 162.861358][ T4912] ? lockdep_hardirqs_on+0x94/0x140 [ 162.866614][ T4912] do_syscall_64+0x4c/0xa0 [ 162.871096][ T4912] ? clear_bhb_loop+0x60/0xb0 [ 162.875821][ T4912] ? clear_bhb_loop+0x60/0xb0 [ 162.880547][ T4912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.886481][ T4912] RIP: 0033:0x7f8a2879e199 [ 162.890941][ T4912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.910593][ T4912] RSP: 002b:00007f8a29612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.919068][ T4912] RAX: ffffffffffffffda RBX: 00007f8a28a26180 RCX: 00007f8a2879e199 [ 162.927093][ T4912] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 162.935212][ T4912] RBP: 00007f8a288350b8 R08: 0000000000000000 R09: 0000000000000000 [ 162.943233][ T4912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.951255][ T4912] R13: 00007f8a28a26218 R14: 00007f8a28a26180 R15: 00007ffd76fd3548 [ 162.959295][ T4912] [ 164.197031][ T4925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 164.285491][ T4929] netlink: 156 bytes leftover after parsing attributes in process `syz.3.142'. [ 164.447175][ T4925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.786517][ T26] audit: type=1800 audit(1791240800.318:3): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.152" name="memory_backed" dev="configfs" ino=35241 res=0 errno=0 [ 166.345620][ T26] audit: type=1800 audit(1791240800.318:4): pid=4936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.152" name="zoned" dev="configfs" ino=35242 res=0 errno=0 [ 166.520401][ T4944] PKCS7: Unsupported SignedData version [ 168.053563][ T26] audit: type=1800 audit(1791240801.858:5): pid=4942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.152" name="power" dev="configfs" ino=36493 res=0 errno=0 [ 168.588861][ T4956] device team0 entered promiscuous mode [ 168.594486][ T4956] device team_slave_0 entered promiscuous mode [ 168.604310][ T4956] device team_slave_1 entered promiscuous mode [ 168.700387][ T4957] FAULT_INJECTION: forcing a failure. [ 168.700387][ T4957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.714291][ T4957] CPU: 0 PID: 4957 Comm: syz.0.158 Not tainted syzkaller #0 [ 168.721635][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.731748][ T4957] Call Trace: [ 168.735074][ T4957] [ 168.738049][ T4957] dump_stack_lvl+0x188/0x24e [ 168.742781][ T4957] ? show_regs_print_info+0x12/0x12 [ 168.748031][ T4957] ? load_image+0x410/0x410 [ 168.752596][ T4957] ? __lock_acquire+0x7ea0/0x7ea0 [ 168.757702][ T4957] should_fail_ex+0x390/0x4c0 [ 168.762459][ T4957] _copy_from_user+0x2c/0x170 [ 168.767199][ T4957] csum_and_copy_from_iter+0x204/0x1380 [ 168.772815][ T4957] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 168.778546][ T4957] ip_generic_getfrag+0x150/0x2e0 [ 168.783630][ T4957] ? ip_skb_dst_mtu+0x870/0x870 [ 168.788532][ T4957] ? __alloc_skb+0x4e6/0x7d0 [ 168.793169][ T4957] ? skb_put+0x10e/0x200 [ 168.797509][ T4957] __ip_append_data+0x2a73/0x38d0 [ 168.802609][ T4957] ? ip_skb_dst_mtu+0x870/0x870 [ 168.807540][ T4957] ? ip_setup_cork+0x850/0x850 [ 168.812377][ T4957] ? ip_setup_cork+0x528/0x850 [ 168.817229][ T4957] ip_make_skb+0x227/0x440 [ 168.821700][ T4957] ? ip_skb_dst_mtu+0x870/0x870 [ 168.826603][ T4957] ? ip_flush_pending_frames+0x250/0x250 [ 168.832305][ T4957] udp_sendmsg+0x1b04/0x23d0 [ 168.836950][ T4957] ? verify_lock_unused+0x140/0x140 [ 168.842223][ T4957] ? ip_skb_dst_mtu+0x870/0x870 [ 168.847181][ T4957] ? udp_cmsg_send+0x350/0x350 [ 168.852009][ T4957] ? read_lock_is_recursive+0x10/0x10 [ 168.857474][ T4957] ? finish_task_switch+0x262/0x8e0 [ 168.862740][ T4957] ? __schedule+0x1087/0x4030 [ 168.867467][ T4957] udpv6_sendmsg+0x7df/0x22c0 [ 168.872206][ T4957] ? __might_sleep+0xd0/0xd0 [ 168.876838][ T4957] ? udp_v6_early_demux+0xf00/0xf00 [ 168.882173][ T4957] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 168.888219][ T4957] ? aa_af_perm+0x340/0x340 [ 168.892805][ T4957] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 168.898519][ T4957] ? sock_rps_record_flow+0x19/0x3f0 [ 168.903869][ T4957] ? inet_send_prepare+0x57/0x250 [ 168.908946][ T4957] ? inet6_sendmsg+0x5b/0xd0 [ 168.913589][ T4957] sock_write_iter+0x2d5/0x3e0 [ 168.918416][ T4957] ? sock_read_iter+0x3a0/0x3a0 [ 168.923341][ T4957] ? common_file_perm+0x171/0x1c0 [ 168.928523][ T4957] vfs_write+0x482/0x9a0 [ 168.932837][ T4957] ? file_end_write+0x250/0x250 [ 168.937745][ T4957] ? __fget_files+0x3fc/0x460 [ 168.942508][ T4957] ? __fdget_pos+0x1d4/0x360 [ 168.947168][ T4957] ? ksys_write+0x70/0x260 [ 168.951657][ T4957] ksys_write+0x14d/0x260 [ 168.956056][ T4957] ? __ia32_sys_read+0x80/0x80 [ 168.960884][ T4957] ? lockdep_hardirqs_on+0x94/0x140 [ 168.966140][ T4957] do_syscall_64+0x4c/0xa0 [ 168.970617][ T4957] ? clear_bhb_loop+0x60/0xb0 [ 168.975359][ T4957] ? clear_bhb_loop+0x60/0xb0 [ 168.980083][ T4957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.986080][ T4957] RIP: 0033:0x7f9ad479e199 [ 168.990540][ T4957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.010199][ T4957] RSP: 002b:00007f9ad55b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.018758][ T4957] RAX: ffffffffffffffda RBX: 00007f9ad4a26180 RCX: 00007f9ad479e199 [ 169.026777][ T4957] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 169.034793][ T4957] RBP: 00007f9ad48350b8 R08: 0000000000000000 R09: 0000000000000000 [ 169.042807][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.050821][ T4957] R13: 00007f9ad4a26218 R14: 00007f9ad4a26180 R15: 00007ffcabe0bc88 [ 169.058953][ T4957] [ 169.398095][ T129] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.546604][ T4956] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 169.639994][ T129] usb 3-1: config 0 has no interfaces? [ 169.645612][ T129] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 169.697609][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.730506][ T129] usb 3-1: config 0 descriptor?? [ 169.868507][ T4961] input: syz0 as /devices/virtual/input/input10 [ 170.615294][ T14] usb 3-1: USB disconnect, device number 4 [ 170.912944][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 171.095275][ T4976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.218294][ T4349] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 172.898222][ T4349] usb 2-1: Using ep0 maxpacket: 16 [ 172.913646][ T26] audit: type=1800 audit(1791240808.448:6): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.167" name="memory_backed" dev="configfs" ino=35375 res=0 errno=0 [ 173.914815][ T26] audit: type=1800 audit(1791240808.448:7): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.167" name="zoned" dev="configfs" ino=35376 res=0 errno=0 [ 174.008089][ T26] audit: type=1800 audit(1791240809.488:8): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.167" name="power" dev="configfs" ino=35382 res=0 errno=0 [ 174.311990][ T4349] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 174.350034][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.413073][ T5001] FAULT_INJECTION: forcing a failure. [ 174.413073][ T5001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.426380][ T5001] CPU: 0 PID: 5001 Comm: syz.2.169 Not tainted syzkaller #0 [ 174.433711][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.443824][ T5001] Call Trace: [ 174.447145][ T5001] [ 174.450150][ T5001] dump_stack_lvl+0x188/0x24e [ 174.454884][ T5001] ? show_regs_print_info+0x12/0x12 [ 174.460223][ T5001] ? load_image+0x410/0x410 [ 174.464780][ T5001] ? __lock_acquire+0x7ea0/0x7ea0 [ 174.469861][ T5001] should_fail_ex+0x390/0x4c0 [ 174.474602][ T5001] _copy_from_user+0x2c/0x170 [ 174.479331][ T5001] csum_and_copy_from_iter+0x204/0x1380 [ 174.484944][ T5001] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 174.490649][ T5001] ip_generic_getfrag+0x150/0x2e0 [ 174.495721][ T5001] ? ip_skb_dst_mtu+0x870/0x870 [ 174.500620][ T5001] ? __alloc_skb+0x4e6/0x7d0 [ 174.505341][ T5001] ? skb_put+0x10e/0x200 [ 174.509631][ T5001] __ip_append_data+0x2a73/0x38d0 [ 174.514736][ T5001] ? ip_skb_dst_mtu+0x870/0x870 [ 174.519647][ T5001] ? ip_setup_cork+0x850/0x850 [ 174.524454][ T5001] ? ip_setup_cork+0x528/0x850 [ 174.529267][ T5001] ip_make_skb+0x227/0x440 [ 174.533732][ T5001] ? ip_skb_dst_mtu+0x870/0x870 [ 174.538627][ T5001] ? ip_flush_pending_frames+0x250/0x250 [ 174.544320][ T5001] udp_sendmsg+0x1b04/0x23d0 [ 174.548988][ T5001] ? ip_skb_dst_mtu+0x870/0x870 [ 174.553972][ T5001] ? udp_cmsg_send+0x350/0x350 [ 174.558808][ T5001] ? lockdep_hardirqs_on+0x94/0x140 [ 174.564078][ T5001] udpv6_sendmsg+0x7df/0x22c0 [ 174.568811][ T5001] ? __might_sleep+0xd0/0xd0 [ 174.573462][ T5001] ? udp_v6_early_demux+0xf00/0xf00 [ 174.578741][ T5001] ? aa_af_perm+0x340/0x340 [ 174.583291][ T5001] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 174.588975][ T5001] ? sock_rps_record_flow+0x19/0x3f0 [ 174.594308][ T5001] ? inet_send_prepare+0x57/0x250 [ 174.599381][ T5001] ? inet6_sendmsg+0x5b/0xd0 [ 174.604014][ T5001] sock_write_iter+0x2d5/0x3e0 [ 174.608834][ T5001] ? sock_read_iter+0x3a0/0x3a0 [ 174.613757][ T5001] ? common_file_perm+0x171/0x1c0 [ 174.618842][ T5001] vfs_write+0x482/0x9a0 [ 174.623145][ T5001] ? file_end_write+0x250/0x250 [ 174.628055][ T5001] ? __fget_files+0x3fc/0x460 [ 174.632789][ T5001] ? __fdget_pos+0x1d4/0x360 [ 174.637439][ T5001] ? ksys_write+0x70/0x260 [ 174.642009][ T5001] ksys_write+0x14d/0x260 [ 174.646398][ T5001] ? __ia32_sys_read+0x80/0x80 [ 174.651215][ T5001] ? lockdep_hardirqs_on+0x94/0x140 [ 174.656487][ T5001] do_syscall_64+0x4c/0xa0 [ 174.660961][ T5001] ? clear_bhb_loop+0x60/0xb0 [ 174.665690][ T5001] ? clear_bhb_loop+0x60/0xb0 [ 174.670548][ T5001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.676486][ T5001] RIP: 0033:0x7f0d9eb9e199 [ 174.680951][ T5001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.700867][ T5001] RSP: 002b:00007f0d9f9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.709334][ T5001] RAX: ffffffffffffffda RBX: 00007f0d9ee26180 RCX: 00007f0d9eb9e199 [ 174.717357][ T5001] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 174.725375][ T5001] RBP: 00007f0d9ec350b8 R08: 0000000000000000 R09: 0000000000000000 [ 174.733498][ T5001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.741518][ T5001] R13: 00007f0d9ee26218 R14: 00007f0d9ee26180 R15: 00007ffeecd21238 [ 174.749548][ T5001] [ 174.981819][ T4349] usb 2-1: Product: syz [ 175.028738][ T4349] usb 2-1: config 0 descriptor?? [ 175.035070][ T5004] input: syz0 as /devices/virtual/input/input11 [ 175.096072][ T4349] usb 2-1: can't set config #0, error -71 [ 175.147649][ T4349] usb 2-1: USB disconnect, device number 6 [ 175.715444][ T5003] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 176.051986][ T5017] netlink: 156 bytes leftover after parsing attributes in process `syz.2.173'. [ 177.169895][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.379870][ T27] usb 5-1: config 0 has no interfaces? [ 177.889361][ T27] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 177.928186][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.429468][ T27] usb 5-1: config 0 descriptor?? [ 180.413865][ T5050] JFS: discard option not supported on device [ 180.422677][ T5050] syz.2.178: attempt to access beyond end of device [ 180.422677][ T5050] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 180.436204][ T5050] syz.2.178: attempt to access beyond end of device [ 180.436204][ T5050] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 180.449147][ T5050] Mount JFS Failure: -5 [ 180.453395][ T5050] jfs_mount failed w/return code = -5 [ 181.279032][ T4349] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.867009][ T27] usb 5-1: USB disconnect, device number 6 [ 182.987517][ T5062] device team0 entered promiscuous mode [ 183.024810][ T5062] device team_slave_0 entered promiscuous mode [ 183.064267][ T5062] device team_slave_1 entered promiscuous mode [ 183.109080][ T4349] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 183.127582][ T5062] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 183.217478][ T4349] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 183.248963][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.578529][ T5048] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.006860][ T4349] usb 4-1: can't set config #1, error -71 [ 184.039043][ T4349] usb 4-1: USB disconnect, device number 4 [ 184.771426][ T5080] tipc: Enabled bearer , priority 1 [ 185.789398][ T4285] tipc: Node number set to 1714632572 [ 186.370281][ T5090] netlink: 156 bytes leftover after parsing attributes in process `syz.1.189'. [ 186.962681][ T5096] trusted_key: encrypted_key: insufficient parameters specified [ 187.002090][ T5096] Could not find key with description: [syz] [ 187.028130][ T5096] process_request_key_err: No key [ 187.054085][ T5096] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 187.098081][ T5096] One or more global auth toks could not properly register; rc = [-2] [ 187.147148][ T5096] Error parsing options; rc = [-2] [ 187.158060][ T4285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 187.358229][ T4285] usb 1-1: Using ep0 maxpacket: 16 [ 187.367697][ T4285] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 187.407397][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.426174][ T4285] usb 1-1: Product: syz [ 187.436053][ T4285] usb 1-1: Manufacturer: syz [ 187.466466][ T4285] usb 1-1: SerialNumber: syz [ 187.627591][ T4285] usb 1-1: config 0 descriptor?? [ 189.618953][ T4285] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 189.958098][ T4349] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.179965][ T4349] usb 3-1: config 0 has no interfaces? [ 190.185571][ T4349] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 190.215636][ T4349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.226086][ T5112] tipc: Started in network mode [ 190.245419][ T5112] tipc: Node identity 0aa2ec126093, cluster identity 4711 [ 190.253796][ T4349] usb 3-1: config 0 descriptor?? [ 190.268738][ T5112] tipc: Enabled bearer , priority 0 [ 190.314914][ T5113] device syzkaller0 entered promiscuous mode [ 190.376511][ T5112] tipc: Resetting bearer [ 190.405591][ T5111] tipc: Resetting bearer [ 190.429468][ T4285] ssu100: probe of 1-1:0.0 failed with error -71 [ 190.451026][ T4285] usb 1-1: USB disconnect, device number 4 [ 190.522828][ T5111] tipc: Disabling bearer [ 190.780860][ T4285] usb 3-1: USB disconnect, device number 5 [ 191.004401][ T4349] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.214747][ T4349] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 191.307701][ T4349] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 191.414756][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.590042][ T5117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 191.634511][ T4349] opticon 2-1:1.0: opticon converter detected [ 191.711249][ T4349] usb 2-1: opticon converter now attached to ttyUSB0 [ 193.288237][ T4324] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 193.613217][ T14] usb 2-1: USB disconnect, device number 7 [ 193.708236][ T4324] usb 5-1: Using ep0 maxpacket: 32 [ 193.723343][ T4324] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 193.753165][ T4324] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 193.787626][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 193.822844][ T4324] usb 5-1: Product: syz [ 193.827469][ T4324] usb 5-1: Manufacturer: syz [ 193.926789][ T4324] usb 5-1: SerialNumber: syz [ 194.045077][ T4324] usb 5-1: config 0 descriptor?? [ 194.119411][ T5130] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.166019][ T4324] hub 5-1:0.0: bad descriptor, ignoring hub [ 194.240537][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.247152][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.256330][ T4324] hub: probe of 5-1:0.0 failed with error -5 [ 195.165200][ T14] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 195.174003][ T14] opticon 2-1:1.0: device disconnected [ 195.238903][ T4324] usb 5-1: USB disconnect, device number 7 [ 195.667316][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 195.771362][ T5152] netlink: 156 bytes leftover after parsing attributes in process `syz.0.207'. [ 195.832178][ T5148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.923116][ T5151] device macvlan2 entered promiscuous mode [ 197.565003][ T5163] trusted_key: encrypted_key: insufficient parameters specified [ 197.646418][ T5163] Could not find key with description: [syz] [ 197.677460][ T5163] process_request_key_err: No key [ 197.707355][ T5163] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 197.755456][ T5163] One or more global auth toks could not properly register; rc = [-2] [ 197.828281][ T5163] Error parsing options; rc = [-2] [ 197.839121][ T129] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 197.868073][ T3655] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.030566][ T129] usb 4-1: config 0 has no interfaces? [ 198.036718][ T129] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 198.058150][ T3655] usb 5-1: Using ep0 maxpacket: 16 [ 198.087183][ T3655] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 198.106839][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.117577][ T3655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.148485][ T3655] usb 5-1: Product: syz [ 198.167718][ T129] usb 4-1: config 0 descriptor?? [ 198.188447][ T3655] usb 5-1: Manufacturer: syz [ 198.193107][ T3655] usb 5-1: SerialNumber: syz [ 198.621606][ T3655] usb 5-1: config 0 descriptor?? [ 199.371436][ T3655] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 199.560249][ T4347] usb 4-1: USB disconnect, device number 5 [ 200.010983][ T3655] ssu100: probe of 5-1:0.0 failed with error -71 [ 201.512163][ T3655] usb 5-1: USB disconnect, device number 8 [ 202.818856][ T4278] Bluetooth: hci2: Malformed LE Event: 0x0d [ 202.881379][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 203.004287][ T5195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.121093][ T5197] device macvlan2 entered promiscuous mode [ 207.048672][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 207.054868][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 207.060978][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 207.067122][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 207.073226][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 207.154415][ T5223] netlink: 156 bytes leftover after parsing attributes in process `syz.2.226'. [ 207.478283][ T27] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.688182][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 207.698832][ T27] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 207.738132][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.782292][ T27] usb 5-1: Product: syz [ 207.797669][ T27] usb 5-1: Manufacturer: syz [ 207.807836][ T27] usb 5-1: SerialNumber: syz [ 207.830553][ T27] usb 5-1: config 0 descriptor?? [ 207.860824][ T27] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 208.083294][ T3655] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.949730][ T27] ssu100: probe of 5-1:0.0 failed with error -110 [ 209.429860][ T3655] usb 4-1: config 0 has no interfaces? [ 209.435425][ T3655] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 209.486127][ T3655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.538854][ T3655] usb 4-1: config 0 descriptor?? [ 209.546761][ T5241] ======================================================= [ 209.546761][ T5241] WARNING: The mand mount option has been deprecated and [ 209.546761][ T5241] and is ignored by this kernel. Remove the mand [ 209.546761][ T5241] option from the mount to silence this warning. [ 209.546761][ T5241] ======================================================= [ 209.649858][ T5243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 209.750043][ T5243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'. [ 211.160515][ T4285] usb 5-1: USB disconnect, device number 9 [ 213.963508][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.973026][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.619412][ T5243] device bridge_slave_0 left promiscuous mode [ 215.636162][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.199095][ T5243] device bridge_slave_1 left promiscuous mode [ 217.206646][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.590075][ T5243] bond0: (slave bond_slave_0): Releasing backup interface [ 217.728264][ T5243] bond0: (slave bond_slave_1): Releasing backup interface [ 217.791890][ T5243] team0: Port device team_slave_0 removed [ 217.852434][ T5243] team0: Port device team_slave_1 removed [ 217.910711][ T5243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.969534][ T5243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.388049][ T5243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.579060][ T5243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.009074][ T5292] JFS: discard option not supported on device [ 219.015430][ T5292] syz.1.244: attempt to access beyond end of device [ 219.015430][ T5292] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 219.028450][ T5292] syz.1.244: attempt to access beyond end of device [ 219.028450][ T5292] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 219.041304][ T5292] Mount JFS Failure: -5 [ 219.045491][ T5292] jfs_mount failed w/return code = -5 [ 220.403126][ T5297] netlink: 156 bytes leftover after parsing attributes in process `syz.1.246'. [ 220.738178][ T5243] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.751963][ T5243] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.761586][ T5243] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.771686][ T5243] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.793609][ T5243] bond0: (slave geneve1): Releasing backup interface [ 220.918113][ T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.045304][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 221.109723][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 221.129586][ T27] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 221.181970][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.210838][ T27] usb 5-1: Product: syz [ 221.223638][ T27] usb 5-1: Manufacturer: syz [ 221.278262][ T27] usb 5-1: SerialNumber: syz [ 221.466275][ T27] usb 5-1: config 0 descriptor?? [ 221.475128][ T129] usb 4-1: USB disconnect, device number 6 [ 221.483818][ T27] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 221.798248][ T27] ssu100: probe of 5-1:0.0 failed with error -110 [ 221.804825][ T4324] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.754422][ T4324] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 224.588396][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.596475][ T4324] usb 3-1: Product: syz [ 224.606787][ T4324] usb 3-1: Manufacturer: syz [ 224.611741][ T4324] usb 3-1: SerialNumber: syz [ 224.636355][ T4324] usb 3-1: config 0 descriptor?? [ 224.772902][ T4324] usb 3-1: can't set config #0, error -71 [ 224.788427][ T4324] usb 3-1: USB disconnect, device number 6 [ 228.457009][ T4349] usb 5-1: USB disconnect, device number 10 [ 229.746199][ T5367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.766913][ T5367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.803771][ T5367] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 230.612821][ T5367] bond0 (unregistering): Released all slaves [ 230.668168][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 230.730443][ T5369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 232.873722][ T4324] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 233.078197][ T4324] usb 2-1: Using ep0 maxpacket: 16 [ 233.102825][ T4324] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 233.141684][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.163631][ T4324] usb 2-1: Product: syz [ 233.185299][ T4324] usb 2-1: Manufacturer: syz [ 233.219864][ T4324] usb 2-1: SerialNumber: syz [ 233.263295][ T4324] usb 2-1: config 0 descriptor?? [ 233.299325][ T4324] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 234.400842][ T5406] JFS: discard option not supported on device [ 234.407337][ T5406] syz.2.274: attempt to access beyond end of device [ 234.407337][ T5406] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 234.423028][ T5406] syz.2.274: attempt to access beyond end of device [ 234.423028][ T5406] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 234.436097][ T5406] Mount JFS Failure: -5 [ 234.440386][ T5406] jfs_mount failed w/return code = -5 [ 234.908493][ T4324] ssu100: probe of 2-1:0.0 failed with error -110 [ 235.182981][ T4324] usb 2-1: USB disconnect, device number 8 [ 235.303873][ T5414] Could not find key with description: [syz] [ 235.328066][ T5414] process_request_key_err: No key [ 235.333265][ T5414] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 235.349190][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 235.412358][ T5414] One or more global auth toks could not properly register; rc = [-2] [ 235.472520][ T5414] Error parsing options; rc = [-2] [ 236.234014][ T5416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.259805][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 236.284028][ T5420] device macvlan2 entered promiscuous mode [ 237.313746][ T5424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.369438][ T5424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.432174][ T5424] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 237.685889][ T5424] bond0 (unregistering): Released all slaves [ 241.655318][ T5462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.676070][ T5462] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 241.757322][ T5462] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.787914][ T5462] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 241.818051][ T4285] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.838532][ T5462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.845432][ T5472] Could not find key with description: [syz] [ 241.872108][ T5472] process_request_key_err: No key [ 241.877203][ T5472] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 241.885598][ T5462] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 241.915995][ T5472] One or more global auth toks could not properly register; rc = [-2] [ 241.936479][ T5472] Error parsing options; rc = [-2] [ 241.948854][ T5462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.968821][ T5462] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 242.002567][ T5462] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.019673][ T4285] usb 2-1: Using ep0 maxpacket: 8 [ 242.039141][ T4285] usb 2-1: config 0 has no interfaces? [ 242.045450][ T5462] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 242.063039][ T4285] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 242.082139][ T4285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.108267][ T4285] usb 2-1: Product: syz [ 242.138830][ T4285] usb 2-1: Manufacturer: syz [ 242.145245][ T4285] usb 2-1: SerialNumber: syz [ 242.166069][ T4285] usb 2-1: config 0 descriptor?? [ 242.378133][ T4324] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 242.588173][ T4324] usb 5-1: Using ep0 maxpacket: 8 [ 242.605232][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.661137][ T4324] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 242.711436][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.990309][ T4324] usb 5-1: config 0 descriptor?? [ 243.019517][ T5480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 243.164540][ T5480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.197004][ T5481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 243.263566][ T5481] device macvlan2 entered promiscuous mode [ 243.758092][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.788371][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout [ 243.838155][ T4278] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.902314][ T4285] usb 2-1: USB disconnect, device number 9 [ 244.188152][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.194385][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout [ 244.308740][ T129] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 244.611362][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 244.661626][ T129] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 244.671945][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.695202][ T129] usb 4-1: Product: syz [ 244.699663][ T129] usb 4-1: Manufacturer: syz [ 244.706404][ T129] usb 4-1: SerialNumber: syz [ 244.729591][ T129] usb 4-1: config 0 descriptor?? [ 244.757263][ T129] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 244.929889][ T4324] usb 5-1: can't set config #0, error -71 [ 245.004248][ T4324] usb 5-1: USB disconnect, device number 11 [ 245.676969][ T129] ssu100: probe of 4-1:0.0 failed with error -71 [ 245.806519][ T129] usb 4-1: USB disconnect, device number 7 [ 245.838914][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 245.839862][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 245.919271][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 246.238619][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 246.244785][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 247.175849][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 247.418261][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 247.589433][ T5522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'. [ 248.149659][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.178005][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.197000][ T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.213849][ T14] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.229631][ T14] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 248.239341][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 248.251292][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.156323][ T4324] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 250.224721][ T26] audit: type=1800 audit(1791240885.758:9): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.309" name="memory_backed" dev="configfs" ino=37883 res=0 errno=0 [ 250.247930][ T26] audit: type=1800 audit(1791240885.788:10): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.309" name="zoned" dev="configfs" ino=37884 res=0 errno=0 [ 250.303699][ T26] audit: type=1800 audit(1791240885.838:11): pid=5543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.309" name="power" dev="configfs" ino=38318 res=0 errno=0 [ 250.368096][ T4324] usb 3-1: Using ep0 maxpacket: 8 [ 250.375226][ T4324] usb 3-1: config 0 has no interfaces? [ 250.390929][ T4324] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 250.411815][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.426807][ T4324] usb 3-1: Product: syz [ 250.431664][ T4324] usb 3-1: Manufacturer: syz [ 250.436693][ T4324] usb 3-1: SerialNumber: syz [ 250.451645][ T4324] usb 3-1: config 0 descriptor?? [ 251.152449][ T5518] tipc: Resetting bearer [ 251.251672][ T5518] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.260630][ T5518] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.110770][ T14] gud 2-1:1.0: USB-2: Failed to add properties (ret=-71) [ 252.117878][ T14] gud 2-1:1.0: Failed to get connectors (error=-71) [ 252.124825][ T4373] usb 3-1: USB disconnect, device number 7 [ 252.131609][ T14] gud: probe of 2-1:1.0 failed with error -71 [ 252.157392][ T14] usb 2-1: USB disconnect, device number 10 [ 252.701297][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 252.746832][ T5518] device bridge_slave_0 left promiscuous mode [ 252.753342][ T5518] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.812274][ T5518] device bridge_slave_1 left promiscuous mode [ 252.819204][ T5518] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.894982][ T5518] bond0: (slave bond_slave_0): Releasing backup interface [ 252.908276][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 252.919466][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.948158][ T14] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 252.964966][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.985815][ T14] usb 1-1: config 0 descriptor?? [ 253.001983][ T5560] process 'syz.2.313' launched './file0' with NULL argv: empty string added [ 253.018710][ T14] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 253.075584][ T5518] bond0: (slave bond_slave_1): Releasing backup interface [ 253.129785][ T5518] team0: Port device team_slave_0 removed [ 253.223820][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.252470][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.265158][ T5518] team0: Port device team_slave_1 removed [ 253.286844][ T5518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.351167][ T5518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.426849][ T5518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.454704][ T5518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.681241][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688146][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.847331][ T5518] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.857737][ T5518] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.872760][ T5518] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.882377][ T5518] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.057633][ T5518] device macvlan2 left promiscuous mode [ 256.517384][ T27] usb 1-1: USB disconnect, device number 5 [ 257.945644][ T5584] tipc: Enabled bearer , priority 0 [ 258.110306][ T5584] device syzkaller0 entered promiscuous mode [ 259.125343][ T5584] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 259.163321][ T4349] tipc: Node number set to 1781656594 [ 259.172173][ T5584] tipc: Resetting bearer [ 259.206986][ T5595] input: syz0 as /devices/virtual/input/input12 [ 259.479769][ T5581] tipc: Resetting bearer [ 259.631153][ T5581] tipc: Disabling bearer [ 260.073668][ T5606] JFS: discard option not supported on device [ 260.081182][ T5606] syz.2.326: attempt to access beyond end of device [ 260.081182][ T5606] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 260.094631][ T5606] syz.2.326: attempt to access beyond end of device [ 260.094631][ T5606] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 260.107753][ T5606] Mount JFS Failure: -5 [ 260.112090][ T5606] jfs_mount failed w/return code = -5 [ 260.974992][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 261.007318][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 261.028969][ T26] audit: type=1800 audit(1791240896.568:12): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="memory_backed" dev="configfs" ino=39042 res=0 errno=0 [ 261.057333][ T26] audit: type=1800 audit(1791240896.588:13): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="zoned" dev="configfs" ino=39043 res=0 errno=0 [ 261.110693][ T26] audit: type=1800 audit(1791240896.638:14): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="power" dev="configfs" ino=39049 res=0 errno=0 [ 261.550717][ T4349] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 261.830623][ T4349] usb 2-1: Using ep0 maxpacket: 16 [ 261.870408][ T4349] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 261.958486][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.966638][ T4349] usb 2-1: Product: syz [ 261.991696][ T4349] usb 2-1: Manufacturer: syz [ 262.004228][ T4349] usb 2-1: SerialNumber: syz [ 262.063117][ T4349] usb 2-1: config 0 descriptor?? [ 262.080680][ T4349] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 262.099320][ T5624] FAULT_INJECTION: forcing a failure. [ 262.099320][ T5624] name failslab, interval 1, probability 0, space 0, times 0 [ 262.136895][ T5624] CPU: 0 PID: 5624 Comm: syz.3.331 Not tainted syzkaller #0 [ 262.144290][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.154416][ T5624] Call Trace: [ 262.157740][ T5624] [ 262.160718][ T5624] dump_stack_lvl+0x188/0x24e [ 262.165461][ T5624] ? show_regs_print_info+0x12/0x12 [ 262.170728][ T5624] ? load_image+0x410/0x410 [ 262.175305][ T5624] ? __might_sleep+0xd0/0xd0 [ 262.179956][ T5624] ? __lock_acquire+0x7ea0/0x7ea0 [ 262.185049][ T5624] should_fail_ex+0x390/0x4c0 [ 262.189795][ T5624] should_failslab+0x5/0x20 [ 262.194346][ T5624] slab_pre_alloc_hook+0x59/0x300 [ 262.199425][ T5624] ? aa_get_newest_label+0xf9/0x5b0 [ 262.204701][ T5624] ? sk_prot_alloc+0xe7/0x210 [ 262.209533][ T5624] __kmem_cache_alloc_node+0x4f/0x270 [ 262.214986][ T5624] ? sk_prot_alloc+0xe7/0x210 [ 262.219740][ T5624] __kmalloc+0xa3/0x240 [ 262.223956][ T5624] sk_prot_alloc+0xe7/0x210 [ 262.228556][ T5624] ? sk_alloc+0x20/0x330 [ 262.232868][ T5624] sk_alloc+0x36/0x330 [ 262.237099][ T5624] packet_create+0xfb/0x770 [ 262.241691][ T5624] __sock_create+0x49a/0x940 [ 262.246780][ T5624] __sys_socket+0xc4/0x190 [ 262.251254][ T5624] __x64_sys_socket+0x76/0x80 [ 262.255989][ T5624] do_syscall_64+0x4c/0xa0 [ 262.260580][ T5624] ? clear_bhb_loop+0x60/0xb0 [ 262.265319][ T5624] ? clear_bhb_loop+0x60/0xb0 [ 262.270059][ T5624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.276015][ T5624] RIP: 0033:0x7f57f6b9e199 [ 262.280485][ T5624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.300245][ T5624] RSP: 002b:00007f57f7a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 262.308730][ T5624] RAX: ffffffffffffffda RBX: 00007f57f6e25fa0 RCX: 00007f57f6b9e199 [ 262.316763][ T5624] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011 [ 262.324804][ T5624] RBP: 00007f57f6c350b8 R08: 0000000000000000 R09: 0000000000000000 [ 262.332839][ T5624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.340866][ T5624] R13: 00007f57f6e26038 R14: 00007f57f6e25fa0 R15: 00007ffc4f7d6a48 [ 262.348905][ T5624] [ 263.144221][ T5613] tipc: Resetting bearer [ 263.204211][ T4349] ssu100: probe of 2-1:0.0 failed with error -71 [ 263.238732][ T4349] usb 2-1: USB disconnect, device number 11 [ 263.349391][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.357128][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.465428][ T5613] device team0 left promiscuous mode [ 263.471186][ T5613] device team_slave_0 left promiscuous mode [ 263.477545][ T5613] device team_slave_1 left promiscuous mode [ 264.424704][ T5645] input: syz0 as /devices/virtual/input/input13 [ 264.448176][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 264.658078][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 264.665443][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.699657][ T7] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 264.718069][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.755541][ T7] usb 1-1: config 0 descriptor?? [ 264.775517][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 264.965233][ T5650] netlink: 156 bytes leftover after parsing attributes in process `syz.1.337'. [ 264.996063][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.023413][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.294401][ T5613] device bridge_slave_0 left promiscuous mode [ 265.304457][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.445426][ T5613] device bridge_slave_1 left promiscuous mode [ 265.452959][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.738877][ T5613] team0: Port device team_slave_0 removed [ 265.895502][ T5613] team0: Port device team_slave_1 removed [ 265.926130][ T5613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.987788][ T5613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.027005][ T26] audit: type=1800 audit(1791240901.558:15): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.339" name="memory_backed" dev="configfs" ino=39195 res=0 errno=0 [ 266.067476][ T26] audit: type=1800 audit(1791240901.588:16): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.339" name="zoned" dev="configfs" ino=39196 res=0 errno=0 [ 266.101254][ T5613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.116468][ T26] audit: type=1800 audit(1791240901.648:17): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.339" name="power" dev="configfs" ino=39201 res=0 errno=0 [ 266.183084][ T5613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.255911][ T5613] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.306955][ T5613] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.423463][ T5613] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.476944][ T5613] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.333894][ T5613] device macvlan2 left promiscuous mode [ 268.980831][ T5670] vivid-001: kernel_thread() failed [ 270.461015][ T4323] usb 1-1: USB disconnect, device number 6 [ 271.635684][ T5696] input: syz0 as /devices/virtual/input/input14 [ 272.951921][ T5709] FAULT_INJECTION: forcing a failure. [ 272.951921][ T5709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.965133][ T5709] CPU: 1 PID: 5709 Comm: syz.2.349 Not tainted syzkaller #0 [ 272.972470][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.982571][ T5709] Call Trace: [ 272.985886][ T5709] [ 272.988864][ T5709] dump_stack_lvl+0x188/0x24e [ 272.993593][ T5709] ? show_regs_print_info+0x12/0x12 [ 272.998837][ T5709] ? load_image+0x410/0x410 [ 273.003402][ T5709] ? __lock_acquire+0x7ea0/0x7ea0 [ 273.008504][ T5709] should_fail_ex+0x390/0x4c0 [ 273.013352][ T5709] _copy_from_user+0x2c/0x170 [ 273.018077][ T5709] csum_and_copy_from_iter+0x204/0x1380 [ 273.023678][ T5709] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 273.029722][ T5709] ? preempt_schedule_notrace+0x120/0x120 [ 273.035485][ T5709] ? lock_chain_count+0x20/0x20 [ 273.040405][ T5709] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 273.046086][ T5709] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 273.051763][ T5709] ? lockdep_hardirqs_on+0x94/0x140 [ 273.057017][ T5709] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 273.062701][ T5709] ? __ip_append_data+0x26d7/0x38d0 [ 273.067975][ T5709] ip_generic_getfrag+0x150/0x2e0 [ 273.073047][ T5709] ? ip_skb_dst_mtu+0x870/0x870 [ 273.077948][ T5709] ? __alloc_skb+0x4e6/0x7d0 [ 273.082710][ T5709] ? skb_put+0x10e/0x200 [ 273.087014][ T5709] __ip_append_data+0x2a73/0x38d0 [ 273.092125][ T5709] ? ip_skb_dst_mtu+0x870/0x870 [ 273.097042][ T5709] ? ip_setup_cork+0x850/0x850 [ 273.101865][ T5709] ? ip_setup_cork+0x528/0x850 [ 273.106719][ T5709] ip_make_skb+0x227/0x440 [ 273.111197][ T5709] ? ip_skb_dst_mtu+0x870/0x870 [ 273.116108][ T5709] ? ip_flush_pending_frames+0x250/0x250 [ 273.121812][ T5709] udp_sendmsg+0x1b04/0x23d0 [ 273.126476][ T5709] ? ip_skb_dst_mtu+0x870/0x870 [ 273.131403][ T5709] ? udp_cmsg_send+0x350/0x350 [ 273.136251][ T5709] ? lockdep_hardirqs_on+0x94/0x140 [ 273.141525][ T5709] udpv6_sendmsg+0x7df/0x22c0 [ 273.146269][ T5709] ? __might_sleep+0xd0/0xd0 [ 273.150900][ T5709] ? udp_v6_early_demux+0xf00/0xf00 [ 273.156175][ T5709] ? aa_af_perm+0x340/0x340 [ 273.160789][ T5709] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 273.166472][ T5709] ? sock_rps_record_flow+0x19/0x3f0 [ 273.171811][ T5709] ? inet_send_prepare+0x57/0x250 [ 273.176895][ T5709] ? inet6_sendmsg+0x5b/0xd0 [ 273.181533][ T5709] sock_write_iter+0x2d5/0x3e0 [ 273.186346][ T5709] ? sock_read_iter+0x3a0/0x3a0 [ 273.191266][ T5709] ? common_file_perm+0x171/0x1c0 [ 273.196355][ T5709] vfs_write+0x482/0x9a0 [ 273.200662][ T5709] ? file_end_write+0x250/0x250 [ 273.205593][ T5709] ? __fget_files+0x3fc/0x460 [ 273.210335][ T5709] ? __fdget_pos+0x1d4/0x360 [ 273.214978][ T5709] ? ksys_write+0x70/0x260 [ 273.219450][ T5709] ksys_write+0x14d/0x260 [ 273.223832][ T5709] ? __ia32_sys_read+0x80/0x80 [ 273.228655][ T5709] ? lockdep_hardirqs_on+0x94/0x140 [ 273.233911][ T5709] do_syscall_64+0x4c/0xa0 [ 273.238384][ T5709] ? clear_bhb_loop+0x60/0xb0 [ 273.243111][ T5709] ? clear_bhb_loop+0x60/0xb0 [ 273.247837][ T5709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.253775][ T5709] RIP: 0033:0x7f0d9eb9e199 [ 273.258315][ T5709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.277968][ T5709] RSP: 002b:00007f0d9f9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.286521][ T5709] RAX: ffffffffffffffda RBX: 00007f0d9ee26180 RCX: 00007f0d9eb9e199 [ 273.294538][ T5709] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000005 [ 273.302553][ T5709] RBP: 00007f0d9ec350b8 R08: 0000000000000000 R09: 0000000000000000 [ 273.310579][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.318596][ T5709] R13: 00007f0d9ee26218 R14: 00007f0d9ee26180 R15: 00007ffeecd21238 [ 273.326628][ T5709] [ 274.804611][ T5723] tipc: Enabling of bearer rejected, failed to enable media [ 275.105807][ T5733] netlink: 156 bytes leftover after parsing attributes in process `syz.4.354'. [ 276.259316][ T5737] vivid-001: kernel_thread() failed [ 276.769152][ T5752] input: syz0 as /devices/virtual/input/input15 [ 276.908118][ T4287] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 277.100238][ T4287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.163909][ T4287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.408808][ T4287] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.422850][ T4287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 278.440939][ T4287] usb 5-1: SerialNumber: syz [ 278.657597][ T4287] usb 5-1: 0:2 : does not exist [ 280.425595][ T4287] usb 5-1: USB disconnect, device number 12 [ 281.110187][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.652385][ T5796] tipc: Enabling of bearer rejected, failed to enable media [ 282.699385][ T5793] netlink: 156 bytes leftover after parsing attributes in process `syz.3.369'. [ 282.837588][ T5805] input: syz0 as /devices/virtual/input/input16 [ 283.750337][ T4322] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 284.728050][ T4322] usb 3-1: Using ep0 maxpacket: 8 [ 284.735262][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.908147][ T4322] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 284.917277][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.016801][ T4322] usb 3-1: config 0 descriptor?? [ 285.210657][ T4322] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 285.348395][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.550165][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.875536][ T5852] input: syz0 as /devices/virtual/input/input17 [ 287.909601][ T4347] usb 3-1: USB disconnect, device number 8 [ 288.041877][ T5855] tipc: Started in network mode [ 288.060799][ T5855] tipc: Node identity 8289eccfdb2b, cluster identity 4711 [ 288.078325][ T5855] tipc: Enabled bearer , priority 0 [ 288.199037][ T5859] device syzkaller0 entered promiscuous mode [ 288.292334][ T5861] netlink: 156 bytes leftover after parsing attributes in process `syz.4.385'. [ 288.304838][ T5855] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 288.357178][ T5854] tipc: Resetting bearer [ 288.444714][ T5854] tipc: Disabling bearer [ 290.604984][ T5889] input: syz0 as /devices/virtual/input/input18 [ 291.766901][ T5905] tipc: Enabled bearer , priority 0 [ 291.803966][ T5905] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 291.927701][ T5904] tipc: Disabling bearer [ 292.168269][ T4323] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 292.388185][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 292.401038][ T4323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.576842][ T4323] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 292.713304][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.866685][ T4323] usb 4-1: config 0 descriptor?? [ 292.924842][ T4323] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 293.271912][ T5927] JFS: discard option not supported on device [ 293.280435][ T5927] syz.2.402: attempt to access beyond end of device [ 293.280435][ T5927] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 293.294038][ T5927] syz.2.402: attempt to access beyond end of device [ 293.294038][ T5927] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 293.306936][ T5927] Mount JFS Failure: -5 [ 293.311300][ T5927] jfs_mount failed w/return code = -5 [ 293.331340][ T5893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.518132][ T5893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.978682][ T4322] usb 4-1: USB disconnect, device number 8 [ 294.318400][ T5935] input: syz0 as /devices/virtual/input/input19 [ 294.713043][ T5947] tipc: Started in network mode [ 294.718425][ T5947] tipc: Node identity 8e731c179157, cluster identity 4711 [ 294.725757][ T5947] tipc: Enabled bearer , priority 0 [ 294.734626][ T5947] device syzkaller0 entered promiscuous mode [ 294.755082][ T5947] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 294.766019][ T5946] tipc: Resetting bearer [ 294.801119][ T5946] tipc: Disabling bearer [ 294.909466][ T4322] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 295.165197][ T4322] usb 3-1: Using ep0 maxpacket: 8 [ 295.363282][ T4322] usb 3-1: config 0 has no interfaces? [ 295.437494][ T4322] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 295.543592][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.605688][ T4322] usb 3-1: Product: syz [ 295.648216][ T4322] usb 3-1: Manufacturer: syz [ 295.663258][ T4322] usb 3-1: SerialNumber: syz [ 297.098713][ T4322] usb 3-1: config 0 descriptor?? [ 297.339351][ T5961] netlink: 88 bytes leftover after parsing attributes in process `syz.3.417'. [ 297.753119][ T5966] JFS: discard option not supported on device [ 297.759543][ T5966] syz.0.418: attempt to access beyond end of device [ 297.759543][ T5966] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 297.773020][ T5966] syz.0.418: attempt to access beyond end of device [ 297.773020][ T5966] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 297.785991][ T5966] Mount JFS Failure: -5 [ 297.790278][ T5966] jfs_mount failed w/return code = -5 [ 298.404043][ T5970] input: syz0 as /devices/virtual/input/input20 [ 298.420326][ T4322] usb 3-1: USB disconnect, device number 9 [ 298.812248][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 298.821351][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 304.003393][ T6016] input: syz0 as /devices/virtual/input/input21 [ 304.158049][ T4323] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 304.323568][ T4323] usb 2-1: device descriptor read/64, error -71 [ 305.038193][ T4323] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 305.298207][ T4323] usb 2-1: device descriptor read/64, error -71 [ 305.449345][ T4323] usb usb2-port1: attempt power cycle [ 306.238223][ T4323] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 306.658832][ T4323] usb 2-1: device descriptor read/8, error -71 [ 306.842363][ T6042] JFS: discard option not supported on device [ 306.849740][ T6042] syz.0.433: attempt to access beyond end of device [ 306.849740][ T6042] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 306.863115][ T6042] syz.0.433: attempt to access beyond end of device [ 306.863115][ T6042] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 306.876053][ T6042] Mount JFS Failure: -5 [ 306.880332][ T6042] jfs_mount failed w/return code = -5 [ 306.968331][ T4323] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 307.767779][ T4323] usb 2-1: device descriptor read/8, error -71 [ 307.951834][ T4323] usb usb2-port1: unable to enumerate USB device [ 308.325889][ T6060] tipc: Enabled bearer , priority 1 [ 309.282693][ T6062] input: syz0 as /devices/virtual/input/input22 [ 313.954739][ T126] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 314.173346][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 314.194837][ T126] usb 4-1: config 0 has no interfaces? [ 314.216323][ T126] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 314.247998][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.256331][ T126] usb 4-1: Product: syz [ 314.287985][ T126] usb 4-1: Manufacturer: syz [ 314.292666][ T126] usb 4-1: SerialNumber: syz [ 314.328686][ T126] usb 4-1: config 0 descriptor?? [ 314.428379][ T6108] input: syz0 as /devices/virtual/input/input23 [ 315.597422][ T126] usb 4-1: USB disconnect, device number 9 [ 316.728171][ T4322] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 316.943913][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.008903][ T4322] usb 3-1: config 0 has no interfaces? [ 317.076547][ T4322] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 317.119914][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.126607][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.215709][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.396913][ T4322] usb 3-1: config 0 descriptor?? [ 321.940694][ T4322] usb 3-1: USB disconnect, device number 10 [ 322.606158][ T6152] input: syz0 as /devices/virtual/input/input24 [ 323.478032][ T4347] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 323.688354][ T4347] usb 3-1: Using ep0 maxpacket: 8 [ 324.485577][ T4347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.497374][ T4347] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 324.506570][ T4347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.516821][ T4347] usb 3-1: config 0 descriptor?? [ 324.527681][ T4347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 324.729584][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.750237][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.515980][ T126] usb 3-1: USB disconnect, device number 11 [ 327.611130][ T6196] input: syz0 as /devices/virtual/input/input25 [ 327.881620][ T4347] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 329.528820][ T4347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.558042][ T4347] usb 1-1: config 0 has no interfaces? [ 329.563603][ T4347] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 329.608156][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.653897][ T4347] usb 1-1: config 0 descriptor?? [ 329.982245][ T4347] usb 1-1: can't set config #0, error -71 [ 330.018188][ T4347] usb 1-1: USB disconnect, device number 7 [ 334.714894][ T6235] input: syz0 as /devices/virtual/input/input26 [ 338.098532][ T6256] device team0 entered promiscuous mode [ 338.104883][ T6256] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.260040][ T6256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.515240][ T6259] netlink: 'syz.0.505': attribute type 16 has an invalid length. [ 338.523121][ T6259] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.505'. [ 338.748406][ T6256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.773449][ T6256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.833656][ T6256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.870685][ T6265] JFS: discard option not supported on device [ 338.877058][ T6265] syz.3.506: attempt to access beyond end of device [ 338.877058][ T6265] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 338.911828][ T6256] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 338.955697][ T6257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 339.006520][ T6265] syz.3.506: attempt to access beyond end of device [ 339.006520][ T6265] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 340.658030][ T6265] Mount JFS Failure: -5 [ 340.662277][ T6265] jfs_mount failed w/return code = -5 [ 340.797065][ T6276] input: syz0 as /devices/virtual/input/input27 [ 345.234399][ T6318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.373106][ T6319] 9pnet_fd: Insufficient options for proto=fd [ 348.016359][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.519'. [ 348.450682][ T6331] input: syz0 as /devices/virtual/input/input28 [ 355.664655][ T6373] JFS: discard option not supported on device [ 355.671534][ T6373] syz.4.529: attempt to access beyond end of device [ 355.671534][ T6373] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 355.684649][ T6373] syz.4.529: attempt to access beyond end of device [ 355.684649][ T6373] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 355.697741][ T6373] Mount JFS Failure: -5 [ 355.702190][ T6373] jfs_mount failed w/return code = -5 [ 356.453249][ T6375] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.489779][ T6375] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.538178][ T6375] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.582707][ T6375] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.601148][ T6380] input: syz0 as /devices/virtual/input/input29 [ 356.629865][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'. [ 364.345269][ T6419] JFS: discard option not supported on device [ 364.351665][ T6419] syz.0.545: attempt to access beyond end of device [ 364.351665][ T6419] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 364.364688][ T6419] syz.0.545: attempt to access beyond end of device [ 364.364688][ T6419] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 364.377649][ T6419] Mount JFS Failure: -5 [ 364.381907][ T6419] jfs_mount failed w/return code = -5 [ 365.294574][ T6426] input: syz0 as /devices/virtual/input/input30 [ 365.471009][ T126] nvmet: connect request for invalid subsystem t! [ 365.492447][ T6422] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 365.555201][ T26] audit: type=1800 audit(1791241001.088:18): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.532" name="memory_backed" dev="configfs" ino=40656 res=0 errno=0 [ 365.667100][ T26] audit: type=1800 audit(1791241001.088:19): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.532" name="zoned" dev="configfs" ino=40657 res=0 errno=0 [ 365.763661][ T26] audit: type=1800 audit(1791241001.168:20): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.532" name="power" dev="configfs" ino=40662 res=0 errno=0 [ 368.116574][ T6454] tipc: Resetting bearer [ 368.130794][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.551'. [ 368.139776][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.551'. [ 371.169527][ T6471] Error parsing options; rc = [-22] [ 373.224105][ T6483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.256214][ T6486] input: syz0 as /devices/virtual/input/input31 [ 374.605033][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 375.100224][ T26] audit: type=1800 audit(1791241010.638:21): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.562" name="memory_backed" dev="configfs" ino=41901 res=0 errno=0 [ 375.163789][ T26] audit: type=1800 audit(1791241010.638:22): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.562" name="zoned" dev="configfs" ino=41902 res=0 errno=0 [ 375.257335][ T6502] 9pnet_fd: Insufficient options for proto=fd [ 376.188951][ T26] audit: type=1800 audit(1791241010.718:23): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.562" name="power" dev="configfs" ino=41907 res=0 errno=0 [ 376.282322][ T6512] JFS: discard option not supported on device [ 376.290355][ T6512] syz.2.566: attempt to access beyond end of device [ 376.290355][ T6512] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 376.303789][ T6512] syz.2.566: attempt to access beyond end of device [ 376.303789][ T6512] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 376.316751][ T6512] Mount JFS Failure: -5 [ 376.321101][ T6512] jfs_mount failed w/return code = -5 [ 377.102956][ T6513] syz.0.565 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 379.159756][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.173325][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.825161][ T6524] Error parsing options; rc = [-22] [ 383.647407][ T6550] input: syz0 as /devices/virtual/input/input32 [ 386.644764][ T6573] Error parsing options; rc = [-22] [ 386.878942][ T6577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.299335][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.323575][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.339861][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.348971][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.356796][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 388.378164][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.388251][ T4277] tipc: Resetting bearer [ 389.480917][ T6593] input: syz0 as /devices/virtual/input/input33 [ 389.614149][ T4277] tipc: Disabling bearer [ 390.488096][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 390.834211][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.175109][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.419865][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.514349][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.558354][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 393.047095][ T6620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.471194][ T6624] device team0 entered promiscuous mode [ 393.509527][ T6624] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.865320][ T6624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.638020][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 394.791905][ T6624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.800756][ T6624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.818516][ T6624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.831196][ T6624] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 394.875528][ T6582] chnl_net:caif_netlink_parms(): no params data found [ 395.158255][ T6639] input: syz0 as /devices/virtual/input/input34 [ 395.312688][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.320194][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.328999][ T6582] device bridge_slave_0 entered promiscuous mode [ 395.345880][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.353196][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.362794][ T6582] device bridge_slave_1 entered promiscuous mode [ 395.411371][ T6645] blktrace: Concurrent blktraces are not allowed on loop6 [ 396.406995][ T9] tipc: Left network mode [ 396.758092][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 397.195534][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.208333][ T3655] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 397.321127][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.511697][ T6658] xt_time: unknown flags 0xc [ 399.225249][ T6582] team0: Port device team_slave_0 added [ 399.252797][ T6582] team0: Port device team_slave_1 added [ 399.331296][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.387473][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.435180][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.454196][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.461352][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.487536][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.504956][ T6663] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 399.514570][ T6663] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 399.524251][ T6663] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 399.642231][ T6663] syz.0.603 (6663) used greatest stack depth: 20128 bytes left [ 399.651543][ T26] audit: type=1800 audit(1791241035.038:24): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.603" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 399.728248][ T129] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 399.938470][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 400.033852][ T129] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 400.223183][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.368890][ T129] usb 4-1: Product: syz [ 400.373143][ T129] usb 4-1: Manufacturer: syz [ 400.419733][ T129] usb 4-1: SerialNumber: syz [ 401.458094][ T6682] block device autoloading is deprecated and will be removed. [ 401.500181][ T129] usb 4-1: config 0 descriptor?? [ 401.573129][ T129] gspca_main: sq930x-2.14.0 probing 2770:930c [ 401.779578][ T6582] device hsr_slave_0 entered promiscuous mode [ 401.800467][ T6582] device hsr_slave_1 entered promiscuous mode [ 401.835891][ T6582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.848063][ T6582] Cannot create hsr debugfs directory [ 401.913389][ T129] gspca_sq930x: ucbus_write failed -71 [ 403.067992][ T129] gspca_sq930x: Unknown sensor [ 403.519768][ T129] sq930x: probe of 4-1:0.0 failed with error -22 [ 403.594748][ T129] usb 4-1: USB disconnect, device number 10 [ 404.187247][ T6714] netlink: 'syz.0.610': attribute type 16 has an invalid length. [ 404.195135][ T6714] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.610'. [ 405.378671][ T6582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 405.404050][ T6582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 405.520584][ T6582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 405.718018][ T4322] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 406.539432][ T6582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 406.628497][ T6730] FAULT_INJECTION: forcing a failure. [ 406.628497][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 406.641677][ T6730] CPU: 0 PID: 6730 Comm: syz.3.618 Not tainted syzkaller #0 [ 406.649013][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 406.659130][ T6730] Call Trace: [ 406.662514][ T6730] [ 406.665524][ T6730] dump_stack_lvl+0x188/0x24e [ 406.670377][ T6730] ? show_regs_print_info+0x12/0x12 [ 406.675629][ T6730] ? load_image+0x410/0x410 [ 406.680237][ T6730] ? __lock_acquire+0x7ea0/0x7ea0 [ 406.685399][ T6730] should_fail_ex+0x390/0x4c0 [ 406.690210][ T6730] should_failslab+0x5/0x20 [ 406.694809][ T6730] slab_pre_alloc_hook+0x59/0x300 [ 406.699939][ T6730] ? ioctx_add_table+0x13c/0x4b0 [ 406.704956][ T6730] __kmem_cache_alloc_node+0x4f/0x270 [ 406.710407][ T6730] ? ioctx_add_table+0x13c/0x4b0 [ 406.715386][ T6730] __kmalloc+0xa3/0x240 [ 406.719592][ T6730] ioctx_add_table+0x13c/0x4b0 [ 406.724408][ T6730] ioctx_alloc+0x4b9/0x7b0 [ 406.728878][ T6730] __se_sys_io_setup+0x7b/0x190 [ 406.733868][ T6730] do_syscall_64+0x4c/0xa0 [ 406.738333][ T6730] ? clear_bhb_loop+0x60/0xb0 [ 406.743154][ T6730] ? clear_bhb_loop+0x60/0xb0 [ 406.747884][ T6730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.753823][ T6730] RIP: 0033:0x7f57f6b9e199 [ 406.758364][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.778062][ T6730] RSP: 002b:00007f57f7a35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 406.786584][ T6730] RAX: ffffffffffffffda RBX: 00007f57f6e26180 RCX: 00007f57f6b9e199 [ 406.794594][ T6730] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 406.802611][ T6730] RBP: 00007f57f6c350b8 R08: 0000000000000000 R09: 0000000000000000 [ 406.810625][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.818656][ T6730] R13: 00007f57f6e26218 R14: 00007f57f6e26180 R15: 00007ffc4f7d6a48 [ 406.826775][ T6730] [ 407.066239][ T9] device hsr_slave_0 left promiscuous mode [ 407.081386][ T9] device hsr_slave_1 left promiscuous mode [ 407.114244][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.249340][ T6734] blktrace: Concurrent blktraces are not allowed on loop8 [ 407.378115][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 407.619453][ T4322] usb 1-1: config 0 has no interfaces? [ 407.884302][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.910321][ T4322] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 407.958052][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.986490][ T4322] usb 1-1: Product: syz [ 407.996615][ T4322] usb 1-1: Manufacturer: syz [ 408.001923][ T4322] usb 1-1: SerialNumber: syz [ 408.016222][ T4322] usb 1-1: config 0 descriptor?? [ 408.297708][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.328033][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.350712][ T9] device bridge_slave_1 left promiscuous mode [ 408.389080][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.551527][ T9] device bridge_slave_0 left promiscuous mode [ 408.615210][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.926870][ T4322] usb 1-1: USB disconnect, device number 8 [ 409.225564][ T9] device veth1_macvtap left promiscuous mode [ 409.243099][ T9] device veth0_macvtap left promiscuous mode [ 409.261673][ T9] device veth1_vlan left promiscuous mode [ 409.276616][ T9] device veth0_vlan left promiscuous mode [ 410.615742][ T6759] netlink: 'syz.3.625': attribute type 16 has an invalid length. [ 410.623800][ T6759] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.625'. [ 411.587550][ T9] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 412.108130][ T4322] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 412.269817][ T6775] JFS: discard option not supported on device [ 412.277085][ T6775] syz.3.629: attempt to access beyond end of device [ 412.277085][ T6775] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 412.290583][ T6775] syz.3.629: attempt to access beyond end of device [ 412.290583][ T6775] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 412.303658][ T6775] Mount JFS Failure: -5 [ 412.307973][ T6775] jfs_mount failed w/return code = -5 [ 412.348248][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 412.396024][ T4322] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 412.481630][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.613513][ T4322] usb 5-1: Product: syz [ 412.682067][ T4322] usb 5-1: Manufacturer: syz [ 412.754841][ T4322] usb 5-1: SerialNumber: syz [ 412.890398][ T4322] usb 5-1: config 0 descriptor?? [ 413.090519][ T4322] gspca_main: sq930x-2.14.0 probing 2770:930c [ 413.285792][ T6778] blktrace: Concurrent blktraces are not allowed on loop6 [ 413.648389][ T4322] gspca_sq930x: ucbus_write failed -71 [ 415.299504][ T129] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 415.348547][ T4322] gspca_sq930x: Unknown sensor [ 415.356376][ T4322] sq930x: probe of 5-1:0.0 failed with error -22 [ 415.461193][ T4322] usb 5-1: USB disconnect, device number 14 [ 415.508046][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 415.521954][ T129] usb 4-1: config 0 has no interfaces? [ 415.617670][ T129] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 416.098017][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.106106][ T129] usb 4-1: Product: syz [ 416.316577][ T129] usb 4-1: Manufacturer: syz [ 416.321837][ T129] usb 4-1: SerialNumber: syz [ 416.330074][ T129] usb 4-1: config 0 descriptor?? [ 417.012379][ T6804] netlink: 'syz.2.636': attribute type 16 has an invalid length. [ 417.020266][ T6804] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.636'. [ 417.759328][ T4287] usb 4-1: USB disconnect, device number 11 [ 417.834347][ T9] device team_slave_1 left promiscuous mode [ 417.995994][ T9] team0 (unregistering): Port device team_slave_1 removed [ 419.258330][ T9] device team_slave_0 left promiscuous mode [ 419.274594][ T9] team0 (unregistering): Port device team_slave_0 removed [ 420.306010][ T6819] blktrace: Concurrent blktraces are not allowed on loop6 [ 420.403902][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.609909][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.344076][ T6845] netlink: 'syz.3.648': attribute type 16 has an invalid length. [ 422.352016][ T6845] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.648'. [ 423.235419][ T9] bond0 (unregistering): Released all slaves [ 424.098172][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 426.027988][ T4347] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 426.234501][ T4347] usb 1-1: Using ep0 maxpacket: 8 [ 426.241703][ T4347] usb 1-1: config 0 has no interfaces? [ 426.272656][ T4347] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 426.292425][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.316085][ T4347] usb 1-1: Product: syz [ 426.329345][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.336710][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.345142][ T4347] usb 1-1: Manufacturer: syz [ 426.355509][ T4347] usb 1-1: SerialNumber: syz [ 426.385023][ T4347] usb 1-1: config 0 descriptor?? [ 426.426502][ T6843] device team0 left promiscuous mode [ 426.432226][ T6843] device team_slave_0 left promiscuous mode [ 426.438857][ T6843] device team_slave_1 left promiscuous mode [ 426.688176][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 426.878102][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 426.892560][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.921259][ T27] usb 3-1: config 0 has no interfaces? [ 426.967531][ T27] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 427.004950][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.015420][ T27] usb 3-1: Product: syz [ 427.021084][ T27] usb 3-1: Manufacturer: syz [ 427.025828][ T27] usb 3-1: SerialNumber: syz [ 427.051733][ T27] usb 3-1: config 0 descriptor?? [ 427.128236][ T4347] usb 1-1: USB disconnect, device number 9 [ 427.312461][ T6843] device bridge_slave_0 left promiscuous mode [ 427.321316][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.413648][ T6843] device bridge_slave_1 left promiscuous mode [ 427.420055][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.846257][ T6843] team0: Port device team_slave_0 removed [ 429.934541][ T7] usb 3-1: USB disconnect, device number 12 [ 430.016630][ T6843] team0: Port device team_slave_1 removed [ 430.045372][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.103905][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.193456][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.293673][ T6895] netlink: 'syz.0.658': attribute type 16 has an invalid length. [ 430.301773][ T6895] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.658'. [ 431.254314][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.503355][ T6843] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.534279][ T6843] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.574148][ T6843] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.614626][ T6843] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.059368][ T6843] device macvlan2 left promiscuous mode [ 434.388659][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.665'. [ 434.397609][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.665'. [ 434.603069][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.653908][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.677617][ T1098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.706016][ T6582] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.745533][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.774659][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.805096][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.812378][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.867112][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.902729][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.938523][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.979648][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.986887][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.052023][ T4287] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 435.061028][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 435.082515][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 435.092354][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 435.103896][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.148624][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 435.158953][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 435.189698][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 435.218604][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 435.237835][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.240449][ T4287] usb 5-1: Using ep0 maxpacket: 8 [ 435.262103][ T6582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.274214][ T4287] usb 5-1: config 0 has no interfaces? [ 435.295819][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.318472][ T4287] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 435.329948][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.347951][ T4287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.360077][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.397204][ T4287] usb 5-1: Product: syz [ 435.454471][ T4287] usb 5-1: Manufacturer: syz [ 435.470908][ T4287] usb 5-1: SerialNumber: syz [ 435.505478][ T4287] usb 5-1: config 0 descriptor?? [ 436.198208][ T14] usb 5-1: USB disconnect, device number 15 [ 437.105355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.119049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.195355][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.929191][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 439.085110][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 439.141626][ T6976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 440.000833][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.007723][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.393632][ T7002] netlink: 'syz.4.678': attribute type 16 has an invalid length. [ 441.401563][ T7002] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.678'. [ 441.748112][ T129] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 441.773016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.792320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.855056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.874656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.894296][ T6582] device veth0_vlan entered promiscuous mode [ 441.908755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.928635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.945638][ T129] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.977574][ T6582] device veth1_vlan entered promiscuous mode [ 441.978311][ T129] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 442.049474][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.075401][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 442.129197][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.175392][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.235804][ T6582] device veth0_macvtap entered promiscuous mode [ 442.300512][ T6582] device veth1_macvtap entered promiscuous mode [ 444.082884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 444.352321][ T129] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 444.361635][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.440373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 444.513060][ T129] usb 1-1: can't set config #1, error -71 [ 444.539107][ T129] usb 1-1: USB disconnect, device number 10 [ 444.651302][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.719091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.742261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.800675][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.828184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.847428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.871398][ T6582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.890316][ T6582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.922920][ T6582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.933552][ T6582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.247062][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.299103][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.371081][ T4287] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 445.378970][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.404075][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'. [ 445.465321][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.480159][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'. [ 445.481872][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.531305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 445.598352][ T4287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.639633][ T4287] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 445.758874][ T4287] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.802401][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.833606][ T4287] usb 4-1: Product: syz [ 445.837851][ T4287] usb 4-1: Manufacturer: syz [ 446.013957][ T4287] usb 4-1: SerialNumber: syz [ 448.343009][ T4287] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 448.411712][ T4287] usb 4-1: USB disconnect, device number 12 [ 453.161494][ T7110] netlink: 'syz.5.689': attribute type 16 has an invalid length. [ 453.169520][ T7110] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.689'. [ 453.781748][ T129] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 453.972987][ T129] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 454.051802][ T129] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.178080][ T129] usb 5-1: config 0 interface 0 has no altsetting 0 [ 454.184776][ T129] usb 5-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 454.228061][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.855479][ T129] usb 5-1: config 0 descriptor?? [ 455.878119][ T129] usb 5-1: can't set config #0, error -71 [ 455.907967][ T129] usb 5-1: USB disconnect, device number 16 [ 459.289270][ T7137] xt_time: unknown flags 0xc [ 459.651727][ T7137] syz.3.704 (7137) used greatest stack depth: 18096 bytes left [ 460.372194][ T7162] netlink: 'syz.4.710': attribute type 16 has an invalid length. [ 460.380153][ T7162] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.710'. [ 462.056583][ T7169] vivid-003: kernel_thread() failed [ 468.940318][ T7220] netlink: 'syz.0.721': attribute type 16 has an invalid length. [ 468.948277][ T7220] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.721'. [ 469.760546][ T7224] i2c i2c-0: new_device: Extra parameters [ 473.808979][ T129] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 474.068727][ T129] usb 4-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00 [ 474.108535][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.299223][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.734'. [ 476.346268][ T7276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.734'. [ 476.356120][ T129] iforce 4-1:1.0: usb_submit_urb failed: -32 [ 476.368471][ T129] iforce 4-1:1.0: usb_submit_urb failed: -32 [ 476.389111][ T129] iforce 4-1:1.0: usb_submit_urb failed: -32 [ 476.428309][ T129] input: Logitech WingMan Force as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input35 [ 479.621409][ T4287] usb 4-1: USB disconnect, device number 13 [ 480.626744][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.634661][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.274950][ T7311] vivid-000: kernel_thread() failed [ 481.799047][ T7322] overlayfs: conflicting options: userxattr,redirect_dir=off [ 482.520011][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'. [ 482.560376][ T7324] gadgetfs: bound to dummy_udc driver [ 482.821619][ T7320] gadgetfs: suspended from state 2 [ 482.848590][ T4287] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 483.063756][ T7276] device bridge_slave_0 left promiscuous mode [ 483.071560][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.442102][ T7276] device bridge_slave_1 left promiscuous mode [ 483.456014][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.798039][ T7276] bond0: (slave bond_slave_0): Releasing backup interface [ 483.903905][ T7276] bond0: (slave bond_slave_1): Releasing backup interface [ 483.985406][ T7276] team0: Port device team_slave_0 removed [ 484.066250][ T7276] team0: Port device team_slave_1 removed [ 484.095327][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.129989][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.172950][ T7276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.207571][ T7276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.795933][ T7276] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.805383][ T7276] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.818465][ T7276] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.827494][ T7276] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.420022][ T7341] JFS: discard option not supported on device [ 485.426461][ T7341] syz.0.744: attempt to access beyond end of device [ 485.426461][ T7341] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 485.439545][ T7341] syz.0.744: attempt to access beyond end of device [ 485.439545][ T7341] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 485.452442][ T7341] Mount JFS Failure: -5 [ 485.456637][ T7341] jfs_mount failed w/return code = -5 [ 488.355395][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 488.578005][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 488.585059][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 488.620417][ T14] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 488.649969][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.676204][ T14] usb 1-1: Product: syz [ 488.863871][ T14] usb 1-1: Manufacturer: syz [ 488.869362][ T14] usb 1-1: SerialNumber: syz [ 488.895677][ T14] usb 1-1: config 0 descriptor?? [ 488.908529][ T7362] input: syz0 as /devices/virtual/input/input36 [ 491.242976][ T14] usb 1-1: USB disconnect, device number 12 [ 491.612211][ T7389] blktrace: Concurrent blktraces are not allowed on loop8 [ 492.435596][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 492.651913][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'. [ 493.147961][ T4287] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 494.159966][ T7412] JFS: discard option not supported on device [ 494.166520][ T7412] syz.2.759: attempt to access beyond end of device [ 494.166520][ T7412] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 494.179868][ T7412] syz.2.759: attempt to access beyond end of device [ 494.179868][ T7412] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 494.192848][ T7412] Mount JFS Failure: -5 [ 494.197386][ T7412] jfs_mount failed w/return code = -5 [ 494.535001][ T26] audit: type=1800 audit(1791241130.068:25): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.760" name="memory_backed" dev="configfs" ino=46376 res=0 errno=0 [ 494.796233][ T26] audit: type=1800 audit(1791241130.298:26): pid=7423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.760" name="power" dev="configfs" ino=46383 res=0 errno=0 [ 498.038003][ T7440] input: syz0 as /devices/virtual/input/input37 [ 498.381841][ T7449] page:ffffea0005200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148000 [ 498.415395][ T7449] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 498.441855][ T7449] raw: 057ff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 498.465613][ T7449] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 498.505471][ T7449] page dumped because: unmovable page [ 498.538264][ T7449] page_owner tracks the page as allocated [ 498.557922][ T7449] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 1, tgid 1 (swapper/0), ts 2378591933, free_ts 0 [ 498.623458][ T7449] register_early_stack+0x95/0xf0 [ 498.650674][ T7449] init_page_owner+0x2f/0x5b0 [ 498.671368][ T7449] page_ext_init+0x7f1/0x856 [ 498.694159][ T7449] kernel_init_freeable+0x3fc/0x5ab [ 498.715691][ T7449] page_owner free stack trace missing [ 498.837946][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 499.218158][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 499.227455][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.294195][ T22] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 499.354970][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.417475][ T22] usb 4-1: config 0 descriptor?? [ 499.465252][ T22] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 499.793943][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.428277][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.487806][ T22] usb 4-1: USB disconnect, device number 14 [ 501.441880][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.488326][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.574825][ T7501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.580327][ T7513] input: syz0 as /devices/virtual/input/input38 [ 503.627933][ T4287] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 504.869843][ T4287] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 504.887920][ T4287] usb 3-1: config 1 has no interface number 0 [ 504.896648][ T4287] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 504.927161][ T4287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.951801][ T4287] usb 3-1: Product: syz [ 504.956076][ T4287] usb 3-1: Manufacturer: syz [ 505.122356][ T4287] usb 3-1: SerialNumber: syz [ 505.240498][ T7535] FAULT_INJECTION: forcing a failure. [ 505.240498][ T7535] name failslab, interval 1, probability 0, space 0, times 0 [ 505.253649][ T7535] CPU: 0 PID: 7535 Comm: syz.0.783 Not tainted syzkaller #0 [ 505.260964][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 505.271046][ T7535] Call Trace: [ 505.274345][ T7535] [ 505.277303][ T7535] dump_stack_lvl+0x188/0x24e [ 505.282006][ T7535] ? show_regs_print_info+0x12/0x12 [ 505.287225][ T7535] ? load_image+0x410/0x410 [ 505.291750][ T7535] ? __lock_acquire+0x7ea0/0x7ea0 [ 505.296802][ T7535] should_fail_ex+0x390/0x4c0 [ 505.301597][ T7535] should_failslab+0x5/0x20 [ 505.306129][ T7535] slab_pre_alloc_hook+0x59/0x300 [ 505.311223][ T7535] kmem_cache_alloc+0x56/0x2f0 [ 505.316045][ T7535] ? vm_area_alloc+0x20/0xe0 [ 505.320699][ T7535] vm_area_alloc+0x20/0xe0 [ 505.325167][ T7535] mmap_region+0xcbc/0x1c50 [ 505.329743][ T7535] ? file_mmap_ok+0x170/0x170 [ 505.334488][ T7535] ? vma_expand+0x850/0x850 [ 505.339040][ T7535] ? cap_mmap_addr+0x153/0x2c0 [ 505.343938][ T7535] ? file_mmap_ok+0x11c/0x170 [ 505.348684][ T7535] do_mmap+0x9ce/0x10d0 [ 505.353002][ T7535] ? mlock_future_check+0x100/0x100 [ 505.358274][ T7535] aio_setup_ring+0x8d4/0xf50 [ 505.363023][ T7535] ? free_ioctx_reqs+0x180/0x180 [ 505.368022][ T7535] ioctx_alloc+0x315/0x7b0 [ 505.372500][ T7535] __se_sys_io_setup+0x7b/0x190 [ 505.377401][ T7535] do_syscall_64+0x4c/0xa0 [ 505.381875][ T7535] ? clear_bhb_loop+0x60/0xb0 [ 505.386609][ T7535] ? clear_bhb_loop+0x60/0xb0 [ 505.391397][ T7535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.397353][ T7535] RIP: 0033:0x7f9ad479e199 [ 505.401902][ T7535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.421623][ T7535] RSP: 002b:00007f9ad55b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 505.430107][ T7535] RAX: ffffffffffffffda RBX: 00007f9ad4a26180 RCX: 00007f9ad479e199 [ 505.438097][ T7535] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 505.446119][ T7535] RBP: 00007f9ad48350b8 R08: 0000000000000000 R09: 0000000000000000 [ 505.454207][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.462217][ T7535] R13: 00007f9ad4a26218 R14: 00007f9ad4a26180 R15: 00007ffcabe0bc88 [ 505.470909][ T7535] [ 507.128893][ T4287] usb 3-1: can't set config #1, error -71 [ 507.140031][ T4287] usb 3-1: USB disconnect, device number 14 [ 507.746463][ T7552] vivid-001: kernel_thread() failed [ 509.225332][ T7566] JFS: discard option not supported on device [ 509.232206][ T7566] syz.3.790: attempt to access beyond end of device [ 509.232206][ T7566] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 509.245137][ T7566] syz.3.790: attempt to access beyond end of device [ 509.245137][ T7566] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 509.258121][ T7566] Mount JFS Failure: -5 [ 509.262318][ T7566] jfs_mount failed w/return code = -5 [ 509.897961][ T6908] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 510.097952][ T6908] usb 5-1: Using ep0 maxpacket: 8 [ 510.105680][ T6908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.128046][ T6908] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 510.137396][ T6908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.157702][ T6908] usb 5-1: config 0 descriptor?? [ 510.178669][ T6908] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 510.625319][ T7564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.716554][ T7564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.965135][ T4287] usb 5-1: USB disconnect, device number 17 [ 511.476191][ T7599] FAULT_INJECTION: forcing a failure. [ 511.476191][ T7599] name failslab, interval 1, probability 0, space 0, times 0 [ 511.488854][ T7599] CPU: 1 PID: 7599 Comm: syz.5.796 Not tainted syzkaller #0 [ 511.496147][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 511.506214][ T7599] Call Trace: [ 511.509501][ T7599] [ 511.512438][ T7599] dump_stack_lvl+0x188/0x24e [ 511.517127][ T7599] ? show_regs_print_info+0x12/0x12 [ 511.522359][ T7599] ? load_image+0x410/0x410 [ 511.526882][ T7599] ? __might_sleep+0xd0/0xd0 [ 511.531548][ T7599] ? __lock_acquire+0x7ea0/0x7ea0 [ 511.536595][ T7599] should_fail_ex+0x390/0x4c0 [ 511.541297][ T7599] should_failslab+0x5/0x20 [ 511.545816][ T7599] slab_pre_alloc_hook+0x59/0x300 [ 511.550860][ T7599] ? memcg_list_lru_alloc+0x22d/0xb00 [ 511.556270][ T7599] __kmem_cache_alloc_node+0x4f/0x270 [ 511.561659][ T7599] ? memcg_list_lru_alloc+0x22d/0xb00 [ 511.567073][ T7599] __kmalloc+0xa3/0x240 [ 511.571263][ T7599] memcg_list_lru_alloc+0x22d/0xb00 [ 511.576477][ T7599] ? slab_pre_alloc_hook+0xb1/0x300 [ 511.581705][ T7599] ? memcg_reparent_list_lrus+0x850/0x850 [ 511.587488][ T7599] ? get_obj_cgroup_from_current+0xd0/0x280 [ 511.593529][ T7599] ? get_obj_cgroup_from_current+0xd0/0x280 [ 511.599497][ T7599] slab_pre_alloc_hook+0x2ad/0x300 [ 511.604672][ T7599] ? slab_pre_alloc_hook+0xb1/0x300 [ 511.609934][ T7599] kmem_cache_alloc_lru+0x49/0x2e0 [ 511.615108][ T7599] ? __d_alloc+0x2e/0x6e0 [ 511.619544][ T7599] __d_alloc+0x2e/0x6e0 [ 511.623756][ T7599] ? d_alloc_pseudo+0xe/0x70 [ 511.628444][ T7599] d_alloc_pseudo+0x19/0x70 [ 511.632999][ T7599] alloc_file_pseudo+0xe0/0x200 [ 511.637998][ T7599] ? alloc_empty_file_noaccount+0x80/0x80 [ 511.643791][ T7599] ? alloc_anon_inode+0x22e/0x300 [ 511.648936][ T7599] ? memcpy+0x3c/0x60 [ 511.653024][ T7599] ? alloc_anon_inode+0x22e/0x300 [ 511.658123][ T7599] aio_setup_ring+0x1f1/0xf50 [ 511.662868][ T7599] ? free_ioctx_reqs+0x180/0x180 [ 511.667884][ T7599] ioctx_alloc+0x315/0x7b0 [ 511.672338][ T7599] __se_sys_io_setup+0x7b/0x190 [ 511.677202][ T7599] do_syscall_64+0x4c/0xa0 [ 511.681636][ T7599] ? clear_bhb_loop+0x60/0xb0 [ 511.686333][ T7599] ? clear_bhb_loop+0x60/0xb0 [ 511.691034][ T7599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.696937][ T7599] RIP: 0033:0x7fe68859e199 [ 511.701364][ T7599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.720984][ T7599] RSP: 002b:00007fe6893f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 511.729423][ T7599] RAX: ffffffffffffffda RBX: 00007fe688826180 RCX: 00007fe68859e199 [ 511.737404][ T7599] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 511.745400][ T7599] RBP: 00007fe6886350b8 R08: 0000000000000000 R09: 0000000000000000 [ 511.753380][ T7599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.761361][ T7599] R13: 00007fe688826218 R14: 00007fe688826180 R15: 00007ffff94e59f8 [ 511.769355][ T7599] [ 512.138355][ T7602] ------------[ cut here ]------------ [ 512.144500][ T7602] WARNING: CPU: 1 PID: 7602 at mm/page_alloc.c:5634 __alloc_pages+0x2fe/0x4f0 [ 512.153512][ T7602] Modules linked in: [ 512.157458][ T7602] CPU: 1 PID: 7602 Comm: syz.0.798 Not tainted syzkaller #0 [ 512.164956][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 512.175127][ T7602] RIP: 0010:__alloc_pages+0x2fe/0x4f0 [ 512.180997][ T7602] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 5b 2c 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 512.200774][ T7602] RSP: 0018:ffffc90004437a20 EFLAGS: 00010246 [ 512.206900][ T7602] RAX: ffffc90004437a00 RBX: 1ffff92000886f48 RCX: 0000000000000000 [ 512.214969][ T7602] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90004437a88 [ 512.223042][ T7602] RBP: ffffc90004437b10 R08: ffffc90004437a87 R09: ffffc90004437a60 [ 512.231120][ T7602] R10: dffffc0000000000 R11: fffff52000886f51 R12: 0000000000000013 [ 512.239210][ T7602] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 512.247236][ T7602] FS: 00007f9ad55fb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 512.256267][ T7602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.262970][ T7602] CR2: 000000110c4168c1 CR3: 0000000056f95000 CR4: 00000000003506e0 [ 512.271067][ T7602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 512.279136][ T7602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 512.287175][ T7602] Call Trace: [ 512.290532][ T7602] [ 512.293509][ T7602] ? aa_file_perm+0x112/0xf00 [ 512.298384][ T7602] ? zone_statistics+0x170/0x170 [ 512.303403][ T7602] __kmalloc_large_node+0x8c/0x1f0 [ 512.308780][ T7602] ? bitmap_parse_user+0x1f/0x60 [ 512.313804][ T7602] __kmalloc_node_track_caller+0x10f/0x240 [ 512.319704][ T7602] memdup_user_nul+0x28/0xf0 [ 512.324434][ T7602] bitmap_parse_user+0x1f/0x60 [ 512.329290][ T7602] write_irq_affinity+0x1bc/0x310 [ 512.334424][ T7602] ? irq_affinity_proc_show+0x100/0x100 [ 512.340060][ T7602] ? rcu_read_lock_any_held+0xb0/0x130 [ 512.345652][ T7602] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 512.351034][ T7602] ? end_current_label_crit_section+0x14b/0x170 [ 512.357436][ T7602] ? irq_affinity_proc_open+0x50/0x50 [ 512.362893][ T7602] proc_reg_write+0x1dd/0x2c0 [ 512.367656][ T7602] ? proc_reg_llseek+0x280/0x280 [ 512.372689][ T7602] vfs_write+0x2dc/0x9a0 [ 512.377002][ T7602] ? file_end_write+0x250/0x250 [ 512.381970][ T7602] ? __fget_files+0x28/0x460 [ 512.386626][ T7602] ? __fget_files+0x3fc/0x460 [ 512.391413][ T7602] ? __fdget_pos+0x2ae/0x360 [ 512.396073][ T7602] ? ksys_write+0x70/0x260 [ 512.400593][ T7602] ksys_write+0x14d/0x260 [ 512.405023][ T7602] ? __ia32_sys_read+0x80/0x80 [ 512.409925][ T7602] ? lockdep_hardirqs_on+0x94/0x140 [ 512.415196][ T7602] do_syscall_64+0x4c/0xa0 [ 512.419701][ T7602] ? clear_bhb_loop+0x60/0xb0 [ 512.424429][ T7602] ? clear_bhb_loop+0x60/0xb0 [ 512.429194][ T7602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.435139][ T7602] RIP: 0033:0x7f9ad479e199 [ 512.439635][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.459335][ T7602] RSP: 002b:00007f9ad55fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.467805][ T7602] RAX: ffffffffffffffda RBX: 00007f9ad4a25fa0 RCX: 00007f9ad479e199 [ 512.475870][ T7602] RDX: 00000000fffffc9f RSI: 0000000000000000 RDI: 0000000000000003 [ 512.483939][ T7602] RBP: 00007f9ad48350b8 R08: 0000000000000000 R09: 0000000000000000 [ 512.492014][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.500113][ T7602] R13: 00007f9ad4a26038 R14: 00007f9ad4a25fa0 R15: 00007ffcabe0bc88 [ 512.508198][ T7602] [ 512.511277][ T7602] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 512.518592][ T7602] CPU: 1 PID: 7602 Comm: syz.0.798 Not tainted syzkaller #0 [ 512.525915][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 512.536011][ T7602] Call Trace: [ 512.539327][ T7602] [ 512.542329][ T7602] dump_stack_lvl+0x188/0x24e [ 512.547187][ T7602] ? memcpy+0x3c/0x60 [ 512.551220][ T7602] ? show_regs_print_info+0x12/0x12 [ 512.556485][ T7602] ? load_image+0x410/0x410 [ 512.561072][ T7602] panic+0x2d3/0x710 [ 512.565031][ T7602] ? bpf_jit_dump+0xd0/0xd0 [ 512.569623][ T7602] __warn+0x2f8/0x4f0 [ 512.573659][ T7602] ? __alloc_pages+0x2fe/0x4f0 [ 512.578487][ T7602] ? __alloc_pages+0x2fe/0x4f0 [ 512.583313][ T7602] report_bug+0x2ba/0x4f0 [ 512.587732][ T7602] ? __alloc_pages+0x2fe/0x4f0 [ 512.592562][ T7602] handle_bug+0x3a/0x70 [ 512.596861][ T7602] exc_invalid_op+0x16/0x40 [ 512.601412][ T7602] asm_exc_invalid_op+0x16/0x20 [ 512.606309][ T7602] RIP: 0010:__alloc_pages+0x2fe/0x4f0 [ 512.611744][ T7602] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 5b 2c 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 512.631494][ T7602] RSP: 0018:ffffc90004437a20 EFLAGS: 00010246 [ 512.637710][ T7602] RAX: ffffc90004437a00 RBX: 1ffff92000886f48 RCX: 0000000000000000 [ 512.645724][ T7602] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90004437a88 [ 512.653756][ T7602] RBP: ffffc90004437b10 R08: ffffc90004437a87 R09: ffffc90004437a60 [ 512.661774][ T7602] R10: dffffc0000000000 R11: fffff52000886f51 R12: 0000000000000013 [ 512.669791][ T7602] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000 [ 512.677852][ T7602] ? aa_file_perm+0x112/0xf00 [ 512.682677][ T7602] ? zone_statistics+0x170/0x170 [ 512.687689][ T7602] __kmalloc_large_node+0x8c/0x1f0 [ 512.692861][ T7602] ? bitmap_parse_user+0x1f/0x60 [ 512.697856][ T7602] __kmalloc_node_track_caller+0x10f/0x240 [ 512.703717][ T7602] memdup_user_nul+0x28/0xf0 [ 512.708375][ T7602] bitmap_parse_user+0x1f/0x60 [ 512.713193][ T7602] write_irq_affinity+0x1bc/0x310 [ 512.718265][ T7602] ? irq_affinity_proc_show+0x100/0x100 [ 512.723865][ T7602] ? rcu_read_lock_any_held+0xb0/0x130 [ 512.729377][ T7602] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 512.734735][ T7602] ? end_current_label_crit_section+0x14b/0x170 [ 512.741058][ T7602] ? irq_affinity_proc_open+0x50/0x50 [ 512.746468][ T7602] proc_reg_write+0x1dd/0x2c0 [ 512.751196][ T7602] ? proc_reg_llseek+0x280/0x280 [ 512.756182][ T7602] vfs_write+0x2dc/0x9a0 [ 512.760491][ T7602] ? file_end_write+0x250/0x250 [ 512.765409][ T7602] ? __fget_files+0x28/0x460 [ 512.770104][ T7602] ? __fget_files+0x3fc/0x460 [ 512.774860][ T7602] ? __fdget_pos+0x2ae/0x360 [ 512.779502][ T7602] ? ksys_write+0x70/0x260 [ 512.783987][ T7602] ksys_write+0x14d/0x260 [ 512.788394][ T7602] ? __ia32_sys_read+0x80/0x80 [ 512.793224][ T7602] ? lockdep_hardirqs_on+0x94/0x140 [ 512.798496][ T7602] do_syscall_64+0x4c/0xa0 [ 512.802966][ T7602] ? clear_bhb_loop+0x60/0xb0 [ 512.807777][ T7602] ? clear_bhb_loop+0x60/0xb0 [ 512.812504][ T7602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.818711][ T7602] RIP: 0033:0x7f9ad479e199 [ 512.823178][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.842839][ T7602] RSP: 002b:00007f9ad55fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.851320][ T7602] RAX: ffffffffffffffda RBX: 00007f9ad4a25fa0 RCX: 00007f9ad479e199 [ 512.859335][ T7602] RDX: 00000000fffffc9f RSI: 0000000000000000 RDI: 0000000000000003 [ 512.867355][ T7602] RBP: 00007f9ad48350b8 R08: 0000000000000000 R09: 0000000000000000 [ 512.875372][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.883385][ T7602] R13: 00007f9ad4a26038 R14: 00007f9ad4a25fa0 R15: 00007ffcabe0bc88 [ 512.891416][ T7602] [ 512.895070][ T7602] Kernel Offset: disabled [ 512.899486][ T7602] Rebooting in 86400 seconds..