last executing test programs: 7m43.56609449s ago: executing program 1 (id=359): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000980)=[{r0, 0xa0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000280)={0x1, 0x4}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000340)='1\x00', 0x2) write$sysctl(r4, &(0x7f0000000380)='2\x00', 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000004c0)={r3, &(0x7f00000003c0)='1\x00', 0x210400, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x6]}, {0x85, 0x0, 0x9, 0x4}}, 0x5cd1, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xaed7}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 7m38.466989701s ago: executing program 1 (id=365): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) lseek(r0, 0x7, 0x2) read$FUSE(r0, 0x0, 0xfffffffffffffef6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xa3000000}}, 0x20) r2 = socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000005c00)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000005c40)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000005c80)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000005cc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000005d00), 0x0, 0x0) read$msr(r6, &(0x7f0000005d40)=""/102392, 0x18ff8) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f000001ed40)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r7, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="f5c993fa3aff7f0000000000aef0000000000000", 0x14}], 0x1, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 7m37.668538732s ago: executing program 1 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040810) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000354, 0x42, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000900), &(0x7f0000000940)=0x14) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x101341) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000400)={0x1, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000640)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r5, 0x5501) write(r4, &(0x7f0000000440)='+c', 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000480)={0x0, 0xd128}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000580)={r6, 0x58, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in={0x2, 0x4e21, @local}]}, &(0x7f00000005c0)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 7m35.234879221s ago: executing program 1 (id=369): socket$inet(0x2, 0x3, 0x101) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001040)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001a040)=0x400003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000001a080)={0x0, 0x0, &(0x7f000001a0c0)={&(0x7f000001a100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000001a180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f000001a280)={0x0, 0x0, &(0x7f000001a2c0)={&(0x7f000001a300)={{0x68, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7m31.175502565s ago: executing program 1 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) 7m29.742694461s ago: executing program 1 (id=373): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000980)=[{r0, 0xa0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000280)={0x1, 0x4}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000340)='1\x00', 0x2) write$sysctl(r4, &(0x7f0000000380)='2\x00', 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000004c0)={r3, &(0x7f00000003c0)='1\x00', 0x210400, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x6]}, {0x85, 0x0, 0x9, 0x4}}, 0x5cd1, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xaed7}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 7m14.644484883s ago: executing program 32 (id=373): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000980)=[{r0, 0xa0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000280)={0x1, 0x4}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000340)='1\x00', 0x2) write$sysctl(r4, &(0x7f0000000380)='2\x00', 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000004c0)={r3, &(0x7f00000003c0)='1\x00', 0x210400, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x6]}, {0x85, 0x0, 0x9, 0x4}}, 0x5cd1, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xaed7}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 18.572601243s ago: executing program 0 (id=925): setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}]}, &(0x7f0000000100)=0x10) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140), 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000580)="0f01d10f583cc3660f38803666ba4300ed7808c4e2f92a19c4c1a1e2abe0f10000b805000000b98000c0fe0f01d93626660f38f52cb7c4e279db00", 0x3b}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) 17.554877958s ago: executing program 0 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xb3b2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000880)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019880)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 17.485966405s ago: executing program 3 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) 16.248848881s ago: executing program 0 (id=928): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000940)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", r8, 0xffffffffffffffff}) ppoll(&(0x7f0000000a00)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x4, 0x0, 0x0, 0x401, 0x81, 0x8, 0x0, 0x1139, 0x1, 0x10001, 0x10000, 0x8, 0xb, 0xc, 0xf, {0x8, 0x8}, 0x9, 0x4}}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 14.367478763s ago: executing program 4 (id=932): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000940)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", r9, 0xffffffffffffffff}) ppoll(&(0x7f0000000a00)=[{r10, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x4, 0x0, 0x0, 0x401, 0x81, 0x8, 0x0, 0x1139, 0x1, 0x10001, 0x10000, 0x8, 0xb, 0xc, 0xf, {0x8, 0x8}, 0x9, 0x4}}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 12.898973993s ago: executing program 3 (id=934): setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}]}, &(0x7f0000000100)=0x10) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140), 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000580)="0f01d10f583cc3660f38803666ba4300ed7808c4e2f92a19c4c1a1e2abe0f10000b805000000b98000c0fe0f01d93626660f38f52cb7c4e279db00", 0x3b}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) 11.818526703s ago: executing program 2 (id=935): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4000000}, 0x850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102368, 0x18fe0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) getpid() r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="010800000000000000000b0000000800", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002000100000005000900010000000800030005ac0f002341039f76edcdb04e832888dd8d670c703e2668649646e7c373f22d5ead8fdb50b280f64a89ec9e0aa81201f8fd87941d892fd3b842a85c637786fd71a0552060104df63734e731be4d1307b6bd8a471734e46fe20fd282f73408841589164560e3fb4502f49c48351a564d09dd866dc9bcabbcf5ee0d"], 0x58}}, 0x0) r7 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 11.684356637s ago: executing program 4 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xb3b2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000880)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019880)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 10.429258205s ago: executing program 4 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 9.930002526s ago: executing program 2 (id=938): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000980)=[{r0, 0xa0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) 8.81890321s ago: executing program 3 (id=939): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001900)='/sys/power/resume', 0xa82, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001a40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001a80)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000001ac0), 0x2, 0x143102) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000001b40)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000001bc0), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000001c40)={0x1, 0x0, 0x1, r1}, 0xc) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001d00)={&(0x7f0000001d40)=""/228, 0x100000, 0x1000, 0x9, 0x2}, 0x20) mkdir(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(0xffffffffffffffff) ioctl$TCFLSH(r3, 0x541b, 0xfffffffffffffffd) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r5 = dup3(r4, r4, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x36) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) 8.629350519s ago: executing program 0 (id=940): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f00000073c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000203c0)=0x4000007) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000011c0)={0x552, {0x28, 0xf7ed, 0xffff, 0x80000001, 0x44}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000020400), &(0x7f0000020440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) landlock_create_ruleset(&(0x7f0000000800)={0x7f6e}, 0x18, 0x0) add_key(&(0x7f0000020480)='asymmetric\x00', 0x0, &(0x7f0000000980)="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", 0x559, r4) 6.607639835s ago: executing program 0 (id=941): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) lseek(r0, 0x7, 0x2) read$FUSE(r0, 0x0, 0xfffffffffffffef6) socket$kcm(0x10, 0x7, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xa3000000}}, 0x20) r2 = socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000005c00)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000005c40)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000005c80)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000005cc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000005d00), 0x0, 0x0) read$msr(r6, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f000001ed40)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r7, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="f5c993fa3aff7f0000000000aef0000000000000", 0x14}], 0x1, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 6.588784127s ago: executing program 3 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) 5.498876709s ago: executing program 3 (id=943): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffe]}, 0x8, 0x800) ioctl$COMEDI_SETRSUBD(r0, 0x6410) kexec_load(0x20000000, 0x0, &(0x7f0000000300), 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/o2net/connected_nodes\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000440)={0x3, 0x3, 0x100000000202, 0x7d, 0x10000, 0x8004, 0x1, 0x1}, 0x0, &(0x7f0000000480)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 5.209779148s ago: executing program 2 (id=944): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x8d}, 0x4e21, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x20000000000e06}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x404d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x8}, 0x3504, 0x0, 0x2, 0x20}}, 0xe8) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f00000004c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='source', &(0x7f0000000640)='c:::\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000900)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000940)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000980)={"fc7fbced01eb1b00000000000000000700", r9, 0xffffffffffffffff}) ppoll(&(0x7f0000000a00)=[{r10, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x4, 0x0, 0x0, 0x401, 0x81, 0x8, 0x0, 0x1139, 0x1, 0x10001, 0x10000, 0x8, 0xb, 0xc, 0xf, {0x8, 0x8}, 0x9, 0x4}}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.90258307s ago: executing program 4 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xb3b2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000880)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019880)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 3.809362261s ago: executing program 4 (id=946): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4000000}, 0x850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102368, 0x18fe0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) getpid() r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="010800000000000000000b0000000800", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002000100000005000900010000000800030005ac0f002341039f76edcdb04e832888dd8d670c703e2668649646e7c373f22d5ead8fdb50b280f64a89ec9e0aa81201f8fd87941d892fd3b842a85c637786fd71a0552060104df63734e731be4d1307b6bd8a471734e46fe20fd282f73408841589164560e3fb4502f49c48351a564d09dd866dc9bcabbcf5ee0d"], 0x58}}, 0x0) r7 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 2.826441551s ago: executing program 0 (id=947): setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}]}, &(0x7f0000000100)=0x10) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140), 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2200, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000580)="0f01d10f583cc3660f38803666ba4300ed7808c4e2f92a19c4c1a1e2abe0f10000b805000000b98000c0fe0f01d93626660f38f52cb7c4e279db00", 0x3b}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) 2.73875167s ago: executing program 2 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040810) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000354, 0x42, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000900), &(0x7f0000000940)=0x14) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x101341) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000400)={0x1, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000640)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r6, 0x5501) write(r5, &(0x7f0000000440)='+c', 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000480)={0x0, 0xd128}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000580)={r7, 0x58, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in={0x2, 0x4e21, @local}]}, &(0x7f00000005c0)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.639041513s ago: executing program 3 (id=949): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f00000073c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000203c0)=0x4000007) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000011c0)={0x552, {0x28, 0xf7ed, 0xffff, 0x80000001, 0x44}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000020400), &(0x7f0000020440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) landlock_create_ruleset(&(0x7f0000000800)={0x7f6e}, 0x18, 0x0) add_key(&(0x7f0000020480)='asymmetric\x00', 0x0, &(0x7f0000000980)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r4) 1.532344914s ago: executing program 2 (id=950): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(r0, 0x0, 0x0, 0x80) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4040080) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000340)={0x2}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140), 0x4, 0x2) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000280)=0x1) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 569.413372ms ago: executing program 4 (id=951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) 0s ago: executing program 2 (id=952): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000980)=[{r0, 0xa0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) kernel console output (not intermixed with test programs): 3. [ 165.705832][ T6482] xt_l2tp: invalid flags combination: 8 [ 166.217514][ T6480] can0 (unregistered): slcan off ttyS3. [ 173.317079][ T6527] can0: slcan on ttyS3. [ 173.382987][ T6529] xt_l2tp: invalid flags combination: 8 [ 173.416988][ T6527] can0 (unregistered): slcan off ttyS3. [ 176.891430][ T6553] syz_tun: entered allmulticast mode [ 178.848271][ T6550] syz_tun: left allmulticast mode [ 179.871840][ T6570] can0: slcan on ttyS3. [ 179.938030][ T6571] xt_l2tp: invalid flags combination: 8 [ 181.236072][ T6570] can0 (unregistered): slcan off ttyS3. [ 181.473919][ T6580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.161'. [ 181.690543][ T6586] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 183.004223][ T6597] syz_tun: entered allmulticast mode [ 183.779971][ T6595] syz_tun: left allmulticast mode [ 184.377482][ T6611] can0: slcan on ttyS3. [ 184.493496][ T6612] xt_l2tp: invalid flags combination: 8 [ 185.075606][ T6611] can0 (unregistered): slcan off ttyS3. [ 185.725951][ T6623] netlink: 44 bytes leftover after parsing attributes in process `syz.2.183'. [ 186.243977][ T6634] syz_tun: entered allmulticast mode [ 187.046942][ T6632] syz_tun: left allmulticast mode [ 187.905591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 188.145839][ T6638] sctp: failed to load transform for md5: -2 [ 189.241544][ T6656] can0: slcan on ttyS3. [ 189.354928][ T6657] xt_l2tp: invalid flags combination: 8 [ 189.397054][ T5793] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 190.237348][ T6656] can0 (unregistered): slcan off ttyS3. [ 190.383257][ T6663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.192'. [ 190.638520][ T6670] kAFS: No cell specified [ 191.368894][ T5793] Bluetooth: hci0: command 0x0419 tx timeout [ 191.374982][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 191.435774][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 191.579945][ T6680] bridge3: entered promiscuous mode [ 191.585181][ T6680] bridge3: entered allmulticast mode [ 193.292238][ T6681] syz_tun: entered allmulticast mode [ 193.402781][ T6675] syz_tun: left allmulticast mode [ 193.548493][ T6686] jffs2: notice: (6686) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.409407][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416232][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.448787][ T6696] netlink: 76 bytes leftover after parsing attributes in process `syz.1.203'. [ 194.638530][ T6699] can0: slcan on ttyS3. [ 194.753322][ T6700] xt_l2tp: invalid flags combination: 8 [ 194.762154][ T5791] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 194.957382][ T6699] can0 (unregistered): slcan off ttyS3. [ 195.762793][ T6717] bridge1: entered promiscuous mode [ 195.768871][ T6717] bridge1: entered allmulticast mode [ 197.686139][ T6729] syz_tun: entered allmulticast mode [ 198.340723][ T6726] syz_tun: left allmulticast mode [ 200.595669][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 200.966623][ T6762] can0: slcan on ttyS3. [ 201.101381][ T6764] xt_l2tp: invalid flags combination: 8 [ 201.155603][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 203.280036][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 203.415979][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.427275][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 203.438435][ T27] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 203.449064][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.464067][ T27] usb 2-1: can't set config #1, error -71 [ 203.472786][ T27] usb 2-1: USB disconnect, device number 2 [ 203.484831][ T6763] bridge2: entered promiscuous mode [ 203.519690][ T6763] bridge2: entered allmulticast mode [ 203.536221][ T6762] can0 (unregistered): slcan off ttyS3. [ 203.596606][ T6767] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.606546][ T6767] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 203.747538][ T6773] syz_tun: entered allmulticast mode [ 203.925725][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 204.158123][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.248968][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 204.328680][ T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 204.409330][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.522674][ T9] usb 1-1: config 0 descriptor?? [ 204.531453][ T6770] syz_tun: left allmulticast mode [ 204.572814][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 204.629270][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 204.658670][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 204.692367][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 204.719658][ T9] usb 1-1: media controller created [ 204.764554][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.777238][ T6787] Zero length message leads to an empty skb [ 205.098498][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 205.174572][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 205.355759][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 205.554333][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 205.617351][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 205.677616][ T9] usb 1-1: USB disconnect, device number 2 [ 205.819784][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 207.525706][ T6805] bridge5: entered promiscuous mode [ 207.531097][ T6805] bridge5: entered allmulticast mode [ 211.751254][ T6828] can0: slcan on ttyS3. [ 211.816551][ T6831] xt_l2tp: invalid flags combination: 8 [ 211.926283][ T6828] can0 (unregistered): slcan off ttyS3. [ 216.089793][ T6851] bridge3: entered promiscuous mode [ 216.135930][ T6851] bridge3: entered allmulticast mode [ 217.220873][ T6861] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 219.088668][ T6873] can0: slcan on ttyS3. [ 219.209832][ T6875] xt_l2tp: invalid flags combination: 8 [ 219.516114][ T5791] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 220.016670][ T6873] can0 (unregistered): slcan off ttyS3. [ 221.720198][ T6894] can0: slcan on ttyS3. [ 221.786048][ T6895] xt_l2tp: invalid flags combination: 8 [ 222.476383][ T6894] can0 (unregistered): slcan off ttyS3. [ 222.908741][ T6899] bridge2: entered promiscuous mode [ 222.914045][ T6899] bridge2: entered allmulticast mode [ 223.600179][ T6903] syz_tun: entered allmulticast mode [ 224.367621][ T6901] syz_tun: left allmulticast mode [ 228.367756][ T6925] can0: slcan on ttyS3. [ 228.433143][ T6926] xt_l2tp: invalid flags combination: 8 [ 228.645195][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 229.146730][ T6925] can0 (unregistered): slcan off ttyS3. [ 230.493615][ T6942] can0: slcan on ttyS3. [ 230.577106][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 231.227238][ T6942] can0 (unregistered): slcan off ttyS3. [ 231.552026][ T6947] bridge3: entered promiscuous mode [ 231.575989][ T6947] bridge3: entered allmulticast mode [ 236.478975][ T6976] can0: slcan on ttyS3. [ 236.596168][ T6977] xt_l2tp: invalid flags combination: 8 [ 236.605139][ T5799] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 237.166585][ T6976] can0 (unregistered): slcan off ttyS3. [ 237.847953][ T6984] can0: slcan on ttyS3. [ 237.964337][ T5799] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 238.185532][ T6984] can0 (unregistered): slcan off ttyS3. [ 238.576526][ T6988] Cannot find set identified by id 0 to match [ 239.821057][ T7005] overlayfs: overlapping lowerdir path [ 240.012890][ T7006] overlay: Unknown parameter '/' [ 240.213591][ T7001] netlink: 'syz.2.272': attribute type 39 has an invalid length. [ 240.875854][ T6999] bridge6: entered promiscuous mode [ 240.893458][ T6999] bridge6: entered allmulticast mode [ 243.286128][ T7029] FAULT_INJECTION: forcing a failure. [ 243.286128][ T7029] name failslab, interval 1, probability 0, space 0, times 0 [ 243.322217][ T7029] CPU: 0 PID: 7029 Comm: syz.3.284 Not tainted syzkaller #0 [ 243.329571][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.339651][ T7029] Call Trace: [ 243.342943][ T7029] [ 243.345889][ T7029] dump_stack_lvl+0x18c/0x250 [ 243.350663][ T7029] ? show_regs_print_info+0x20/0x20 [ 243.355895][ T7029] ? load_image+0x420/0x420 [ 243.360429][ T7029] ? __might_sleep+0xe0/0xe0 [ 243.365044][ T7029] ? __lock_acquire+0x7eb0/0x7eb0 [ 243.370094][ T7029] should_fail_ex+0x394/0x4c0 [ 243.374818][ T7029] should_failslab+0x9/0x20 [ 243.379343][ T7029] slab_pre_alloc_hook+0x59/0x300 [ 243.384398][ T7029] kmem_cache_alloc+0x5a/0x2d0 [ 243.389181][ T7029] ? copy_sighand+0x50/0x220 [ 243.393802][ T7029] copy_sighand+0x50/0x220 [ 243.398245][ T7029] copy_process+0x1629/0x3da0 [ 243.402948][ T7029] ? plist_add+0x3db/0x490 [ 243.407406][ T7029] ? copy_process+0x98e/0x3da0 [ 243.412200][ T7029] ? futex_wait+0x529/0x640 [ 243.416730][ T7029] ? __pidfd_prepare+0x140/0x140 [ 243.421681][ T7029] kernel_clone+0x24b/0x8a0 [ 243.426186][ T7029] ? create_io_thread+0x190/0x190 [ 243.431220][ T7029] ? do_futex+0x2ff/0x3e0 [ 243.435555][ T7029] __x64_sys_clone+0x1b7/0x230 [ 243.440332][ T7029] ? __ia32_sys_vfork+0x140/0x140 [ 243.445367][ T7029] ? lock_chain_count+0x20/0x20 [ 243.450245][ T7029] ? lockdep_hardirqs_on+0x98/0x150 [ 243.455459][ T7029] do_syscall_64+0x55/0xb0 [ 243.459877][ T7029] ? clear_bhb_loop+0x40/0x90 [ 243.464552][ T7029] ? clear_bhb_loop+0x40/0x90 [ 243.469236][ T7029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.475128][ T7029] RIP: 0033:0x7f776679fb19 [ 243.479548][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.499153][ T7029] RSP: 002b:00007f77675f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 243.507564][ T7029] RAX: ffffffffffffffda RBX: 00007f7766a25fa0 RCX: 00007f776679fb19 [ 243.515545][ T7029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 243.523529][ T7029] RBP: 00007f7766837b70 R08: 0000000000000000 R09: 0000000000000000 [ 243.531496][ T7029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.539475][ T7029] R13: 00007f7766a26038 R14: 00007f7766a25fa0 R15: 00007ffcaa2e6ae8 [ 243.547460][ T7029] [ 244.749879][ T7041] can0: slcan on ttyS3. [ 244.816073][ T7042] xt_l2tp: invalid flags combination: 8 [ 244.827728][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 245.446649][ T7041] can0 (unregistered): slcan off ttyS3. [ 245.728777][ T7051] bridge4: entered promiscuous mode [ 245.746226][ T7051] bridge4: entered allmulticast mode [ 246.173454][ T7052] overlayfs: overlapping lowerdir path [ 246.174148][ T7061] overlay: Unknown parameter '/' [ 246.724392][ T7062] netlink: 'syz.3.289': attribute type 39 has an invalid length. [ 250.414106][ T7091] can0: slcan on ttyS3. [ 250.480808][ T7093] xt_l2tp: invalid flags combination: 8 [ 250.487028][ T5799] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 251.186395][ T7091] can0 (unregistered): slcan off ttyS3. [ 251.489750][ T7099] bridge5: entered promiscuous mode [ 251.539534][ T7099] bridge5: entered allmulticast mode [ 256.367212][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.373947][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.544906][ T7124] syz_tun: entered allmulticast mode [ 257.308114][ T7122] syz_tun: left allmulticast mode [ 257.919900][ T7128] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 259.384440][ T7135] overlayfs: overlapping lowerdir path [ 259.676278][ T7136] overlay: Unknown parameter '/' [ 259.730283][ T7132] netlink: 'syz.3.302': attribute type 39 has an invalid length. [ 260.456019][ T7143] can0: slcan on ttyS3. [ 260.522196][ T7144] xt_l2tp: invalid flags combination: 8 [ 260.528613][ T5799] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 262.276609][ T7143] can0 (unregistered): slcan off ttyS3. [ 263.356530][ T7157] bridge7: entered promiscuous mode [ 263.385402][ T7157] bridge7: entered allmulticast mode [ 265.834286][ T7174] syz_tun: entered allmulticast mode [ 266.619508][ T7172] syz_tun: left allmulticast mode [ 267.482286][ T7178] overlay: Unknown parameter '/' [ 267.575888][ T7180] netlink: 'syz.2.318': attribute type 39 has an invalid length. [ 268.729988][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 271.000000][ T7198] bridge6: entered promiscuous mode [ 271.005228][ T7198] bridge6: entered allmulticast mode [ 273.044119][ T7208] can0: slcan on ttyS3. [ 273.162142][ T7209] xt_l2tp: invalid flags combination: 8 [ 273.171118][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 274.346730][ T7208] can0 (unregistered): slcan off ttyS3. [ 274.919000][ T5799] Bluetooth: hci1: unexpected event for opcode 0x200f [ 276.035287][ T7228] syz_tun: entered allmulticast mode [ 276.286456][ T7217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 276.815510][ T7224] syz_tun: left allmulticast mode [ 277.359754][ T7230] overlay: Unknown parameter '/' [ 277.460340][ T7232] netlink: 'syz.1.328': attribute type 39 has an invalid length. [ 277.959782][ T5799] Bluetooth: hci0: command 0x0419 tx timeout [ 277.976252][ T7217] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 278.043748][ T7217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.055547][ T7217] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 278.082604][ T7217] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.097109][ T7217] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 278.104467][ T7217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.114863][ T7217] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 279.668320][ T28] audit: type=1326 audit(1793885861.588:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.0.332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28359fb19 code=0x7ffc0000 [ 279.701984][ T7243] syz.0.332(7243): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 279.751397][ T28] audit: type=1326 audit(1793885861.588:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.0.332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28359fb19 code=0x7ffc0000 [ 279.867453][ T28] audit: type=1326 audit(1793885861.618:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.0.332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc28359fb19 code=0x7ffc0000 [ 279.995882][ T5799] Bluetooth: hci0: command 0x0419 tx timeout [ 280.003246][ T7217] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 280.029999][ T28] audit: type=1326 audit(1793885861.698:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.0.332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28359fb19 code=0x7ffc0000 [ 280.134614][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 280.202152][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 280.208553][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 280.376967][ T28] audit: type=1326 audit(1793885861.698:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.0.332" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28359fb19 code=0x7ffc0000 [ 281.791901][ T7253] bridge8: entered promiscuous mode [ 281.815921][ T7253] bridge8: entered allmulticast mode [ 282.459691][ T7259] overlay: Unknown parameter '/' [ 282.565423][ T7261] netlink: 'syz.1.339': attribute type 39 has an invalid length. [ 283.087828][ T5791] Bluetooth: hci0: command 0x0419 tx timeout [ 283.093978][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 283.100089][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 283.100417][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 288.958217][ T7295] overlay: Unknown parameter '/' [ 289.291933][ T7292] netlink: 'syz.1.348': attribute type 39 has an invalid length. [ 293.831602][ T7316] bridge7: entered promiscuous mode [ 293.851409][ T7316] bridge7: entered allmulticast mode [ 297.967831][ T7343] overlay: Unknown parameter '/' [ 298.225631][ T7340] netlink: 'syz.3.357': attribute type 39 has an invalid length. [ 299.269896][ T7348] FAULT_INJECTION: forcing a failure. [ 299.269896][ T7348] name failslab, interval 1, probability 0, space 0, times 0 [ 299.282667][ T7348] CPU: 1 PID: 7348 Comm: syz.2.356 Not tainted syzkaller #0 [ 299.289973][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 299.300059][ T7348] Call Trace: [ 299.303531][ T7348] [ 299.306481][ T7348] dump_stack_lvl+0x18c/0x250 [ 299.311185][ T7348] ? show_regs_print_info+0x20/0x20 [ 299.316405][ T7348] ? load_image+0x420/0x420 [ 299.320928][ T7348] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.325977][ T7348] should_fail_ex+0x394/0x4c0 [ 299.330688][ T7348] should_failslab+0x9/0x20 [ 299.335203][ T7348] slab_pre_alloc_hook+0x59/0x300 [ 299.340247][ T7348] ? legacy_init_fs_context+0x51/0xc0 [ 299.345645][ T7348] __kmem_cache_alloc_node+0x53/0x260 [ 299.351037][ T7348] ? legacy_init_fs_context+0x51/0xc0 [ 299.356429][ T7348] kmalloc_trace+0x2a/0xe0 [ 299.360888][ T7348] legacy_init_fs_context+0x51/0xc0 [ 299.366110][ T7348] alloc_fs_context+0x618/0x7a0 [ 299.370993][ T7348] __se_sys_fsopen+0xa0/0x2c0 [ 299.375694][ T7348] do_syscall_64+0x55/0xb0 [ 299.380127][ T7348] ? clear_bhb_loop+0x40/0x90 [ 299.384820][ T7348] ? clear_bhb_loop+0x40/0x90 [ 299.389515][ T7348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.395426][ T7348] RIP: 0033:0x7f0a7819fb19 [ 299.399856][ T7348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.419488][ T7348] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 299.427924][ T7348] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 299.435912][ T7348] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 299.443891][ T7348] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 299.451872][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.459855][ T7348] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 299.467860][ T7348] [ 300.033806][ T7348] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 302.639382][ T7371] usb usb8: usbfs: process 7371 (syz.1.366) did not claim interface 0 before use [ 302.672719][ T7371] input: syz0 as /devices/virtual/input/input16 [ 310.987860][ T7400] overlay: Unknown parameter '/' [ 311.500601][ T7397] netlink: 'syz.3.368': attribute type 39 has an invalid length. [ 318.018471][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.032946][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.012135][ T7437] overlayfs: missing 'lowerdir' [ 319.095965][ T7439] overlay: Unknown parameter '/' [ 319.629143][ T7434] netlink: 'syz.3.382': attribute type 39 has an invalid length. [ 319.748307][ T7443] usb usb8: usbfs: process 7443 (syz.2.377) did not claim interface 0 before use [ 319.770592][ T7443] input: syz0 as /devices/virtual/input/input18 [ 327.447822][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.457218][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.467536][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.485572][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.522517][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.530901][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.748733][ T2958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.785548][ T7463] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.911759][ T2958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.071301][ T2958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.595925][ T5791] Bluetooth: hci3: command tx timeout [ 329.607192][ T5852] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 329.626447][ T2958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.143748][ T5852] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.164907][ T7492] FAULT_INJECTION: forcing a failure. [ 330.164907][ T7492] name failslab, interval 1, probability 0, space 0, times 0 [ 330.177735][ T7492] CPU: 1 PID: 7492 Comm: syz.2.394 Not tainted syzkaller #0 [ 330.185035][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 330.195105][ T7492] Call Trace: [ 330.198395][ T7492] [ 330.201339][ T7492] dump_stack_lvl+0x18c/0x250 [ 330.206051][ T7492] ? show_regs_print_info+0x20/0x20 [ 330.211272][ T7492] ? load_image+0x420/0x420 [ 330.215829][ T7492] ? __lock_acquire+0x7eb0/0x7eb0 [ 330.220885][ T7492] should_fail_ex+0x394/0x4c0 [ 330.225587][ T7492] should_failslab+0x9/0x20 [ 330.230107][ T7492] slab_pre_alloc_hook+0x59/0x300 [ 330.235151][ T7492] ? legacy_init_fs_context+0x51/0xc0 [ 330.240552][ T7492] __kmem_cache_alloc_node+0x53/0x260 [ 330.245953][ T7492] ? legacy_init_fs_context+0x51/0xc0 [ 330.251354][ T7492] kmalloc_trace+0x2a/0xe0 [ 330.255801][ T7492] legacy_init_fs_context+0x51/0xc0 [ 330.261023][ T7492] alloc_fs_context+0x618/0x7a0 [ 330.265920][ T7492] __se_sys_fsopen+0xa0/0x2c0 [ 330.270639][ T7492] do_syscall_64+0x55/0xb0 [ 330.275085][ T7492] ? clear_bhb_loop+0x40/0x90 [ 330.279792][ T7492] ? clear_bhb_loop+0x40/0x90 [ 330.284497][ T7492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.290415][ T7492] RIP: 0033:0x7f0a7819fb19 [ 330.294846][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.314476][ T7492] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 330.322914][ T7492] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 330.330907][ T7492] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 330.338898][ T7492] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 330.346895][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.354881][ T7492] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 330.362890][ T7492] [ 330.533002][ T5852] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 330.672565][ T5852] usb 1-1: can't read configurations, error -71 [ 332.237335][ T5791] Bluetooth: hci3: command tx timeout [ 332.285465][ T7492] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 332.587253][ T7463] chnl_net:caif_netlink_parms(): no params data found [ 333.943250][ T81] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 334.315447][ T5791] Bluetooth: hci3: command tx timeout [ 334.326702][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.351181][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.358609][ T7463] bridge_slave_0: entered allmulticast mode [ 334.370966][ T7463] bridge_slave_0: entered promiscuous mode [ 334.479166][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.506885][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.514341][ T7463] bridge_slave_1: entered allmulticast mode [ 334.532468][ T7463] bridge_slave_1: entered promiscuous mode [ 334.641926][ T7531] can0: slcan on ttyS3. [ 334.684288][ T5791] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 334.691436][ T7531] xt_l2tp: invalid flags combination: 8 [ 334.777204][ T7532] can0 (unregistered): slcan off ttyS3. [ 334.812204][ T7463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.668455][ T7463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.949656][ T7552] FAULT_INJECTION: forcing a failure. [ 335.949656][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 335.962633][ T7552] CPU: 0 PID: 7552 Comm: syz.0.404 Not tainted syzkaller #0 [ 335.969940][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 335.979992][ T7552] Call Trace: [ 335.983264][ T7552] [ 335.986205][ T7552] dump_stack_lvl+0x18c/0x250 [ 335.990980][ T7552] ? show_regs_print_info+0x20/0x20 [ 335.996172][ T7552] ? load_image+0x420/0x420 [ 336.000665][ T7552] ? __might_sleep+0xe0/0xe0 [ 336.005261][ T7552] ? __lock_acquire+0x7eb0/0x7eb0 [ 336.010282][ T7552] should_fail_ex+0x394/0x4c0 [ 336.014953][ T7552] should_failslab+0x9/0x20 [ 336.019446][ T7552] slab_pre_alloc_hook+0x59/0x300 [ 336.024461][ T7552] ? __kasan_kmalloc+0x8f/0xa0 [ 336.029218][ T7552] ? __se_sys_fsopen+0x135/0x2c0 [ 336.034144][ T7552] __kmem_cache_alloc_node+0x53/0x260 [ 336.039502][ T7552] ? __se_sys_fsopen+0x135/0x2c0 [ 336.044435][ T7552] kmalloc_trace+0x2a/0xe0 [ 336.048841][ T7552] __se_sys_fsopen+0x135/0x2c0 [ 336.053612][ T7552] do_syscall_64+0x55/0xb0 [ 336.058027][ T7552] ? clear_bhb_loop+0x40/0x90 [ 336.062710][ T7552] ? clear_bhb_loop+0x40/0x90 [ 336.067402][ T7552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.073300][ T7552] RIP: 0033:0x7fc28359fb19 [ 336.077721][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.097331][ T7552] RSP: 002b:00007fc2843be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 336.105741][ T7552] RAX: ffffffffffffffda RBX: 00007fc283826090 RCX: 00007fc28359fb19 [ 336.113710][ T7552] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 336.121699][ T7552] RBP: 00007fc283637b70 R08: 0000000000000000 R09: 0000000000000000 [ 336.129682][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.137646][ T7552] R13: 00007fc283826128 R14: 00007fc283826090 R15: 00007fffa6f7f908 [ 336.145617][ T7552] [ 336.405437][ T5791] Bluetooth: hci3: command tx timeout [ 336.682616][ T6417] libceph: connect (1)[c::]:6789 error -101 [ 336.689413][ T6417] libceph: mon0 (1)[c::]:6789 connect error [ 336.697016][ T7555] ceph: No mds server is up or the cluster is laggy [ 336.729115][ T7463] team0: Port device team_slave_0 added [ 336.798461][ T7547] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 336.877548][ T7463] team0: Port device team_slave_1 added [ 337.870190][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.911896][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.020671][ T7463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.106089][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.113089][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.170672][ T7463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.215589][ T5858] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 338.311702][ T7463] hsr_slave_0: entered promiscuous mode [ 338.327792][ T7463] hsr_slave_1: entered promiscuous mode [ 338.338447][ T7463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.348991][ T7463] Cannot create hsr debugfs directory [ 339.002726][ T5858] usb 1-1: unable to get BOS descriptor or descriptor too short [ 339.225083][ T5858] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 339.235364][ T5858] usb 1-1: can't read configurations, error -71 [ 339.321433][ T7596] syz_tun: entered allmulticast mode [ 339.349010][ T7596] syz_tun: left allmulticast mode [ 339.426796][ T7600] can0: slcan on ttyS3. [ 339.466986][ T7602] can0 (unregistered): slcan off ttyS3. [ 339.477298][ T5791] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 339.491500][ T7600] xt_l2tp: invalid flags combination: 8 [ 339.919197][ T7610] xt_l2tp: invalid flags combination: 8 [ 339.947841][ T5791] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 340.009106][ T7608] can0: slcan on ttyS3. [ 340.133532][ T2958] hsr_slave_0: left promiscuous mode [ 340.153540][ T2958] hsr_slave_1: left promiscuous mode [ 340.178632][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.208318][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.254032][ T7615] FAULT_INJECTION: forcing a failure. [ 340.254032][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 340.266939][ T7615] CPU: 0 PID: 7615 Comm: syz.0.413 Not tainted syzkaller #0 [ 340.274250][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 340.284330][ T7615] Call Trace: [ 340.287625][ T7615] [ 340.290565][ T7615] dump_stack_lvl+0x18c/0x250 [ 340.295272][ T7615] ? show_regs_print_info+0x20/0x20 [ 340.300498][ T7615] ? load_image+0x420/0x420 [ 340.305028][ T7615] ? __lock_acquire+0x7eb0/0x7eb0 [ 340.310077][ T7615] should_fail_ex+0x394/0x4c0 [ 340.314785][ T7615] should_failslab+0x9/0x20 [ 340.319299][ T7615] slab_pre_alloc_hook+0x59/0x300 [ 340.324343][ T7615] ? legacy_init_fs_context+0x51/0xc0 [ 340.329746][ T7615] __kmem_cache_alloc_node+0x53/0x260 [ 340.335141][ T7615] ? legacy_init_fs_context+0x51/0xc0 [ 340.340547][ T7615] kmalloc_trace+0x2a/0xe0 [ 340.344992][ T7615] legacy_init_fs_context+0x51/0xc0 [ 340.350222][ T7615] alloc_fs_context+0x618/0x7a0 [ 340.355107][ T7615] __se_sys_fsopen+0xa0/0x2c0 [ 340.359817][ T7615] do_syscall_64+0x55/0xb0 [ 340.364256][ T7615] ? clear_bhb_loop+0x40/0x90 [ 340.368957][ T7615] ? clear_bhb_loop+0x40/0x90 [ 340.373655][ T7615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.379577][ T7615] RIP: 0033:0x7fc28359fb19 [ 340.384010][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.403643][ T7615] RSP: 002b:00007fc2843be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 340.412082][ T7615] RAX: ffffffffffffffda RBX: 00007fc283826090 RCX: 00007fc28359fb19 [ 340.420070][ T7615] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 340.428066][ T7615] RBP: 00007fc283637b70 R08: 0000000000000000 R09: 0000000000000000 [ 340.436057][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.444040][ T7615] R13: 00007fc283826128 R14: 00007fc283826090 R15: 00007fffa6f7f908 [ 340.452043][ T7615] [ 340.481099][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.518250][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.583379][ T2958] bridge_slave_1: left allmulticast mode [ 340.610466][ T2958] bridge_slave_1: left promiscuous mode [ 340.645907][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.994589][ T2958] bridge_slave_0: left allmulticast mode [ 341.000990][ T2958] bridge_slave_0: left promiscuous mode [ 341.011111][ T7616] ceph: No mds server is up or the cluster is laggy [ 341.016714][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.078386][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 341.084484][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 341.125935][ T2958] veth1_macvtap: left promiscuous mode [ 341.133096][ T2958] veth0_macvtap: left promiscuous mode [ 341.141073][ T2958] veth1_vlan: left promiscuous mode [ 341.147003][ T2958] veth0_vlan: left promiscuous mode [ 343.433086][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 343.687298][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 343.928798][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.275788][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.566929][ T2958] bond0 (unregistering): Released all slaves [ 344.708794][ T7601] can0 (unregistered): slcan off ttyS3. [ 344.780931][ T7644] syz_tun: entered allmulticast mode [ 344.808835][ T7644] syz_tun: left allmulticast mode [ 345.021363][ T7657] can0: slcan on ttyS3. [ 345.040532][ T7463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.071046][ T7463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.086141][ T7657] can0 (unregistered): slcan off ttyS3. [ 345.087098][ T7658] xt_l2tp: invalid flags combination: 8 [ 345.132289][ T5791] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 345.139298][ T5790] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 345.314353][ T7463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.506214][ T5790] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.793720][ T7463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.839231][ T5790] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 345.875576][ T5790] usb 4-1: can't read configurations, error -71 [ 345.977908][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.089332][ T7666] FAULT_INJECTION: forcing a failure. [ 346.089332][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 346.102280][ T7666] CPU: 1 PID: 7666 Comm: syz.0.423 Not tainted syzkaller #0 [ 346.109590][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.119759][ T7666] Call Trace: [ 346.123095][ T7666] [ 346.126062][ T7666] dump_stack_lvl+0x18c/0x250 [ 346.130790][ T7666] ? show_regs_print_info+0x20/0x20 [ 346.136024][ T7666] ? load_image+0x420/0x420 [ 346.140558][ T7666] ? __might_sleep+0xe0/0xe0 [ 346.145168][ T7666] ? __lock_acquire+0x7eb0/0x7eb0 [ 346.150230][ T7666] should_fail_ex+0x394/0x4c0 [ 346.154936][ T7666] should_failslab+0x9/0x20 [ 346.159460][ T7666] slab_pre_alloc_hook+0x59/0x300 [ 346.164505][ T7666] ? __kasan_kmalloc+0x8f/0xa0 [ 346.169297][ T7666] ? __se_sys_fsopen+0x135/0x2c0 [ 346.174256][ T7666] __kmem_cache_alloc_node+0x53/0x260 [ 346.179650][ T7666] ? __se_sys_fsopen+0x135/0x2c0 [ 346.184616][ T7666] kmalloc_trace+0x2a/0xe0 [ 346.189111][ T7666] __se_sys_fsopen+0x135/0x2c0 [ 346.193904][ T7666] do_syscall_64+0x55/0xb0 [ 346.198357][ T7666] ? clear_bhb_loop+0x40/0x90 [ 346.203059][ T7666] ? clear_bhb_loop+0x40/0x90 [ 346.207767][ T7666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.213678][ T7666] RIP: 0033:0x7fc28359fb19 [ 346.218112][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.237755][ T7666] RSP: 002b:00007fc2843be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 346.246193][ T7666] RAX: ffffffffffffffda RBX: 00007fc283826090 RCX: 00007fc28359fb19 [ 346.254189][ T7666] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 346.262188][ T7666] RBP: 00007fc283637b70 R08: 0000000000000000 R09: 0000000000000000 [ 346.270181][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.278168][ T7666] R13: 00007fc283826128 R14: 00007fc283826090 R15: 00007fffa6f7f908 [ 346.286197][ T7666] [ 346.306157][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.831827][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 346.887015][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 346.901447][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.908659][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.933077][ T7667] ceph: No mds server is up or the cluster is laggy [ 346.945278][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.952553][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.345348][ C0] sched: RT throttling activated [ 349.518684][ T7699] can0: slcan on ttyS3. [ 349.591137][ T7701] xt_l2tp: invalid flags combination: 8 [ 349.600487][ T5791] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 350.456294][ T7699] can0 (unregistered): slcan off ttyS3. [ 350.472662][ T7463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.065832][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 351.229198][ T7463] veth0_vlan: entered promiscuous mode [ 351.266806][ T7463] veth1_vlan: entered promiscuous mode [ 351.276029][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 351.298382][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 351.315476][ T8] usb 1-1: can't read configurations, error -71 [ 351.389415][ T7722] can0: slcan on ttyS3. [ 351.448853][ T7728] xt_l2tp: invalid flags combination: 8 [ 351.454974][ T5791] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 351.467514][ T7722] can0 (unregistered): slcan off ttyS3. [ 351.482222][ T7463] veth0_macvtap: entered promiscuous mode [ 351.515024][ T7463] veth1_macvtap: entered promiscuous mode [ 351.567867][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.590838][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.605811][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.619792][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.634415][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.652657][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.672902][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.691397][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.702509][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.713769][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.725669][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.738539][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.764528][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.777069][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.884510][ T7738] FAULT_INJECTION: forcing a failure. [ 351.884510][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 351.897668][ T7738] CPU: 0 PID: 7738 Comm: syz.2.434 Not tainted syzkaller #0 [ 351.904990][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 351.915073][ T7738] Call Trace: [ 351.918461][ T7738] [ 351.921508][ T7738] dump_stack_lvl+0x18c/0x250 [ 351.926457][ T7738] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 351.932228][ T7738] ? show_regs_print_info+0x20/0x20 [ 351.937456][ T7738] ? load_image+0x420/0x420 [ 351.942026][ T7738] should_fail_ex+0x394/0x4c0 [ 351.946779][ T7738] should_failslab+0x9/0x20 [ 351.951427][ T7738] slab_pre_alloc_hook+0x59/0x300 [ 351.956513][ T7738] ? __kasan_kmalloc+0x8f/0xa0 [ 351.961305][ T7738] ? __se_sys_fsopen+0x135/0x2c0 [ 351.966300][ T7738] __kmem_cache_alloc_node+0x53/0x260 [ 351.971695][ T7738] ? __se_sys_fsopen+0x135/0x2c0 [ 351.976664][ T7738] kmalloc_trace+0x2a/0xe0 [ 351.981123][ T7738] __se_sys_fsopen+0x135/0x2c0 [ 351.985929][ T7738] do_syscall_64+0x55/0xb0 [ 351.990370][ T7738] ? clear_bhb_loop+0x40/0x90 [ 351.995066][ T7738] ? clear_bhb_loop+0x40/0x90 [ 351.999768][ T7738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.005685][ T7738] RIP: 0033:0x7f0a7819fb19 [ 352.010210][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.029915][ T7738] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 352.038369][ T7738] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 352.046409][ T7738] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 352.054404][ T7738] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 352.062404][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.070568][ T7738] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 352.078578][ T7738] [ 352.176027][ T7463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.236183][ T7463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.308099][ T7463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.363645][ T7463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.627519][ T7739] ceph: No mds server is up or the cluster is laggy [ 352.709504][ T6417] libceph: connect (1)[c::]:6789 error -101 [ 352.789446][ T6417] libceph: mon0 (1)[c::]:6789 connect error [ 353.068467][ T7743] 9pnet: p9_errstr2errno: server reported unknown error [ 353.090749][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.125893][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.428193][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.436254][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.361789][ T7777] can0: slcan on ttyS3. [ 356.427386][ T7778] xt_l2tp: invalid flags combination: 8 [ 357.175452][ T57] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 357.195682][ T7777] can0 (unregistered): slcan off ttyS3. [ 357.369946][ T57] usb 4-1: unable to get BOS descriptor or descriptor too short [ 357.386267][ T57] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 357.399240][ T57] usb 4-1: can't read configurations, error -71 [ 357.885496][ T7792] FAULT_INJECTION: forcing a failure. [ 357.885496][ T7792] name failslab, interval 1, probability 0, space 0, times 0 [ 357.899212][ T7792] CPU: 0 PID: 7792 Comm: syz.0.444 Not tainted syzkaller #0 [ 357.906541][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 357.916632][ T7792] Call Trace: [ 357.919934][ T7792] [ 357.922885][ T7792] dump_stack_lvl+0x18c/0x250 [ 357.927598][ T7792] ? show_regs_print_info+0x20/0x20 [ 357.932826][ T7792] ? load_image+0x420/0x420 [ 357.937357][ T7792] ? __might_sleep+0xe0/0xe0 [ 357.942033][ T7792] ? __lock_acquire+0x7eb0/0x7eb0 [ 357.947111][ T7792] should_fail_ex+0x394/0x4c0 [ 357.951816][ T7792] should_failslab+0x9/0x20 [ 357.956332][ T7792] slab_pre_alloc_hook+0x59/0x300 [ 357.961375][ T7792] ? __kasan_kmalloc+0x8f/0xa0 [ 357.966185][ T7792] ? __se_sys_fsopen+0x135/0x2c0 [ 357.971150][ T7792] __kmem_cache_alloc_node+0x53/0x260 [ 357.976539][ T7792] ? __se_sys_fsopen+0x135/0x2c0 [ 357.981496][ T7792] kmalloc_trace+0x2a/0xe0 [ 357.985936][ T7792] __se_sys_fsopen+0x135/0x2c0 [ 357.990729][ T7792] do_syscall_64+0x55/0xb0 [ 357.995167][ T7792] ? clear_bhb_loop+0x40/0x90 [ 357.999864][ T7792] ? clear_bhb_loop+0x40/0x90 [ 358.004569][ T7792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.010668][ T7792] RIP: 0033:0x7fc28359fb19 [ 358.015105][ T7792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.034738][ T7792] RSP: 002b:00007fc2843be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 358.043173][ T7792] RAX: ffffffffffffffda RBX: 00007fc283826090 RCX: 00007fc28359fb19 [ 358.051156][ T7792] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 358.059140][ T7792] RBP: 00007fc283637b70 R08: 0000000000000000 R09: 0000000000000000 [ 358.067221][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.075208][ T7792] R13: 00007fc283826128 R14: 00007fc283826090 R15: 00007fffa6f7f908 [ 358.083213][ T7792] [ 358.438630][ T7793] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 358.546822][ T7795] bridge1: entered promiscuous mode [ 358.585496][ T7795] bridge1: entered allmulticast mode [ 360.992511][ T7804] 9pnet: p9_errstr2errno: server reported unknown error [ 361.601137][ T7831] can0: slcan on ttyS3. [ 361.665206][ T7832] xt_l2tp: invalid flags combination: 8 [ 361.671378][ T5799] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 362.357454][ T7831] can0 (unregistered): slcan off ttyS3. [ 363.280267][ T7844] can0: slcan on ttyS3. [ 363.346370][ T7845] xt_l2tp: invalid flags combination: 8 [ 363.536210][ T5799] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 364.199068][ T7848] FAULT_INJECTION: forcing a failure. [ 364.199068][ T7848] name failslab, interval 1, probability 0, space 0, times 0 [ 364.211874][ T7848] CPU: 0 PID: 7848 Comm: syz.2.455 Not tainted syzkaller #0 [ 364.219183][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 364.229261][ T7848] Call Trace: [ 364.232556][ T7848] [ 364.235503][ T7848] dump_stack_lvl+0x18c/0x250 [ 364.240219][ T7848] ? show_regs_print_info+0x20/0x20 [ 364.245445][ T7848] ? load_image+0x420/0x420 [ 364.249980][ T7848] ? __lock_acquire+0x7eb0/0x7eb0 [ 364.255031][ T7848] should_fail_ex+0x394/0x4c0 [ 364.259746][ T7848] should_failslab+0x9/0x20 [ 364.264297][ T7848] slab_pre_alloc_hook+0x59/0x300 [ 364.269345][ T7848] ? legacy_init_fs_context+0x51/0xc0 [ 364.274831][ T7848] __kmem_cache_alloc_node+0x53/0x260 [ 364.280235][ T7848] ? legacy_init_fs_context+0x51/0xc0 [ 364.285637][ T7848] kmalloc_trace+0x2a/0xe0 [ 364.290093][ T7848] legacy_init_fs_context+0x51/0xc0 [ 364.295313][ T7848] alloc_fs_context+0x618/0x7a0 [ 364.300190][ T7848] __se_sys_fsopen+0xa0/0x2c0 [ 364.304897][ T7848] do_syscall_64+0x55/0xb0 [ 364.309337][ T7848] ? clear_bhb_loop+0x40/0x90 [ 364.314037][ T7848] ? clear_bhb_loop+0x40/0x90 [ 364.318738][ T7848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.324659][ T7848] RIP: 0033:0x7f0a7819fb19 [ 364.329097][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.348731][ T7848] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 364.357171][ T7848] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 364.365160][ T7848] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 364.373146][ T7848] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 364.381129][ T7848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.389113][ T7848] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 364.397117][ T7848] [ 364.974033][ T7848] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 365.006803][ T7844] can0 (unregistered): slcan off ttyS3. [ 365.384699][ T7857] bridge5: entered promiscuous mode [ 365.424478][ T7857] bridge5: entered allmulticast mode [ 365.470966][ T5858] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 365.695444][ T5858] usb 4-1: unable to get BOS descriptor or descriptor too short [ 365.726433][ T5858] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 365.765813][ T5858] usb 4-1: can't read configurations, error -71 [ 367.021978][ T7870] 9pnet: p9_errstr2errno: server reported unknown error [ 367.095165][ T7877] usb usb8: usbfs: process 7877 (syz.4.459) did not claim interface 0 before use [ 367.109754][ T7877] input: syz0 as /devices/virtual/input/input20 [ 367.288720][ T7885] can0: slcan on ttyS3. [ 367.351876][ T7886] xt_l2tp: invalid flags combination: 8 [ 367.371999][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 369.626516][ T7885] can0 (unregistered): slcan off ttyS3. [ 371.655554][ T7928] FAULT_INJECTION: forcing a failure. [ 371.655554][ T7928] name failslab, interval 1, probability 0, space 0, times 0 [ 371.668545][ T7928] CPU: 0 PID: 7928 Comm: syz.3.465 Not tainted syzkaller #0 [ 371.675865][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 371.685939][ T7928] Call Trace: [ 371.689232][ T7928] [ 371.692176][ T7928] dump_stack_lvl+0x18c/0x250 [ 371.696892][ T7928] ? show_regs_print_info+0x20/0x20 [ 371.702111][ T7928] ? load_image+0x420/0x420 [ 371.706641][ T7928] ? __might_sleep+0xe0/0xe0 [ 371.711254][ T7928] ? __lock_acquire+0x7eb0/0x7eb0 [ 371.716310][ T7928] should_fail_ex+0x394/0x4c0 [ 371.721019][ T7928] should_failslab+0x9/0x20 [ 371.725545][ T7928] slab_pre_alloc_hook+0x59/0x300 [ 371.730601][ T7928] ? __kasan_kmalloc+0x8f/0xa0 [ 371.735399][ T7928] ? __se_sys_fsopen+0x135/0x2c0 [ 371.740365][ T7928] __kmem_cache_alloc_node+0x53/0x260 [ 371.745758][ T7928] ? __se_sys_fsopen+0x135/0x2c0 [ 371.750717][ T7928] kmalloc_trace+0x2a/0xe0 [ 371.755164][ T7928] __se_sys_fsopen+0x135/0x2c0 [ 371.759963][ T7928] do_syscall_64+0x55/0xb0 [ 371.764403][ T7928] ? clear_bhb_loop+0x40/0x90 [ 371.769100][ T7928] ? clear_bhb_loop+0x40/0x90 [ 371.773830][ T7928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.779751][ T7928] RIP: 0033:0x7f776679fb19 [ 371.784187][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.803818][ T7928] RSP: 002b:00007f77675d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 371.812260][ T7928] RAX: ffffffffffffffda RBX: 00007f7766a26090 RCX: 00007f776679fb19 [ 371.820260][ T7928] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 371.828250][ T7928] RBP: 00007f7766837b70 R08: 0000000000000000 R09: 0000000000000000 [ 371.836238][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.844227][ T7928] R13: 00007f7766a26128 R14: 00007f7766a26090 R15: 00007ffcaa2e6ae8 [ 371.852236][ T7928] [ 372.412372][ T7929] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 374.133180][ T7946] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 375.992465][ T7962] usb usb8: usbfs: process 7962 (syz.3.474) did not claim interface 0 before use [ 376.006314][ T7962] input: syz0 as /devices/virtual/input/input21 [ 376.032553][ T7961] bridge2: entered promiscuous mode [ 376.047167][ T7961] bridge2: entered allmulticast mode [ 376.225929][ T7967] ªªªªªª: renamed from vlan0 (while UP) [ 377.271369][ T7973] FAULT_INJECTION: forcing a failure. [ 377.271369][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 377.284162][ T7973] CPU: 0 PID: 7973 Comm: syz.4.477 Not tainted syzkaller #0 [ 377.291481][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 377.301558][ T7973] Call Trace: [ 377.304853][ T7973] [ 377.307802][ T7973] dump_stack_lvl+0x18c/0x250 [ 377.312511][ T7973] ? show_regs_print_info+0x20/0x20 [ 377.317829][ T7973] ? load_image+0x420/0x420 [ 377.322364][ T7973] ? __might_sleep+0xe0/0xe0 [ 377.326991][ T7973] ? __lock_acquire+0x7eb0/0x7eb0 [ 377.332050][ T7973] should_fail_ex+0x394/0x4c0 [ 377.336762][ T7973] should_failslab+0x9/0x20 [ 377.341285][ T7973] slab_pre_alloc_hook+0x59/0x300 [ 377.346332][ T7973] ? __kasan_kmalloc+0x8f/0xa0 [ 377.351121][ T7973] ? __se_sys_fsopen+0x135/0x2c0 [ 377.356089][ T7973] __kmem_cache_alloc_node+0x53/0x260 [ 377.361485][ T7973] ? __se_sys_fsopen+0x135/0x2c0 [ 377.366447][ T7973] kmalloc_trace+0x2a/0xe0 [ 377.370897][ T7973] __se_sys_fsopen+0x135/0x2c0 [ 377.375694][ T7973] do_syscall_64+0x55/0xb0 [ 377.380143][ T7973] ? clear_bhb_loop+0x40/0x90 [ 377.384858][ T7973] ? clear_bhb_loop+0x40/0x90 [ 377.389566][ T7973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.395486][ T7973] RIP: 0033:0x7fe5abf9fb19 [ 377.399916][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.419556][ T7973] RSP: 002b:00007fe5acf11028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 377.427999][ T7973] RAX: ffffffffffffffda RBX: 00007fe5ac226090 RCX: 00007fe5abf9fb19 [ 377.435996][ T7973] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 377.443990][ T7973] RBP: 00007fe5ac037b70 R08: 0000000000000000 R09: 0000000000000000 [ 377.451987][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.459975][ T7973] R13: 00007fe5ac226128 R14: 00007fe5ac226090 R15: 00007fff5dff98b8 [ 377.467984][ T7973] [ 378.020236][ T7973] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 378.776576][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.799295][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.034987][ T7998] syz_tun: entered allmulticast mode [ 381.043142][ T7997] syz_tun: left allmulticast mode [ 381.938267][ T8018] xt_l2tp: invalid flags combination: 8 [ 381.945832][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 383.323503][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 383.329779][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 383.348564][ T8027] bridge5: entered promiscuous mode [ 383.353787][ T8027] bridge5: entered allmulticast mode [ 383.467494][ T8022] ceph: No mds server is up or the cluster is laggy [ 383.480416][ T8034] usb usb8: usbfs: process 8034 (syz.0.486) did not claim interface 0 before use [ 383.493517][ T8034] input: syz0 as /devices/virtual/input/input22 [ 383.736065][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 383.744367][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 383.875590][ T8036] ªªªªªª: renamed from vlan0 (while UP) [ 384.504298][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 384.521017][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 384.876077][ T8045] FAULT_INJECTION: forcing a failure. [ 384.876077][ T8045] name failslab, interval 1, probability 0, space 0, times 0 [ 384.888869][ T8045] CPU: 0 PID: 8045 Comm: syz.0.488 Not tainted syzkaller #0 [ 384.896177][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 384.906267][ T8045] Call Trace: [ 384.909602][ T8045] [ 384.912555][ T8045] dump_stack_lvl+0x18c/0x250 [ 384.917273][ T8045] ? show_regs_print_info+0x20/0x20 [ 384.922502][ T8045] ? load_image+0x420/0x420 [ 384.927036][ T8045] ? __lock_acquire+0x7eb0/0x7eb0 [ 384.932104][ T8045] should_fail_ex+0x394/0x4c0 [ 384.936831][ T8045] should_failslab+0x9/0x20 [ 384.941354][ T8045] slab_pre_alloc_hook+0x59/0x300 [ 384.946401][ T8045] ? legacy_init_fs_context+0x51/0xc0 [ 384.951806][ T8045] __kmem_cache_alloc_node+0x53/0x260 [ 384.957203][ T8045] ? legacy_init_fs_context+0x51/0xc0 [ 384.962600][ T8045] kmalloc_trace+0x2a/0xe0 [ 384.967045][ T8045] legacy_init_fs_context+0x51/0xc0 [ 384.972276][ T8045] alloc_fs_context+0x618/0x7a0 [ 384.977161][ T8045] __se_sys_fsopen+0xa0/0x2c0 [ 384.981870][ T8045] do_syscall_64+0x55/0xb0 [ 384.986314][ T8045] ? clear_bhb_loop+0x40/0x90 [ 384.991020][ T8045] ? clear_bhb_loop+0x40/0x90 [ 384.995723][ T8045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.001639][ T8045] RIP: 0033:0x7fc28359fb19 [ 385.006082][ T8045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.025713][ T8045] RSP: 002b:00007fc2843be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 385.034156][ T8045] RAX: ffffffffffffffda RBX: 00007fc283826090 RCX: 00007fc28359fb19 [ 385.042152][ T8045] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 385.050326][ T8045] RBP: 00007fc283637b70 R08: 0000000000000000 R09: 0000000000000000 [ 385.058323][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.066312][ T8045] R13: 00007fc283826128 R14: 00007fc283826090 R15: 00007fffa6f7f908 [ 385.074321][ T8045] [ 385.640105][ T8045] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 387.617876][ T8065] syz_tun: entered allmulticast mode [ 387.676485][ T8055] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 387.734301][ T8061] syz_tun: left allmulticast mode [ 388.122449][ T8077] xt_l2tp: invalid flags combination: 8 [ 389.364274][ T8085] usb usb8: usbfs: process 8085 (syz.2.496) did not claim interface 0 before use [ 389.378387][ T8085] input: syz0 as /devices/virtual/input/input23 [ 389.747429][ T8096] ªªªªªªtend#: renamed from vlan0 (while UP) [ 390.478975][ T8094] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 390.525206][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 390.625561][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 390.631622][ T8087] ceph: No mds server is up or the cluster is laggy [ 390.915747][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 390.921798][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 391.051665][ T8100] bridge6: entered promiscuous mode [ 391.146997][ T8100] bridge6: entered allmulticast mode [ 391.263384][ T8106] FAULT_INJECTION: forcing a failure. [ 391.263384][ T8106] name failslab, interval 1, probability 0, space 0, times 0 [ 391.277177][ T8106] CPU: 0 PID: 8106 Comm: syz.2.500 Not tainted syzkaller #0 [ 391.284480][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 391.294536][ T8106] Call Trace: [ 391.297832][ T8106] [ 391.300761][ T8106] dump_stack_lvl+0x18c/0x250 [ 391.305441][ T8106] ? show_regs_print_info+0x20/0x20 [ 391.310631][ T8106] ? load_image+0x420/0x420 [ 391.315121][ T8106] ? __lock_acquire+0x7eb0/0x7eb0 [ 391.320138][ T8106] should_fail_ex+0x394/0x4c0 [ 391.324814][ T8106] should_failslab+0x9/0x20 [ 391.329305][ T8106] slab_pre_alloc_hook+0x59/0x300 [ 391.334319][ T8106] ? legacy_init_fs_context+0x51/0xc0 [ 391.339708][ T8106] __kmem_cache_alloc_node+0x53/0x260 [ 391.345116][ T8106] ? legacy_init_fs_context+0x51/0xc0 [ 391.350524][ T8106] kmalloc_trace+0x2a/0xe0 [ 391.354943][ T8106] legacy_init_fs_context+0x51/0xc0 [ 391.360142][ T8106] alloc_fs_context+0x618/0x7a0 [ 391.365017][ T8106] __se_sys_fsopen+0xa0/0x2c0 [ 391.369702][ T8106] do_syscall_64+0x55/0xb0 [ 391.374119][ T8106] ? clear_bhb_loop+0x40/0x90 [ 391.378790][ T8106] ? clear_bhb_loop+0x40/0x90 [ 391.383458][ T8106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.389367][ T8106] RIP: 0033:0x7f0a7819fb19 [ 391.393772][ T8106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.413465][ T8106] RSP: 002b:00007f0a78fa0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 391.421898][ T8106] RAX: ffffffffffffffda RBX: 00007f0a78425fa0 RCX: 00007f0a7819fb19 [ 391.429885][ T8106] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 391.437858][ T8106] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 391.445823][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.453787][ T8106] R13: 00007f0a78426038 R14: 00007f0a78425fa0 R15: 00007ffce8e45b28 [ 391.461763][ T8106] [ 391.520256][ T8107] ceph: No mds server is up or the cluster is laggy [ 391.527540][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 391.533701][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 393.763145][ T8122] syz_tun: entered allmulticast mode [ 393.826719][ T8121] syz_tun: left allmulticast mode [ 394.309202][ T8136] ªªªªªªtend#: renamed from vlan0 (while UP) [ 395.551859][ T8149] usb usb8: usbfs: process 8149 (syz.3.508) did not claim interface 0 before use [ 395.564914][ T8149] input: syz0 as /devices/virtual/input/input24 [ 395.986237][ T8158] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 397.356631][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 397.362726][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 397.415694][ T8176] ceph: No mds server is up or the cluster is laggy [ 397.939812][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 397.976731][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 398.713178][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 398.801729][ T8186] FAULT_INJECTION: forcing a failure. [ 398.801729][ T8186] name failslab, interval 1, probability 0, space 0, times 0 [ 398.814833][ T8186] CPU: 0 PID: 8186 Comm: syz.3.512 Not tainted syzkaller #0 [ 398.822151][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 398.832227][ T8186] Call Trace: [ 398.835526][ T8186] [ 398.838479][ T8186] dump_stack_lvl+0x18c/0x250 [ 398.843189][ T8186] ? show_regs_print_info+0x20/0x20 [ 398.848421][ T8186] ? load_image+0x420/0x420 [ 398.852953][ T8186] ? __lock_acquire+0x7eb0/0x7eb0 [ 398.858015][ T8186] should_fail_ex+0x394/0x4c0 [ 398.862725][ T8186] should_failslab+0x9/0x20 [ 398.867246][ T8186] slab_pre_alloc_hook+0x59/0x300 [ 398.872292][ T8186] ? legacy_init_fs_context+0x51/0xc0 [ 398.877689][ T8186] __kmem_cache_alloc_node+0x53/0x260 [ 398.883099][ T8186] ? legacy_init_fs_context+0x51/0xc0 [ 398.888496][ T8186] kmalloc_trace+0x2a/0xe0 [ 398.892944][ T8186] legacy_init_fs_context+0x51/0xc0 [ 398.898169][ T8186] alloc_fs_context+0x618/0x7a0 [ 398.903047][ T8186] __se_sys_fsopen+0xa0/0x2c0 [ 398.907747][ T8186] do_syscall_64+0x55/0xb0 [ 398.912181][ T8186] ? clear_bhb_loop+0x40/0x90 [ 398.916879][ T8186] ? clear_bhb_loop+0x40/0x90 [ 398.921597][ T8186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.927531][ T8186] RIP: 0033:0x7f776679fb19 [ 398.931978][ T8186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.951611][ T8186] RSP: 002b:00007f77675d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 398.960047][ T8186] RAX: ffffffffffffffda RBX: 00007f7766a26090 RCX: 00007f776679fb19 [ 398.968038][ T8186] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 398.976025][ T8186] RBP: 00007f7766837b70 R08: 0000000000000000 R09: 0000000000000000 [ 398.984010][ T8186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.991993][ T8186] R13: 00007f7766a26128 R14: 00007f7766a26090 R15: 00007ffcaa2e6ae8 [ 399.000004][ T8186] [ 399.040991][ T8174] bridge4: entered promiscuous mode [ 399.132050][ T8174] bridge4: entered allmulticast mode [ 399.253586][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 399.290086][ T8187] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 401.592975][ T8214] usb usb8: usbfs: process 8214 (syz.0.518) did not claim interface 0 before use [ 401.651030][ T8214] input: syz0 as /devices/virtual/input/input25 [ 401.685938][ T8204] can0: slcan on ttyS3. [ 401.751643][ T8204] xt_l2tp: invalid flags combination: 8 [ 402.655570][ T8210] can0 (unregistered): slcan off ttyS3. [ 402.896712][ T8226] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 407.132817][ T8255] FAULT_INJECTION: forcing a failure. [ 407.132817][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 407.146011][ T8255] CPU: 1 PID: 8255 Comm: syz.2.525 Not tainted syzkaller #0 [ 407.153343][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 407.163428][ T8255] Call Trace: [ 407.166733][ T8255] [ 407.169680][ T8255] dump_stack_lvl+0x18c/0x250 [ 407.174394][ T8255] ? show_regs_print_info+0x20/0x20 [ 407.179622][ T8255] ? load_image+0x420/0x420 [ 407.184148][ T8255] ? __lock_acquire+0x7eb0/0x7eb0 [ 407.189203][ T8255] should_fail_ex+0x394/0x4c0 [ 407.193912][ T8255] should_failslab+0x9/0x20 [ 407.198431][ T8255] slab_pre_alloc_hook+0x59/0x300 [ 407.203475][ T8255] ? legacy_init_fs_context+0x51/0xc0 [ 407.208880][ T8255] __kmem_cache_alloc_node+0x53/0x260 [ 407.214274][ T8255] ? legacy_init_fs_context+0x51/0xc0 [ 407.219678][ T8255] kmalloc_trace+0x2a/0xe0 [ 407.224132][ T8255] legacy_init_fs_context+0x51/0xc0 [ 407.229363][ T8255] alloc_fs_context+0x618/0x7a0 [ 407.234245][ T8255] __se_sys_fsopen+0xa0/0x2c0 [ 407.238948][ T8255] do_syscall_64+0x55/0xb0 [ 407.243387][ T8255] ? clear_bhb_loop+0x40/0x90 [ 407.248087][ T8255] ? clear_bhb_loop+0x40/0x90 [ 407.252792][ T8255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.258710][ T8255] RIP: 0033:0x7f0a7819fb19 [ 407.263137][ T8255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.282764][ T8255] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 407.291208][ T8255] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 407.299199][ T8255] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 407.307186][ T8255] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 407.315176][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.323167][ T8255] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 407.331178][ T8255] [ 407.546157][ T8256] ceph: No mds server is up or the cluster is laggy [ 407.571784][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 407.721436][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 409.590876][ T8290] bridge10: entered promiscuous mode [ 409.596509][ T8290] bridge10: entered allmulticast mode [ 410.237204][ T8287] ceph: No mds server is up or the cluster is laggy [ 410.245902][ T57] libceph: connect (1)[c::]:6789 error -101 [ 410.272805][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 410.426966][ T8297] usb usb8: usbfs: process 8297 (syz.4.529) did not claim interface 0 before use [ 410.439635][ T8297] input: syz0 as /devices/virtual/input/input26 [ 413.956720][ T8320] FAULT_INJECTION: forcing a failure. [ 413.956720][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 413.969500][ T8320] CPU: 0 PID: 8320 Comm: syz.3.534 Not tainted syzkaller #0 [ 413.976818][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 413.986920][ T8320] Call Trace: [ 413.990218][ T8320] [ 413.993173][ T8320] dump_stack_lvl+0x18c/0x250 [ 413.997883][ T8320] ? show_regs_print_info+0x20/0x20 [ 414.003189][ T8320] ? load_image+0x420/0x420 [ 414.007717][ T8320] ? __lock_acquire+0x7eb0/0x7eb0 [ 414.012768][ T8320] should_fail_ex+0x394/0x4c0 [ 414.017467][ T8320] should_failslab+0x9/0x20 [ 414.021988][ T8320] slab_pre_alloc_hook+0x59/0x300 [ 414.027037][ T8320] ? legacy_init_fs_context+0x51/0xc0 [ 414.032432][ T8320] __kmem_cache_alloc_node+0x53/0x260 [ 414.037825][ T8320] ? legacy_init_fs_context+0x51/0xc0 [ 414.043230][ T8320] kmalloc_trace+0x2a/0xe0 [ 414.047671][ T8320] legacy_init_fs_context+0x51/0xc0 [ 414.052902][ T8320] alloc_fs_context+0x618/0x7a0 [ 414.057954][ T8320] __se_sys_fsopen+0xa0/0x2c0 [ 414.062655][ T8320] do_syscall_64+0x55/0xb0 [ 414.067094][ T8320] ? clear_bhb_loop+0x40/0x90 [ 414.071797][ T8320] ? clear_bhb_loop+0x40/0x90 [ 414.076506][ T8320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.082426][ T8320] RIP: 0033:0x7f776679fb19 [ 414.086865][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.106588][ T8320] RSP: 002b:00007f77675d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 414.115035][ T8320] RAX: ffffffffffffffda RBX: 00007f7766a26090 RCX: 00007f776679fb19 [ 414.123030][ T8320] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 414.131017][ T8320] RBP: 00007f7766837b70 R08: 0000000000000000 R09: 0000000000000000 [ 414.139010][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.147002][ T8320] R13: 00007f7766a26128 R14: 00007f7766a26090 R15: 00007ffcaa2e6ae8 [ 414.155181][ T8320] [ 414.524065][ T8321] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 416.721026][ T8343] netlink: 56 bytes leftover after parsing attributes in process `syz.3.539'. [ 422.082832][ T8376] can0: slcan on ttyS3. [ 422.139657][ T8377] xt_l2tp: invalid flags combination: 8 [ 422.217278][ T8376] can0 (unregistered): slcan off ttyS3. [ 422.401877][ T8386] FAULT_INJECTION: forcing a failure. [ 422.401877][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 422.414752][ T8386] CPU: 0 PID: 8386 Comm: syz.2.545 Not tainted syzkaller #0 [ 422.422072][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 422.432148][ T8386] Call Trace: [ 422.435457][ T8386] [ 422.438410][ T8386] dump_stack_lvl+0x18c/0x250 [ 422.443131][ T8386] ? show_regs_print_info+0x20/0x20 [ 422.448355][ T8386] ? load_image+0x420/0x420 [ 422.452885][ T8386] ? __lock_acquire+0x7eb0/0x7eb0 [ 422.457939][ T8386] should_fail_ex+0x394/0x4c0 [ 422.462640][ T8386] should_failslab+0x9/0x20 [ 422.467258][ T8386] slab_pre_alloc_hook+0x59/0x300 [ 422.472306][ T8386] ? legacy_init_fs_context+0x51/0xc0 [ 422.477703][ T8386] __kmem_cache_alloc_node+0x53/0x260 [ 422.483101][ T8386] ? legacy_init_fs_context+0x51/0xc0 [ 422.488501][ T8386] kmalloc_trace+0x2a/0xe0 [ 422.492943][ T8386] legacy_init_fs_context+0x51/0xc0 [ 422.498174][ T8386] alloc_fs_context+0x618/0x7a0 [ 422.503058][ T8386] __se_sys_fsopen+0xa0/0x2c0 [ 422.507770][ T8386] do_syscall_64+0x55/0xb0 [ 422.512210][ T8386] ? clear_bhb_loop+0x40/0x90 [ 422.516966][ T8386] ? clear_bhb_loop+0x40/0x90 [ 422.521697][ T8386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.527623][ T8386] RIP: 0033:0x7f0a7819fb19 [ 422.532063][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.551698][ T8386] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 422.560144][ T8386] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 422.568174][ T8386] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 422.576197][ T8386] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 422.584280][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.592269][ T8386] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 422.600279][ T8386] [ 423.181738][ T8386] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 423.531981][ T8399] bridge11: entered promiscuous mode [ 423.546653][ T8399] bridge11: entered allmulticast mode [ 423.739659][ T7744] libceph: connect (1)[c::]:6789 error -101 [ 423.820978][ T7744] libceph: mon0 (1)[c::]:6789 connect error [ 423.950972][ T8396] ceph: No mds server is up or the cluster is laggy [ 424.227472][ T7744] libceph: connect (1)[c::]:6789 error -101 [ 424.261644][ T7744] libceph: mon0 (1)[c::]:6789 connect error [ 430.706124][ T8452] FAULT_INJECTION: forcing a failure. [ 430.706124][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 430.719388][ T8452] CPU: 1 PID: 8452 Comm: syz.4.555 Not tainted syzkaller #0 [ 430.726718][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 430.736802][ T8452] Call Trace: [ 430.740103][ T8452] [ 430.743047][ T8452] dump_stack_lvl+0x18c/0x250 [ 430.747767][ T8452] ? show_regs_print_info+0x20/0x20 [ 430.752988][ T8452] ? load_image+0x420/0x420 [ 430.757513][ T8452] ? __lock_acquire+0x7eb0/0x7eb0 [ 430.762573][ T8452] should_fail_ex+0x394/0x4c0 [ 430.767279][ T8452] should_failslab+0x9/0x20 [ 430.771798][ T8452] slab_pre_alloc_hook+0x59/0x300 [ 430.776848][ T8452] ? legacy_init_fs_context+0x51/0xc0 [ 430.782249][ T8452] __kmem_cache_alloc_node+0x53/0x260 [ 430.787649][ T8452] ? legacy_init_fs_context+0x51/0xc0 [ 430.793057][ T8452] kmalloc_trace+0x2a/0xe0 [ 430.797516][ T8452] legacy_init_fs_context+0x51/0xc0 [ 430.802742][ T8452] alloc_fs_context+0x618/0x7a0 [ 430.807630][ T8452] __se_sys_fsopen+0xa0/0x2c0 [ 430.812339][ T8452] do_syscall_64+0x55/0xb0 [ 430.816779][ T8452] ? clear_bhb_loop+0x40/0x90 [ 430.821480][ T8452] ? clear_bhb_loop+0x40/0x90 [ 430.826183][ T8452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.832103][ T8452] RIP: 0033:0x7fe5abf9fb19 [ 430.836542][ T8452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.856216][ T8452] RSP: 002b:00007fe5acf11028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 430.864981][ T8452] RAX: ffffffffffffffda RBX: 00007fe5ac226090 RCX: 00007fe5abf9fb19 [ 430.872988][ T8452] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 430.880996][ T8452] RBP: 00007fe5ac037b70 R08: 0000000000000000 R09: 0000000000000000 [ 430.888992][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.896985][ T8452] R13: 00007fe5ac226128 R14: 00007fe5ac226090 R15: 00007fff5dff98b8 [ 430.905001][ T8452] [ 431.051153][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 431.147490][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 431.215923][ T8452] ceph: No mds server is up or the cluster is laggy [ 436.336426][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 436.361243][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 436.492997][ T8506] ceph: No mds server is up or the cluster is laggy [ 436.565699][ T8512] bridge12: entered promiscuous mode [ 436.571117][ T8512] bridge12: entered allmulticast mode [ 438.000762][ T8525] can0: slcan on ttyS3. [ 438.050083][ T8524] FAULT_INJECTION: forcing a failure. [ 438.050083][ T8524] name failslab, interval 1, probability 0, space 0, times 0 [ 438.062910][ T8524] CPU: 0 PID: 8524 Comm: syz.0.565 Not tainted syzkaller #0 [ 438.070229][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 438.080307][ T8524] Call Trace: [ 438.080715][ T8526] xt_l2tp: invalid flags combination: 8 [ 438.083586][ T8524] [ 438.083596][ T8524] dump_stack_lvl+0x18c/0x250 [ 438.090929][ T5799] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 438.092067][ T8524] ? show_regs_print_info+0x20/0x20 [ 438.108755][ T8524] ? load_image+0x420/0x420 [ 438.113332][ T8524] ? __might_sleep+0xe0/0xe0 [ 438.117975][ T8524] ? __lock_acquire+0x7eb0/0x7eb0 [ 438.123034][ T8524] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 438.129043][ T8524] ? preempt_schedule_notrace+0x110/0x110 [ 438.134905][ T8524] should_fail_ex+0x394/0x4c0 [ 438.139637][ T8524] should_failslab+0x9/0x20 [ 438.144166][ T8524] slab_pre_alloc_hook+0x59/0x300 [ 438.149223][ T8524] ? __se_sys_fsopen+0x135/0x2c0 [ 438.154191][ T8524] __kmem_cache_alloc_node+0x53/0x260 [ 438.159581][ T8524] ? __se_sys_fsopen+0x135/0x2c0 [ 438.164542][ T8524] kmalloc_trace+0x2a/0xe0 [ 438.168984][ T8524] __se_sys_fsopen+0x135/0x2c0 [ 438.173795][ T8524] do_syscall_64+0x55/0xb0 [ 438.178243][ T8524] ? clear_bhb_loop+0x40/0x90 [ 438.182953][ T8524] ? clear_bhb_loop+0x40/0x90 [ 438.187654][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.193566][ T8524] RIP: 0033:0x7fc28359fb19 [ 438.197995][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.217714][ T8524] RSP: 002b:00007fc2843be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 438.226160][ T8524] RAX: ffffffffffffffda RBX: 00007fc283826090 RCX: 00007fc28359fb19 [ 438.234156][ T8524] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 438.242169][ T8524] RBP: 00007fc283637b70 R08: 0000000000000000 R09: 0000000000000000 [ 438.250168][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.258173][ T8524] R13: 00007fc283826128 R14: 00007fc283826090 R15: 00007fffa6f7f908 [ 438.266192][ T8524] [ 438.397390][ T8525] can0 (unregistered): slcan off ttyS3. [ 440.403842][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.449378][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.606022][ T8524] ceph: No mds server is up or the cluster is laggy [ 440.631090][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 440.707910][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 443.636212][ T8562] syz_tun: entered allmulticast mode [ 443.820118][ T8556] syz_tun: left allmulticast mode [ 444.337076][ T8579] ceph: No mds server is up or the cluster is laggy [ 444.345245][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 444.426176][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 445.058927][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 445.064950][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 445.204547][ T8579] bridge7: entered promiscuous mode [ 445.209946][ T8579] bridge7: entered allmulticast mode [ 445.485974][ T8593] netlink: 56 bytes leftover after parsing attributes in process `syz.2.574'. [ 446.582098][ T8600] can0: slcan on ttyS3. [ 446.648212][ T8602] xt_l2tp: invalid flags combination: 8 [ 446.655610][ T5799] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 447.347010][ T8600] can0 (unregistered): slcan off ttyS3. [ 447.439116][ T8606] FAULT_INJECTION: forcing a failure. [ 447.439116][ T8606] name failslab, interval 1, probability 0, space 0, times 0 [ 447.451988][ T8606] CPU: 0 PID: 8606 Comm: syz.2.576 Not tainted syzkaller #0 [ 447.459299][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 447.469381][ T8606] Call Trace: [ 447.472728][ T8606] [ 447.475679][ T8606] dump_stack_lvl+0x18c/0x250 [ 447.480407][ T8606] ? show_regs_print_info+0x20/0x20 [ 447.485642][ T8606] ? load_image+0x420/0x420 [ 447.490193][ T8606] ? __lock_acquire+0x7eb0/0x7eb0 [ 447.495247][ T8606] should_fail_ex+0x394/0x4c0 [ 447.499953][ T8606] should_failslab+0x9/0x20 [ 447.504473][ T8606] slab_pre_alloc_hook+0x59/0x300 [ 447.509528][ T8606] ? legacy_init_fs_context+0x51/0xc0 [ 447.514939][ T8606] __kmem_cache_alloc_node+0x53/0x260 [ 447.520337][ T8606] ? legacy_init_fs_context+0x51/0xc0 [ 447.525735][ T8606] kmalloc_trace+0x2a/0xe0 [ 447.530186][ T8606] legacy_init_fs_context+0x51/0xc0 [ 447.535413][ T8606] alloc_fs_context+0x618/0x7a0 [ 447.540299][ T8606] __se_sys_fsopen+0xa0/0x2c0 [ 447.545005][ T8606] do_syscall_64+0x55/0xb0 [ 447.549438][ T8606] ? clear_bhb_loop+0x40/0x90 [ 447.554156][ T8606] ? clear_bhb_loop+0x40/0x90 [ 447.558865][ T8606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.564782][ T8606] RIP: 0033:0x7f0a7819fb19 [ 447.569230][ T8606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.588868][ T8606] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 447.597309][ T8606] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 447.605330][ T8606] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 447.613312][ T8606] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 447.621299][ T8606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.629281][ T8606] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 447.637287][ T8606] [ 448.177600][ T8607] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 450.511053][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 452.488179][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 454.028124][ T57] libceph: connect (1)[c::]:6789 error -101 [ 454.063649][ T8660] ceph: No mds server is up or the cluster is laggy [ 454.110369][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 454.188343][ T8665] bridge8: entered promiscuous mode [ 454.193669][ T8665] bridge8: entered allmulticast mode [ 455.004369][ T8671] FAULT_INJECTION: forcing a failure. [ 455.004369][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 455.017420][ T8671] CPU: 1 PID: 8671 Comm: syz.3.586 Not tainted syzkaller #0 [ 455.024739][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 455.034813][ T8671] Call Trace: [ 455.038111][ T8671] [ 455.041072][ T8671] dump_stack_lvl+0x18c/0x250 [ 455.045804][ T8671] ? show_regs_print_info+0x20/0x20 [ 455.051034][ T8671] ? load_image+0x420/0x420 [ 455.055560][ T8671] ? __might_sleep+0xe0/0xe0 [ 455.060170][ T8671] ? __lock_acquire+0x7eb0/0x7eb0 [ 455.065220][ T8671] should_fail_ex+0x394/0x4c0 [ 455.069931][ T8671] should_failslab+0x9/0x20 [ 455.074452][ T8671] slab_pre_alloc_hook+0x59/0x300 [ 455.079494][ T8671] ? __kasan_kmalloc+0x8f/0xa0 [ 455.084274][ T8671] ? __se_sys_fsopen+0x135/0x2c0 [ 455.089232][ T8671] __kmem_cache_alloc_node+0x53/0x260 [ 455.094620][ T8671] ? __se_sys_fsopen+0x135/0x2c0 [ 455.099574][ T8671] kmalloc_trace+0x2a/0xe0 [ 455.104001][ T8671] __se_sys_fsopen+0x135/0x2c0 [ 455.108769][ T8671] do_syscall_64+0x55/0xb0 [ 455.113179][ T8671] ? clear_bhb_loop+0x40/0x90 [ 455.117859][ T8671] ? clear_bhb_loop+0x40/0x90 [ 455.122537][ T8671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.128435][ T8671] RIP: 0033:0x7f776679fb19 [ 455.132863][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.152575][ T8671] RSP: 002b:00007f77675d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 455.160998][ T8671] RAX: ffffffffffffffda RBX: 00007f7766a26090 RCX: 00007f776679fb19 [ 455.168989][ T8671] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 455.176975][ T8671] RBP: 00007f7766837b70 R08: 0000000000000000 R09: 0000000000000000 [ 455.184943][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.192912][ T8671] R13: 00007f7766a26128 R14: 00007f7766a26090 R15: 00007ffcaa2e6ae8 [ 455.200894][ T8671] [ 455.458404][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 455.518741][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 455.610128][ T8671] ceph: No mds server is up or the cluster is laggy [ 458.058028][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'. [ 459.593276][ T8702] syz_tun: entered allmulticast mode [ 460.034026][ T8706] can0: slcan on ttyS3. [ 460.101111][ T8706] can0 (unregistered): slcan off ttyS3. [ 460.111304][ T8706] xt_l2tp: invalid flags combination: 8 [ 460.117876][ T5799] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 460.355956][ T8697] syz_tun: left allmulticast mode [ 461.309505][ T8722] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 461.512048][ T8726] ceph: No mds server is up or the cluster is laggy [ 461.523967][ T57] libceph: connect (1)[c::]:6789 error -101 [ 461.644413][ T8731] bridge7: entered promiscuous mode [ 461.649825][ T8731] bridge7: entered allmulticast mode [ 463.303135][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 463.401331][ T8739] FAULT_INJECTION: forcing a failure. [ 463.401331][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 463.414184][ T8739] CPU: 0 PID: 8739 Comm: syz.3.595 Not tainted syzkaller #0 [ 463.421495][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 463.431569][ T8739] Call Trace: [ 463.434863][ T8739] [ 463.437805][ T8739] dump_stack_lvl+0x18c/0x250 [ 463.442505][ T8739] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 463.448170][ T8739] ? show_regs_print_info+0x20/0x20 [ 463.453478][ T8739] ? load_image+0x420/0x420 [ 463.458018][ T8739] should_fail_ex+0x394/0x4c0 [ 463.462721][ T8739] should_failslab+0x9/0x20 [ 463.467243][ T8739] slab_pre_alloc_hook+0x59/0x300 [ 463.472292][ T8739] ? __kasan_kmalloc+0x8f/0xa0 [ 463.477078][ T8739] ? __se_sys_fsopen+0x135/0x2c0 [ 463.482038][ T8739] __kmem_cache_alloc_node+0x53/0x260 [ 463.487436][ T8739] ? __se_sys_fsopen+0x135/0x2c0 [ 463.492398][ T8739] kmalloc_trace+0x2a/0xe0 [ 463.496838][ T8739] __se_sys_fsopen+0x135/0x2c0 [ 463.501601][ T8739] do_syscall_64+0x55/0xb0 [ 463.506010][ T8739] ? clear_bhb_loop+0x40/0x90 [ 463.510674][ T8739] ? clear_bhb_loop+0x40/0x90 [ 463.515358][ T8739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.521280][ T8739] RIP: 0033:0x7f776679fb19 [ 463.525716][ T8739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.545331][ T8739] RSP: 002b:00007f77675d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 463.553773][ T8739] RAX: ffffffffffffffda RBX: 00007f7766a26090 RCX: 00007f776679fb19 [ 463.561767][ T8739] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 463.569761][ T8739] RBP: 00007f7766837b70 R08: 0000000000000000 R09: 0000000000000000 [ 463.577745][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.585707][ T8739] R13: 00007f7766a26128 R14: 00007f7766a26090 R15: 00007ffcaa2e6ae8 [ 463.593682][ T8739] [ 464.120328][ T8739] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 467.135517][ T8770] can0: slcan on ttyS3. [ 467.212103][ T8771] xt_l2tp: invalid flags combination: 8 [ 467.218337][ T5799] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 467.857927][ T8770] can0 (unregistered): slcan off ttyS3. [ 467.938261][ T8773] syz_tun: entered allmulticast mode [ 467.954532][ T8772] syz_tun: left allmulticast mode [ 468.822070][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 469.259260][ T8791] ceph: No mds server is up or the cluster is laggy [ 469.267540][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 469.304131][ T8795] bridge8: entered promiscuous mode [ 469.309549][ T8795] bridge8: entered allmulticast mode [ 469.603651][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 469.937125][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 470.492778][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 470.936696][ T8801] FAULT_INJECTION: forcing a failure. [ 470.936696][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 470.950412][ T8801] CPU: 0 PID: 8801 Comm: syz.4.607 Not tainted syzkaller #0 [ 470.957722][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 470.967800][ T8801] Call Trace: [ 470.971098][ T8801] [ 470.974042][ T8801] dump_stack_lvl+0x18c/0x250 [ 470.978750][ T8801] ? show_regs_print_info+0x20/0x20 [ 470.983977][ T8801] ? load_image+0x420/0x420 [ 470.988500][ T8801] ? __lock_acquire+0x7eb0/0x7eb0 [ 470.993555][ T8801] should_fail_ex+0x394/0x4c0 [ 470.998263][ T8801] should_failslab+0x9/0x20 [ 471.002781][ T8801] slab_pre_alloc_hook+0x59/0x300 [ 471.007819][ T8801] ? legacy_init_fs_context+0x51/0xc0 [ 471.013214][ T8801] __kmem_cache_alloc_node+0x53/0x260 [ 471.018602][ T8801] ? legacy_init_fs_context+0x51/0xc0 [ 471.023994][ T8801] kmalloc_trace+0x2a/0xe0 [ 471.028435][ T8801] legacy_init_fs_context+0x51/0xc0 [ 471.033657][ T8801] alloc_fs_context+0x618/0x7a0 [ 471.038621][ T8801] __se_sys_fsopen+0xa0/0x2c0 [ 471.043339][ T8801] do_syscall_64+0x55/0xb0 [ 471.047776][ T8801] ? clear_bhb_loop+0x40/0x90 [ 471.052507][ T8801] ? clear_bhb_loop+0x40/0x90 [ 471.057212][ T8801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.063127][ T8801] RIP: 0033:0x7fe5abf9fb19 [ 471.067562][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.087185][ T8801] RSP: 002b:00007fe5acf11028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 471.095623][ T8801] RAX: ffffffffffffffda RBX: 00007fe5ac226090 RCX: 00007fe5abf9fb19 [ 471.103609][ T8801] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 471.111594][ T8801] RBP: 00007fe5ac037b70 R08: 0000000000000000 R09: 0000000000000000 [ 471.119581][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.127566][ T8801] R13: 00007fe5ac226128 R14: 00007fe5ac226090 R15: 00007fff5dff98b8 [ 471.135569][ T8801] [ 472.700291][ T8807] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 472.755680][ T8807] overlay: Unknown parameter '/' [ 472.852416][ T8809] netlink: 'syz.2.609': attribute type 39 has an invalid length. [ 474.665785][ T8818] syz_tun: entered allmulticast mode [ 474.677575][ T8817] syz_tun: left allmulticast mode [ 476.785147][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 476.828402][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 476.916205][ T8844] bridge13: entered promiscuous mode [ 476.921618][ T8844] bridge13: entered allmulticast mode [ 476.974711][ T8837] ceph: No mds server is up or the cluster is laggy [ 477.247151][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 478.121920][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 478.235634][ T8849] ALSA: mixer_oss: invalid OSS volume '' [ 478.262922][ T8849] can0: slcan on ttyS3. [ 478.334963][ T8850] xt_l2tp: invalid flags combination: 8 [ 478.707015][ T5799] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 479.048211][ T8849] can0 (unregistered): slcan off ttyS3. [ 480.097494][ T8860] FAULT_INJECTION: forcing a failure. [ 480.097494][ T8860] name failslab, interval 1, probability 0, space 0, times 0 [ 480.110340][ T8860] CPU: 1 PID: 8860 Comm: syz.4.620 Not tainted syzkaller #0 [ 480.117648][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 480.127715][ T8860] Call Trace: [ 480.131013][ T8860] [ 480.133955][ T8860] dump_stack_lvl+0x18c/0x250 [ 480.138665][ T8860] ? show_regs_print_info+0x20/0x20 [ 480.143924][ T8860] ? load_image+0x420/0x420 [ 480.148449][ T8860] ? __lock_acquire+0x7eb0/0x7eb0 [ 480.153496][ T8860] should_fail_ex+0x394/0x4c0 [ 480.158197][ T8860] should_failslab+0x9/0x20 [ 480.162715][ T8860] slab_pre_alloc_hook+0x59/0x300 [ 480.167755][ T8860] ? legacy_init_fs_context+0x51/0xc0 [ 480.173161][ T8860] __kmem_cache_alloc_node+0x53/0x260 [ 480.178560][ T8860] ? legacy_init_fs_context+0x51/0xc0 [ 480.183953][ T8860] kmalloc_trace+0x2a/0xe0 [ 480.188400][ T8860] legacy_init_fs_context+0x51/0xc0 [ 480.193622][ T8860] alloc_fs_context+0x618/0x7a0 [ 480.198503][ T8860] __se_sys_fsopen+0xa0/0x2c0 [ 480.203203][ T8860] do_syscall_64+0x55/0xb0 [ 480.207638][ T8860] ? clear_bhb_loop+0x40/0x90 [ 480.212339][ T8860] ? clear_bhb_loop+0x40/0x90 [ 480.217040][ T8860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.222954][ T8860] RIP: 0033:0x7fe5abf9fb19 [ 480.227381][ T8860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.247013][ T8860] RSP: 002b:00007fe5acf11028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 480.255454][ T8860] RAX: ffffffffffffffda RBX: 00007fe5ac226090 RCX: 00007fe5abf9fb19 [ 480.263443][ T8860] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 480.271431][ T8860] RBP: 00007fe5ac037b70 R08: 0000000000000000 R09: 0000000000000000 [ 480.279415][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.287395][ T8860] R13: 00007fe5ac226128 R14: 00007fe5ac226090 R15: 00007fff5dff98b8 [ 480.295393][ T8860] [ 481.222921][ T8869] syz_tun: entered allmulticast mode [ 482.307458][ T8866] syz_tun: left allmulticast mode [ 483.786015][ T8889] bridge9: entered promiscuous mode [ 483.791354][ T8889] bridge9: entered allmulticast mode [ 483.877085][ T8883] ceph: No mds server is up or the cluster is laggy [ 483.892852][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 483.957575][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 485.940475][ T8903] netlink: 56 bytes leftover after parsing attributes in process `syz.3.632'. [ 490.151678][ T8924] ALSA: mixer_oss: invalid OSS volume '' [ 490.179365][ T8924] can0: slcan on ttyS3. [ 490.261234][ T8925] xt_l2tp: invalid flags combination: 8 [ 490.268871][ T5799] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 490.886649][ T8924] can0 (unregistered): slcan off ttyS3. [ 491.176546][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 491.204724][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 491.335562][ T8935] ceph: No mds server is up or the cluster is laggy [ 491.389154][ T8939] bridge14: entered promiscuous mode [ 491.394638][ T8939] bridge14: entered allmulticast mode [ 493.000060][ T8943] FAULT_INJECTION: forcing a failure. [ 493.000060][ T8943] name failslab, interval 1, probability 0, space 0, times 0 [ 493.013053][ T8943] CPU: 1 PID: 8943 Comm: syz.2.631 Not tainted syzkaller #0 [ 493.020338][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 493.030387][ T8943] Call Trace: [ 493.033655][ T8943] [ 493.036580][ T8943] dump_stack_lvl+0x18c/0x250 [ 493.041251][ T8943] ? show_regs_print_info+0x20/0x20 [ 493.046438][ T8943] ? load_image+0x420/0x420 [ 493.050928][ T8943] ? __lock_acquire+0x7eb0/0x7eb0 [ 493.055945][ T8943] should_fail_ex+0x394/0x4c0 [ 493.060621][ T8943] should_failslab+0x9/0x20 [ 493.065110][ T8943] slab_pre_alloc_hook+0x59/0x300 [ 493.070125][ T8943] ? legacy_init_fs_context+0x51/0xc0 [ 493.075519][ T8943] __kmem_cache_alloc_node+0x53/0x260 [ 493.080894][ T8943] ? legacy_init_fs_context+0x51/0xc0 [ 493.086263][ T8943] kmalloc_trace+0x2a/0xe0 [ 493.090674][ T8943] legacy_init_fs_context+0x51/0xc0 [ 493.095866][ T8943] alloc_fs_context+0x618/0x7a0 [ 493.100714][ T8943] __se_sys_fsopen+0xa0/0x2c0 [ 493.105395][ T8943] do_syscall_64+0x55/0xb0 [ 493.109817][ T8943] ? clear_bhb_loop+0x40/0x90 [ 493.114517][ T8943] ? clear_bhb_loop+0x40/0x90 [ 493.119194][ T8943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.125092][ T8943] RIP: 0033:0x7f0a7819fb19 [ 493.129496][ T8943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.149097][ T8943] RSP: 002b:00007f0a78fa0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 493.157505][ T8943] RAX: ffffffffffffffda RBX: 00007f0a78425fa0 RCX: 00007f0a7819fb19 [ 493.165477][ T8943] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 493.173473][ T8943] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 493.181434][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.189394][ T8943] R13: 00007f0a78426038 R14: 00007f0a78425fa0 R15: 00007ffce8e45b28 [ 493.197378][ T8943] [ 495.075196][ T8966] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:1": -EINTR [ 498.914718][ T8991] FAULT_INJECTION: forcing a failure. [ 498.914718][ T8991] name failslab, interval 1, probability 0, space 0, times 0 [ 498.936679][ T8991] CPU: 1 PID: 8991 Comm: syz.0.648 Not tainted syzkaller #0 [ 498.943984][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 498.954068][ T8991] Call Trace: [ 498.957367][ T8991] [ 498.960312][ T8991] dump_stack_lvl+0x18c/0x250 [ 498.965031][ T8991] ? show_regs_print_info+0x20/0x20 [ 498.970255][ T8991] ? load_image+0x420/0x420 [ 498.974782][ T8991] ? __lock_acquire+0x7eb0/0x7eb0 [ 498.979838][ T8991] should_fail_ex+0x394/0x4c0 [ 498.984546][ T8991] should_failslab+0x9/0x20 [ 498.989069][ T8991] slab_pre_alloc_hook+0x59/0x300 [ 498.994113][ T8991] ? legacy_init_fs_context+0x51/0xc0 [ 498.999512][ T8991] __kmem_cache_alloc_node+0x53/0x260 [ 499.004909][ T8991] ? legacy_init_fs_context+0x51/0xc0 [ 499.010303][ T8991] kmalloc_trace+0x2a/0xe0 [ 499.014749][ T8991] legacy_init_fs_context+0x51/0xc0 [ 499.019971][ T8991] alloc_fs_context+0x618/0x7a0 [ 499.024867][ T8991] __se_sys_fsopen+0xa0/0x2c0 [ 499.029579][ T8991] do_syscall_64+0x55/0xb0 [ 499.034027][ T8991] ? clear_bhb_loop+0x40/0x90 [ 499.038734][ T8991] ? clear_bhb_loop+0x40/0x90 [ 499.043437][ T8991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.049367][ T8991] RIP: 0033:0x7fc28359fb19 [ 499.053799][ T8991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.073439][ T8991] RSP: 002b:00007fc2843be028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 499.081877][ T8991] RAX: ffffffffffffffda RBX: 00007fc283826090 RCX: 00007fc28359fb19 [ 499.089866][ T8991] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 499.097854][ T8991] RBP: 00007fc283637b70 R08: 0000000000000000 R09: 0000000000000000 [ 499.105845][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.114268][ T8991] R13: 00007fc283826128 R14: 00007fc283826090 R15: 00007fffa6f7f908 [ 499.122277][ T8991] [ 500.612481][ T9002] ALSA: mixer_oss: invalid OSS volume '' [ 500.638819][ T9002] can0: slcan on ttyS3. [ 500.718836][ T9003] xt_l2tp: invalid flags combination: 8 [ 500.727956][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 501.405662][ T9002] can0 (unregistered): slcan off ttyS3. [ 501.600760][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.607216][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.653939][ T9007] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 501.927008][ T9013] bridge10: entered promiscuous mode [ 501.932451][ T9013] bridge10: entered allmulticast mode [ 503.362587][ T9010] ceph: No mds server is up or the cluster is laggy [ 503.387911][ T57] libceph: connect (1)[c::]:6789 error -101 [ 503.475855][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 503.917560][ T9024] syz_tun: entered allmulticast mode [ 504.711348][ T9022] syz_tun: left allmulticast mode [ 509.755789][ T9057] FAULT_INJECTION: forcing a failure. [ 509.755789][ T9057] name failslab, interval 1, probability 0, space 0, times 0 [ 509.768610][ T9057] CPU: 1 PID: 9057 Comm: syz.2.659 Not tainted syzkaller #0 [ 509.775922][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 509.785990][ T9057] Call Trace: [ 509.789288][ T9057] [ 509.792227][ T9057] dump_stack_lvl+0x18c/0x250 [ 509.796942][ T9057] ? show_regs_print_info+0x20/0x20 [ 509.802161][ T9057] ? load_image+0x420/0x420 [ 509.806682][ T9057] ? __might_sleep+0xe0/0xe0 [ 509.811298][ T9057] ? __lock_acquire+0x7eb0/0x7eb0 [ 509.816349][ T9057] should_fail_ex+0x394/0x4c0 [ 509.821054][ T9057] should_failslab+0x9/0x20 [ 509.825570][ T9057] slab_pre_alloc_hook+0x59/0x300 [ 509.830611][ T9057] ? __kasan_kmalloc+0x8f/0xa0 [ 509.835397][ T9057] ? __se_sys_fsopen+0x135/0x2c0 [ 509.840358][ T9057] __kmem_cache_alloc_node+0x53/0x260 [ 509.845753][ T9057] ? __se_sys_fsopen+0x135/0x2c0 [ 509.850715][ T9057] kmalloc_trace+0x2a/0xe0 [ 509.855157][ T9057] __se_sys_fsopen+0x135/0x2c0 [ 509.859949][ T9057] do_syscall_64+0x55/0xb0 [ 509.864384][ T9057] ? clear_bhb_loop+0x40/0x90 [ 509.869079][ T9057] ? clear_bhb_loop+0x40/0x90 [ 509.873777][ T9057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.879687][ T9057] RIP: 0033:0x7f0a7819fb19 [ 509.884117][ T9057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.903751][ T9057] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 509.912196][ T9057] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 509.920194][ T9057] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 509.928191][ T9057] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 509.936180][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.944165][ T9057] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 509.952172][ T9057] [ 510.908405][ T9064] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 511.398380][ T9073] bridge11: entered promiscuous mode [ 511.403812][ T9073] bridge11: entered allmulticast mode [ 512.988484][ T9076] ALSA: mixer_oss: invalid OSS volume '' [ 513.112421][ T9078] xt_l2tp: invalid flags combination: 8 [ 513.137655][ T5799] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 513.782680][ T9070] ceph: No mds server is up or the cluster is laggy [ 513.790352][ T9076] slcan: can't register candev [ 513.795649][ T9076] Falling back ldisc for ttyS3. [ 513.844130][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 513.851927][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 514.658554][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 514.664750][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 518.657099][ T9104] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 520.900710][ T9114] netlink: 56 bytes leftover after parsing attributes in process `syz.0.673'. [ 521.081355][ T9124] FAULT_INJECTION: forcing a failure. [ 521.081355][ T9124] name failslab, interval 1, probability 0, space 0, times 0 [ 521.094260][ T9124] CPU: 0 PID: 9124 Comm: syz.2.670 Not tainted syzkaller #0 [ 521.101662][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 521.111732][ T9124] Call Trace: [ 521.115027][ T9124] [ 521.117970][ T9124] dump_stack_lvl+0x18c/0x250 [ 521.122689][ T9124] ? show_regs_print_info+0x20/0x20 [ 521.127906][ T9124] ? load_image+0x420/0x420 [ 521.132427][ T9124] ? __lock_acquire+0x7eb0/0x7eb0 [ 521.137560][ T9124] should_fail_ex+0x394/0x4c0 [ 521.142255][ T9124] should_failslab+0x9/0x20 [ 521.146773][ T9124] slab_pre_alloc_hook+0x59/0x300 [ 521.151825][ T9124] ? legacy_init_fs_context+0x51/0xc0 [ 521.157219][ T9124] __kmem_cache_alloc_node+0x53/0x260 [ 521.162607][ T9124] ? legacy_init_fs_context+0x51/0xc0 [ 521.167999][ T9124] kmalloc_trace+0x2a/0xe0 [ 521.172439][ T9124] legacy_init_fs_context+0x51/0xc0 [ 521.177662][ T9124] alloc_fs_context+0x618/0x7a0 [ 521.182547][ T9124] __se_sys_fsopen+0xa0/0x2c0 [ 521.187356][ T9124] do_syscall_64+0x55/0xb0 [ 521.191797][ T9124] ? clear_bhb_loop+0x40/0x90 [ 521.196505][ T9124] ? clear_bhb_loop+0x40/0x90 [ 521.201230][ T9124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.207163][ T9124] RIP: 0033:0x7f0a7819fb19 [ 521.211600][ T9124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.231234][ T9124] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 521.239674][ T9124] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 521.247665][ T9124] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 521.255652][ T9124] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 521.263637][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.271620][ T9124] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 521.279621][ T9124] [ 523.509982][ T57] libceph: connect (1)[c::]:6789 error -101 [ 523.637112][ T9147] bridge6: entered promiscuous mode [ 523.642571][ T9147] bridge6: entered allmulticast mode [ 523.977332][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 524.058432][ T9142] ceph: No mds server is up or the cluster is laggy [ 526.666093][ T28] audit: type=1400 audit(1793886107.828:77): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9157 comm="syz.4.682" [ 527.648279][ T9169] FAULT_INJECTION: forcing a failure. [ 527.648279][ T9169] name failslab, interval 1, probability 0, space 0, times 0 [ 527.661226][ T9169] CPU: 1 PID: 9169 Comm: syz.2.685 Not tainted syzkaller #0 [ 527.668547][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 527.678623][ T9169] Call Trace: [ 527.681922][ T9169] [ 527.684864][ T9169] dump_stack_lvl+0x18c/0x250 [ 527.689576][ T9169] ? show_regs_print_info+0x20/0x20 [ 527.694793][ T9169] ? load_image+0x420/0x420 [ 527.699317][ T9169] ? __might_sleep+0xe0/0xe0 [ 527.703934][ T9169] ? __lock_acquire+0x7eb0/0x7eb0 [ 527.708988][ T9169] should_fail_ex+0x394/0x4c0 [ 527.713696][ T9169] should_failslab+0x9/0x20 [ 527.718214][ T9169] slab_pre_alloc_hook+0x59/0x300 [ 527.723257][ T9169] ? __kasan_kmalloc+0x8f/0xa0 [ 527.728043][ T9169] ? __se_sys_fsopen+0x135/0x2c0 [ 527.733011][ T9169] __kmem_cache_alloc_node+0x53/0x260 [ 527.738402][ T9169] ? __se_sys_fsopen+0x135/0x2c0 [ 527.743362][ T9169] kmalloc_trace+0x2a/0xe0 [ 527.747804][ T9169] __se_sys_fsopen+0x135/0x2c0 [ 527.752595][ T9169] do_syscall_64+0x55/0xb0 [ 527.757033][ T9169] ? clear_bhb_loop+0x40/0x90 [ 527.761738][ T9169] ? clear_bhb_loop+0x40/0x90 [ 527.766442][ T9169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.772361][ T9169] RIP: 0033:0x7f0a7819fb19 [ 527.776797][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.796430][ T9169] RSP: 002b:00007f0a78f7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 527.804948][ T9169] RAX: ffffffffffffffda RBX: 00007f0a78426090 RCX: 00007f0a7819fb19 [ 527.812932][ T9169] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 527.820914][ T9169] RBP: 00007f0a78237b70 R08: 0000000000000000 R09: 0000000000000000 [ 527.828903][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.836895][ T9169] R13: 00007f0a78426128 R14: 00007f0a78426090 R15: 00007ffce8e45b28 [ 527.844897][ T9169] [ 529.247859][ T9178] ceph: No mds server is up or the cluster is laggy [ 529.256762][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 529.307614][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 529.379592][ T9182] bridge12: entered promiscuous mode [ 529.385063][ T9182] bridge12: entered allmulticast mode [ 532.627741][ T9208] syz_tun: entered allmulticast mode [ 533.395717][ T9204] syz_tun: left allmulticast mode [ 535.357410][ T9222] usb usb8: usbfs: process 9222 (syz.0.697) did not claim interface 0 before use [ 535.370086][ T9222] input: syz0 as /devices/virtual/input/input27 [ 542.396382][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 542.432439][ T9262] ceph: No mds server is up or the cluster is laggy [ 542.478892][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 542.556237][ T9267] bridge12: entered promiscuous mode [ 542.561652][ T9267] bridge12: entered allmulticast mode [ 542.692715][ T9269] usb usb8: usbfs: process 9269 (syz.0.707) did not claim interface 0 before use [ 542.705274][ T9269] input: syz0 as /devices/virtual/input/input28 [ 543.061208][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 543.157203][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 546.168965][ T9284] bridge15: entered promiscuous mode [ 546.174415][ T9284] bridge15: entered allmulticast mode [ 550.408409][ T9315] usb usb8: usbfs: process 9315 (syz.3.717) did not claim interface 0 before use [ 550.482283][ T9315] input: syz0 as /devices/virtual/input/input29 [ 553.352270][ T9331] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 553.890047][ T9338] bridge13: entered promiscuous mode [ 553.895534][ T9338] bridge13: entered allmulticast mode [ 554.992052][ T9347] bridge16: entered promiscuous mode [ 554.997578][ T9347] bridge16: entered allmulticast mode [ 555.685687][ T9343] ceph: No mds server is up or the cluster is laggy [ 555.730647][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 555.768382][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 556.995206][ T7744] libceph: connect (1)[c::]:6789 error -101 [ 557.001373][ T7744] libceph: mon0 (1)[c::]:6789 connect error [ 560.736499][ T9383] usb usb8: usbfs: process 9383 (syz.4.730) did not claim interface 0 before use [ 560.764589][ T9382] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 560.796115][ T9383] input: syz0 as /devices/virtual/input/input30 [ 561.460029][ T9390] bridge15: entered promiscuous mode [ 561.465503][ T9390] bridge15: entered allmulticast mode [ 563.283969][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.296897][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.792705][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 565.948725][ T9406] bridge7: entered promiscuous mode [ 565.954079][ T9406] bridge7: entered allmulticast mode [ 566.631239][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 567.694889][ T9402] ceph: No mds server is up or the cluster is laggy [ 569.739956][ T9428] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 571.249782][ T9440] bridge8: entered promiscuous mode [ 571.255108][ T9440] bridge8: entered allmulticast mode [ 573.906122][ T9456] bridge9: entered promiscuous mode [ 573.911475][ T9456] bridge9: entered allmulticast mode [ 576.603888][ T9453] ceph: No mds server is up or the cluster is laggy [ 576.611017][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 576.705565][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 581.242893][ T9489] bridge15: entered promiscuous mode [ 581.248420][ T9489] bridge15: entered allmulticast mode [ 586.590984][ T9513] ceph: No mds server is up or the cluster is laggy [ 586.610783][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 586.646753][ T9518] bridge10: entered promiscuous mode [ 586.653518][ T9518] bridge10: entered allmulticast mode [ 586.694153][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 587.317090][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 587.499609][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 587.519652][ T9522] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 587.678487][ T9525] syz_tun: entered allmulticast mode [ 588.458096][ T9523] syz_tun: left allmulticast mode [ 590.448622][ T9544] bridge16: entered promiscuous mode [ 590.454053][ T9544] bridge16: entered allmulticast mode [ 592.130732][ T28] audit: type=1400 audit(1793886173.308:78): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9539 comm="syz.2.762" [ 595.368444][ T9561] syz_tun: entered allmulticast mode [ 596.138851][ T9559] syz_tun: left allmulticast mode [ 596.185186][ T9558] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 596.660305][ T9564] bridge17: entered promiscuous mode [ 596.665914][ T9564] bridge17: entered allmulticast mode [ 596.687604][ T7744] libceph: connect (1)[c::]:6789 error -101 [ 597.975814][ T7744] libceph: mon0 (1)[c::]:6789 connect error [ 598.066576][ T9565] ceph: No mds server is up or the cluster is laggy [ 601.258771][ T9582] batman_adv: batadv0: Adding interface: syz_tun [ 601.265177][ T9582] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.314693][ T9582] batman_adv: batadv0: Interface activated: syz_tun [ 608.547755][ T9608] bridge17: entered promiscuous mode [ 608.553234][ T9608] bridge17: entered allmulticast mode [ 611.815887][ T28] audit: type=1400 audit(1793886193.008:79): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9616 comm="syz.0.779" [ 613.778942][ T9628] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 616.807750][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 616.813846][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 616.850049][ T9640] ceph: No mds server is up or the cluster is laggy [ 616.920039][ T9640] bridge12: entered promiscuous mode [ 616.925461][ T9640] bridge12: entered allmulticast mode [ 617.457020][ T9648] can0: slcan on ttyS3. [ 617.522297][ T9649] xt_l2tp: invalid flags combination: 8 [ 617.815572][ T5799] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 618.266800][ T9648] can0 (unregistered): slcan off ttyS3. [ 618.812113][ T9660] bridge13: entered promiscuous mode [ 618.822471][ T9660] bridge13: entered allmulticast mode [ 619.904865][ T9662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.788'. [ 622.248063][ T9678] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 624.687580][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.693926][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.837534][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 624.843551][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 624.850446][ T9682] ceph: No mds server is up or the cluster is laggy [ 624.919611][ T9694] bridge18: entered promiscuous mode [ 624.929696][ T9694] bridge18: entered allmulticast mode [ 626.920378][ T9706] bridge19: entered promiscuous mode [ 626.926017][ T9706] bridge19: entered allmulticast mode [ 630.982616][ T9712] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 635.047002][ T8] libceph: connect (1)[c::]:6789 error -101 [ 635.053085][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 635.109988][ T9734] ceph: No mds server is up or the cluster is laggy [ 635.362908][ T9741] bridge21: entered promiscuous mode [ 636.065932][ T9741] bridge21: entered allmulticast mode [ 637.755890][ T28] audit: type=1400 audit(1793886218.968:80): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9744 comm="syz.2.809" [ 638.365703][ T9752] netlink: 56 bytes leftover after parsing attributes in process `syz.0.801'. [ 642.838086][ T9775] bridge18: entered promiscuous mode [ 642.843490][ T9775] bridge18: entered allmulticast mode [ 644.157174][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 644.164594][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 644.176448][ T9783] ceph: No mds server is up or the cluster is laggy [ 645.142263][ T9783] bridge19: entered promiscuous mode [ 645.167146][ T9783] bridge19: entered allmulticast mode [ 646.198326][ T9799] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 648.522976][ T28] audit: type=1400 audit(1793886229.698:81): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9804 comm="syz.0.823" [ 653.668446][ T9828] bridge21: entered promiscuous mode [ 653.673884][ T9828] bridge21: entered allmulticast mode [ 659.159656][ T57] libceph: connect (1)[c::]:6789 error -101 [ 659.166514][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 659.178174][ T9846] ceph: No mds server is up or the cluster is laggy [ 659.383522][ T9846] bridge14: entered promiscuous mode [ 659.420496][ T9846] bridge14: entered allmulticast mode [ 659.470770][ T9852] bridge22: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 659.925544][ T57] libceph: connect (1)[c::]:6789 error -101 [ 661.167723][ T9856] bridge19: entered promiscuous mode [ 661.173041][ T9856] bridge19: entered allmulticast mode [ 661.179337][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 661.189468][ T9857] ceph: No mds server is up or the cluster is laggy [ 662.239682][ T9869] /dev/loop0: Can't open blockdev [ 669.548584][ T28] audit: type=1400 audit(1793886250.698:82): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9886 comm="syz.4.839" [ 670.675016][ T9899] syz_tun: entered allmulticast mode [ 670.884198][ T9900] syz_tun: entered allmulticast mode [ 671.434658][ T9894] syz_tun: left allmulticast mode [ 671.818630][ T9910] bridge15: entered promiscuous mode [ 671.824096][ T9910] bridge15: entered allmulticast mode [ 671.857668][ T8] libceph: connect (1)[c::]:6789 error -101 [ 671.864332][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 672.256067][ T9905] ceph: No mds server is up or the cluster is laggy [ 672.306319][ T9908] ceph: No mds server is up or the cluster is laggy [ 672.306705][ T8] libceph: connect (1)[c::]:6789 error -101 [ 672.342226][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 672.450312][ T9920] bridge23: entered promiscuous mode [ 672.457241][ T9920] bridge23: entered allmulticast mode [ 672.515703][ T57] libceph: connect (1)[c::]:6789 error -101 [ 672.597654][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 673.847318][ T8] libceph: connect (1)[c::]:6789 error -101 [ 673.853400][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 673.860058][ T57] libceph: connect (1)[c::]:6789 error -101 [ 673.874770][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 675.118609][ T57] libceph: connect (1)[c::]:6789 error -101 [ 675.125819][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 676.166361][ T9930] netlink: 56 bytes leftover after parsing attributes in process `syz.3.850'. [ 676.479265][ T9934] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 677.627846][ T9941] syz_tun: entered allmulticast mode [ 678.365702][ T9936] syz_tun: left allmulticast mode [ 683.476834][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 683.482934][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 683.519513][ T9960] ceph: No mds server is up or the cluster is laggy [ 683.690664][ T9965] bridge16: entered promiscuous mode [ 683.759899][ T9965] bridge16: entered allmulticast mode [ 685.076111][ T9972] netlink: 56 bytes leftover after parsing attributes in process `syz.4.862'. [ 686.549346][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.556165][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.865907][ T8] libceph: connect (1)[c::]:6789 error -101 [ 686.940959][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 686.986337][ T9986] bridge20: entered promiscuous mode [ 686.991753][ T9986] bridge20: entered allmulticast mode [ 687.042623][ T9982] ceph: No mds server is up or the cluster is laggy [ 687.327184][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 687.382914][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 692.269145][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 692.352064][T10016] bridge25: entered promiscuous mode [ 692.399138][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 692.405535][T10008] ceph: No mds server is up or the cluster is laggy [ 692.416255][T10016] bridge25: entered allmulticast mode [ 697.137019][T10035] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 700.209569][T10053] bridge18: entered promiscuous mode [ 700.216260][T10053] bridge18: entered allmulticast mode [ 701.994142][T10050] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 702.237122][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 702.354046][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 702.412610][T10070] bridge26: entered promiscuous mode [ 702.418166][T10070] bridge26: entered allmulticast mode [ 702.447108][T10060] ceph: No mds server is up or the cluster is laggy [ 707.234429][ T28] audit: type=1400 audit(1793886289.108:83): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=10086 comm="syz.0.881" [ 710.897158][ T57] libceph: connect (1)[c::]:6789 error -101 [ 710.923550][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 711.007258][T10111] bridge27: entered promiscuous mode [ 711.012679][T10111] bridge27: entered allmulticast mode [ 711.021254][T10106] ceph: No mds server is up or the cluster is laggy [ 711.303638][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 711.357589][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 716.958089][T10131] bridge19: entered promiscuous mode [ 716.963529][T10131] bridge19: entered allmulticast mode [ 717.963634][T10128] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 718.277902][T10137] ALSA: mixer_oss: invalid OSS volume '' [ 718.298083][T10137] can0: slcan on ttyS3. [ 718.363517][T10138] xt_l2tp: invalid flags combination: 8 [ 718.396642][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 721.576625][T10137] can0 (unregistered): slcan off ttyS3. [ 721.983489][T10151] bridge22: entered promiscuous mode [ 721.988993][T10151] bridge22: entered allmulticast mode [ 722.676940][T10153] batman_adv: batadv0: Adding interface: syz_tun [ 722.685161][T10153] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.945172][T10153] batman_adv: batadv0: Interface activated: syz_tun [ 723.125226][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 723.257856][T10158] can0: slcan on ttyS3. [ 723.817258][T10159] can0 (unregistered): slcan off ttyS3. [ 730.179732][T10180] ceph: No mds server is up or the cluster is laggy [ 730.187303][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 730.213625][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 730.510739][ T57] libceph: connect (1)[c::]:6789 error -101 [ 730.516979][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 730.536255][T10194] bridge20: entered promiscuous mode [ 730.570603][T10194] bridge20: entered allmulticast mode [ 731.146369][T10203] can0: slcan on ttyS3. [ 731.212417][ T5799] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 732.587521][T10203] can0 (unregistered): slcan off ttyS3. [ 734.391768][ T5771] libceph: connect (1)[c::]:6789 error -101 [ 734.434492][T10222] ceph: No mds server is up or the cluster is laggy [ 734.458240][ T5771] libceph: mon0 (1)[c::]:6789 connect error [ 734.610140][T10226] bridge21: entered promiscuous mode [ 734.615822][T10226] bridge21: entered allmulticast mode [ 737.558501][T10237] batman_adv: batadv0: Adding interface: syz_tun [ 737.564986][T10237] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.651398][T10237] batman_adv: batadv0: Interface activated: syz_tun [ 737.911247][T10240] netlink: 56 bytes leftover after parsing attributes in process `syz.0.921'. [ 738.387129][T10244] can0: slcan on ttyS3. [ 738.454075][ T5799] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 738.487246][T10244] can0 (unregistered): slcan off ttyS3. [ 739.848869][T10250] ceph: No mds server is up or the cluster is laggy [ 739.856182][ T8] libceph: connect (1)[c::]:6789 error -101 [ 739.862244][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 740.125576][T10258] can0: slcan on ttyS3. [ 740.176682][ T8] libceph: connect (1)[c::]:6789 error -101 [ 740.191866][T10259] xt_l2tp: invalid flags combination: 8 [ 740.198113][ T5799] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 740.851810][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 740.949563][T10258] can0 (unregistered): slcan off ttyS3. [ 740.963611][T10249] bridge28: entered promiscuous mode [ 740.988443][T10249] bridge28: entered allmulticast mode [ 742.143610][T10263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 742.238342][T10263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 742.244545][T10263] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 742.251907][T10263] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 742.258098][T10263] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 743.742104][ T5791] Bluetooth: hci0: command 0x0419 tx timeout [ 743.785532][T10263] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 744.316067][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 744.322302][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 744.328511][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 744.968865][T10289] can0: slcan on ttyS3. [ 745.084202][ T5791] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 745.187197][T10289] can0 (unregistered): slcan off ttyS3. [ 745.755707][ T5791] Bluetooth: hci0: command 0x0419 tx timeout [ 747.002314][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 747.118863][ T5858] libceph: connect (1)[c::]:6789 error -101 [ 747.124908][ T5858] libceph: mon0 (1)[c::]:6789 connect error [ 747.191543][T10295] ceph: No mds server is up or the cluster is laggy [ 747.372162][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.378570][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.481519][T10292] bridge21: entered promiscuous mode [ 747.756656][T10292] bridge21: entered allmulticast mode [ 749.638837][T10315] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 749.889695][T10325] bridge22: entered promiscuous mode [ 749.895208][T10325] bridge22: entered allmulticast mode [ 750.921966][T10319] ceph: No mds server is up or the cluster is laggy [ 750.941430][ T57] libceph: connect (1)[c::]:6789 error -101 [ 751.019748][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 757.460410][T10361] usb usb8: usbfs: process 10361 (syz.2.948) did not claim interface 0 before use [ 757.473105][T10361] input: syz0 as /devices/virtual/input/input39 [ 760.091997][T10378] ================================================================== [ 760.100142][T10378] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 760.107892][T10378] Read of size 8 at addr ffff888141bd5218 by task syz.0.947/10378 [ 760.115817][T10378] [ 760.118210][T10378] CPU: 1 PID: 10378 Comm: syz.0.947 Not tainted syzkaller #0 [ 760.125613][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 760.135654][T10378] Call Trace: [ 760.138917][T10378] [ 760.141830][T10378] dump_stack_lvl+0x18c/0x250 [ 760.146516][T10378] ? read_lock_is_recursive+0x20/0x20 [ 760.151913][T10378] ? show_regs_print_info+0x20/0x20 [ 760.157102][T10378] ? load_image+0x420/0x420 [ 760.161611][T10378] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 760.167055][T10378] ? __virt_addr_valid+0x10c/0x380 [ 760.172224][T10378] ? __virt_addr_valid+0x10c/0x380 [ 760.177322][T10378] ? __virt_addr_valid+0x10c/0x380 [ 760.182434][T10378] print_report+0xa8/0x210 [ 760.186841][T10378] ? dvb_device_open+0xc9/0x360 [ 760.191676][T10378] kasan_report+0x117/0x150 [ 760.196168][T10378] ? chrdev_open+0x385/0x600 [ 760.200750][T10378] ? dvb_device_open+0xc9/0x360 [ 760.205589][T10378] dvb_device_open+0xc9/0x360 [ 760.210248][T10378] chrdev_open+0x58c/0x600 [ 760.214649][T10378] ? cd_forget+0x160/0x160 [ 760.219060][T10378] ? fsnotify_perm+0x3ed/0x5e0 [ 760.223859][T10378] do_dentry_open+0x880/0x14b0 [ 760.228608][T10378] ? cd_forget+0x160/0x160 [ 760.233010][T10378] path_openat+0x284f/0x3270 [ 760.237619][T10378] ? do_sys_openat2+0xda/0x1d0 [ 760.242387][T10378] ? __x64_sys_openat+0x139/0x160 [ 760.247401][T10378] ? verify_lock_unused+0x140/0x140 [ 760.252595][T10378] ? do_filp_open+0x430/0x430 [ 760.257292][T10378] do_filp_open+0x1f2/0x430 [ 760.261797][T10378] ? vfs_tmpfile+0x620/0x620 [ 760.266372][T10378] ? _raw_spin_unlock+0x28/0x40 [ 760.271206][T10378] ? alloc_fd+0x590/0x640 [ 760.275549][T10378] do_sys_openat2+0x134/0x1d0 [ 760.280210][T10378] ? do_sys_open+0xe0/0xe0 [ 760.284607][T10378] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 760.290571][T10378] ? lock_chain_count+0x20/0x20 [ 760.295408][T10378] __x64_sys_openat+0x139/0x160 [ 760.300246][T10378] do_syscall_64+0x55/0xb0 [ 760.304645][T10378] ? clear_bhb_loop+0x40/0x90 [ 760.309322][T10378] ? clear_bhb_loop+0x40/0x90 [ 760.314023][T10378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.319921][T10378] RIP: 0033:0x7fc28356034e [ 760.324342][T10378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 760.343932][T10378] RSP: 002b:00007fc2843deb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 760.352346][T10378] RAX: ffffffffffffffda RBX: 00007fc2843df6c0 RCX: 00007fc28356034e [ 760.360323][T10378] RDX: 0000000000040002 RSI: 00007fc2843dec00 RDI: ffffffffffffff9c [ 760.368278][T10378] RBP: 00007fc2843dec00 R08: 0000000000000000 R09: 0000000000000000 [ 760.376250][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 760.384208][T10378] R13: 00007fc283826038 R14: 00007fc283825fa0 R15: 00007fffa6f7f908 [ 760.392169][T10378] [ 760.395179][T10378] [ 760.397484][T10378] Allocated by task 1: [ 760.401593][T10378] kasan_set_track+0x4e/0x70 [ 760.406169][T10378] __kasan_kmalloc+0x8f/0xa0 [ 760.410748][T10378] dvb_register_device+0x309/0x1df0 [ 760.415930][T10378] dvb_register_frontend+0x62d/0x900 [ 760.421264][T10378] vidtv_bridge_probe+0x9d6/0xf60 [ 760.426505][T10378] platform_probe+0x13b/0x1c0 [ 760.431199][T10378] really_probe+0x24a/0xae0 [ 760.435692][T10378] __driver_probe_device+0x1f5/0x390 [ 760.440967][T10378] driver_probe_device+0x4f/0x420 [ 760.445999][T10378] __driver_attach+0x444/0x6d0 [ 760.450761][T10378] bus_for_each_dev+0x235/0x2b0 [ 760.455596][T10378] bus_add_driver+0x340/0x630 [ 760.460258][T10378] driver_register+0x23a/0x310 [ 760.465026][T10378] vidtv_bridge_init+0x49/0x80 [ 760.469885][T10378] do_one_initcall+0x242/0x790 [ 760.474651][T10378] do_initcall_level+0x13d/0x1f0 [ 760.479596][T10378] do_initcalls+0x69/0xd0 [ 760.483931][T10378] kernel_init_freeable+0x3d9/0x560 [ 760.489136][T10378] kernel_init+0x1d/0x1c0 [ 760.493523][T10378] ret_from_fork+0x48/0x80 [ 760.497925][T10378] ret_from_fork_asm+0x11/0x20 [ 760.502685][T10378] [ 760.505001][T10378] Freed by task 10315: [ 760.509106][T10378] kasan_set_track+0x4e/0x70 [ 760.513690][T10378] kasan_save_free_info+0x28/0x40 [ 760.518718][T10378] ____kasan_slab_free+0x126/0x1f0 [ 760.523814][T10378] slab_free_freelist_hook+0x154/0x240 [ 760.529257][T10378] __kmem_cache_free+0xba/0x1f0 [ 760.534101][T10378] dvb_device_open+0x2d9/0x360 [ 760.538857][T10378] chrdev_open+0x58c/0x600 [ 760.543259][T10378] do_dentry_open+0x880/0x14b0 [ 760.548004][T10378] path_openat+0x284f/0x3270 [ 760.552577][T10378] do_filp_open+0x1f2/0x430 [ 760.557069][T10378] do_sys_openat2+0x134/0x1d0 [ 760.561728][T10378] __x64_sys_openat+0x139/0x160 [ 760.566564][T10378] do_syscall_64+0x55/0xb0 [ 760.570967][T10378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.576872][T10378] [ 760.579178][T10378] The buggy address belongs to the object at ffff888141bd5200 [ 760.579178][T10378] which belongs to the cache kmalloc-256 of size 256 [ 760.593297][T10378] The buggy address is located 24 bytes inside of [ 760.593297][T10378] freed 256-byte region [ffff888141bd5200, ffff888141bd5300) [ 760.606995][T10378] [ 760.609321][T10378] The buggy address belongs to the physical page: [ 760.615801][T10378] page:ffffea000506f500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141bd4 [ 760.626027][T10378] head:ffffea000506f500 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 760.634944][T10378] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 760.643063][T10378] page_type: 0xffffffff() [ 760.647399][T10378] raw: 057ff00000000840 ffff888018c41b40 dead000000000122 0000000000000000 [ 760.655975][T10378] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 760.664548][T10378] page dumped because: kasan: bad access detected [ 760.670965][T10378] page_owner tracks the page as allocated [ 760.676676][T10378] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15629686742, free_ts 0 [ 760.696376][T10378] post_alloc_hook+0x1c1/0x200 [ 760.701145][T10378] get_page_from_freelist+0x2181/0x22a0 [ 760.706738][T10378] __alloc_pages+0x1f0/0x460 [ 760.711329][T10378] alloc_page_interleave+0x24/0x1e0 [ 760.716525][T10378] alloc_slab_page+0x5d/0x180 [ 760.721198][T10378] new_slab+0x87/0x2d0 [ 760.725255][T10378] ___slab_alloc+0xc5c/0x12f0 [ 760.729918][T10378] __kmem_cache_alloc_node+0x122/0x260 [ 760.735385][T10378] kmalloc_trace+0x2a/0xe0 [ 760.739807][T10378] bus_add_driver+0x162/0x630 [ 760.744485][T10378] driver_register+0x23a/0x310 [ 760.749254][T10378] usb_register_driver+0x1aa/0x360 [ 760.754397][T10378] do_one_initcall+0x242/0x790 [ 760.759160][T10378] do_initcall_level+0x13d/0x1f0 [ 760.764087][T10378] do_initcalls+0x69/0xd0 [ 760.768423][T10378] kernel_init_freeable+0x3d9/0x560 [ 760.773608][T10378] page_owner free stack trace missing [ 760.778969][T10378] [ 760.781281][T10378] Memory state around the buggy address: [ 760.786959][T10378] ffff888141bd5100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 760.795029][T10378] ffff888141bd5180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 760.803116][T10378] >ffff888141bd5200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.811175][T10378] ^ [ 760.816006][T10378] ffff888141bd5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 760.824053][T10378] ffff888141bd5300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 760.832120][T10378] ================================================================== [ 760.840820][T10378] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 760.848012][T10378] CPU: 1 PID: 10378 Comm: syz.0.947 Not tainted syzkaller #0 [ 760.855373][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 760.865429][T10378] Call Trace: [ 760.868696][T10378] [ 760.871618][T10378] dump_stack_lvl+0x18c/0x250 [ 760.876290][T10378] ? show_regs_print_info+0x20/0x20 [ 760.881487][T10378] ? load_image+0x420/0x420 [ 760.886008][T10378] panic+0x2ca/0x720 [ 760.889928][T10378] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 760.896109][T10378] ? bpf_jit_dump+0xd0/0xd0 [ 760.900607][T10378] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 760.906485][T10378] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 760.912365][T10378] ? _raw_spin_unlock+0x40/0x40 [ 760.917220][T10378] ? dvb_device_open+0xc9/0x360 [ 760.922054][T10378] check_panic_on_warn+0x84/0xa0 [ 760.926998][T10378] ? dvb_device_open+0xc9/0x360 [ 760.931828][T10378] end_report+0x6f/0x130 [ 760.936083][T10378] kasan_report+0x128/0x150 [ 760.940586][T10378] ? chrdev_open+0x385/0x600 [ 760.945160][T10378] ? dvb_device_open+0xc9/0x360 [ 760.950030][T10378] dvb_device_open+0xc9/0x360 [ 760.954715][T10378] chrdev_open+0x58c/0x600 [ 760.959116][T10378] ? cd_forget+0x160/0x160 [ 760.963523][T10378] ? fsnotify_perm+0x3ed/0x5e0 [ 760.968286][T10378] do_dentry_open+0x880/0x14b0 [ 760.973047][T10378] ? cd_forget+0x160/0x160 [ 760.977455][T10378] path_openat+0x284f/0x3270 [ 760.982046][T10378] ? do_sys_openat2+0xda/0x1d0 [ 760.986799][T10378] ? __x64_sys_openat+0x139/0x160 [ 760.991810][T10378] ? verify_lock_unused+0x140/0x140 [ 760.997006][T10378] ? do_filp_open+0x430/0x430 [ 761.001664][T10378] do_filp_open+0x1f2/0x430 [ 761.006151][T10378] ? vfs_tmpfile+0x620/0x620 [ 761.010745][T10378] ? _raw_spin_unlock+0x28/0x40 [ 761.015579][T10378] ? alloc_fd+0x590/0x640 [ 761.019901][T10378] do_sys_openat2+0x134/0x1d0 [ 761.024564][T10378] ? do_sys_open+0xe0/0xe0 [ 761.028964][T10378] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 761.034926][T10378] ? lock_chain_count+0x20/0x20 [ 761.039763][T10378] __x64_sys_openat+0x139/0x160 [ 761.044630][T10378] do_syscall_64+0x55/0xb0 [ 761.049050][T10378] ? clear_bhb_loop+0x40/0x90 [ 761.053747][T10378] ? clear_bhb_loop+0x40/0x90 [ 761.058580][T10378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.064455][T10378] RIP: 0033:0x7fc28356034e [ 761.068852][T10378] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 761.088461][T10378] RSP: 002b:00007fc2843deb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 761.096872][T10378] RAX: ffffffffffffffda RBX: 00007fc2843df6c0 RCX: 00007fc28356034e [ 761.104844][T10378] RDX: 0000000000040002 RSI: 00007fc2843dec00 RDI: ffffffffffffff9c [ 761.112797][T10378] RBP: 00007fc2843dec00 R08: 0000000000000000 R09: 0000000000000000 [ 761.120749][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 761.128699][T10378] R13: 00007fc283826038 R14: 00007fc283825fa0 R15: 00007fffa6f7f908 [ 761.136655][T10378] [ 761.139911][T10378] Kernel Offset: disabled [ 761.144228][T10378] Rebooting in 86400 seconds..