last executing test programs: 5m18.4715083s ago: executing program 2 (id=103): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000007fff, 0xb) 5m14.858282382s ago: executing program 2 (id=107): r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000005300000a0000010900010073797a31000000002400048020000180070001006373ffea140002800800014000000016080002400000000d0900020073797a32000000001400dd001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x11b) mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000840)='./file0\x00') chdir(&(0x7f0000000880)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000900)=""/4119, 0x1017) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40048) openat$kvm(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) 5m13.653321986s ago: executing program 2 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x8, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) 5m11.455763653s ago: executing program 2 (id=109): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_BIND=@ipv6={0x38, 0x40, 0x0, 0xffffffffffffffff, 0x2d, 0x0}) io_uring_enter(0xffffffffffffffff, 0x7c65, 0xa334, 0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000b00), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r0, 0x301, &(0x7f0000000b40)={0x53, 0xfffffffffffffffd, 0x0, 0xad, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x21, 0x2, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000c80), 0x2, 0x141102) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="94", 0xf000}, {0x0}], 0x2) socket$rds(0x15, 0x5, 0x0) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000d80)='./nfsd\x00', &(0x7f0000000dc0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='3', 0x1d) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, &(0x7f0000000040)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="1d0000002020000080", @ANYRES32=r5, @ANYRES64], 0x20) 5m5.786153438s ago: executing program 2 (id=119): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0x2) set_mempolicy(0x3, 0x0, 0x3) socket$inet6(0xa, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x150) socket$rxrpc(0x21, 0x2, 0x2) 5m3.838906949s ago: executing program 2 (id=121): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0xa0}}, 0x0) syz_clone3(&(0x7f0000000a00)={0x180801400, &(0x7f0000000a80)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) pidfd_send_signal(r3, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x40000004, 0x0) ppoll(&(0x7f0000000ac0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m47.778408766s ago: executing program 32 (id=121): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000007c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000008c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000900), 0x10106, 0x2, 0x0) epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0xa0}}, 0x0) syz_clone3(&(0x7f0000000a00)={0x180801400, &(0x7f0000000a80)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) pidfd_send_signal(r3, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x40000004, 0x0) ppoll(&(0x7f0000000ac0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m7.610571541s ago: executing program 3 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019380)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000019b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000019bc0)={0x0, 0x0, &(0x7f0000019c00)={&(0x7f0000019c40)={0x1c, r4, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 4m1.539433947s ago: executing program 3 (id=190): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_BIND=@ipv6={0x38, 0x40, 0x0, 0xffffffffffffffff, 0x2d, 0x0}) io_uring_enter(0xffffffffffffffff, 0x7c65, 0xa334, 0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000b00), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r0, 0x301, &(0x7f0000000b40)={0x53, 0xfffffffffffffffd, 0x0, 0xad, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x21, 0x2, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000c80), 0x2, 0x141102) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="94", 0xf000}, {0x0}], 0x2) socket$rds(0x15, 0x5, 0x0) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000d80)='./nfsd\x00', &(0x7f0000000dc0)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000e40)='3', 0x1d) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, &(0x7f0000000040)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="1d00000020200000800000e2", @ANYRES32=r5, @ANYRES64], 0x20) 4m0.181882827s ago: executing program 3 (id=191): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000640)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x123) 3m59.710508026s ago: executing program 3 (id=193): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x40, 0x9, 0x20, "39aa4f48faf018624a1d17c3080100c6154d8c6e5f2174e61569980d00"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1f7) mkdirat(r1, 0x0, 0xc4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='usbip-vudc.0', 0xc) write(r3, &(0x7f0000000480)='\n', 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000004c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(r3, &(0x7f0000000600), 0x12) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000580)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x3fffffffffffce3, 0x700000000000000, 0x0) 3m53.045617814s ago: executing program 3 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019380)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000019b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000019bc0)={0x0, 0x0, &(0x7f0000019c00)={&(0x7f0000019c40)={0x1c, r5, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 3m49.525718067s ago: executing program 3 (id=198): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'sit0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m33.908166749s ago: executing program 33 (id=198): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x101042, 0x5) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000140)={'sit0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m20.738668068s ago: executing program 0 (id=223): mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f00000008c0)='./file2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='27', 0x2) socket$unix(0x1, 0x2, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0xa23c6, 0x1c0) 3m20.153378348s ago: executing program 0 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019380)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000019b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000019bc0)={0x0, 0x0, &(0x7f0000019c00)={&(0x7f0000019c40)={0x1c, r4, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 3m18.471315811s ago: executing program 0 (id=225): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x143000, 0xb2) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x20) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x80000019, 0x7, 0x0, 0x5, 0x6, 0x3, 0x657}, {0x1, 0xff, 0x3, 0x8, 0xb7b, 0x8000, 0x3}, {0x4000000f, 0x7fffffff, 0x1, 0x9e4, 0x0, 0x2, 0x5}]}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f00000000c0)="66916bc702af44c573a11d71776be58d823159ca12aee555601436ba7b098e1775187fd2259b3e2fb45a674998d47b699038a3ff0df9a7527c862f9db53c5a3e980191fa06feb45026202bfd462260d9fd31874a94668230838cb1e9ae0fbfe26596d24901e7745b3f93ed0d5be54e2dc46500ce5676812ab27324cdcf242266dfee18648924c8cd5dac2cd96076770e371db5ef071dd2e48f0bcbb368026ee4f75aea4cc93596a2", &(0x7f0000000180)=""/45, &(0x7f00000001c0)="3a377a42d8deddf9ed63fb19ef56255fc68650d40a38d3e6043b052bd62fd6e682b1f331f0054f9113860621e5d32a74a9d0549cd16fe34ce1bbfbe668c2593b46234c2a9d54e55ea1a1816976fb2a2dd7d53eef0fbbed16f2b448e85e8e401a395c04cb49e8e6aa6cd675e810b453d2762919bbd5eec2e02583a5cc872a2cf5a4efe1b9849bdc14bd5c6c5901ae90cd07e3db5ff833634f40aa2020f9690287b69d0ec8faa6e6a128a024dfeb3d401a346d9e083c7f16b65f92d9064ef955003e4e67047d8ce6ba", &(0x7f00000002c0)="7daf5ade4689330277cb1f10b9e1911b1633ad35bdafd1a81083c9d60056c00f13bbfe8850e5eb80a5665738f58edb23afe86e74f2fdee9e2a3de9b4b8d9d193dafe9a90596a8fa6e2f3d583dd4d944d3378ab18d2cd11e8a3f0f0d8630d0c7665f99eac8f404ccbe21794544087a4ba88af7f5de10963835d75a9134caf9a1d78662c80292c0eabeff631d066f7a65b706a0bfe3a593bb942c005eb6652e079f84224059369b64eec", 0x4, r0, 0x4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000540)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') connect$x25(r5, &(0x7f0000000640), 0x12) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd\x00', 0x8) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000740)='nfsd\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x3) 3m8.766579643s ago: executing program 0 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019380)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000019b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000019bc0)={0x0, 0x0, &(0x7f0000019c00)={&(0x7f0000019c40)={0x1c, r4, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 3m7.088374066s ago: executing program 0 (id=233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000001fe2295b8f08000000010000", @ANYRES32, @ANYBLOB="02000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100040d3}, 0x22000010) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000003e00)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000001ce00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/fillfile\x00', 0x42, 0x1ff) 3m2.413736028s ago: executing program 0 (id=239): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x143000, 0xb2) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x20) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x80000019, 0x7, 0x0, 0x5, 0x6, 0x3, 0x657}, {0x1, 0xff, 0x3, 0x8, 0xb7b, 0x8000, 0x3}, {0x4000000f, 0x7fffffff, 0x1, 0x9e4, 0x0, 0x2, 0x5}]}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f00000000c0)="66916bc702af44c573a11d71776be58d823159ca12aee555601436ba7b098e1775187fd2259b3e2fb45a674998d47b699038a3ff0df9a7527c862f9db53c5a3e980191fa06feb45026202bfd462260d9fd31874a94668230838cb1e9ae0fbfe26596d24901e7745b3f93ed0d5be54e2dc46500ce5676812ab27324cdcf242266dfee18648924c8cd5dac2cd96076770e371db5ef071dd2e48f0bcbb368026ee4f75aea4cc93596a2", &(0x7f0000000180)=""/45, &(0x7f00000001c0)="3a377a42d8deddf9ed63fb19ef56255fc68650d40a38d3e6043b052bd62fd6e682b1f331f0054f9113860621e5d32a74a9d0549cd16fe34ce1bbfbe668c2593b46234c2a9d54e55ea1a1816976fb2a2dd7d53eef0fbbed16f2b448e85e8e401a395c04cb49e8e6aa6cd675e810b453d2762919bbd5eec2e02583a5cc872a2cf5a4efe1b9849bdc14bd5c6c5901ae90cd07e3db5ff833634f40aa2020f9690287b69d0ec8faa6e6a128a024dfeb3d401a346d9e083c7f16b65f92d9064ef955003e4e67047d8ce6ba", &(0x7f00000002c0)="7daf5ade4689330277cb1f10b9e1911b1633ad35bdafd1a81083c9d60056c00f13bbfe8850e5eb80a5665738f58edb23afe86e74f2fdee9e2a3de9b4b8d9d193dafe9a90596a8fa6e2f3d583dd4d944d3378ab18d2cd11e8a3f0f0d8630d0c7665f99eac8f404ccbe21794544087a4ba88af7f5de10963835d75a9134caf9a1d78662c80292c0eabeff631d066f7a65b706a0bfe3a593bb942c005eb6652e079f84224059369b64eec", 0x4, r0, 0x4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000540)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') connect$x25(r5, &(0x7f0000000640), 0x12) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd\x00', 0x8) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000740)='nfsd\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x3) 2m47.37192582s ago: executing program 34 (id=239): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x143000, 0xb2) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, 0x0, 0x0}, 0x20) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x80000019, 0x7, 0x0, 0x5, 0x6, 0x3, 0x657}, {0x1, 0xff, 0x3, 0x8, 0xb7b, 0x8000, 0x3}, {0x4000000f, 0x7fffffff, 0x1, 0x9e4, 0x0, 0x2, 0x5}]}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f00000000c0)="66916bc702af44c573a11d71776be58d823159ca12aee555601436ba7b098e1775187fd2259b3e2fb45a674998d47b699038a3ff0df9a7527c862f9db53c5a3e980191fa06feb45026202bfd462260d9fd31874a94668230838cb1e9ae0fbfe26596d24901e7745b3f93ed0d5be54e2dc46500ce5676812ab27324cdcf242266dfee18648924c8cd5dac2cd96076770e371db5ef071dd2e48f0bcbb368026ee4f75aea4cc93596a2", &(0x7f0000000180)=""/45, &(0x7f00000001c0)="3a377a42d8deddf9ed63fb19ef56255fc68650d40a38d3e6043b052bd62fd6e682b1f331f0054f9113860621e5d32a74a9d0549cd16fe34ce1bbfbe668c2593b46234c2a9d54e55ea1a1816976fb2a2dd7d53eef0fbbed16f2b448e85e8e401a395c04cb49e8e6aa6cd675e810b453d2762919bbd5eec2e02583a5cc872a2cf5a4efe1b9849bdc14bd5c6c5901ae90cd07e3db5ff833634f40aa2020f9690287b69d0ec8faa6e6a128a024dfeb3d401a346d9e083c7f16b65f92d9064ef955003e4e67047d8ce6ba", &(0x7f00000002c0)="7daf5ade4689330277cb1f10b9e1911b1633ad35bdafd1a81083c9d60056c00f13bbfe8850e5eb80a5665738f58edb23afe86e74f2fdee9e2a3de9b4b8d9d193dafe9a90596a8fa6e2f3d583dd4d944d3378ab18d2cd11e8a3f0f0d8630d0c7665f99eac8f404ccbe21794544087a4ba88af7f5de10963835d75a9134caf9a1d78662c80292c0eabeff631d066f7a65b706a0bfe3a593bb942c005eb6652e079f84224059369b64eec", 0x4, r0, 0x4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x141102) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000540)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') connect$x25(r5, &(0x7f0000000640), 0x12) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./nfsd\x00', 0x8) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000740)='nfsd\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x3) 19.550359933s ago: executing program 4 (id=397): socket$inet6(0xa, 0x2, 0x2a65) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000004cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xd8, 0x120, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000005140)={0x2, {0x2, 0x3bf, 0x4, 0x14a, 0x100}}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000051c0)) shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) 17.943925399s ago: executing program 4 (id=400): socket$kcm(0x10, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r0}, 0x18) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000ddf200200000000000000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r3}, 0xc) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x3, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x7, 0x4}) 14.951861988s ago: executing program 4 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000020c0)=0x80000004, 0x4) prlimit64(0x0, 0xe, &(0x7f0000002140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000021c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002240)=""/102400, 0x19000) mount(0x0, &(0x7f000001b240)='./mnt\x00', &(0x7f000001b280)='nfs\x00', 0x0, &(0x7f000001b2c0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') msgsnd(0x0, &(0x7f000001b340)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgsnd(0x0, 0x0, 0x8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f000001b380)={0x0, 0x0, &(0x7f000001b3c0)={&(0x7f000001b400)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e20"], 0x5c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f000001b480)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 14.818676811s ago: executing program 5 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./pipefs\x00', 0xd) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./pipefs/gssd/clntXX/gssd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0xf13, &(0x7f000001aa40)={@link_local={0x3}, @link_local, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xab, 0xaa, "11", "777f63", 0x9100, "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"}}}}}}, 0x0) 14.817725401s ago: executing program 4 (id=406): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2000}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 14.752221218s ago: executing program 1 (id=407): r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x2) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000500)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x2}, 0xa0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x682001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl(r2, 0x404c4701, &(0x7f0000000080)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000780)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2178}, {r0, 0x4400}], 0x2, &(0x7f0000000140), &(0x7f0000000180)={[0x1]}, 0x8) 12.710612659s ago: executing program 5 (id=409): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000009c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x404c00, 0x0) connect$unix(r1, &(0x7f0000000a40)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000b40), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) recvmmsg(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 12.619840238s ago: executing program 1 (id=410): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./pipefs\x00', 0xd) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./pipefs/gssd/clntXX/gssd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0xd34, &(0x7f000001aa40)={@link_local={0x3}, @link_local, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xab, 0xaa, "11", "777f63", 0x9100, "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"}}}}}}, 0x0) 9.896743579s ago: executing program 5 (id=411): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0)='jffs2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='0', 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000740)={0xb000, 0x200000}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000780)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0x401, 0xffffffff, 0xffffffff, 0x132000, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffbfff, 0x1, 0xffffdfff, 0xffffffff, 0xfffffffb]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac43, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x800ffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mknod(&(0x7f0000000b00)='./file0\x00', 0x8000, 0x5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000c00)) 9.49948235s ago: executing program 6 (id=412): socket$kcm(0x10, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r0}, 0x18) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000ddf200200000000000000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r3}, 0xc) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x3, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x7, 0x4}) 8.610478952s ago: executing program 4 (id=413): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x20, 0x1, 0x13, "f83c0f37bb243171ae98b6cc5ca7627f245e87"}, 0x0, 0x0, 0x0, 0x0}) 8.577578615s ago: executing program 1 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000020c0)=0x80000004, 0x4) prlimit64(0x0, 0xe, &(0x7f0000002140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000021c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002240)=""/102400, 0x19000) mount(0x0, &(0x7f000001b240)='./mnt\x00', &(0x7f000001b280)='nfs\x00', 0x0, &(0x7f000001b2c0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') msgsnd(0x0, &(0x7f000001b340)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgsnd(0x0, 0x0, 0x8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f000001b380)={0x0, 0x0, &(0x7f000001b3c0)={&(0x7f000001b400)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e20"], 0x5c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f000001b480)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 6.032478598s ago: executing program 5 (id=415): mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f00000008c0)='./file2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='27', 0x2) socket$unix(0x1, 0x2, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0xa23c6, 0x1c0) 5.946535527s ago: executing program 6 (id=416): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44085}, 0x0) open(0x0, 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000006c0)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000b40)={0x3, 0x10}) sendto$inet(r2, &(0x7f0000000b80)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000d40), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f00000000c0)=[{0x5, 0xbf, 0x0, 0x0, @tick=0x7d90, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x38) r5 = syz_open_dev$usbfs(0x0, 0x9, 0x553a01) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000440)=@urb_type_bulk={0x3, {0x0, 0x1}, 0x8, 0xa2, &(0x7f0000000580)="dcb526b42ea38e114e4ced2fb3de5f372dd10f45ec8ccbd6aeeb4f3c439204575840e7118da2c23176162e5b7cc9dd0fe3a3e5816a943c7c52cc408e0a5c84071679e929eb2d71a7c79bc25df10389a475a06581f22839b785e5b3d648573d8555dc44c832c9e34fe0bd25d9d44f26980ce691f33131faa5fadf6acc94b62ed93330f005cfd00010c1d74557a9f168de0330ac26577951d664ee9272e14790b89e6e6520dae2c9a3da40801eb08cdaaf3c3774ddb648072806c077ae403f2f8a803ce48d52633b1aa9bdfa", 0xcb, 0x2, 0x8, 0x0, 0x10000, 0x7fff, &(0x7f0000000340)}) 5.902671541s ago: executing program 1 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./pipefs\x00', 0xd) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./pipefs/gssd/clntXX/gssd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0xf13, &(0x7f000001aa40)={@link_local={0x3}, @link_local, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xab, 0xaa, "11", "777f63", 0x9100, "82657e0b7d45cf5532d71b7606e7776c03ed48dac01ee8ac9282861a56a0717e546b194eef9784ac229b06192667cb0d3d9d9006f9d7131ad7271d1bd791770682a2f3516d3fb4d11fa46a3cd729051715770525febd2e18a0ba7efaa83ff8f617f885acc2fea81a87549f6f2a9458e93d7a1fc331add023dc02e37e0f93a24f4e9411ad1a98a749df790d01f7d7d80ccc06506aac08f31b23c4d7af3ed891394f0b91d4f7cb3bbaf8d8abc1660370c9848e02c43abe0b9f4082eb8be3aed34dc48c227c75be1ed87fb68f3baf516ab97fdc7cbca0bc264ba3809d37905c7d2d7d5867f309cd41a0d852df259bcb95410e94c80dcf590f65ce6f6fad288d087dc7c3a2ec7574766d0aa1000ccdf0e1a6df0aeeef1b4b13b7a8b0e88d0a56c39953e9b1ea3c96bbc6d11d0924381e484490eaeb5c9645880e73cc582921ef2529a6898a9893c0a99f017bc8e44137827a4e5b518b6c98b6c4598954f13c95230c398cda5ef0f95dc0378e2183e63771e000afd544b0ab4ccc5c2c23af84c3180be74be63396d8ac2e886dc8c38df08c00ea34d5d5ba0d6171fcb2066eeafea655073a84ecc3e8c1001a3ff1545b19fd2681de9c253dfda0ad91e73c6aee78b841b4487199210c2421d7f8ee2f070d2ad2ec51f6c88709833257b2827c72bde7ac29336c52d8a6117b893e4f4649b6c7adb088a59466892c8d26ec7f6f5a0896c9ff29e67f1b61c95a7479d4879fd26de025b5f8974f004934dd34f6f1b7c85e2948cf6c2df4983ed5163ae80c691302193f910e0980eb365d50550bfde78ca0e2aa1c4befb0066a1ea942fff868fb30e1d7a79ad89472382902505e8ce6156105e0cc67ced13ceee89b74005ad9b30127fa82679b7dd9a5f043bda9782457b6c64c19fdc5dc35586e676245491750d056a97851df0aa9f38356a688a05504f70fa2de8542146fdf811667efdd97f016bbcd0d6082a9f10161ba993a99935310141f068a5e23e6172702315667fe4762f5bbd30ba346f2300124ba77fdc3aa5d7966feff11602f5263ab65b479544bc9b3b3799e195accc1344060ee8e1fdbef17b9425c9d60a1442466d1ade672cad11a5802ee213e26000adc6005b8367320316d47316d556dd9c9ea6c6fa5422182dd06c48b0de91be3e255b3717968e6407f72a78418d6c28b0fb0307ba7c87ccdae76722a1a48c06b388e19ef27867178f7a47a93104d0adf42ca035d2b7dc7bc410fcebb8219e4f3969884020ab19c4c5510ab6da33139a0760d4ce2e2966c9c46b03776940b6443cc3bc08c66383d7976df3410e59fb448f5ff1f8acad7d77f456af36af1dbca33380b6a582b72bbfc5048a86c517b07b138f0dc1d21d1053410c3f44b3a0a70b3745325e1db2a17534941a206a27bf320b86eec7e04ee4faa48ae3cd3b91ec2a14f16b1d39f78faa1d1ee376661021bcddc7432b44aa81c0171f555679a9a004fd50ba23b9c5e2b0c8563c99c0f2e6248d803cb8f0dc660450d83630fb977d99f307b6de8e26329ceab11731764b3fb966d20a5fabb2f3094f108173beba20350b1fb2fa0d5af5e46cdd85df2457b121ae0b262a08ffaf4529dad9d11e211963fbc77c1f414f4dbf104107bfcb01a58ba09d181916b1db3b68ce61fb4ed8e6896f1cc194ac96e364e4663fb27279a7583ed0e3ab9f562691e511e7a0ca458d7de4b455dab71e039dc5f11d2c13b2ec9b2cfad0bc532df74e2f7d2af43e92a21f7f5f69954417887cb802ac0b9277063df1bd7996ff82bfb6dfcc29381114b6f77775ef78cd308e55f4d27347ee728fd44b7b6058f6b8f8eb66ede4eb90f52037d8775afcc489eb83121787fb48a80b2275107620939e4c021c8586f6ce3015e646d927ac952b723daac0b827470e8ca3c4b9630e63c2d2cdd8125af8c71317530d7cd0e3319971f474d3364b59b8de627b682a91613a080789ed0c67e316c7c1cf640b71bd6021a25bfe5de0a6650ea5f2928e667373676b8f7c99c88e6cbfe3a10bd43faf9525d3228336b378bb01a77472247c112463ce5c5b98d166fe705ae1106fe614066da60c2cbb18a59af371aa94ea38828399c7bec2ecd54db2021604b53af1676ce2ccaf3a23f527422cb980541d87bebae14cd7cb8a055c48bb32f1adb64ffa736a4724d30d27820c694647696e9c164ab872bc940912659b25c3550220f3102268cdffe164aa03517043c6d6393d09d4dd2c8f415c3babffb34277b77e93d3450370a636a5f11e8d62216d259117eb7a2626c88e8de3c9333891952fd6acf5f36cefdccb88b108f8dfe51a4098258db3699913da39aff509bdcbc3359be46743fad06dc686cd5ad94b4541fc2cfc4e1374828a923f5988240f01bdb9611c9ca600522c96be0013ce1626b5bb5b8ff2a2ae64e3b406f56d98e00cc7277c21d70718c09bd22acd3918101e56074a68d5b34b9780d5fdc939cf0eef4916a43b87c042aa18b672a7d6f34da2b31cde41a332984b8b012572de1dcb9bc651e8ca1ea22fd5b3178dfc7ef3a0ea13e549559611154f590c83d77d0f8a4e0aad3425aa19e88e73c9b02cc5423652be35be74210760883b1ae5933ca570ff93206b8d449241953f3b5cfea2a22da4ffe14e6e26930be34ccf6eb715c574d9a75cae6e4879d01af93bd67c665907741d0588dd55eedec3ddc1a729b62930a86c754d5caf69467ba09bd58258002c32ec39663f72a3561755e4bd550d70bf821e79a8b217c0411f4342b9865814c7c3bb10c7d4df6f73e864878f75232b11139396ae8d29649713481a0f50ae4bfb6b74f1c8dd6bef1ea2ada83a1dd3f0e9ef825188f7c90765a785eec6a43e38650181c78d17aeef3bc226a27f011496d6eeae974c7de6d915cadec1b49e2defc5400dfade09ee72607c214bf8f4eaff4e81fa83cb6d6c03c7116c14153972608124d2e4d5c6b933e1974150af0deed7583b07f92725e103c40fb26f101ce5696ef143b0b82a3835df2960b930a9376de52f52b63148e180da20c659f6f0c37f1bcc4305e8c4b900ec8cbf024e3c079c1c6c763e0898ffbebcceb5426baa8b367cf77ea5a257218c95c5ccfcc781720b42a3fa6add49748623fc4dfbe5cbd27fa22cb7bf81843c3de719adc12682b980b65cf391cdbdc84c5f50a3fd48987df3103b642bcc3c4082fdaafd71c9f45a6c07ce9100d6201156bf7c69346594e71f462bebaf5dc70b4d89f039b5385ec83d4a12cae2e429bdbf416868e4a282df2abd9ca9fa173f20854e098ed5b722271dec8c777a1ca50107430c5e4c19220d0b0da49944ec9120b79b47f769dd5ef8815fca4b77205d96fbedfa4dc40875f12c7a1b57d64ada58895f4f10d7d1fe2ab0f535533c7ad6cc680b9230fea5bface85809049c0bc769f6c0332d4a2163f04dcd1669873b82ee918f50567f2f137e4deeda9234b229905046e7e99ad5a85ffc260027ea22f6e96321c50119eb7a23afa0329538d8f3dc707960cbaca2fb9157494979562dd9fe0c58e045743d9cdbc104c3627c6f13aca7003d125b26fec1aeab7cb0a1886ba586fe9e46c2f411f486aef3f7f73058d3676e056116897315a6a164a5846175975c6ccd32f33b80638001053382c7b38921a7a5eff859d5bdf04e4133488730a3c7a886138e26556e2279518e305788942fa9f0a49859ed22f6fa9006123cb598966f2126ce1e1b975d82d191d89ecf4cd2be14acccc52d0cd81b18a2945431a37e442e00d5760fddfff10320213669592cd42cde29e390befb6a428cc00977cb21183c574283a3d48162a00b3f4de4c6c038c0b0f57d0dead678f6c3c95a933d5460094709a7cb01cefd69b0d0046b2cb89c827e31c322d818df02e8c681ba74b6a13fbab29d667aad139c5f622ad6daea9907e293b04538e82d8b016b155ed25975c57f7e05a2253e961a1262f8a9f83b5cbb8b1e44761d372a996ec540b4df0763ac0146e25be2c7d3592427189db38e660a9e6975f51119ecf496f1408fffe8724ba32880d7c8ce2ba27cff74d7b39172a607ed7270c175e10a62546068df539c03251a3d410c6922d63f53e937f31286a8e66f1ce648d1705dc475f24c8e8e3b26f95f5fa447ca74b512b9d384c6e177d2f3c7f7ad1dca8c788d3cd647609c293278f74bf0abbc9ff38769612a2f66791fa624917c25244bbe272b9ce4d0b4ca8684c97b7e2a64e1c0dd1e93b32c9ca370d11907d28c06f440a63ba6c0c3384acd8123f1600b2011d3aef48debb134f9de89ec269da437c38d138ae509785a4aff7711b72e9327b2cfbfc394a5bf19416f605526659e5b4ece044569e21d19f05dd576887825cd79bfd237c91d3548782f58b44273b33c015caf41f106aa0c6ebb8edc0641b625ed4f710614fd27001584a6ca274276744adc53f56b1a5eb22fb9690bff76f76079e90192bd43d04d590d29ae8d52e7adddc86aa0c970846fefc99c21ff806659d6b3e08c398b6e26341b1f53250d94860bb7fda9ea774c7f779b512a1d65cf872c0aa8d4b56a671a8ccdcad2e46ee7a65ca605c42f09b08e87afddb44038d9a805ed86b5fad9c79ec9674359e68846358d84653140472170bab4465728e5c27d0a1461dc94ffeda76528f764c4a06b75729ea3a86c590cd96141110d800b1f16e7cebc617fbbd9a11afbf4f41f91f50c1e86991a66c20a2f128869181038249bb4ffae08b086aaa99c7e9fa8996090f4c0527653f23dd3e68832e1f61abd20d6c860beca18dbf14304514f3f113f39e3a0feba8664e7569cd58502ac7c5c811c9e5d4f5caf5355bb7dbac7bd721cbe2209d8be52578c5b43f96a441c0a601abaf6f1ef734e7cfefa6a7e23121700aa535e7da5210c3963e061e743902aeddbb03888b77271ae18bf157f78d39aeedbb0918e6f193d94be031db1d7f813e0d80a8c8bf9eefc222c47276e0efa9a990a59f5ca6378f27957f2b5c2c692fe3e42cafa903e48b60728a943be7c4df436a04ef587514824059c06d9de103355706d0b690a0814c29bbf85f90775b289a53f6ad50efa59465060a427afc560624a06e6dcfb952cdd835ead9ff3a170ea9c3f18dc6b3b44c983cee5771da29118a490a2c86f57043fb362cdb5121f1883cef4e453dbeba3d391263c328b62f66db456fcb360b24f3c240097fc35ea29021aa7cfda92a2a93ecc6d56194321503597da27d1ec10776f8cd4c373421e868fbd9c1c07a643e089e8896da5f94a3963cd368792cf83ca2e3339897518b16ae2a152169c9c7e129cd05038788e7b684a925f45a9a3111c6d1dd217004750654afb9eb5c2e73cc36f80820c00c39ffe7b00e2e10de6469d0460af9c1dd525eba092c45e72e83a28cff276a03494e899a3b3bdcc599e5c16a28b1028d4a4a0f4a24d16c9a17ece371e832a472"}}}}}}, 0x0) 5.727870989s ago: executing program 5 (id=418): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000880)={0x0, 0x7, 0x1, 'h'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.722534063s ago: executing program 6 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000680)='-:my_read_msr2 msr/r', 0x14) 4.610731074s ago: executing program 1 (id=420): socket$kcm(0x10, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r0}, 0x18) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000ddf200200000000000000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r3}, 0xc) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x3, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x7, 0x4}) 4.402592876s ago: executing program 6 (id=421): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r0, 0x4) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000680)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000700)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000019700), 0x200, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000019740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019800)={0x11, 0x3, &(0x7f00000198c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000019900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000019940)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019980)=@bpf_tracing={0x1a, 0xf, &(0x7f0000019a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000019ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000019b00)=@generic={0x0, r8}, 0x18) 2.003283063s ago: executing program 6 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./pipefs\x00', 0xd) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r0, &(0x7f0000002b80)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./pipefs/gssd/clntXX/gssd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0xd34, &(0x7f000001aa40)={@link_local={0x3}, @link_local, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0xab, 0xaa, "11", "777f63", 0x9100, "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"}}}}}}, 0x0) 1.16387603s ago: executing program 1 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./mnt\x00', &(0x7f00000003c0)='jffs2\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='0', 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000740)={0xb000, 0x200000}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000780)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0x401, 0xffffffff, 0xffffffff, 0x132000, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffbfff, 0x1, 0xffffdfff, 0xffffffff, 0xfffffffb]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac43, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x800ffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mknod(&(0x7f0000000b00)='./file0\x00', 0x8000, 0x5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000c00)) 844.268833ms ago: executing program 4 (id=424): socket$kcm(0x10, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r0}, 0x18) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000ddf200200000000000000a"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r3}, 0xc) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x3, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x7, 0x4}) 562.494962ms ago: executing program 5 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000020c0)=0x80000004, 0x4) prlimit64(0x0, 0xe, &(0x7f0000002140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000021c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002240)=""/102400, 0x19000) mount(0x0, &(0x7f000001b240)='./mnt\x00', &(0x7f000001b280)='nfs\x00', 0x0, &(0x7f000001b2c0)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') msgsnd(0x0, &(0x7f000001b340)=ANY=[@ANYBLOB="01"], 0x8, 0x800) msgsnd(0x0, 0x0, 0x8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f000001b380)={0x0, 0x0, &(0x7f000001b3c0)={&(0x7f000001b400)=ANY=[@ANYBLOB="5c0000000206010200000000006000000300000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e20"], 0x5c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f000001b480)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 0s ago: executing program 6 (id=426): mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f00000008c0)='./file2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='27', 0x2) socket$unix(0x1, 0x2, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0xa23c6, 0x1c0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 85.616080][ T5446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.633574][ T5446] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. syzkaller login: [ 111.673874][ T5774] cgroup: Unknown subsys name 'net' [ 111.817715][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 113.838781][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.589104][ T11] cfg80211: failed to load regulatory.db [ 115.771875][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.785061][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.795391][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.806128][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.816825][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.837914][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.847290][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.870040][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.880665][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.890383][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.902461][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.908612][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.921847][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.931988][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.948418][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.959221][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.961961][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.970447][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.988969][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.018426][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.028344][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.050926][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.060253][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.069433][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.124027][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 116.132676][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.159354][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.172767][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.189309][ T5788] (null): rxe_set_mtu: Set mtu to 1024 [ 116.196568][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 116.206166][ T5789] (null): rxe_set_mtu: Set mtu to 1024 [ 116.213389][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 116.225427][ T5793] (null): rxe_set_mtu: Set mtu to 1024 [ 116.260442][ T5793] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 116.581668][ T5785] infiniband rxe0: set active [ 116.588370][ T5785] infiniband rxe0: added rxe_eth0 [ 116.600763][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.690735][ T5785] RDS/IB: rxe0: added [ 116.696085][ T5785] smc: adding ib device rxe0 with port count 1 [ 116.722140][ T5785] smc: ib device rxe0 port 1 has pnetid [ 116.764490][ T56] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.805823][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.013970][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 117.123211][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 117.168611][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 117.252935][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.511524][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.532929][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.557677][ T5789] bridge_slave_0: entered allmulticast mode [ 117.583108][ T5789] bridge_slave_0: entered promiscuous mode [ 117.644049][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.653127][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.662126][ T5788] bridge_slave_0: entered allmulticast mode [ 117.671086][ T5788] bridge_slave_0: entered promiscuous mode [ 117.679686][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.690433][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.699426][ T5789] bridge_slave_1: entered allmulticast mode [ 117.708170][ T5789] bridge_slave_1: entered promiscuous mode [ 117.722600][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.779530][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.794621][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.803040][ T5788] bridge_slave_1: entered allmulticast mode [ 117.815845][ T5788] bridge_slave_1: entered promiscuous mode [ 117.861911][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.876190][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.891299][ T5793] bridge_slave_0: entered allmulticast mode [ 117.902012][ T5793] bridge_slave_0: entered promiscuous mode [ 117.986736][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.002588][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.011730][ T5793] bridge_slave_1: entered allmulticast mode [ 118.027969][ T5097] Bluetooth: hci0: command tx timeout [ 118.027988][ T5796] Bluetooth: hci2: command tx timeout [ 118.043804][ T5793] bridge_slave_1: entered promiscuous mode [ 118.086268][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.104404][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.126762][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 118.135966][ T5097] Bluetooth: hci3: command tx timeout [ 118.135996][ T5796] Bluetooth: hci1: command tx timeout [ 118.168893][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.186458][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.231221][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.252677][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.378598][ T5793] team0: Port device team_slave_0 added [ 118.398376][ T5789] team0: Port device team_slave_0 added [ 118.444677][ T5788] team0: Port device team_slave_0 added [ 118.456686][ T5793] team0: Port device team_slave_1 added [ 118.468560][ T5789] team0: Port device team_slave_1 added [ 118.512476][ T5788] team0: Port device team_slave_1 added [ 118.566246][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.579961][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.616487][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.633600][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.641365][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.681720][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.724598][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.733483][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.765112][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.793472][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.802923][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.840130][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.856379][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.866476][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.900539][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.930794][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.939344][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.971572][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.089939][ T5788] hsr_slave_0: entered promiscuous mode [ 119.099432][ T5788] hsr_slave_1: entered promiscuous mode [ 119.118459][ T5793] hsr_slave_0: entered promiscuous mode [ 119.125490][ T5793] hsr_slave_1: entered promiscuous mode [ 119.136965][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.146318][ T5793] Cannot create hsr debugfs directory [ 119.274297][ T5789] hsr_slave_0: entered promiscuous mode [ 119.282831][ T5789] hsr_slave_1: entered promiscuous mode [ 119.291320][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.302623][ T5789] Cannot create hsr debugfs directory [ 119.727078][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 119.817643][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.848626][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.880914][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.896482][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.927460][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.936697][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.947389][ T5785] bridge_slave_0: entered allmulticast mode [ 119.956181][ T5785] bridge_slave_0: entered promiscuous mode [ 119.971480][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.980545][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.991527][ T5785] bridge_slave_1: entered allmulticast mode [ 120.000341][ T5785] bridge_slave_1: entered promiscuous mode [ 120.093179][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.107954][ T5097] Bluetooth: hci0: command tx timeout [ 120.117877][ T5097] Bluetooth: hci2: command tx timeout [ 120.131564][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.156761][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.188351][ T5097] Bluetooth: hci1: command tx timeout [ 120.188408][ T5796] Bluetooth: hci3: command tx timeout [ 120.216519][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.232024][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.244402][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.262191][ T5785] team0: Port device team_slave_0 added [ 120.279587][ T5785] team0: Port device team_slave_1 added [ 120.314564][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.323619][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.365659][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.394511][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.403236][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.438576][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.555286][ T5785] hsr_slave_0: entered promiscuous mode [ 120.565387][ T5785] hsr_slave_1: entered promiscuous mode [ 120.575349][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.584553][ T5785] Cannot create hsr debugfs directory [ 120.610599][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.624938][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.675472][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.692119][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.948966][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.054186][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.099439][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.119869][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.140156][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.161902][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.184677][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.193349][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.219447][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.255118][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.284996][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.306076][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.315254][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.344112][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.354233][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.403998][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.424402][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.432250][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.490942][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.500670][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.513337][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.520833][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.613364][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.863664][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.965517][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.030917][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.041580][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.079426][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.088391][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.188945][ T5796] Bluetooth: hci2: command tx timeout [ 122.199478][ T5796] Bluetooth: hci0: command tx timeout [ 122.268178][ T5097] Bluetooth: hci3: command tx timeout [ 122.274594][ T5796] Bluetooth: hci1: command tx timeout [ 122.296262][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.312133][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.350921][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.425099][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.525370][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.589337][ T5793] veth0_vlan: entered promiscuous mode [ 122.630966][ T5793] veth1_vlan: entered promiscuous mode [ 122.754501][ T5793] veth0_macvtap: entered promiscuous mode [ 122.785788][ T5788] veth0_vlan: entered promiscuous mode [ 122.810387][ T5793] veth1_macvtap: entered promiscuous mode [ 122.845432][ T5788] veth1_vlan: entered promiscuous mode [ 122.883781][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.915591][ T5789] veth0_vlan: entered promiscuous mode [ 122.926433][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.951261][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.990526][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.005652][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.019265][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.029912][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.048045][ T5789] veth1_vlan: entered promiscuous mode [ 123.139844][ T5788] veth0_macvtap: entered promiscuous mode [ 123.182905][ T5788] veth1_macvtap: entered promiscuous mode [ 123.261780][ T5785] veth0_vlan: entered promiscuous mode [ 123.293767][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.315365][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.328240][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.343715][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.360940][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.403507][ T5785] veth1_vlan: entered promiscuous mode [ 123.423487][ T5789] veth0_macvtap: entered promiscuous mode [ 123.441098][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.459110][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.480789][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.511397][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.522338][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.535307][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.550912][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.569720][ T5789] veth1_macvtap: entered promiscuous mode [ 123.574420][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.595509][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.730174][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.751436][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.765844][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.784027][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.799340][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.817800][ T5793] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 123.852588][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.871562][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.886098][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.900607][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.917829][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.974115][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.989965][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.004172][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.022298][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.048842][ T5785] veth0_macvtap: entered promiscuous mode [ 124.061855][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.084483][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.175484][ T5785] veth1_macvtap: entered promiscuous mode [ 125.845937][ T5796] Bluetooth: hci2: command tx timeout [ 125.845959][ T5097] Bluetooth: hci0: command tx timeout [ 125.853721][ T52] Bluetooth: hci1: command tx timeout [ 125.853764][ T52] Bluetooth: hci3: command tx timeout [ 125.986013][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.008901][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.073719][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.096487][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.121817][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.136614][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.151047][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.163917][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.196587][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.248284][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.256811][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.282028][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.299844][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.320513][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.345652][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.363889][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.385651][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.406645][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.475265][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.494787][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.505736][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.518879][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.542009][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.567161][ T5878] syz.2.3[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 126.686950][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.168306][ T5852] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.308444][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.371680][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.409054][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 127.464082][ T5852] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 127.542241][ T5852] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 127.613546][ T5852] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 127.643434][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.716116][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.747196][ T5852] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 127.885539][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.955092][ T5852] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 128.007752][ T5852] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 128.068246][ T5852] usb 3-1: Product: syz [ 128.118275][ T5852] usb 3-1: Manufacturer: syz [ 128.123593][ T5852] usb 3-1: SerialNumber: syz [ 128.156875][ C0] sched: RT throttling activated [ 128.276249][ T5852] usb 3-1: config 0 descriptor?? [ 128.375309][ T5852] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 128.454180][ T5852] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 130.376962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 130.894249][ T5852] rxe_eth0 speed is unknown, defaulting to 1000 [ 131.014854][ T176] usb 3-1: USB disconnect, device number 2 [ 131.268952][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.937024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 133.638755][ T176] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 134.215754][ T5912] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 134.229280][ T5912] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 135.496939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.142962][ T5918] Zero length message leads to an empty skb [ 136.456989][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.461723][ T5881] usb 2-1: device descriptor read/all, error -71 [ 141.521328][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.620423][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.177527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 143.586929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.874735][ T5963] ======================================================= [ 146.874735][ T5963] WARNING: The mand mount option has been deprecated and [ 146.874735][ T5963] and is ignored by this kernel. Remove the mand [ 146.874735][ T5963] option from the mount to silence this warning. [ 146.874735][ T5963] ======================================================= [ 146.925617][ T5963] jffs2: notice: (5963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.116966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 149.690312][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'. [ 151.957088][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.176036][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.199947][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.227178][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.258642][ T8] usb 3-1: config 0 descriptor?? [ 152.316584][ T28] audit: type=1326 audit(1793420807.068:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.0.27" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0a459f559 code=0x0 [ 155.911359][ T5849] usb 3-1: USB disconnect, device number 3 [ 156.216550][ T6014] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 156.229070][ T6014] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 159.504323][ T6020] FAULT_INJECTION: forcing a failure. [ 159.504323][ T6020] name failslab, interval 1, probability 0, space 0, times 1 [ 159.520465][ T6020] CPU: 1 PID: 6020 Comm: syz.3.33 Not tainted syzkaller #0 [ 159.529402][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.541031][ T6020] Call Trace: [ 159.546755][ T6020] [ 159.550645][ T6020] dump_stack_lvl+0x18c/0x250 [ 159.557312][ T6020] ? show_regs_print_info+0x20/0x20 [ 159.565123][ T6020] ? load_image+0x420/0x420 [ 159.572380][ T6020] ? __might_sleep+0xe0/0xe0 [ 159.578034][ T6020] ? __lock_acquire+0x7eb0/0x7eb0 [ 159.584878][ T6020] should_fail_ex+0x394/0x4c0 [ 159.590385][ T6020] should_failslab+0x9/0x20 [ 159.595136][ T6020] slab_pre_alloc_hook+0x59/0x300 [ 159.600578][ T6020] ? __get_vm_area_node+0x125/0x370 [ 159.607187][ T6020] __kmem_cache_alloc_node+0x53/0x260 [ 159.614571][ T6020] ? __get_vm_area_node+0x125/0x370 [ 159.621156][ T6020] kmalloc_node_trace+0x26/0xe0 [ 159.626572][ T6020] __get_vm_area_node+0x125/0x370 [ 159.634823][ T6020] __vmalloc_node_range+0x36f/0x1320 [ 159.641395][ T6020] ? bpf_prog_calc_tag+0xe0/0x6b0 [ 159.647908][ T6020] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.655364][ T6020] ? __kernel_text_address+0xd/0x30 [ 159.661765][ T6020] ? unwind_get_return_address+0x91/0xc0 [ 159.669190][ T6020] ? stack_trace_save+0xaa/0x100 [ 159.674351][ T6020] ? free_vm_area+0x50/0x50 [ 159.679716][ T6020] ? pfn_valid+0xf4/0x450 [ 159.686726][ T6020] ? pfn_valid+0x411/0x450 [ 159.691961][ T6020] ? bpf_prog_calc_tag+0xe0/0x6b0 [ 159.698846][ T6020] vmalloc+0x79/0x90 [ 159.704041][ T6020] ? bpf_prog_calc_tag+0xe0/0x6b0 [ 159.709942][ T6020] bpf_prog_calc_tag+0xe0/0x6b0 [ 159.718047][ T6020] ? do_syscall_64+0x55/0xb0 [ 159.723621][ T6020] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.731341][ T6020] ? __bpf_prog_free+0x120/0x120 [ 159.737216][ T6020] ? check_btf_info+0x668/0x2920 [ 159.744145][ T6020] resolve_pseudo_ldimm64+0xd4/0x1100 [ 159.752818][ T6020] ? add_subprog+0x3d0/0x3d0 [ 159.759220][ T6020] ? sort+0xaf/0xf0 [ 159.763463][ T6020] ? sort_r+0x1810/0x1810 [ 159.770087][ T6020] ? check_btf_info+0x2920/0x2920 [ 159.776655][ T6020] ? kvmalloc_node+0x70/0x180 [ 159.782838][ T6020] ? add_subprog+0x2c0/0x3d0 [ 159.788120][ T6020] bpf_check+0x3803/0xfe50 [ 159.793819][ T6020] ? mark_lock+0x94/0x320 [ 159.801053][ T6020] ? __lock_acquire+0x135d/0x7eb0 [ 159.807373][ T6020] ? deref_stack_reg+0x1ab/0x230 [ 159.814905][ T6020] ? is_bpf_text_address+0x26/0x2a0 [ 159.823554][ T6020] ? bpf_get_btf_vmlinux+0x70/0x70 [ 159.832439][ T6020] ? mark_lock+0x94/0x320 [ 159.840386][ T6020] ? mark_lock+0x94/0x320 [ 159.846967][ T6020] ? __lock_acquire+0x1431/0x7eb0 [ 159.855729][ T6020] ? mark_lock+0x94/0x320 [ 159.862047][ T6020] ? __lock_acquire+0x135d/0x7eb0 [ 159.870039][ T6020] ? mark_lock+0x94/0x320 [ 159.875492][ T6020] ? __lock_acquire+0x1431/0x7eb0 [ 159.881530][ T6020] ? verify_lock_unused+0x140/0x140 [ 159.887880][ T6020] ? verify_lock_unused+0x140/0x140 [ 159.895036][ T6020] ? verify_lock_unused+0x140/0x140 [ 159.900860][ T6020] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 159.908642][ T6020] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 159.916818][ T6020] ? __lock_acquire+0x7eb0/0x7eb0 [ 159.925432][ T6020] ? lock_chain_count+0x20/0x20 [ 159.933849][ T6020] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 159.942310][ T6020] ? lockdep_hardirqs_on+0x98/0x150 [ 159.949436][ T6020] ? ktime_get_with_offset+0x103/0x330 [ 159.956525][ T6020] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 159.966399][ T6020] ? ktime_get_real_ts64+0x440/0x440 [ 159.974940][ T6020] ? do_raw_spin_unlock+0x121/0x230 [ 159.980829][ T6020] ? __asan_memset+0x22/0x40 [ 159.987650][ T6020] ? bpf_obj_name_cpy+0x194/0x1e0 [ 159.995459][ T6020] bpf_prog_load+0x10fa/0x1610 [ 160.001179][ T6020] ? map_freeze+0x420/0x420 [ 160.007188][ T6020] ? __might_fault+0xaa/0x120 [ 160.013214][ T6020] ? __might_fault+0xc6/0x120 [ 160.019684][ T6020] ? __might_fault+0xaa/0x120 [ 160.025164][ T6020] ? bpf_lsm_bpf+0x9/0x10 [ 160.033074][ T6020] ? security_bpf+0x7e/0xa0 [ 160.038340][ T6020] __sys_bpf+0x5ba/0x890 [ 160.043922][ T6020] ? bpf_link_show_fdinfo+0x560/0x560 [ 160.051152][ T6020] ? lock_chain_count+0x20/0x20 [ 160.057905][ T6020] __x64_sys_bpf+0x7c/0x90 [ 160.062819][ T6020] do_syscall_64+0x55/0xb0 [ 160.068942][ T6020] ? clear_bhb_loop+0x40/0x90 [ 160.073944][ T6020] ? clear_bhb_loop+0x40/0x90 [ 160.079829][ T6020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.090047][ T6020] RIP: 0033:0x7fcbe679f559 [ 160.098479][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.126898][ T6020] RSP: 002b:00007fcbe75af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.137131][ T6020] RAX: ffffffffffffffda RBX: 00007fcbe6a25fa0 RCX: 00007fcbe679f559 [ 160.146937][ T6020] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 160.157724][ T6020] RBP: 00007fcbe6836b20 R08: 0000000000000000 R09: 0000000000000000 [ 160.167264][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.176165][ T6020] R13: 00007fcbe6a26038 R14: 00007fcbe6a25fa0 R15: 00007ffe91116908 [ 160.186834][ T6020] [ 160.321897][ T6020] syz.3.33: vmalloc error: size 64, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 160.371284][ T6020] CPU: 0 PID: 6020 Comm: syz.3.33 Not tainted syzkaller #0 [ 160.379964][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.393322][ T6020] Call Trace: [ 160.396817][ T6020] [ 160.400765][ T6020] dump_stack_lvl+0x18c/0x250 [ 160.407678][ T6020] ? show_regs_print_info+0x20/0x20 [ 160.413836][ T6020] ? load_image+0x420/0x420 [ 160.420974][ T6020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.430839][ T6020] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 160.440282][ T6020] warn_alloc+0x246/0x340 [ 160.445977][ T6020] ? __get_vm_area_node+0x125/0x370 [ 160.453508][ T6020] ? zone_watermark_ok_safe+0x230/0x230 [ 160.459859][ T6020] ? rcu_is_watching+0x15/0xb0 [ 160.466778][ T6020] ? __get_vm_area_node+0x356/0x370 [ 160.473207][ T6020] __vmalloc_node_range+0x394/0x1320 [ 160.480240][ T6020] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.487473][ T6020] ? __kernel_text_address+0xd/0x30 [ 160.493764][ T6020] ? unwind_get_return_address+0x91/0xc0 [ 160.500914][ T6020] ? stack_trace_save+0xaa/0x100 [ 160.507451][ T6020] ? free_vm_area+0x50/0x50 [ 160.513338][ T6020] ? pfn_valid+0xf4/0x450 [ 160.518573][ T6020] ? pfn_valid+0x411/0x450 [ 160.524252][ T6020] ? bpf_prog_calc_tag+0xe0/0x6b0 [ 160.529676][ T6020] vmalloc+0x79/0x90 [ 160.534673][ T6020] ? bpf_prog_calc_tag+0xe0/0x6b0 [ 160.541506][ T6020] bpf_prog_calc_tag+0xe0/0x6b0 [ 160.547246][ T6020] ? do_syscall_64+0x55/0xb0 [ 160.553408][ T6020] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.561806][ T6020] ? __bpf_prog_free+0x120/0x120 [ 160.570148][ T6020] ? check_btf_info+0x668/0x2920 [ 160.575529][ T6020] resolve_pseudo_ldimm64+0xd4/0x1100 [ 160.581235][ T6020] ? add_subprog+0x3d0/0x3d0 [ 160.587213][ T6020] ? sort+0xaf/0xf0 [ 160.591791][ T6020] ? sort_r+0x1810/0x1810 [ 160.596459][ T6020] ? check_btf_info+0x2920/0x2920 [ 160.603233][ T6020] ? kvmalloc_node+0x70/0x180 [ 160.609046][ T6020] ? add_subprog+0x2c0/0x3d0 [ 160.613823][ T6020] bpf_check+0x3803/0xfe50 [ 160.621132][ T6020] ? mark_lock+0x94/0x320 [ 160.626521][ T6020] ? __lock_acquire+0x135d/0x7eb0 [ 160.634633][ T6020] ? deref_stack_reg+0x1ab/0x230 [ 160.640908][ T6020] ? is_bpf_text_address+0x26/0x2a0 [ 160.646663][ T6020] ? bpf_get_btf_vmlinux+0x70/0x70 [ 160.654038][ T6020] ? mark_lock+0x94/0x320 [ 160.659282][ T6020] ? mark_lock+0x94/0x320 [ 160.664243][ T6020] ? __lock_acquire+0x1431/0x7eb0 [ 160.670458][ T6020] ? mark_lock+0x94/0x320 [ 160.675232][ T6020] ? __lock_acquire+0x135d/0x7eb0 [ 160.682269][ T6020] ? mark_lock+0x94/0x320 [ 160.686955][ T6020] ? __lock_acquire+0x1431/0x7eb0 [ 160.692805][ T6020] ? verify_lock_unused+0x140/0x140 [ 160.698839][ T6020] ? verify_lock_unused+0x140/0x140 [ 160.706136][ T6020] ? verify_lock_unused+0x140/0x140 [ 160.712588][ T6020] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 160.719490][ T6020] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 160.726516][ T6020] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.732512][ T6020] ? lock_chain_count+0x20/0x20 [ 160.739276][ T6020] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 160.746957][ T6020] ? lockdep_hardirqs_on+0x98/0x150 [ 160.755373][ T6020] ? ktime_get_with_offset+0x103/0x330 [ 160.761756][ T6020] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 160.770091][ T6020] ? ktime_get_real_ts64+0x440/0x440 [ 160.776612][ T6020] ? do_raw_spin_unlock+0x121/0x230 [ 160.782984][ T6020] ? __asan_memset+0x22/0x40 [ 160.789882][ T6020] ? bpf_obj_name_cpy+0x194/0x1e0 [ 160.795790][ T6020] bpf_prog_load+0x10fa/0x1610 [ 160.800637][ T6020] ? map_freeze+0x420/0x420 [ 160.807403][ T6020] ? __might_fault+0xaa/0x120 [ 160.813378][ T6020] ? __might_fault+0xc6/0x120 [ 160.819017][ T6020] ? __might_fault+0xaa/0x120 [ 160.825803][ T6020] ? bpf_lsm_bpf+0x9/0x10 [ 160.831765][ T6020] ? security_bpf+0x7e/0xa0 [ 160.837588][ T6020] __sys_bpf+0x5ba/0x890 [ 160.843099][ T6020] ? bpf_link_show_fdinfo+0x560/0x560 [ 160.850246][ T6020] ? lock_chain_count+0x20/0x20 [ 160.855333][ T6020] __x64_sys_bpf+0x7c/0x90 [ 160.860799][ T6020] do_syscall_64+0x55/0xb0 [ 160.865549][ T6020] ? clear_bhb_loop+0x40/0x90 [ 160.871421][ T6020] ? clear_bhb_loop+0x40/0x90 [ 160.878257][ T6020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.885833][ T6020] RIP: 0033:0x7fcbe679f559 [ 160.891367][ T6020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.916209][ T6020] RSP: 002b:00007fcbe75af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.927759][ T6020] RAX: ffffffffffffffda RBX: 00007fcbe6a25fa0 RCX: 00007fcbe679f559 [ 160.937777][ T6020] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 160.947507][ T6020] RBP: 00007fcbe6836b20 R08: 0000000000000000 R09: 0000000000000000 [ 160.956783][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.966667][ T6020] R13: 00007fcbe6a26038 R14: 00007fcbe6a25fa0 R15: 00007ffe91116908 [ 160.977085][ T6020] [ 161.070813][ T6020] Mem-Info: [ 161.074531][ T6020] active_anon:22285 inactive_anon:0 isolated_anon:0 [ 161.074531][ T6020] active_file:17617 inactive_file:39970 isolated_file:0 [ 161.074531][ T6020] unevictable:768 dirty:139 writeback:0 [ 161.074531][ T6020] slab_reclaimable:10833 slab_unreclaimable:92737 [ 161.074531][ T6020] mapped:24187 shmem:18464 pagetables:500 [ 161.074531][ T6020] sec_pagetables:0 bounce:0 [ 161.074531][ T6020] kernel_misc_reclaimable:0 [ 161.074531][ T6020] free:1323866 free_pcp:10002 free_cma:0 [ 161.207811][ T6020] Node 0 active_anon:80340kB inactive_anon:0kB active_file:70468kB inactive_file:159680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96680kB dirty:556kB writeback:0kB shmem:63592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10512kB pagetables:1992kB sec_pagetables:0kB all_unreclaimable? no [ 161.356951][ T6020] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 161.437528][ T6020] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.495052][ T6020] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 161.517119][ T6020] Node 0 DMA32 free:1406220kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:52000kB inactive_anon:0kB active_file:70468kB inactive_file:158852kB unevictable:1536kB writepending:556kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:24808kB local_pcp:8176kB free_cma:0kB [ 161.597023][ T6020] lowmem_reserve[]: 0 0 0 0 0 [ 161.602270][ T6020] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.697392][ T6020] lowmem_reserve[]: 0 0 0 0 0 [ 161.756110][ T6020] Node 1 Normal free:3905840kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19648kB local_pcp:7456kB free_cma:0kB [ 161.857215][ T6020] lowmem_reserve[]: 0 0 0 0 0 [ 161.864839][ T6020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.927049][ T6020] Node 0 DMA32: 1165*4kB (UME) 1537*8kB (UME) 610*16kB (UME) 687*32kB (UME) 232*64kB (UME) 58*128kB (UME) 42*256kB (UM) 24*512kB (UME) 34*1024kB (M) 23*2048kB (M) 309*4096kB (UM) = 1441596kB [ 161.984821][ T6020] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 162.030537][ T6020] Node 1 Normal: 216*4kB (UME) 42*8kB (UME) 34*16kB (UME) 83*32kB (UME) 20*64kB (UME) 8*128kB (UME) 1*256kB (M) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 951*4096kB (M) = 3905840kB [ 162.062416][ T6029] autofs4:pid:6029:autofs_fill_super: called with bogus options [ 162.075864][ T6020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.573440][ T6020] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.703315][ T6020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.921283][ T6020] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.934216][ T6020] 58958 total pagecache pages [ 162.941523][ T6020] 0 pages in swap cache [ 162.946062][ T6020] Free swap = 124728kB [ 162.950419][ T6020] Total swap = 124996kB [ 162.954815][ T6020] 2097051 pages RAM [ 162.959311][ T6020] 0 pages HighMem/MovableOnly [ 162.965211][ T6020] 421729 pages reserved [ 162.970254][ T6020] 0 pages cma reserved [ 165.243228][ T6043] jffs2: notice: (6043) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.217290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 166.627177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 170.617399][ T6060] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 171.747161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 172.675206][ T6075] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 172.687575][ T6075] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 178.197463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 180.084344][ T6099] raw_sendmsg: syz.2.57 forgot to set AF_INET. Fix it! [ 180.764529][ T6105] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 180.819710][ T6105] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 185.541026][ T6122] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 186.859397][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 187.417115][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 187.434840][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 187.481510][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.524209][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 187.537192][ T8] pvrusb2: ********** [ 187.567439][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 187.569005][ T6144] jffs2: notice: (6144) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 187.618772][ T8] pvrusb2: Important functionality might not be entirely working. [ 187.702236][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 188.167213][ T8] pvrusb2: ********** [ 188.220085][ T2326] pvrusb2: Invalid write control endpoint [ 189.306533][ T6130] pvrusb2: Invalid write control endpoint [ 189.331378][ T8] usb 4-1: USB disconnect, device number 2 [ 193.571535][ T2326] pvrusb2: Invalid write control endpoint [ 193.600166][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 193.633741][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 193.687531][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 193.741647][ T2326] pvrusb2: Device being rendered inoperable [ 193.778698][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 193.817181][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 193.870185][ T2326] pvrusb2: Attached sub-driver cx25840 [ 193.927191][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 193.977561][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 194.757290][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 194.854357][ T6174] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 194.967082][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 194.984580][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.010215][ T8] usb 4-1: config 0 has no interfaces? [ 195.040773][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 195.227936][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.266969][ T8] usb 4-1: Product: syz [ 195.280120][ T8] usb 4-1: Manufacturer: syz [ 196.169482][ T8] usb 4-1: SerialNumber: syz [ 196.198936][ T8] usb 4-1: config 0 descriptor?? [ 199.316412][ T6167] workqueue: Failed to create a rescuer kthread for wq "dm-clone": -EINTR [ 201.423448][ T6167] device-mapper: table: 248:1: clone: Failed to allocate workqueue (-ENOMEM) [ 201.496974][ T6167] device-mapper: ioctl: error adding target to table [ 201.588821][ T8] usb 4-1: USB disconnect, device number 3 [ 201.967555][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.975159][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.325087][ T6208] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 204.827721][ T5851] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 205.104769][ T5851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.132100][ T5851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.176982][ T5851] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 205.203710][ T5851] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.257471][ T5851] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 205.277074][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.601486][ T6225] jffs2: notice: (6225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 209.280879][ T5851] gud 4-1:1.0: Failed to get properties (error=-71) [ 209.288461][ T5851] gud: probe of 4-1:1.0 failed with error -71 [ 209.427120][ T5851] usb 4-1: USB disconnect, device number 4 [ 210.075557][ T6246] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 213.737233][ T6264] futex_wake_op: syz.2.107 tries to shift op by 144; fix this program [ 219.475870][ T6295] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 221.880845][ T6318] jffs2: notice: (6318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 222.829131][ T6328] Need at least one configuration in g1. [ 222.840126][ T6328] udc usbip-vudc.0: failed to start g1: -22 [ 222.850145][ T6328] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 222.880101][ T6328] UDC core: g1: couldn't find an available UDC or it's busy [ 222.905447][ T6329] UDC core: g1: couldn't find an available UDC or it's busy [ 225.728955][ T6344] jffs2: notice: (6344) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.296116][ T6371] jffs2: notice: (6371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.120573][ T6394] jffs2: notice: (6394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.482851][ T6412] Bluetooth: MGMT ver 1.22 [ 236.870484][ T6427] Need at least one configuration in g1. [ 236.881780][ T6427] udc usbip-vudc.0: failed to start g1: -22 [ 236.891049][ T6427] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 236.907482][ T6427] UDC core: g1: couldn't find an available UDC or it's busy [ 236.951731][ T6428] UDC core: g1: couldn't find an available UDC or it's busy [ 241.151220][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 241.158172][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 241.166319][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 245.105664][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.128887][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.145240][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.177333][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.217212][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 245.229175][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.026991][ T6450] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.938081][ T5790] Bluetooth: hci4: command tx timeout [ 250.027996][ T5790] Bluetooth: hci4: command tx timeout [ 250.104234][ T6450] chnl_net:caif_netlink_parms(): no params data found [ 250.581196][ T6218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.701002][ T6471] process 'syz.0.152' launched './file2' with NULL argv: empty string added [ 251.269914][ T6218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.342958][ T6476] device-mapper: ioctl: device has been removed from the dev hash table. [ 251.383174][ T6450] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.398025][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.408439][ T6450] bridge_slave_0: entered allmulticast mode [ 251.429139][ T6450] bridge_slave_0: entered promiscuous mode [ 251.529068][ T6482] jffs2: notice: (6482) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 251.694245][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.117354][ T5790] Bluetooth: hci4: command tx timeout [ 252.144728][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.177227][ T6450] bridge_slave_1: entered allmulticast mode [ 252.219405][ T6450] bridge_slave_1: entered promiscuous mode [ 252.380992][ T6218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.044482][ T6218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.096571][ T6450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.129725][ T6450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.187050][ T5790] Bluetooth: hci4: command tx timeout [ 254.262351][ T6450] team0: Port device team_slave_0 added [ 254.274053][ T6450] team0: Port device team_slave_1 added [ 256.931041][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.017388][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.085431][ T6450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.124676][ T6450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.146964][ T6450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.500709][ T6450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.066723][ T6450] hsr_slave_0: entered promiscuous mode [ 259.101274][ T6450] hsr_slave_1: entered promiscuous mode [ 259.125661][ T6450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.167069][ T6450] Cannot create hsr debugfs directory [ 262.671657][ T6450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.795577][ T6450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.820873][ T6450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.939089][ T6450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.107510][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.115833][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.467253][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'. [ 263.597801][ T6545] Cannot find set identified by id 0 to match [ 267.239653][ T6559] jffs2: notice: (6559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 267.411063][ T6559] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 268.246362][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.402962][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.521088][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.529325][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.615956][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.626171][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.327112][ T6218] hsr_slave_0: left promiscuous mode [ 271.377239][ T6218] hsr_slave_1: left promiscuous mode [ 271.418561][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.447663][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.459508][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.492912][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.538243][ T6218] bridge_slave_1: left allmulticast mode [ 271.544978][ T6218] bridge_slave_1: left promiscuous mode [ 271.568676][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.670563][ T6218] bridge_slave_0: left allmulticast mode [ 271.686879][ T6218] bridge_slave_0: left promiscuous mode [ 271.694843][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.018628][ T6218] veth1_macvtap: left promiscuous mode [ 272.026564][ T6218] veth0_macvtap: left promiscuous mode [ 272.058494][ T6218] veth1_vlan: left promiscuous mode [ 272.065947][ T6218] veth0_vlan: left promiscuous mode [ 274.953728][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 274.987957][ T6597] syz.3.175: attempt to access beyond end of device [ 274.987957][ T6597] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 275.005854][ T6597] gfs2: error 10 reading superblock [ 275.290147][ T6600] FAULT_INJECTION: forcing a failure. [ 275.290147][ T6600] name failslab, interval 1, probability 0, space 0, times 0 [ 275.310370][ T6600] CPU: 1 PID: 6600 Comm: syz.3.176 Not tainted syzkaller #0 [ 275.319825][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 275.334173][ T6600] Call Trace: [ 275.338076][ T6600] [ 275.342253][ T6600] dump_stack_lvl+0x18c/0x250 [ 275.349238][ T6600] ? show_regs_print_info+0x20/0x20 [ 275.357137][ T6600] ? load_image+0x420/0x420 [ 275.362181][ T6600] ? __might_sleep+0xe0/0xe0 [ 275.370311][ T6600] ? __lock_acquire+0x7eb0/0x7eb0 [ 275.377399][ T6600] ? tomoyo_supervisor+0xe3f/0x1100 [ 275.383551][ T6600] ? tomoyo_check_open_permission+0x2a7/0x460 [ 275.390803][ T6600] ? security_file_open+0x62/0xa0 [ 275.398486][ T6600] should_fail_ex+0x394/0x4c0 [ 275.405246][ T6600] should_failslab+0x9/0x20 [ 275.410321][ T6600] slab_pre_alloc_hook+0x59/0x300 [ 275.415563][ T6600] ? tomoyo_init_log+0x196/0x1f50 [ 275.420771][ T6600] __kmem_cache_alloc_node+0x53/0x260 [ 275.426906][ T6600] ? mark_lock+0x94/0x320 [ 275.434478][ T6600] ? tomoyo_init_log+0x196/0x1f50 [ 275.441081][ T6600] kmalloc_trace+0x2a/0xe0 [ 275.446528][ T6600] tomoyo_init_log+0x196/0x1f50 [ 275.452920][ T6600] ? format_decode+0x19b/0x1400 [ 275.458572][ T6600] ? print_ipv6_addr+0x100/0x100 [ 275.465161][ T6600] ? tomoyo_profile+0x11/0x50 [ 275.470924][ T6600] ? tomoyo_domain_quota_is_ok+0x422/0x570 [ 275.479296][ T6600] tomoyo_supervisor+0x363/0x1100 [ 275.485631][ T6600] ? tomoyo_profile+0x50/0x50 [ 275.490884][ T6600] ? slab_free_freelist_hook+0x154/0x240 [ 275.498059][ T6600] ? tomoyo_check_path_acl+0xec/0x1c0 [ 275.504884][ T6600] ? tomoyo_check_acl+0x37c/0x3f0 [ 275.510495][ T6600] ? tomoyo_execute_permission+0x400/0x400 [ 275.519457][ T6600] tomoyo_path_permission+0x262/0x3a0 [ 275.527193][ T6600] tomoyo_check_open_permission+0x310/0x460 [ 275.533518][ T6600] ? tomoyo_check_open_permission+0x1cf/0x460 [ 275.543809][ T6600] ? tomoyo_check_path_number_acl+0x280/0x280 [ 275.551189][ T6600] ? verify_lock_unused+0x140/0x140 [ 275.557103][ T6600] ? __asan_memset+0x22/0x40 [ 275.563442][ T6600] ? __rwlock_init+0x150/0x150 [ 275.569360][ T6600] ? tomoyo_file_open+0xed/0x180 [ 275.576722][ T6600] security_file_open+0x62/0xa0 [ 275.583937][ T6600] do_dentry_open+0x32b/0x14b0 [ 275.592057][ T6600] ? __asan_memcpy+0x40/0x70 [ 275.597741][ T6600] path_openat+0x284f/0x3270 [ 275.612708][ T6600] ? do_filp_open+0x430/0x430 [ 275.618564][ T6600] do_filp_open+0x1f2/0x430 [ 275.625940][ T6600] ? vfs_tmpfile+0x620/0x620 [ 275.632497][ T6600] ? _raw_spin_unlock+0x28/0x40 [ 275.640750][ T6600] ? alloc_fd+0x590/0x640 [ 275.645229][ T6600] do_sys_openat2+0x134/0x1d0 [ 275.652950][ T6600] ? do_sys_open+0xe0/0xe0 [ 275.657528][ T6600] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 275.664634][ T6600] ? lock_chain_count+0x20/0x20 [ 275.670942][ T6600] __x64_sys_open+0x11f/0x140 [ 275.676903][ T6600] do_syscall_64+0x55/0xb0 [ 275.682519][ T6600] ? clear_bhb_loop+0x40/0x90 [ 275.688665][ T6600] ? clear_bhb_loop+0x40/0x90 [ 275.695173][ T6600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.702013][ T6600] RIP: 0033:0x7fcbe679f559 [ 275.707287][ T6600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.734424][ T6600] RSP: 002b:00007fcbe75af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 275.744166][ T6600] RAX: ffffffffffffffda RBX: 00007fcbe6a25fa0 RCX: 00007fcbe679f559 [ 275.752877][ T6600] RDX: 00000000000001c0 RSI: 00000000000a23c6 RDI: 0000200000000000 [ 275.762711][ T6600] RBP: 00007fcbe6836b20 R08: 0000000000000000 R09: 0000000000000000 [ 275.773124][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.781401][ T6600] R13: 00007fcbe6a26038 R14: 00007fcbe6a25fa0 R15: 00007ffe91116908 [ 275.790907][ T6600] [ 277.701096][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 277.786154][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 277.868113][ T6218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.932066][ T6218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.578133][ T6218] bond0 (unregistering): Released all slaves [ 279.281252][ T6612] input: syz0 as /devices/virtual/input/input5 [ 279.292880][ T6612] input: failed to attach handler leds to device input5, error: -6 [ 280.633566][ T6594] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 280.646643][ T6593] tipc: Started in network mode [ 280.653439][ T6593] tipc: Node identity 4, cluster identity 4711 [ 280.678084][ T6593] tipc: Node number set to 4 [ 280.694467][ T6594] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 281.263496][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.343287][ T6625] jffs2: notice: (6625) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 281.985438][ T6630] futex_wake_op: syz.1.183 tries to shift op by 144; fix this program [ 284.859094][ T6450] veth0_vlan: entered promiscuous mode [ 284.924277][ T6450] veth1_vlan: entered promiscuous mode [ 285.093588][ T6450] veth0_macvtap: entered promiscuous mode [ 285.130485][ T6450] veth1_macvtap: entered promiscuous mode [ 285.210391][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.251855][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.276931][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.313988][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.346860][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.374250][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.403871][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.685109][ T5790] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 285.941799][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.103411][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.354470][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.422530][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.466879][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.519486][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.574679][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.660579][ T6450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.717246][ T6450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.820372][ T6450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.892475][ T6450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.159279][ T6672] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 288.258399][ T6672] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 288.487774][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.496242][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.641106][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.683308][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.861222][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 288.895722][ T6686] syz.0.187: attempt to access beyond end of device [ 288.895722][ T6686] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 288.909708][ T6686] gfs2: error 10 reading superblock [ 291.541744][ T6692] Need at least one configuration in g1. [ 291.549521][ T6692] udc usbip-vudc.0: failed to start g1: -22 [ 291.559679][ T6692] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 291.573569][ T6692] UDC core: g1: couldn't find an available UDC or it's busy [ 291.602130][ T6692] UDC core: g1: couldn't find an available UDC or it's busy [ 295.292068][ T6695] syzkaller0: entered promiscuous mode [ 295.376994][ T6695] syzkaller0: entered allmulticast mode [ 299.370528][ T6725] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 299.382800][ T6725] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 303.336097][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 303.367592][ T6746] syz.0.203: attempt to access beyond end of device [ 303.367592][ T6746] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 303.382668][ T6746] gfs2: error 10 reading superblock [ 313.109963][ T6775] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 313.119862][ T6775] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 319.008762][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.068282][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.098964][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.133073][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.144179][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 319.157016][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.888894][ T6802] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.114698][ T6815] tipc: Started in network mode [ 321.120387][ T6815] tipc: Node identity 4, cluster identity 4711 [ 321.128857][ T6815] tipc: Node number set to 4 [ 323.658206][ T5790] Bluetooth: hci2: command tx timeout [ 324.043575][ T6830] jffs2: notice: (6830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 324.514114][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.522234][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.361116][ T10] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.218222][ T6844] input: syz0 as /devices/virtual/input/input6 [ 326.226733][ T6844] input: failed to attach handler leds to device input6, error: -6 [ 327.503321][ T5790] Bluetooth: hci2: command tx timeout [ 327.813920][ T10] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.120037][ T10] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.429612][ T10] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.523576][ T6802] chnl_net:caif_netlink_parms(): no params data found [ 329.866298][ T5790] Bluetooth: hci2: command tx timeout [ 331.467488][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.524307][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.577657][ T6802] bridge_slave_0: entered allmulticast mode [ 331.650641][ T6802] bridge_slave_0: entered promiscuous mode [ 331.690225][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.737064][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.745222][ T6802] bridge_slave_1: entered allmulticast mode [ 331.829215][ T6802] bridge_slave_1: entered promiscuous mode [ 331.947291][ T5790] Bluetooth: hci2: command tx timeout [ 332.112066][ T6802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.180987][ T6802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.028659][ T6802] team0: Port device team_slave_0 added [ 334.067053][ T6802] team0: Port device team_slave_1 added [ 335.641405][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.802318][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.037840][ T6802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.284663][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.228231][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.351603][ T6802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.548263][ T6901] jffs2: notice: (6901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 339.614410][ T6802] hsr_slave_0: entered promiscuous mode [ 339.728778][ T6802] hsr_slave_1: entered promiscuous mode [ 343.978683][ T6802] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.024698][ T6802] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.089150][ T6802] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.130142][ T6802] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.560729][ T10] hsr_slave_0: left promiscuous mode [ 345.575935][ T10] hsr_slave_1: left promiscuous mode [ 345.598852][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.609790][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.639813][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.650917][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.783453][ T10] bridge_slave_1: left allmulticast mode [ 346.026938][ T10] bridge_slave_1: left promiscuous mode [ 346.073662][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.095052][ T6947] Need at least one configuration in g1. [ 346.102238][ T6947] udc usbip-vudc.0: failed to start g1: -22 [ 346.109655][ T6947] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 346.124606][ T6947] UDC core: g1: couldn't find an available UDC or it's busy [ 346.153765][ T6947] UDC core: g1: couldn't find an available UDC or it's busy [ 346.441817][ T10] bridge_slave_0: left allmulticast mode [ 346.616895][ T10] bridge_slave_0: left promiscuous mode [ 346.646978][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.737153][ T10] veth1_macvtap: left promiscuous mode [ 352.743256][ T10] veth0_macvtap: left promiscuous mode [ 352.772205][ T10] veth1_vlan: left promiscuous mode [ 352.802665][ T10] veth0_vlan: left promiscuous mode [ 355.042899][ T6974] ip_tables: iptables: counters copy to user failed while replacing table [ 356.393691][ T6979] jffs2: notice: (6979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 360.097279][ T6991] Need at least one configuration in g1. [ 360.104498][ T6991] udc usbip-vudc.0: failed to start g1: -22 [ 360.111688][ T6991] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 360.123244][ T6991] UDC core: g1: couldn't find an available UDC or it's busy [ 360.143888][ T6991] UDC core: g1: couldn't find an available UDC or it's busy [ 360.410374][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 361.389494][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.443735][ T5881] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 361.489572][ T5881] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 361.516157][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 361.531469][ T10] team0 (unregistering): Port device team_slave_1 removed [ 361.553032][ T5881] usb 2-1: Product: syz [ 361.573240][ T5881] usb 2-1: Manufacturer: syz [ 361.591943][ T5881] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 362.525740][ T10] team0 (unregistering): Port device team_slave_0 removed [ 362.762491][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.017469][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.447469][ T5881] mos7840: probe of ttyUSB0 failed with error -71 [ 363.564949][ T5881] usb 2-1: USB disconnect, device number 4 [ 363.572872][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.587062][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.596258][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.608692][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.617698][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 363.625215][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.655557][ T5881] mos7840 2-1:1.0: device disconnected [ 363.909874][ T7011] ip_tables: iptables: counters copy to user failed while replacing table [ 365.758058][ T5790] Bluetooth: hci3: command tx timeout [ 368.431837][ T5097] Bluetooth: hci3: command tx timeout [ 368.440226][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 368.788687][ T10] bond0 (unregistering): Released all slaves [ 369.181422][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.446027][ T6802] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.559236][ T7037] jffs2: notice: (7037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 370.531895][ T5790] Bluetooth: hci3: command tx timeout [ 371.183776][ T7005] rxe_eth0 speed is unknown, defaulting to 1000 [ 371.250320][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.258501][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.375944][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.384509][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.594140][ T5790] Bluetooth: hci3: command tx timeout [ 373.022000][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 373.058243][ T7061] syz.1.260: attempt to access beyond end of device [ 373.058243][ T7061] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 373.074153][ T7061] gfs2: error 10 reading superblock [ 374.118945][ T6802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.247201][ T10] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.184857][ T7005] chnl_net:caif_netlink_parms(): no params data found [ 376.519353][ T10] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.931712][ T10] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.358111][ T10] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.475834][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.489243][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.517453][ T7005] bridge_slave_0: entered allmulticast mode [ 377.525378][ T7005] bridge_slave_0: entered promiscuous mode [ 377.535593][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.562126][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.580774][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.618687][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.647349][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 377.655353][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.695850][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.754983][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.832019][ T7005] bridge_slave_1: entered allmulticast mode [ 377.857575][ T7005] bridge_slave_1: entered promiscuous mode [ 378.274449][ T7005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.375073][ T7095] ip_tables: iptables: counters copy to user failed while replacing table [ 379.152662][ T7005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.224620][ T7005] team0: Port device team_slave_0 added [ 379.231803][ T7081] rxe_eth0 speed is unknown, defaulting to 1000 [ 379.352948][ T7005] team0: Port device team_slave_1 added [ 379.776032][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.794988][ T5097] Bluetooth: hci1: command tx timeout [ 379.817878][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.158374][ T7005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.478664][ T7005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.486093][ T7005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.657039][ T7005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.860573][ T10] tipc: Left network mode [ 381.049750][ T7005] hsr_slave_0: entered promiscuous mode [ 381.057914][ T7005] hsr_slave_1: entered promiscuous mode [ 381.064749][ T7005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.072691][ T7005] Cannot create hsr debugfs directory [ 381.866990][ T5097] Bluetooth: hci1: command tx timeout [ 382.120565][ T7118] jffs2: notice: (7118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 382.657103][ T28] audit: type=1326 audit(1793421037.418:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.4.267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6be959f559 code=0x0 [ 383.946974][ T5097] Bluetooth: hci1: command tx timeout [ 386.253594][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.262663][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.270680][ T5097] Bluetooth: hci1: command tx timeout [ 387.963418][ T7005] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 388.221787][ T7005] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 388.300314][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 388.332763][ T7005] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.521851][ T7153] ip_tables: iptables: counters copy to user failed while replacing table [ 389.301859][ T7005] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 391.407974][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.416548][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.452174][ T7081] bridge_slave_0: entered allmulticast mode [ 391.504258][ T7081] bridge_slave_0: entered promiscuous mode [ 391.550030][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.559539][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.568145][ T7081] bridge_slave_1: entered allmulticast mode [ 391.608093][ T7081] bridge_slave_1: entered promiscuous mode [ 391.812744][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.863311][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.008282][ T10] hsr_slave_0: left promiscuous mode [ 392.100079][ T10] hsr_slave_1: left promiscuous mode [ 392.348639][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.413620][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.468174][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.481748][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.508014][ T10] bridge_slave_1: left allmulticast mode [ 392.517056][ T10] bridge_slave_1: left promiscuous mode [ 392.522927][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.567616][ T10] bridge_slave_0: left allmulticast mode [ 392.574411][ T10] bridge_slave_0: left promiscuous mode [ 392.624697][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.784295][ T10] veth1_macvtap: left promiscuous mode [ 392.808529][ T10] veth0_macvtap: left promiscuous mode [ 392.838710][ T10] veth1_vlan: left promiscuous mode [ 392.844590][ T10] veth0_vlan: left promiscuous mode [ 393.273329][ T28] audit: type=1326 audit(1793421048.038:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.4.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6be959f559 code=0x0 [ 396.008135][ T7196] ip_tables: iptables: counters copy to user failed while replacing table [ 396.811000][ T7199] Need at least one configuration in g1. [ 396.820255][ T7199] udc usbip-vudc.0: failed to start g1: -22 [ 396.830675][ T7199] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 396.845032][ T7199] UDC core: g1: couldn't find an available UDC or it's busy [ 396.888839][ T7199] UDC core: g1: couldn't find an available UDC or it's busy [ 398.263967][ T10] team0 (unregistering): Port device team_slave_1 removed [ 398.352244][ T7206] jffs2: notice: (7206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 398.393648][ T10] team0 (unregistering): Port device team_slave_0 removed [ 401.091092][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.110945][ T7211] Cannot find set identified by id 0 to match [ 401.527899][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.582931][ T7213] futex_wake_op: syz.4.281 tries to shift op by 144; fix this program [ 404.616350][ T10] bond0 (unregistering): Released all slaves [ 404.953798][ T7081] team0: Port device team_slave_0 added [ 404.971645][ T7081] team0: Port device team_slave_1 added [ 405.089435][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.096479][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.194108][ T7231] ip_tables: iptables: counters copy to user failed while replacing table [ 405.247479][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.367692][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.472309][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.729445][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.402830][ T7081] hsr_slave_0: entered promiscuous mode [ 406.475309][ T7081] hsr_slave_1: entered promiscuous mode [ 406.637572][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.680428][ T7081] Cannot create hsr debugfs directory [ 406.907617][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.091860][ T7005] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.760092][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.767740][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.880028][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.888011][ T6505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.317057][ T7259] Cannot find set identified by id 0 to match [ 408.985813][ T7263] jffs2: notice: (7263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 412.501510][ T7081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.570935][ T7081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 412.724104][ T7289] ip_tables: iptables: counters copy to user failed while replacing table [ 413.575512][ T7081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 413.664826][ T7081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.027805][ T7005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.319535][ T7306] FAULT_INJECTION: forcing a failure. [ 415.319535][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 415.390474][ T7306] CPU: 0 PID: 7306 Comm: syz.1.293 Not tainted syzkaller #0 [ 415.397849][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.407952][ T7306] Call Trace: [ 415.411294][ T7306] [ 415.414268][ T7306] dump_stack_lvl+0x18c/0x250 [ 415.418996][ T7306] ? show_regs_print_info+0x20/0x20 [ 415.424322][ T7306] ? load_image+0x420/0x420 [ 415.428865][ T7306] ? __might_sleep+0xe0/0xe0 [ 415.433494][ T7306] ? __lock_acquire+0x7eb0/0x7eb0 [ 415.438554][ T7306] should_fail_ex+0x394/0x4c0 [ 415.443454][ T7306] should_failslab+0x9/0x20 [ 415.448025][ T7306] slab_pre_alloc_hook+0x59/0x300 [ 415.453779][ T7306] ? prepend_path+0x8a7/0x950 [ 415.459840][ T7306] ? tomoyo_encode+0x2ad/0x570 [ 415.464671][ T7306] ? tomoyo_encode+0x2ad/0x570 [ 415.470197][ T7306] __kmem_cache_alloc_node+0x53/0x260 [ 415.475810][ T7306] ? tomoyo_encode+0x2ad/0x570 [ 415.480668][ T7306] __kmalloc+0xa7/0x240 [ 415.484988][ T7306] tomoyo_encode+0x2ad/0x570 [ 415.490568][ T7306] tomoyo_realpath_from_path+0x57c/0x5c0 [ 415.496382][ T7306] tomoyo_check_open_permission+0x224/0x460 [ 415.502345][ T7306] ? tomoyo_check_open_permission+0x1cf/0x460 [ 415.509347][ T7306] ? tomoyo_check_path_number_acl+0x280/0x280 [ 415.515658][ T7306] ? verify_lock_unused+0x140/0x140 [ 415.521576][ T7306] ? __asan_memset+0x22/0x40 [ 415.526561][ T7306] ? __rwlock_init+0x150/0x150 [ 415.534189][ T7306] ? tomoyo_file_open+0xed/0x180 [ 415.539300][ T7306] security_file_open+0x62/0xa0 [ 415.544494][ T7306] do_dentry_open+0x32b/0x14b0 [ 415.550354][ T7306] ? __asan_memcpy+0x40/0x70 [ 415.556253][ T7306] path_openat+0x284f/0x3270 [ 415.560941][ T7306] ? do_filp_open+0x430/0x430 [ 415.565971][ T7306] do_filp_open+0x1f2/0x430 [ 415.573304][ T7306] ? vfs_tmpfile+0x620/0x620 [ 415.578639][ T7306] ? _raw_spin_unlock+0x28/0x40 [ 415.584133][ T7306] ? alloc_fd+0x590/0x640 [ 415.589526][ T7306] do_sys_openat2+0x134/0x1d0 [ 415.594614][ T7306] ? do_sys_open+0xe0/0xe0 [ 415.599367][ T7306] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 415.605799][ T7306] ? lock_chain_count+0x20/0x20 [ 415.610888][ T7306] __x64_sys_open+0x11f/0x140 [ 415.615746][ T7306] do_syscall_64+0x55/0xb0 [ 415.620231][ T7306] ? clear_bhb_loop+0x40/0x90 [ 415.625132][ T7306] ? clear_bhb_loop+0x40/0x90 [ 415.630057][ T7306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.636646][ T7306] RIP: 0033:0x7f9c3719f559 [ 415.641623][ T7306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.661791][ T7306] RSP: 002b:00007f9c37fe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 415.671054][ T7306] RAX: ffffffffffffffda RBX: 00007f9c37425fa0 RCX: 00007f9c3719f559 [ 415.679251][ T7306] RDX: 00000000000001c0 RSI: 00000000000a23c6 RDI: 0000200000000000 [ 415.687260][ T7306] RBP: 00007f9c37236b20 R08: 0000000000000000 R09: 0000000000000000 [ 415.695743][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.703751][ T7306] R13: 00007f9c37426038 R14: 00007f9c37425fa0 R15: 00007fff93769af8 [ 415.711898][ T7306] [ 415.826903][ T7306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 417.302221][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.626474][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.664932][ T7005] veth0_vlan: entered promiscuous mode [ 417.776365][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.783762][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.811381][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.818666][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.870146][ T7005] veth1_vlan: entered promiscuous mode [ 417.976016][ T7329] ip_tables: iptables: counters copy to user failed while replacing table [ 418.761975][ T7081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.872951][ T7005] veth0_macvtap: entered promiscuous mode [ 418.966636][ T7005] veth1_macvtap: entered promiscuous mode [ 419.363176][ T10] hsr_slave_0: left promiscuous mode [ 419.377202][ T10] hsr_slave_1: left promiscuous mode [ 419.493310][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.523291][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.550332][ T10] bridge_slave_1: left allmulticast mode [ 419.597051][ T10] bridge_slave_1: left promiscuous mode [ 419.603731][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.653834][ T10] bridge_slave_0: left allmulticast mode [ 419.690122][ T10] bridge_slave_0: left promiscuous mode [ 419.713829][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.835334][ T7343] Need at least one configuration in g1. [ 419.841855][ T7343] udc usbip-vudc.0: failed to start g1: -22 [ 419.848446][ T7343] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 419.860569][ T7343] UDC core: g1: couldn't find an available UDC or it's busy [ 419.888104][ T7343] UDC core: g1: couldn't find an available UDC or it's busy [ 420.866615][ T7346] jffs2: notice: (7346) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 421.845329][ T10] team0 (unregistering): Port device team_slave_1 removed [ 422.001393][ T10] team0 (unregistering): Port device team_slave_0 removed [ 422.154322][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.333009][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.811931][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.822444][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.837213][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.851124][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.861930][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 423.882526][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.681446][ T10] bond0 (unregistering): Released all slaves [ 424.891700][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.906928][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.956962][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.975242][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.998812][ T7005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.264801][ T7362] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.518843][ T7369] ip_tables: iptables: counters copy to user failed while replacing table [ 426.300127][ T5097] Bluetooth: hci2: command tx timeout [ 426.388766][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.346833][ T5097] Bluetooth: hci2: command tx timeout [ 430.426914][ T5097] Bluetooth: hci2: command tx timeout [ 431.294616][ T7401] jffs2: notice: (7401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 431.632016][ T7362] chnl_net:caif_netlink_parms(): no params data found [ 431.801835][ T7409] FAULT_INJECTION: forcing a failure. [ 431.801835][ T7409] name fail_futex, interval 1, probability 0, space 0, times 1 [ 431.848438][ T7409] CPU: 1 PID: 7409 Comm: syz.1.304 Not tainted syzkaller #0 [ 431.855812][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 431.865942][ T7409] Call Trace: [ 431.869282][ T7409] [ 431.872389][ T7409] dump_stack_lvl+0x18c/0x250 [ 431.877141][ T7409] ? show_regs_print_info+0x20/0x20 [ 431.882406][ T7409] ? load_image+0x420/0x420 [ 431.886952][ T7409] ? __stack_depot_save+0x1f/0x660 [ 431.892126][ T7409] should_fail_ex+0x394/0x4c0 [ 431.896988][ T7409] get_futex_key+0x134/0xf40 [ 431.901635][ T7409] ? futex_setup_timer+0xc0/0xc0 [ 431.906629][ T7409] futex_wake+0x127/0x4f0 [ 431.911108][ T7409] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 431.917326][ T7409] ? futex_wake_mark+0x150/0x150 [ 431.922452][ T7409] ? kasan_quarantine_put+0xd8/0x220 [ 431.927884][ T7409] ? lockdep_hardirqs_on+0x98/0x150 [ 431.933245][ T7409] do_futex+0x35d/0x3e0 [ 431.937473][ T7409] ? slab_free_freelist_hook+0x154/0x240 [ 431.943332][ T7409] ? __ia32_sys_get_robust_list+0x110/0x110 [ 431.949282][ T7409] ? do_sys_openat2+0x170/0x1d0 [ 431.954180][ T7409] ? kmem_cache_free+0xf8/0x290 [ 431.959226][ T7409] __se_sys_futex+0x3a9/0x440 [ 431.964211][ T7409] ? __x64_sys_futex+0xf0/0xf0 [ 431.969009][ T7409] ? __x64_sys_futex+0x21/0xf0 [ 431.974173][ T7409] do_syscall_64+0x55/0xb0 [ 431.978659][ T7409] ? clear_bhb_loop+0x40/0x90 [ 431.983391][ T7409] ? clear_bhb_loop+0x40/0x90 [ 431.988127][ T7409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.994149][ T7409] RIP: 0033:0x7f9c3719f559 [ 431.998689][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.018713][ T7409] RSP: 002b:00007f9c37fe70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 432.027273][ T7409] RAX: ffffffffffffffda RBX: 00007f9c37425fa8 RCX: 00007f9c3719f559 [ 432.036247][ T7409] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c37425fac [ 432.045056][ T7409] RBP: 00007f9c37425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 432.053598][ T7409] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 432.062904][ T7409] R13: 00007f9c37426038 R14: 00007fff93769a10 R15: 00007fff93769af8 [ 432.070946][ T7409] [ 433.980613][ T5097] Bluetooth: hci2: command tx timeout [ 434.148724][ T7081] veth0_vlan: entered promiscuous mode [ 434.321285][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.366988][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.410370][ T7362] bridge_slave_0: entered allmulticast mode [ 434.456335][ T7362] bridge_slave_0: entered promiscuous mode [ 434.495048][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.518555][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.554532][ T7362] bridge_slave_1: entered allmulticast mode [ 434.593332][ T7362] bridge_slave_1: entered promiscuous mode [ 434.791046][ T7081] veth1_vlan: entered promiscuous mode [ 434.836445][ T7362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.937939][ T7362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.099975][ T7430] ip_tables: iptables: counters copy to user failed while replacing table [ 435.918474][ T7362] team0: Port device team_slave_0 added [ 435.931145][ T7362] team0: Port device team_slave_1 added [ 435.997086][ T7081] veth0_macvtap: entered promiscuous mode [ 436.010412][ T7081] veth1_macvtap: entered promiscuous mode [ 436.130582][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.155790][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.236837][ T7362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.268740][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.275785][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.399055][ T7362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.483368][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 436.505051][ T7441] syz.4.313: attempt to access beyond end of device [ 436.505051][ T7441] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 436.519709][ T7441] gfs2: error 10 reading superblock [ 437.867011][ T7362] hsr_slave_0: entered promiscuous mode [ 437.897179][ T176] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 437.906433][ T7362] hsr_slave_1: entered promiscuous mode [ 437.997890][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.016881][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.026482][ T7451] tipc: Started in network mode [ 438.033903][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.050265][ T7451] tipc: Node identity aa786801cd67, cluster identity 4711 [ 438.050551][ T7451] tipc: Enabled bearer , priority 0 [ 438.055059][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.090373][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 438.110821][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.124152][ T176] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 438.152249][ T176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.197432][ T176] usb 2-1: config 0 descriptor?? [ 438.230690][ T176] cp210x 2-1:0.0: cp210x converter detected [ 438.323032][ T7451] tipc: Resetting bearer [ 438.476194][ T7447] tipc: Disabling bearer [ 438.647530][ T7454] rxe_eth0 speed is unknown, defaulting to 1000 [ 438.674767][ T176] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 438.717031][ T176] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 438.725341][ T176] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 438.762102][ T7465] jffs2: notice: (7465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 438.795966][ T176] usb 2-1: cp210x converter now attached to ttyUSB0 [ 438.923515][ T5848] usb 2-1: USB disconnect, device number 5 [ 438.939459][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 438.950323][ T5848] cp210x 2-1:0.0: device disconnected [ 439.539248][ T7477] FAULT_INJECTION: forcing a failure. [ 439.539248][ T7477] name fail_futex, interval 1, probability 0, space 0, times 0 [ 439.576867][ T7477] CPU: 1 PID: 7477 Comm: syz.4.316 Not tainted syzkaller #0 [ 439.584339][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.594552][ T7477] Call Trace: [ 439.597892][ T7477] [ 439.600868][ T7477] dump_stack_lvl+0x18c/0x250 [ 439.605611][ T7477] ? show_regs_print_info+0x20/0x20 [ 439.610879][ T7477] ? load_image+0x420/0x420 [ 439.615455][ T7477] ? __stack_depot_save+0x1f/0x660 [ 439.620655][ T7477] should_fail_ex+0x394/0x4c0 [ 439.625666][ T7477] get_futex_key+0x134/0xf40 [ 439.630340][ T7477] ? futex_setup_timer+0xc0/0xc0 [ 439.635394][ T7477] futex_wake+0x127/0x4f0 [ 439.639845][ T7477] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 439.646188][ T7477] ? futex_wake_mark+0x150/0x150 [ 439.651301][ T7477] ? kasan_quarantine_put+0xd8/0x220 [ 439.656794][ T7477] ? lockdep_hardirqs_on+0x98/0x150 [ 439.662170][ T7477] do_futex+0x35d/0x3e0 [ 439.666571][ T7477] ? slab_free_freelist_hook+0x154/0x240 [ 439.672288][ T7477] ? __ia32_sys_get_robust_list+0x110/0x110 [ 439.678231][ T7477] ? do_sys_openat2+0x170/0x1d0 [ 439.684383][ T7477] ? kmem_cache_free+0xf8/0x290 [ 439.689379][ T7477] __se_sys_futex+0x3a9/0x440 [ 439.694462][ T7477] ? __x64_sys_futex+0xf0/0xf0 [ 439.699277][ T7477] ? __x64_sys_futex+0x21/0xf0 [ 439.704196][ T7477] do_syscall_64+0x55/0xb0 [ 439.708852][ T7477] ? clear_bhb_loop+0x40/0x90 [ 439.713621][ T7477] ? clear_bhb_loop+0x40/0x90 [ 439.718605][ T7477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.724578][ T7477] RIP: 0033:0x7f6be959f559 [ 439.729738][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.749492][ T7477] RSP: 002b:00007f6bea3b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 439.758049][ T7477] RAX: ffffffffffffffda RBX: 00007f6be9825fa8 RCX: 00007f6be959f559 [ 439.767089][ T7477] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6be9825fac [ 439.775298][ T7477] RBP: 00007f6be9825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 439.783407][ T7477] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 439.791453][ T7477] R13: 00007f6be9826038 R14: 00007fff3e7b3a00 R15: 00007fff3e7b3ae8 [ 439.799476][ T7477] [ 441.559733][ T5790] Bluetooth: hci3: command tx timeout [ 441.916340][ T7490] ip_tables: iptables: counters copy to user failed while replacing table [ 443.127998][ T10] hsr_slave_0: left promiscuous mode [ 443.134836][ T10] hsr_slave_1: left promiscuous mode [ 443.143049][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.151336][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.165058][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.174053][ T10] bridge_slave_1: left allmulticast mode [ 443.181831][ T10] bridge_slave_1: left promiscuous mode [ 443.190641][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.203625][ T10] bridge_slave_0: left allmulticast mode [ 443.215392][ T10] bridge_slave_0: left promiscuous mode [ 443.225366][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.271229][ T10] veth1_macvtap: left promiscuous mode [ 443.277434][ T10] veth0_macvtap: left promiscuous mode [ 443.283348][ T10] veth1_vlan: left promiscuous mode [ 443.289624][ T10] veth0_vlan: left promiscuous mode [ 443.637067][ T5790] Bluetooth: hci3: command tx timeout [ 444.820779][ T7502] input: syz0 as /devices/virtual/input/input7 [ 444.827822][ T7502] input: failed to attach handler leds to device input7, error: -6 [ 445.839624][ T5097] Bluetooth: hci3: command tx timeout [ 446.147774][ T10] team0 (unregistering): Port device team_slave_1 removed [ 446.214910][ T10] team0 (unregistering): Port device team_slave_0 removed [ 446.302476][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.394261][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.425628][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.436669][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.638009][ T10] bond0 (unregistering): Released all slaves [ 447.867410][ T5790] Bluetooth: hci3: command tx timeout [ 447.903509][ T7362] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 447.952640][ T7362] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 447.984565][ T7454] chnl_net:caif_netlink_parms(): no params data found [ 448.033688][ T7362] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 448.533340][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.323'. [ 448.572721][ T7515] Cannot find set identified by id 0 to match [ 450.130019][ T7362] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 450.577277][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.585518][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.654810][ T7454] bridge_slave_0: entered allmulticast mode [ 450.691997][ T7525] ip_tables: iptables: counters copy to user failed while replacing table [ 450.760227][ T7454] bridge_slave_0: entered promiscuous mode [ 450.868765][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.937890][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.044061][ T7454] bridge_slave_1: entered allmulticast mode [ 451.179114][ T7454] bridge_slave_1: entered promiscuous mode [ 451.558085][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.635539][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.861536][ T7454] team0: Port device team_slave_0 added [ 451.881218][ T7454] team0: Port device team_slave_1 added [ 451.994252][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.211933][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.503818][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.871177][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.896941][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.924608][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.231429][ T7547] FAULT_INJECTION: forcing a failure. [ 453.231429][ T7547] name fail_futex, interval 1, probability 0, space 0, times 0 [ 453.283380][ T7547] CPU: 1 PID: 7547 Comm: syz.1.325 Not tainted syzkaller #0 [ 453.290947][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.301237][ T7547] Call Trace: [ 453.304569][ T7547] [ 453.307554][ T7547] dump_stack_lvl+0x18c/0x250 [ 453.312416][ T7547] ? show_regs_print_info+0x20/0x20 [ 453.317679][ T7547] ? load_image+0x420/0x420 [ 453.322233][ T7547] ? __stack_depot_save+0x1f/0x660 [ 453.327374][ T7547] should_fail_ex+0x394/0x4c0 [ 453.332076][ T7547] get_futex_key+0x134/0xf40 [ 453.336692][ T7547] ? futex_setup_timer+0xc0/0xc0 [ 453.341719][ T7547] futex_wake+0x127/0x4f0 [ 453.346139][ T7547] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 453.352147][ T7547] ? futex_wake_mark+0x150/0x150 [ 453.357202][ T7547] ? kasan_quarantine_put+0xd8/0x220 [ 453.362536][ T7547] ? lockdep_hardirqs_on+0x98/0x150 [ 453.367813][ T7547] do_futex+0x35d/0x3e0 [ 453.372001][ T7547] ? slab_free_freelist_hook+0x154/0x240 [ 453.377753][ T7547] ? __ia32_sys_get_robust_list+0x110/0x110 [ 453.383670][ T7547] ? do_sys_openat2+0x170/0x1d0 [ 453.389074][ T7547] ? kmem_cache_free+0xf8/0x290 [ 453.393976][ T7547] __se_sys_futex+0x3a9/0x440 [ 453.398799][ T7547] ? __x64_sys_futex+0xf0/0xf0 [ 453.403581][ T7547] ? __x64_sys_futex+0x21/0xf0 [ 453.408380][ T7547] do_syscall_64+0x55/0xb0 [ 453.412841][ T7547] ? clear_bhb_loop+0x40/0x90 [ 453.417584][ T7547] ? clear_bhb_loop+0x40/0x90 [ 453.422326][ T7547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.428374][ T7547] RIP: 0033:0x7f9c3719f559 [ 453.432909][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.452752][ T7547] RSP: 002b:00007f9c37fe70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 453.461208][ T7547] RAX: ffffffffffffffda RBX: 00007f9c37425fa8 RCX: 00007f9c3719f559 [ 453.469484][ T7547] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c37425fac [ 453.477509][ T7547] RBP: 00007f9c37425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 453.485683][ T7547] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 453.493686][ T7547] R13: 00007f9c37426038 R14: 00007fff93769a10 R15: 00007fff93769af8 [ 453.501721][ T7547] [ 453.641011][ T7454] hsr_slave_0: entered promiscuous mode [ 453.677622][ T7454] hsr_slave_1: entered promiscuous mode [ 453.706832][ T7454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.716970][ T7454] Cannot create hsr debugfs directory [ 454.230234][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.626186][ T7362] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.178361][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.185563][ T6505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.365387][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.372727][ T6505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.007246][ T7574] ip_tables: iptables: counters copy to user failed while replacing table [ 459.185984][ T7362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.677290][ T7587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.332'. [ 459.694716][ T7587] Cannot find set identified by id 0 to match [ 463.864190][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.613599][ T7454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 464.707887][ T30] hsr_slave_0: left promiscuous mode [ 464.747667][ T30] hsr_slave_1: left promiscuous mode [ 464.797193][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.880233][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.928565][ T30] bridge_slave_1: left allmulticast mode [ 464.934339][ T30] bridge_slave_1: left promiscuous mode [ 464.950603][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.979268][ T30] bridge_slave_0: left allmulticast mode [ 464.987022][ T30] bridge_slave_0: left promiscuous mode [ 464.992921][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.099257][ T30] veth1_macvtap: left promiscuous mode [ 465.104922][ T30] veth0_macvtap: left promiscuous mode [ 465.142431][ T30] veth1_vlan: left promiscuous mode [ 465.179429][ T30] veth0_vlan: left promiscuous mode [ 465.205547][ T7618] ip_tables: iptables: counters copy to user failed while replacing table [ 469.269969][ T7638] jffs2: notice: (7638) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 469.814944][ T30] team0 (unregistering): Port device team_slave_1 removed [ 469.900327][ T7642] FAULT_INJECTION: forcing a failure. [ 469.900327][ T7642] name fail_futex, interval 1, probability 0, space 0, times 0 [ 469.932599][ T7642] CPU: 1 PID: 7642 Comm: syz.1.343 Not tainted syzkaller #0 [ 469.939976][ T7642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 469.950135][ T7642] Call Trace: [ 469.953483][ T7642] [ 469.956483][ T7642] dump_stack_lvl+0x18c/0x250 [ 469.961247][ T7642] ? show_regs_print_info+0x20/0x20 [ 469.966524][ T7642] ? load_image+0x420/0x420 [ 469.971127][ T7642] ? __stack_depot_save+0x1f/0x660 [ 469.976421][ T7642] should_fail_ex+0x394/0x4c0 [ 469.981195][ T7642] get_futex_key+0x134/0xf40 [ 469.985854][ T7642] ? futex_setup_timer+0xc0/0xc0 [ 469.990883][ T7642] futex_wake+0x127/0x4f0 [ 469.995274][ T7642] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 470.002122][ T7642] ? futex_wake_mark+0x150/0x150 [ 470.007138][ T7642] ? kasan_quarantine_put+0xd8/0x220 [ 470.012568][ T7642] ? lockdep_hardirqs_on+0x98/0x150 [ 470.017834][ T7642] do_futex+0x35d/0x3e0 [ 470.022050][ T7642] ? slab_free_freelist_hook+0x154/0x240 [ 470.027809][ T7642] ? __ia32_sys_get_robust_list+0x110/0x110 [ 470.033739][ T7642] ? do_sys_openat2+0x170/0x1d0 [ 470.038626][ T7642] ? kmem_cache_free+0xf8/0x290 [ 470.043518][ T7642] __se_sys_futex+0x3a9/0x440 [ 470.048257][ T7642] ? __x64_sys_futex+0xf0/0xf0 [ 470.053069][ T7642] ? __x64_sys_futex+0x21/0xf0 [ 470.057875][ T7642] do_syscall_64+0x55/0xb0 [ 470.062360][ T7642] ? clear_bhb_loop+0x40/0x90 [ 470.067075][ T7642] ? clear_bhb_loop+0x40/0x90 [ 470.071791][ T7642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.077718][ T7642] RIP: 0033:0x7f9c3719f559 [ 470.082622][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.102290][ T7642] RSP: 002b:00007f9c37fe70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 470.110764][ T7642] RAX: ffffffffffffffda RBX: 00007f9c37425fa8 RCX: 00007f9c3719f559 [ 470.118765][ T7642] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9c37425fac [ 470.126768][ T7642] RBP: 00007f9c37425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 470.134766][ T7642] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 470.142781][ T7642] R13: 00007f9c37426038 R14: 00007fff93769a10 R15: 00007fff93769af8 [ 470.150801][ T7642] [ 470.187613][ T30] team0 (unregistering): Port device team_slave_0 removed [ 470.337380][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.463015][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.541528][ T30] bond0 (unregistering): Released all slaves [ 472.091665][ T7454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 472.125910][ T7454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 472.274323][ T7454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 473.258764][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.285217][ T7454] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.362071][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.369313][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.409405][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.416597][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.476118][ T7454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.487991][ T7454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.662110][ T7362] veth0_vlan: entered promiscuous mode [ 473.700939][ T7362] veth1_vlan: entered promiscuous mode [ 474.974656][ T7663] tty tty4: ldisc open failed (-12), clearing slot 3 [ 474.983519][ T7664] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 475.165562][ T7362] veth0_macvtap: entered promiscuous mode [ 475.214935][ T7362] veth1_macvtap: entered promiscuous mode [ 475.327107][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.361592][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.386876][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.407169][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.428916][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.461454][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.506790][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.536888][ T7362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.556762][ T7362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.569667][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.635305][ T7362] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.666951][ T7362] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.686822][ T7362] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.695609][ T7362] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.767270][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.987345][ T6505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.008309][ T6505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.064572][ T6505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.086808][ T6505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.708219][ T7454] veth0_vlan: entered promiscuous mode [ 476.914197][ T7454] veth1_vlan: entered promiscuous mode [ 477.016856][ T7454] veth0_macvtap: entered promiscuous mode [ 477.550987][ T7454] veth1_macvtap: entered promiscuous mode [ 477.684059][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.729408][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.770389][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.781033][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.791023][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.816799][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.839611][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.863079][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.908358][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.943089][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.959231][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.970339][ T7454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.981962][ T7454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.018211][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.100298][ T7454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.960347][ T7454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.969731][ T7454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.979044][ T7454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.598337][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.615820][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.333186][ T6218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.418379][ T6218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.786343][ T7727] jffs2: notice: (7727) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 484.550203][ T7735] tipc: Started in network mode [ 484.555417][ T7735] tipc: Node identity 4, cluster identity 4711 [ 484.563151][ T7735] tipc: Node number set to 4 [ 484.663618][ T7738] FAULT_INJECTION: forcing a failure. [ 484.663618][ T7738] name fail_futex, interval 1, probability 0, space 0, times 0 [ 484.708203][ T7738] CPU: 1 PID: 7738 Comm: syz.5.358 Not tainted syzkaller #0 [ 484.715816][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 484.726135][ T7738] Call Trace: [ 484.729466][ T7738] [ 484.732448][ T7738] dump_stack_lvl+0x18c/0x250 [ 484.737204][ T7738] ? show_regs_print_info+0x20/0x20 [ 484.742728][ T7738] ? load_image+0x420/0x420 [ 484.747385][ T7738] ? min_deadline_cb_rotate+0x150/0x150 [ 484.753092][ T7738] should_fail_ex+0x394/0x4c0 [ 484.757937][ T7738] get_futex_key+0x134/0xf40 [ 484.762612][ T7738] ? futex_setup_timer+0xc0/0xc0 [ 484.767608][ T7738] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 484.773821][ T7738] ? __lock_acquire+0x7eb0/0x7eb0 [ 484.779169][ T7738] ? lock_chain_count+0x20/0x20 [ 484.784242][ T7738] futex_wait_setup+0xbc/0x270 [ 484.789054][ T7738] ? futex_wait_multiple+0x970/0x970 [ 484.794379][ T7738] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 484.800351][ T7738] ? _raw_spin_unlock+0x40/0x40 [ 484.805360][ T7738] futex_wait+0x1cf/0x640 [ 484.809762][ T7738] ? futex_wait_setup+0x270/0x270 [ 484.814928][ T7738] ? kasan_quarantine_put+0xd8/0x220 [ 484.820346][ T7738] ? lockdep_hardirqs_on+0x98/0x150 [ 484.825597][ T7738] do_futex+0x2ff/0x3e0 [ 484.829794][ T7738] ? slab_free_freelist_hook+0x154/0x240 [ 484.835615][ T7738] ? __ia32_sys_get_robust_list+0x110/0x110 [ 484.841619][ T7738] ? do_sys_openat2+0x170/0x1d0 [ 484.846507][ T7738] ? kmem_cache_free+0xf8/0x290 [ 484.851396][ T7738] __se_sys_futex+0x3a9/0x440 [ 484.856287][ T7738] ? __x64_sys_futex+0xf0/0xf0 [ 484.861185][ T7738] ? __x64_sys_futex+0x21/0xf0 [ 484.865984][ T7738] do_syscall_64+0x55/0xb0 [ 484.870436][ T7738] ? clear_bhb_loop+0x40/0x90 [ 484.875153][ T7738] ? clear_bhb_loop+0x40/0x90 [ 484.879889][ T7738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.885816][ T7738] RIP: 0033:0x7f962f39f559 [ 484.890264][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.909906][ T7738] RSP: 002b:00007f96302a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 484.918544][ T7738] RAX: ffffffffffffffda RBX: 00007f962f625fa8 RCX: 00007f962f39f559 [ 484.926573][ T7738] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f962f625fa8 [ 484.934604][ T7738] RBP: 00007f962f625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 484.942614][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.950633][ T7738] R13: 00007f962f626038 R14: 00007ffc6bc47910 R15: 00007ffc6bc479f8 [ 484.958676][ T7738] [ 485.247638][ T7744] Need at least one configuration in g1. [ 485.253842][ T7744] udc usbip-vudc.0: failed to start g1: -22 [ 485.260034][ T7744] configfs-gadget.g1: probe of gadget.32 failed with error -22 [ 485.270371][ T7744] UDC core: g1: couldn't find an available UDC or it's busy [ 485.293799][ T7744] UDC core: g1: couldn't find an available UDC or it's busy [ 490.605288][ T7776] jffs2: notice: (7776) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 490.980358][ T7777] device-mapper: table: 248:2: ram8 too small for target: start=0, len=12352, dev_size=8192 [ 491.006040][ T7777] device-mapper: core: Cannot calculate initial queue limits [ 491.022662][ T7777] device-mapper: ioctl: unable to set up device queue for new table. [ 493.713813][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'. [ 493.725726][ T7803] Cannot find set identified by id 0 to match [ 497.296836][ T5849] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 497.522011][ T5849] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 497.534614][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.585917][ T5849] usb 2-1: config 0 descriptor?? [ 497.658889][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.366'. [ 497.681474][ T7832] syz.6.366: attempt to access beyond end of device [ 497.681474][ T7832] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 497.696179][ T7832] gfs2: error 10 reading superblock [ 497.702324][ T5849] cp210x 2-1:0.0: cp210x converter detected [ 498.191518][ T5849] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 499.287117][ T5849] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 499.294893][ T5849] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 499.437385][ T5849] usb 2-1: cp210x converter now attached to ttyUSB0 [ 499.517327][ T5881] usb 2-1: USB disconnect, device number 6 [ 499.544141][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.377'. [ 499.565475][ T7839] syz.6.377: attempt to access beyond end of device [ 499.565475][ T7839] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 499.579151][ T7839] gfs2: error 10 reading superblock [ 499.623830][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.920717][ T5881] cp210x 2-1:0.0: device disconnected [ 500.794553][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.381'. [ 500.804897][ T7854] Cannot find set identified by id 0 to match [ 501.683930][ T7858] tipc: Cannot configure node identity twice [ 503.032806][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 503.052889][ T7878] syz.4.386: attempt to access beyond end of device [ 503.052889][ T7878] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 503.080708][ T7878] gfs2: error 10 reading superblock [ 505.191904][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.388'. [ 507.099815][ T7894] FAULT_INJECTION: forcing a failure. [ 507.099815][ T7894] name fail_futex, interval 1, probability 0, space 0, times 0 [ 507.264578][ T7894] CPU: 1 PID: 7894 Comm: syz.4.391 Not tainted syzkaller #0 [ 507.271974][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 507.282173][ T7894] Call Trace: [ 507.285503][ T7894] [ 507.288476][ T7894] dump_stack_lvl+0x18c/0x250 [ 507.293331][ T7894] ? verify_lock_unused+0x140/0x140 [ 507.298613][ T7894] ? show_regs_print_info+0x20/0x20 [ 507.303899][ T7894] ? load_image+0x420/0x420 [ 507.308476][ T7894] ? rcu_is_watching+0x15/0xb0 [ 507.313308][ T7894] should_fail_ex+0x394/0x4c0 [ 507.318049][ T7894] get_futex_key+0x134/0xf40 [ 507.322704][ T7894] ? futex_setup_timer+0xc0/0xc0 [ 507.327816][ T7894] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 507.333891][ T7894] ? read_lock_is_recursive+0x20/0x20 [ 507.339335][ T7894] futex_wake+0x127/0x4f0 [ 507.343721][ T7894] ? lockdep_hardirqs_on+0x98/0x150 [ 507.348998][ T7894] ? futex_wake_mark+0x150/0x150 [ 507.353990][ T7894] ? __schedule+0x1577/0x4720 [ 507.358730][ T7894] ? kasan_quarantine_put+0xd8/0x220 [ 507.364102][ T7894] do_futex+0x35d/0x3e0 [ 507.368409][ T7894] ? __ia32_sys_get_robust_list+0x110/0x110 [ 507.374354][ T7894] ? do_sys_openat2+0x170/0x1d0 [ 507.379262][ T7894] ? kmem_cache_free+0xf8/0x290 [ 507.384167][ T7894] __se_sys_futex+0x3a9/0x440 [ 507.388908][ T7894] ? __x64_sys_futex+0xf0/0xf0 [ 507.393731][ T7894] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 507.399777][ T7894] ? __x64_sys_futex+0x21/0xf0 [ 507.404616][ T7894] do_syscall_64+0x55/0xb0 [ 507.409095][ T7894] ? clear_bhb_loop+0x40/0x90 [ 507.413852][ T7894] ? clear_bhb_loop+0x40/0x90 [ 507.418625][ T7894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.424579][ T7894] RIP: 0033:0x7f6be959f559 [ 507.429048][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.448802][ T7894] RSP: 002b:00007f6bea3b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 507.457287][ T7894] RAX: ffffffffffffffda RBX: 00007f6be9825fa8 RCX: 00007f6be959f559 [ 507.465323][ T7894] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6be9825fac [ 507.473364][ T7894] RBP: 00007f6be9825fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 507.481483][ T7894] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 507.489524][ T7894] R13: 00007f6be9826038 R14: 00007fff3e7b3a00 R15: 00007fff3e7b3ae8 [ 507.497572][ T7894] [ 507.582622][ T7895] ip_tables: iptables: counters copy to user failed while replacing table [ 507.702129][ T7906] netlink: 16 bytes leftover after parsing attributes in process `syz.6.392'. [ 507.776969][ T7906] Cannot find set identified by id 0 to match [ 508.803004][ T7910] tipc: Started in network mode [ 508.808071][ T7910] tipc: Node identity 4, cluster identity 4711 [ 508.814260][ T7910] tipc: Node number set to 4 [ 508.850074][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.856471][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.030926][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.399'. [ 511.051358][ T7942] syz.5.399: attempt to access beyond end of device [ 511.051358][ T7942] nbd5: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 511.065116][ T7942] gfs2: error 10 reading superblock [ 513.268701][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 513.584966][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.404'. [ 513.599891][ T7962] Cannot find set identified by id 0 to match Stopping sshd: [ 513.826650][ T7970] ip_tables: iptables: counters copy to user failed while replacing table stopped /usr/sbin/sshd (pid 5539) OK [ 515.885551][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.408'. [ 515.904947][ T7985] syz.6.408: attempt to access beyond end of device [ 515.904947][ T7985] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 515.918501][ T7985] gfs2: error 10 reading superblock Stopping crond: stopped /usr/sbin/crond (pid 5525) OK [ 520.105115][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.412'. [ 520.145568][ T5851] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 521.718018][ T5851] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 522.156344][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.358245][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.414'. [ 522.387792][ T8018] Cannot find set identified by id 0 to match [ 522.468038][ T5851] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 522.532188][ T5851] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 522.565709][ T5851] usb 5-1: Manufacturer: syz [ 522.592124][ T5851] usb 5-1: config 0 descriptor?? [ 522.797168][ T5851] rc_core: IR keymap rc-hauppauge not found [ 522.843030][ T8032] ip_tables: iptables: counters copy to user failed while replacing table [ 523.577793][ T5851] Registered IR keymap rc-empty [ 523.585655][ T5851] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 523.607531][ T5851] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 Stopping dhcpcd... [ 523.772300][ C0] igorplugusb 5-1:0.0: receive overflow, at least 15 lost stopped /sbin/dhcpcd (pid 5445) [ 524.077955][ T5876] usb 5-1: USB disconnect, device number 2 [ 524.107251][ T5851] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 524.203013][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 524.223762][ T8053] syz.1.420: attempt to access beyond end of device [ 524.223762][ T8053] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 524.237147][ T8053] gfs2: error 10 reading superblock [ 524.416602][ T5851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.631826][ T5851] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 526.632762][ T5851] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 527.106548][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 527.116010][ T5851] usb 6-1: Product: syz [ 527.121126][ T5851] usb 6-1: Manufacturer: syz [ 527.722997][ T8066] No source specified [ 527.973579][ T5851] usb 6-1: can't set config #1, error -71 [ 528.127734][ T5851] usb 6-1: USB disconnect, device number 2 Stopping network: [ 528.482568][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'. [ 528.501387][ T8073] syz.4.424: attempt to access beyond end of device [ 528.501387][ T8073] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 528.515178][ T8073] gfs2: error 10 reading superblock serialport: VM disconnected.