last executing test programs: 12m59.343217857s ago: executing program 2 (id=1290): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x483, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000680)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019740)='net/tcp6\x00') mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019780), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000197c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000019840)={{0xa, 0x4e20, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80}, {0xa, 0x4e22, 0x0, @empty, 0x7ff}, 0x1, {[0x0, 0x6, 0xb8c8, 0x10000, 0x6, 0xa, 0x8, 0xff]}}, 0x5c) mount(&(0x7f00000198c0)=@filename='mtd0\x00', &(0x7f0000019900)='./file0\x00', &(0x7f0000019940)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000019980)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000199c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000019a00), 0x1000a) sendfile(r0, r6, &(0x7f0000019a40)=0x3, 0xffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42, 0x1ef) 12m58.660114276s ago: executing program 2 (id=1293): bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000040)={0x27, 0x0, 0x3, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 12m52.247727119s ago: executing program 2 (id=1301): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b88, &(0x7f0000000240)={0x0, 0x9b6, 0x2, 0x23, 0x2bb}, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0xb) socket(0x2, 0x3, 0xff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12m52.14426536s ago: executing program 2 (id=1302): r0 = socket(0x1d, 0x2, 0x6) bind(r0, &(0x7f0000000680)=@can={0x1d, 0x0, 0x1, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) semget$private(0x0, 0x2, 0x400) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000700)={&(0x7f0000000740), 0x10, &(0x7f00000007c0)={&(0x7f0000000800)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000840)=""/100, 0x64) 12m50.404187007s ago: executing program 2 (id=1303): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b88, &(0x7f0000000240)={0x0, 0x9b6, 0x2, 0x23, 0x2bb}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0xb) socket(0x2, 0x3, 0xff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12m44.540974664s ago: executing program 2 (id=1315): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c00), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000c40), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdir(0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000980)=[{{&(0x7f0000000c00)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000c40)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="010000000000000029000000360000003300000000000000180000000000000029000000360000003c00000000000000"], 0x30}}], 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 12m28.707798007s ago: executing program 32 (id=1315): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c00), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000c40), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000c80)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdir(0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000980)=[{{&(0x7f0000000c00)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000c40)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="010000000000000029000000360000003300000000000000180000000000000029000000360000003c00000000000000"], 0x30}}], 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 12m26.919784869s ago: executing program 1 (id=1338): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) bind(0xffffffffffffffff, &(0x7f0000000680)=@can={0x1d, r0, 0x1, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) semget$private(0x0, 0x2, 0x400) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000700)={&(0x7f0000000740)={0x1d, r0}, 0x10, &(0x7f00000007c0)={&(0x7f0000000800)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000840)=""/100, 0x64) 12m24.035783452s ago: executing program 1 (id=1340): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b88, &(0x7f0000000240)={0x0, 0x9b6, 0x2, 0x23, 0x2bb}, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0xb) socket(0x2, 0x3, 0xff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x1e, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 12m19.266467618s ago: executing program 1 (id=1346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x180) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000001500), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x210a, r0}, 0x0) 12m17.417856197s ago: executing program 1 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x0, &(0x7f0000955000/0x4000)=nil) r2 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x0, 0xca880) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000400)=0xfffffffe) syz_mount_image$fuse(0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x9801) move_mount(r3, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') umount2(&(0x7f0000000380)='./file0\x00', 0x8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfb2200) 12m15.771912784s ago: executing program 1 (id=1350): syz_open_dev$sndctrl(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./tracefs_dir\x00', 0xbf) mount(0x0, &(0x7f0000019300)='./tracefs_dir\x00', &(0x7f0000019340)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019380)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) 12m8.559604108s ago: executing program 1 (id=1355): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind(r0, &(0x7f0000000680)=@can={0x1d, 0x0, 0x1, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) semget$private(0x0, 0x2, 0x400) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000700)={&(0x7f0000000740), 0x10, &(0x7f00000007c0)={&(0x7f0000000800)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000840)=""/100, 0x64) 11m53.158357207s ago: executing program 33 (id=1355): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind(r0, &(0x7f0000000680)=@can={0x1d, 0x0, 0x1, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f00000008c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) semget$private(0x0, 0x2, 0x400) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000700)={&(0x7f0000000740), 0x10, &(0x7f00000007c0)={&(0x7f0000000800)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000840)=""/100, 0x64) 10m14.945330329s ago: executing program 0 (id=1485): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(0x0, 0x4ca7e, 0x10) fallocate(r2, 0x0, 0x0, 0x1000f4) sendfile(r2, r2, 0x0, 0x40000000800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r3, 0x100000000000011, 0x2000, 0x2f93) 10m14.333167152s ago: executing program 0 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x0) 10m1.170776422s ago: executing program 0 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(0x0, 0x4ca7e, 0x10) fallocate(r2, 0x0, 0x0, 0x1000f4) sendfile(r2, r2, 0x0, 0x40000000800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r3, 0x100000000000011, 0x2000, 0x2f93) 10m0.919274738s ago: executing program 0 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() syz_open_procfs(r3, &(0x7f0000000040)='auxv\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000000300), 0x0) 9m59.543518648s ago: executing program 0 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000020c40)=0x100000001, 0x76dc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xca341, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000020d40)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r4, &(0x7f0000020dc0)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000021e40), r4) 9m57.486259997s ago: executing program 0 (id=1509): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b88, &(0x7f0000000240)={0x0, 0x9b6, 0x2, 0x23, 0x2bb}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) socket(0x2, 0x3, 0xff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x1e, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9m40.841210702s ago: executing program 34 (id=1509): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b88, &(0x7f0000000240)={0x0, 0x9b6, 0x2, 0x23, 0x2bb}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) socket(0x2, 0x3, 0xff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x1e, 0x5, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 35.163106499s ago: executing program 4 (id=2201): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f00000022c0)=""/102392, 0x18ff8) mq_open(&(0x7f0000000240)='!sel!\x00\x00\x10\x00\xfd\x88\xf0W\xa7.\"\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x19e, 0x0) 30.077019777s ago: executing program 4 (id=2206): syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x6, 0x8, 0x0, 0x55}, &(0x7f0000000400), 0x0, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004ac0)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000001dac0)={0x0, 0x0, &(0x7f000001db00)={&(0x7f000001db40)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0xb211, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2d, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 27.911881737s ago: executing program 4 (id=2208): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000003800)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000400)="560002002a00000000000000000101000100"/36, 0x24) 21.195819201s ago: executing program 5 (id=2215): io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xf80f, 0x2, 0x2, 0xf2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000090414000239261a5509050602ff0300000009058202"], 0x0) 21.047918607s ago: executing program 6 (id=2216): syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x6, 0x8, 0x0, 0x55}, &(0x7f0000000400), 0x0, &(0x7f0000000480)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004ac0)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000001dac0)={0x0, 0x0, &(0x7f000001db00)={&(0x7f000001db40)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3b}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0xb211, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2d, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 18.75130553s ago: executing program 4 (id=2217): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 16.620529297s ago: executing program 6 (id=2218): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) setns(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141142) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000047c0)='befs\x00', 0x100801f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000240)={0x30a32c0, 0x1, @vsb={0x6}}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x52, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x8400, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRES8=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r4]) read$FUSE(r3, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r9) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004700)='./file0\x00', 0xa6c81, 0xc0) 16.171763263s ago: executing program 5 (id=2219): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000200)=""/102368, 0x18fe0) gettid() ptrace(0x4207, r0) timer_create(0x0, 0x0, &(0x7f0000019240)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0xfd01}, 0x4) 14.501847743s ago: executing program 5 (id=2220): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002a80)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002b00)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004bc0)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004c00)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000004c40)=0x0) io_submit(r3, 0x2, &(0x7f0000004c80)=[&(0x7f0000004cc0)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000004d00)='!', 0xffffff49, 0x3000000000000500}]) dup3(r2, r0, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x8, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) 14.275310056s ago: executing program 3 (id=2221): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000740)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = open$dir(0x0, 0x0, 0x2) openat(r4, &(0x7f0000000040)='./file0\x00', 0xc000, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000e80), 0x0, 0x0) read$msr(r5, &(0x7f0000000ec0)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x9, 0x2002, 0x6, 0x0, 0x1, 0xcaff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f00000004c0), 0x0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000580), &(0x7f00000005c0)=@tcp6, 0x2}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40042, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x10a) flock(r8, 0x1) flock(r7, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x0, &(0x7f0000000780)}) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2c41, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 12.515804625s ago: executing program 3 (id=2222): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000000180)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000019240)='virtiofs\x00', 0x800000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, 0x0, &(0x7f0000019580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 10.454448625s ago: executing program 3 (id=2223): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff) mount(&(0x7f00000006c0)=@filename='./dev/sda1\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000740)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000340)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x121) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @adiantum, 0x8, @desc1}) 7.56279333s ago: executing program 6 (id=2224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004d80)={&(0x7f0000004dc0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 7.550849631s ago: executing program 4 (id=2225): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000003800)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000400)="560002002a00000000000000000101000100"/36, 0x24) 7.379886968s ago: executing program 6 (id=2226): r0 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000680)=0x81) readv(r0, 0x0, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f0000001780)=""/226, 0xe2}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001880)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0xf88e470f, 0xed, 0x80000000000}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x8000000000000000, 0x100000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x6, 0xa, 0x0, 0x4, 0x9], 0xffff3000, 0x1d2180}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 7.073114729s ago: executing program 6 (id=2227): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000019d00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) 6.991620388s ago: executing program 5 (id=2228): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) 5.640667585s ago: executing program 6 (id=2229): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f00000022c0)=""/102392, 0x18ff8) mq_open(&(0x7f0000000240)='!sel!\x00\x00\x10\x00\xfd\x88\xf0W\xa7.\"\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x19e, 0x0) 5.367808323s ago: executing program 3 (id=2230): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x230, 0xe, 0xa, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x21c, 0x3, 0x0, 0x1, [{0x214, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x204, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "1344af799483df4a3447f1db8f7eef7c461deba3c531b0eabc794e6a874b4b6328f56c7081b90f385a897fb9bccb20004467abd17704c7fa48b4d60b47f688f1968a05e48a9e8cd26098eef08a0bb73f40b235b3317bebf5bd707773157c35a249191e0924f4654761a8e34b4f5c054602cf6afc8c87d95f8b44cc63f1e79eb51663ada050e6496d12"}, @NFTA_DATA_VALUE={0x91, 0x1, "fcffafda9b8ecdcfb273f0ff9d9ecc66937fb2d64747fedda0cc592b5d18954412328c127c5003a524bce6c8213001241294275410b925997ec331c360b91fcd3ec4b212c6e880b4a3740c84d2e6caf282b07bdae0d3ff4ad97d3f9f853e924c3c4c7724084960337267d4263ba2639e96da1a1eed4964f60db07e0d7b8123b886308714812e379d7c76bc164d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x7d, 0x1, "3467a4842fe983413c4c09b2164686db3f0971db28c791fc61b107742be723a45765cf5aac6e197623b3702da12f042d1c4dabc4c1155f41441eec2e151bc79a0a35eec4017a8a1b30933b05a5c2e79416d6e8ca607612c4a1dc5edd6d8d3835b014f40f68181f298e692981d974ecf275803a9acd6dd1b9bb"}, @NFTA_DATA_VALUE={0x55, 0x1, "df39a6416f5a1f3cd6bb1363f845930b8ea45306ea40971277c9c9026006dff024ac88d64c0143f217e5e8b5a4aeb4d629b9608c8f6f5454bdbd06aaa8824c4b947e252410667a8dec09d86e8544cf5c93"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x26c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001100)={0x0, 0x3c, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 5.335329736s ago: executing program 5 (id=2231): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}}, 0x0) syz_io_uring_setup(0xfff, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffd, 0x4, 0x6, 0x9c1, 0x10000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x5, 0xfc000003, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4091}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000500)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, &(0x7f000000e0c0)=""/102392, 0x18ff8) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$inet6_tcp(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000640)=0x1c, 0x80000) getsockopt$inet6_tcp_TLS(r4, 0x11a, 0x5, &(0x7f0000000700)=""/81, &(0x7f0000000780)=0x51) r5 = socket$tipc(0x1e, 0x1, 0x0) listen(r5, 0x0) select(0x0, 0x0, &(0x7f0000000900)={0x5, 0x32eb19a8, 0x1, 0x0, 0xc9a, 0xd7, 0x1000, 0xa8c}, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, 0x40, 0x107, 0x70bd2a, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0xe, 0x0, 0x0, @binary}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file7\x00', 0x1ac) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f00000008c0)="300000001c00010401000100000000002d000000020000008000000105000100300000000a0002000000000000000000", 0x30) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000006c0)='./file7/file0\x00', 0x0) 4.721590749s ago: executing program 3 (id=2232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x10c, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 4.427302099s ago: executing program 5 (id=2233): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) setns(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141142) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000047c0)='befs\x00', 0x100801f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000240)={0x30a32c0, 0x1, @vsb={0x6}}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x52, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x8400, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRES8=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r4]) read$FUSE(r3, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r9) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004700)='./file0\x00', 0xa6c81, 0xc0) 36.695906ms ago: executing program 3 (id=2234): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002"], 0x44}}, 0x0) 0s ago: executing program 4 (id=2235): r0 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000680)=0x81) readv(r0, 0x0, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f0000001780)=""/226, 0xe2}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001880)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0xf88e470f, 0xed, 0x80000000000}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000580)={[0x8000000000000000, 0x100000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x6, 0xa, 0x0, 0x4, 0x9], 0xffff3000, 0x1d2180}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) kernel console output (not intermixed with test programs): .030614][ T8239] jffs2: notice: (8239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 465.683866][ T8252] jffs2: notice: (8252) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 467.494748][ T8260] Zero length message leads to an empty skb [ 467.817232][ T8263] loop1: detected capacity change from 0 to 1024 [ 469.662867][ T8275] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 469.662867][ T8275] [ 469.678411][ T8275] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 469.693771][ T8275] CIFS: Attempting to mount //127.0.0.1/share [ 469.719467][ T8275] CIFS: VFS: Error connecting to socket. Aborting operation. [ 469.727888][ T8275] CIFS: VFS: cifs_mount failed w/return code = -111 [ 471.471513][ T8283] jffs2: notice: (8283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 474.083695][ T8303] loop1: detected capacity change from 0 to 1024 [ 478.282241][ T8327] FAULT_INJECTION: forcing a failure. [ 478.282241][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 479.913697][ T8327] CPU: 1 PID: 8327 Comm: syz.2.721 Not tainted syzkaller #0 [ 479.921104][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 479.931222][ T8327] Call Trace: [ 479.934640][ T8327] [ 479.937680][ T8327] dump_stack_lvl+0x18c/0x250 [ 479.942569][ T8327] ? show_regs_print_info+0x20/0x20 [ 479.947868][ T8327] ? load_image+0x420/0x420 [ 479.952452][ T8327] ? __might_sleep+0xe0/0xe0 [ 479.957152][ T8327] ? __lock_acquire+0x7eb0/0x7eb0 [ 479.962274][ T8327] should_fail_ex+0x394/0x4c0 [ 479.967049][ T8327] should_failslab+0x9/0x20 [ 479.971619][ T8327] slab_pre_alloc_hook+0x59/0x300 [ 479.976777][ T8327] kmem_cache_alloc+0x5a/0x2d0 [ 479.981590][ T8327] ? __kernfs_new_node+0xe5/0x7f0 [ 479.986704][ T8327] __kernfs_new_node+0xe5/0x7f0 [ 479.991629][ T8327] ? kernfs_new_node+0x260/0x260 [ 479.996623][ T8327] ? up_write+0x1be/0x410 [ 480.000990][ T8327] kernfs_new_node+0x14c/0x260 [ 480.005838][ T8327] __kernfs_create_file+0x4b/0x2e0 [ 480.010992][ T8327] sysfs_add_file_mode_ns+0x237/0x2f0 [ 480.016411][ T8327] internal_create_group+0x431/0xd10 [ 480.021741][ T8327] ? kernfs_add_one+0x149/0x6b0 [ 480.026645][ T8327] ? sysfs_create_group+0x20/0x20 [ 480.031704][ T8327] ? sysfs_create_dir_ns+0x16b/0x2a0 [ 480.037040][ T8327] ? sysfs_warn_dup+0xa0/0xa0 [ 480.041761][ T8327] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 480.047804][ T8327] sysfs_create_groups+0x59/0x120 [ 480.053404][ T8327] kobject_add_internal+0x65e/0xc90 [ 480.058682][ T8327] kobject_init_and_add+0x12c/0x1a0 [ 480.063927][ T8327] ? register_netdevice+0x12aa/0x1ba0 [ 480.069442][ T8327] ? ip6_tnl_create2+0x80/0x140 [ 480.074421][ T8327] ? ip6_tnl_newlink+0x2a5/0x590 [ 480.079406][ T8327] ? rtnl_newlink+0x15a0/0x2170 [ 480.084348][ T8327] ? kobject_add+0x240/0x240 [ 480.089013][ T8327] ? ___sys_sendmsg+0x2a6/0x360 [ 480.093956][ T8327] ? dev_uevent_filter+0x43/0xb0 [ 480.098965][ T8327] ? kobject_uevent_env+0x2ed/0x890 [ 480.104223][ T8327] net_rx_queue_update_kobjects+0x1e0/0x590 [ 480.110209][ T8327] netdev_register_kobject+0x235/0x320 [ 480.115743][ T8327] register_netdevice+0x12aa/0x1ba0 [ 480.120989][ T8327] ? netif_stacked_transfer_operstate+0x210/0x210 [ 480.127441][ T8327] ? __lock_acquire+0x7eb0/0x7eb0 [ 480.132509][ T8327] ? __asan_memset+0x22/0x40 [ 480.137151][ T8327] ? net_generic+0x1e/0x240 [ 480.141700][ T8327] ip6_tnl_create2+0x80/0x140 [ 480.146441][ T8327] ip6_tnl_newlink+0x2a5/0x590 [ 480.151267][ T8327] ? ip6_tnl_validate+0xd0/0xd0 [ 480.156178][ T8327] ? dev_validate_mtu+0x120/0x170 [ 480.161423][ T8327] ? rtnl_create_link+0x9d1/0xd00 [ 480.166498][ T8327] ? ip6_tnl_validate+0xd0/0xd0 [ 480.171385][ T8327] rtnl_newlink+0x15a0/0x2170 [ 480.176114][ T8327] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.182345][ T8327] ? rtnl_setlink+0x4e0/0x4e0 [ 480.187051][ T8327] ? trace_raw_output_contention_end+0xd0/0xd0 [ 480.193242][ T8327] ? rcu_is_watching+0x15/0xb0 [ 480.198053][ T8327] ? trace_contention_end+0x39/0xe0 [ 480.203453][ T8327] ? __mutex_lock+0x30d/0xce0 [ 480.208182][ T8327] ? rtnl_setlink+0x4e0/0x4e0 [ 480.212890][ T8327] rtnetlink_rcv_msg+0x843/0xf90 [ 480.217887][ T8327] ? rtnetlink_rcv_msg+0x220/0xf90 [ 480.223043][ T8327] ? rtnetlink_bind+0x80/0x80 [ 480.227756][ T8327] ? kasan_quarantine_put+0xd8/0x220 [ 480.233084][ T8327] ? lockdep_hardirqs_on+0x98/0x150 [ 480.238590][ T8327] ? slab_free_freelist_hook+0x154/0x240 [ 480.244270][ T8327] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 480.250291][ T8327] ? lock_chain_count+0x20/0x20 [ 480.255179][ T8327] ? __local_bh_enable_ip+0x13a/0x1c0 [ 480.260583][ T8327] ? lockdep_hardirqs_on+0x98/0x150 [ 480.265900][ T8327] ? __local_bh_enable_ip+0x13a/0x1c0 [ 480.271305][ T8327] ? _local_bh_enable+0xa0/0xa0 [ 480.276200][ T8327] ? __dev_queue_xmit+0x1481/0x3a30 [ 480.281476][ T8327] ? __dev_queue_xmit+0x6d1/0x3a30 [ 480.286638][ T8327] ? ref_tracker_free+0x686/0x830 [ 480.291711][ T8327] netlink_rcv_skb+0x235/0x4c0 [ 480.296587][ T8327] ? rtnetlink_bind+0x80/0x80 [ 480.301298][ T8327] ? netlink_ack+0x1160/0x1160 [ 480.306108][ T8327] ? __lock_acquire+0x7eb0/0x7eb0 [ 480.311172][ T8327] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.316420][ T8327] netlink_unicast+0x856/0x9e0 [ 480.321264][ T8327] netlink_sendmsg+0x8d0/0xbf0 [ 480.326085][ T8327] ? netlink_getsockopt+0x590/0x590 [ 480.331417][ T8327] ? apparmor_socket_sendmsg+0x8e/0x330 [ 480.337073][ T8327] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 480.342436][ T8327] ? security_socket_sendmsg+0x80/0xa0 [ 480.347945][ T8327] ? netlink_getsockopt+0x590/0x590 [ 480.353181][ T8327] ____sys_sendmsg+0x61b/0x980 [ 480.357990][ T8327] ? __asan_memset+0x22/0x40 [ 480.362633][ T8327] ? __sys_sendmsg_sock+0x30/0x30 [ 480.367700][ T8327] ? __import_iovec+0x5f2/0x850 [ 480.373066][ T8327] ? import_iovec+0x73/0xa0 [ 480.377624][ T8327] ___sys_sendmsg+0x2a6/0x360 [ 480.382344][ T8327] ? __sys_sendmsg+0x2b0/0x2b0 [ 480.387183][ T8327] __se_sys_sendmsg+0x1d0/0x2c0 [ 480.392075][ T8327] ? __x64_sys_sendmsg+0x80/0x80 [ 480.397056][ T8327] ? lockdep_hardirqs_on+0x98/0x150 [ 480.402309][ T8327] do_syscall_64+0x55/0xb0 [ 480.406759][ T8327] ? clear_bhb_loop+0x40/0x90 [ 480.411470][ T8327] ? clear_bhb_loop+0x40/0x90 [ 480.416192][ T8327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.422130][ T8327] RIP: 0033:0x7f1f26fa8fd9 [ 480.426746][ T8327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.446545][ T8327] RSP: 002b:00007f1f27f29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.455011][ T8327] RAX: ffffffffffffffda RBX: 00007f1f27225fa0 RCX: 00007f1f26fa8fd9 [ 480.463015][ T8327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 480.471019][ T8327] RBP: 00007f1f27037fed R08: 0000000000000000 R09: 0000000000000000 [ 480.479022][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.487024][ T8327] R13: 00007f1f27226038 R14: 00007f1f27225fa0 R15: 00007ffdb2006488 [ 480.495043][ T8327] [ 480.549118][ T8327] kobject: kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 480.706044][ T8331] jffs2: notice: (8331) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 480.900193][ T28] audit: type=1800 audit(1794481216.260:9): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.722" name="file0" dev="jffs2" ino=4 res=0 errno=0 [ 481.069223][ T8339] loop2: detected capacity change from 0 to 1024 [ 484.856190][ T8358] xt_hashlimit: size too large, truncated to 1048576 [ 490.063114][ T8384] loop3: detected capacity change from 0 to 1024 [ 491.234461][ T8394] jffs2: notice: (8394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 493.804752][ T8412] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 493.804752][ T8412] [ 493.818843][ T8412] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 493.832047][ T8412] CIFS: Attempting to mount //127.0.0.1/share [ 493.842346][ T8412] CIFS: VFS: Error connecting to socket. Aborting operation. [ 493.850077][ T8412] CIFS: VFS: cifs_mount failed w/return code = -101 [ 496.401464][ T8421] loop0: detected capacity change from 0 to 1024 [ 499.782697][ T8435] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 502.620998][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.643676][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.494359][ T8446] jffs2: notice: (8446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 503.604791][ T8446] jffs2: warning: (8446) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=68 [ 508.466697][ T8494] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 508.466697][ T8494] [ 508.481439][ T8494] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 508.494744][ T8494] CIFS: Attempting to mount //127.0.0.1/share [ 508.516328][ T8494] CIFS: VFS: Error connecting to socket. Aborting operation. [ 508.524497][ T8494] CIFS: VFS: cifs_mount failed w/return code = -111 [ 516.377409][ T8548] jffs2: notice: (8548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 517.036867][ T8552] ip_tables: iptables: counters copy to user failed while replacing table [ 518.066140][ T8553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 521.129169][ T8577] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 521.129169][ T8577] [ 521.143206][ T8577] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 521.156622][ T8577] CIFS: Attempting to mount //127.0.0.1/share [ 521.167316][ T8577] CIFS: VFS: Error connecting to socket. Aborting operation. [ 521.176116][ T8577] CIFS: VFS: cifs_mount failed w/return code = -101 [ 522.233822][ T8582] jffs2: notice: (8582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 524.320377][ T8589] ip_tables: iptables: counters copy to user failed while replacing table [ 525.342464][ T8595] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 529.323256][ T8618] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 529.323256][ T8618] [ 529.337217][ T8618] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 529.350431][ T8618] CIFS: Attempting to mount //127.0.0.1/share [ 530.194606][ T8618] CIFS: VFS: cifs_mount failed w/return code = -112 [ 534.735909][ T8634] jffs2: notice: (8634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 537.749869][ T8655] ip_tables: iptables: counters copy to user failed while replacing table [ 538.743027][ T8658] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 544.281802][ T8676] jffs2: notice: (8676) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 544.768036][ T5799] Bluetooth: hci0: unexpected event for opcode 0x042e [ 547.843847][ T8686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.464465][ T8725] jffs2: notice: (8725) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 556.737017][ T8735] xt_hashlimit: size too large, truncated to 1048576 [ 561.364720][ T8756] jffs2: notice: (8756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 563.551248][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.562755][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.229393][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 564.271153][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.786922][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.605729][ T8801] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 570.605729][ T8801] [ 570.619596][ T8801] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 570.632834][ T8801] CIFS: Attempting to mount //127.0.0.1/share [ 571.433430][ T8801] CIFS: VFS: error -4 create cifsd thread [ 571.460579][ T8801] CIFS: VFS: cifs_mount failed w/return code = -4 [ 576.907900][ T8838] jffs2: notice: (8838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 577.160743][ T8838] jffs2: warning: (8838) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=68 [ 578.584498][ T8851] syz.1.866 (8851) used greatest stack depth: 20008 bytes left [ 578.692937][ T28] audit: type=1800 audit(1794481313.170:10): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.866" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 579.513955][ T5799] Bluetooth: hci3: unexpected event for opcode 0x042e [ 582.861246][ T8873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.234258][ T8879] jffs2: notice: (8879) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 583.280800][ T8878] ip_tables: iptables: counters copy to user failed while replacing table [ 585.359064][ T28] audit: type=1800 audit(1794481320.710:11): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.877" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 585.574500][ T8882] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 586.401536][ T8889] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 590.034863][ T8912] ip_tables: iptables: counters copy to user failed while replacing table [ 591.122421][ T8913] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 591.409028][ T8917] jffs2: notice: (8917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 593.386148][ T8924] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 593.386148][ T8924] [ 593.400069][ T8924] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 593.412802][ T8924] CIFS: Attempting to mount //127.0.0.1/share [ 595.165359][ T8924] CIFS: VFS: cifs_mount failed w/return code = -112 [ 598.237471][ T8944] jffs2: notice: (8944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 598.620527][ T8947] ip_tables: iptables: counters copy to user failed while replacing table [ 599.899083][ T8950] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 603.629986][ T8961] ip_tables: iptables: counters copy to user failed while replacing table [ 605.755643][ T8961] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 608.096203][ T5799] Bluetooth: hci0: unexpected event for opcode 0x042e [ 611.397562][ T8987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.020699][ T9005] autofs4:pid:9005:autofs_fill_super: called with bogus options [ 614.554295][ T9008] loop3: detected capacity change from 0 to 1024 [ 617.955101][ T9023] jffs2: notice: (9023) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 620.396596][ T5799] Bluetooth: hci2: unexpected event for opcode 0x042e [ 622.233367][ T9045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.716765][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.733807][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.378237][ T9073] xt_hashlimit: size too large, truncated to 1048576 [ 628.425576][ T9077] loop0: detected capacity change from 0 to 1024 [ 629.672837][ T9083] netlink: 'syz.1.928': attribute type 2 has an invalid length. [ 629.802814][ T5799] Bluetooth: hci1: unexpected event for opcode 0x042e [ 631.615205][ T9095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.196012][ T9117] xt_hashlimit: size too large, truncated to 1048576 [ 636.286638][ T9122] jffs2: notice: (9122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 636.513804][ T9122] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 642.775814][ T9159] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 642.775814][ T9159] [ 642.789576][ T9159] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 642.802172][ T9159] CIFS: Attempting to mount //127.0.0.1/share [ 642.808943][ T9159] CIFS: VFS: Error connecting to socket. Aborting operation. [ 642.816442][ T9159] CIFS: VFS: cifs_mount failed w/return code = -101 [ 646.444857][ T9170] loop3: detected capacity change from 0 to 1024 [ 649.067457][ T5799] Bluetooth: hci3: unexpected event for opcode 0x042e [ 650.862926][ T9185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.427215][ T9198] capability: warning: `syz.2.954' uses 32-bit capabilities (legacy support in use) [ 656.319811][ T9211] ip_tables: iptables: counters copy to user failed while replacing table [ 657.317582][ T9214] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 657.635431][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.643389][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.684858][ T9218] bridge0: entered allmulticast mode [ 657.781171][ T9218] bridge_slave_1: left allmulticast mode [ 657.793379][ T9218] bridge_slave_1: left promiscuous mode [ 657.802221][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.853038][ T9218] bridge_slave_0: left allmulticast mode [ 657.872942][ T9218] bridge_slave_0: left promiscuous mode [ 657.879415][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.094675][ T9243] loop0: detected capacity change from 0 to 1024 [ 664.412263][ T9246] ip_tables: iptables: counters copy to user failed while replacing table [ 665.429276][ T9249] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 671.940955][ T9286] xt_hashlimit: size too large, truncated to 1048576 [ 674.606462][ T9296] ip_tables: iptables: counters copy to user failed while replacing table [ 674.677631][ T9297] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 674.677631][ T9297] [ 674.691607][ T9297] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 674.704725][ T9297] CIFS: Attempting to mount //127.0.0.1/share [ 675.449937][ T9297] CIFS: VFS: error -4 create cifsd thread [ 675.560071][ T9297] CIFS: VFS: cifs_mount failed w/return code = -4 [ 676.080122][ T9299] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 678.371322][ T9316] jffs2: notice: (9316) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 681.358773][ T9330] loop1: detected capacity change from 0 to 1024 [ 683.222860][ T9341] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 683.222860][ T9341] [ 683.274545][ T9341] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 683.299003][ T9341] CIFS: Attempting to mount //127.0.0.1/share [ 684.025640][ T9341] CIFS: VFS: cifs_mount failed w/return code = -112 [ 687.199816][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.212681][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.121036][ T9374] jffs2: notice: (9374) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 696.257348][ T9406] loop3: detected capacity change from 0 to 1024 [ 696.341281][ T9408] xt_hashlimit: size too large, truncated to 1048576 [ 699.059883][ T9415] syz.1.1009: attempt to access beyond end of device [ 699.059883][ T9415] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 699.073437][ T9415] EXT4-fs (loop1): unable to read superblock [ 702.127092][ T9427] xt_hashlimit: size too large, truncated to 1048576 [ 709.855632][ T9460] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 709.855632][ T9460] [ 709.995392][ T9460] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 710.042696][ T5849] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 710.139774][ T9460] CIFS: Attempting to mount //127.0.0.1/share [ 710.148013][ T9460] CIFS: VFS: Error connecting to socket. Aborting operation. [ 710.160156][ T9460] CIFS: VFS: cifs_mount failed w/return code = -4 [ 710.249733][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.292036][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.304280][ T9465] ip_tables: iptables: counters copy to user failed while replacing table [ 710.406448][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 710.504670][ T5849] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 710.583161][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.768775][ T5849] usb 3-1: config 0 descriptor?? [ 710.946093][ T9470] jffs2: notice: (9470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 711.930072][ T5849] usbhid 3-1:0.0: can't add hid device: -71 [ 711.941182][ T5849] usbhid: probe of 3-1:0.0 failed with error -71 [ 711.991059][ T5849] usb 3-1: USB disconnect, device number 3 [ 712.195125][ T9466] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 715.186530][ T28] audit: type=1800 audit(1794481450.550:12): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1027" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 716.549031][ T9496] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 716.549031][ T9496] [ 716.581868][ T9496] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 716.599726][ T9496] CIFS: Attempting to mount //127.0.0.1/share [ 718.437307][ T9496] CIFS: VFS: cifs_mount failed w/return code = -112 [ 720.108501][ T9513] FAULT_INJECTION: forcing a failure. [ 720.108501][ T9513] name failslab, interval 1, probability 0, space 0, times 0 [ 720.150923][ T9513] CPU: 0 PID: 9513 Comm: syz.3.1036 Not tainted syzkaller #0 [ 720.158408][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 720.168535][ T9513] Call Trace: [ 720.171872][ T9513] [ 720.174863][ T9513] dump_stack_lvl+0x18c/0x250 [ 720.179802][ T9513] ? show_regs_print_info+0x20/0x20 [ 720.185097][ T9513] ? load_image+0x420/0x420 [ 720.189679][ T9513] ? __might_sleep+0xe0/0xe0 [ 720.194353][ T9513] ? __lock_acquire+0x7eb0/0x7eb0 [ 720.199477][ T9513] should_fail_ex+0x394/0x4c0 [ 720.204228][ T9513] should_failslab+0x9/0x20 [ 720.208794][ T9513] slab_pre_alloc_hook+0x59/0x300 [ 720.213877][ T9513] ? snd_seq_oss_readq_new+0x51/0x250 [ 720.219443][ T9513] __kmem_cache_alloc_node+0x53/0x260 [ 720.224888][ T9513] ? snd_seq_oss_readq_new+0x51/0x250 [ 720.230340][ T9513] kmalloc_trace+0x2a/0xe0 [ 720.234839][ T9513] snd_seq_oss_readq_new+0x51/0x250 [ 720.240117][ T9513] snd_seq_oss_open+0x807/0xf10 [ 720.245050][ T9513] ? snd_seq_oss_delete_client+0x50/0x50 [ 720.250795][ T9513] ? trace_raw_output_contention_end+0xd0/0xd0 [ 720.257079][ T9513] ? soundcore_open+0x274/0x4c0 [ 720.262084][ T9513] ? odev_open+0x5c/0xa0 [ 720.266401][ T9513] ? __lock_acquire+0x7eb0/0x7eb0 [ 720.271501][ T9513] ? snd_seq_oss_process_event+0x29b0/0x29b0 [ 720.277545][ T9513] ? async_call_lookup_ports+0x20/0x20 [ 720.283073][ T9513] ? do_raw_spin_unlock+0x121/0x230 [ 720.288364][ T9513] ? soundcore_open+0x310/0x4c0 [ 720.293296][ T9513] odev_open+0x67/0xa0 [ 720.297479][ T9513] chrdev_open+0x58c/0x600 [ 720.301999][ T9513] ? cd_forget+0x160/0x160 [ 720.306479][ T9513] ? fsnotify_perm+0x3ed/0x5e0 [ 720.311338][ T9513] do_dentry_open+0x880/0x14b0 [ 720.316173][ T9513] ? cd_forget+0x160/0x160 [ 720.320651][ T9513] path_openat+0x284f/0x3270 [ 720.325339][ T9513] ? do_sys_openat2+0xda/0x1d0 [ 720.330169][ T9513] ? do_filp_open+0x430/0x430 [ 720.334920][ T9513] do_filp_open+0x1f2/0x430 [ 720.339485][ T9513] ? vfs_tmpfile+0x620/0x620 [ 720.344158][ T9513] ? _raw_spin_unlock+0x28/0x40 [ 720.349074][ T9513] ? alloc_fd+0x590/0x640 [ 720.353512][ T9513] do_sys_openat2+0x134/0x1d0 [ 720.358255][ T9513] ? do_sys_open+0xe0/0xe0 [ 720.362762][ T9513] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 720.368809][ T9513] ? lock_chain_count+0x20/0x20 [ 720.373716][ T9513] __x64_sys_openat+0x139/0x160 [ 720.378755][ T9513] do_syscall_64+0x55/0xb0 [ 720.383233][ T9513] ? clear_bhb_loop+0x40/0x90 [ 720.388003][ T9513] ? clear_bhb_loop+0x40/0x90 [ 720.392800][ T9513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.398746][ T9513] RIP: 0033:0x7f5c49da8fd9 [ 720.403211][ T9513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.422882][ T9513] RSP: 002b:00007f5c4ad3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 720.431377][ T9513] RAX: ffffffffffffffda RBX: 00007f5c4a025fa0 RCX: 00007f5c49da8fd9 [ 720.439679][ T9513] RDX: 0000000000020040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 720.447710][ T9513] RBP: 00007f5c49e37fed R08: 0000000000000000 R09: 0000000000000000 [ 720.455752][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.463810][ T9513] R13: 00007f5c4a026038 R14: 00007f5c4a025fa0 R15: 00007fff15827648 [ 720.471876][ T9513] [ 720.652333][ T28] audit: type=1800 audit(1794481456.010:13): pid=9519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1037" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 721.922353][ T9525] jffs2: notice: (9525) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 723.127957][ T5799] Bluetooth: hci1: unexpected event for opcode 0x042e [ 723.761685][ T9545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 725.909068][ T9552] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 725.951377][ T9561] jffs2: notice: (9561) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 730.755604][ T9580] jffs2: notice: (9580) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 734.139015][ T5799] Bluetooth: hci3: unexpected event for opcode 0x042e [ 734.332655][ T9571] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 736.082554][ T9571] usb 1-1: Using ep0 maxpacket: 8 [ 736.114116][ T9571] usb 1-1: config 9 has an invalid interface number: 178 but max is 0 [ 736.122369][ T9571] usb 1-1: config 9 has no interface number 0 [ 736.152553][ T9571] usb 1-1: config 9 interface 178 has no altsetting 0 [ 736.216990][ T9571] usb 1-1: New USB device found, idVendor=168c, idProduct=0001, bcdDevice=b5.c0 [ 736.272670][ T9571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.280751][ T9571] usb 1-1: Product: syz [ 736.327539][ T9571] usb 1-1: Manufacturer: syz [ 736.332257][ T9571] usb 1-1: SerialNumber: syz [ 736.484733][ T9606] jffs2: notice: (9606) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 736.779590][ T9571] usb 1-1: Could not find all expected endpoints [ 736.794733][ T9571] usb 1-1: USB disconnect, device number 3 [ 740.940819][ T9636] jffs2: notice: (9636) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 741.172708][ T9636] jffs2: warning: (9636) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=68 [ 741.555429][ T9639] jffs2: notice: (9639) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 742.976418][ T5799] Bluetooth: hci1: unexpected event for opcode 0x042e [ 745.389240][ T9660] jffs2: notice: (9660) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 745.595436][ T9660] jffs2: warning: (9660) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=68 [ 747.456240][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.462694][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.314327][ T9689] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 750.314327][ T9689] [ 750.499350][ T9689] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 750.626123][ T9689] CIFS: Attempting to mount //127.0.0.1/share [ 752.210908][ T9689] CIFS: VFS: cifs_mount failed w/return code = -112 [ 753.112493][ T9706] jffs2: notice: (9706) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 753.974818][ T9710] jffs2: warning: (9710) do_jffs2_setxattr: jffs2_reserve_space()=-4, request=68 [ 775.010680][ T9795] jffs2: notice: (9795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 778.620440][ T9820] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 778.620440][ T9820] [ 778.634410][ T9820] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 778.647330][ T9820] CIFS: Attempting to mount //127.0.0.1/share [ 779.412215][ T9820] CIFS: VFS: cifs_mount failed w/return code = -512 [ 779.602170][ T9824] FAULT_INJECTION: forcing a failure. [ 779.602170][ T9824] name fail_futex, interval 1, probability 0, space 0, times 0 [ 779.704707][ T9824] CPU: 0 PID: 9824 Comm: syz.2.1124 Not tainted syzkaller #0 [ 779.712204][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 779.722329][ T9824] Call Trace: [ 779.725679][ T9824] [ 779.728662][ T9824] dump_stack_lvl+0x18c/0x250 [ 779.733412][ T9824] ? show_regs_print_info+0x20/0x20 [ 779.738685][ T9824] ? load_image+0x420/0x420 [ 779.743268][ T9824] should_fail_ex+0x394/0x4c0 [ 779.748010][ T9824] get_futex_key+0x134/0xf40 [ 779.752696][ T9824] ? futex_setup_timer+0xc0/0xc0 [ 779.757700][ T9824] futex_wake+0x127/0x4f0 [ 779.762118][ T9824] ? futex_wake_mark+0x150/0x150 [ 779.767132][ T9824] do_futex+0x35d/0x3e0 [ 779.771346][ T9824] ? __might_sleep+0xe0/0xe0 [ 779.776024][ T9824] ? __ia32_sys_get_robust_list+0x110/0x110 [ 779.781998][ T9824] ? __fdget_raw+0x15b/0x1b0 [ 779.786672][ T9824] __se_sys_futex+0x3a9/0x440 [ 779.791463][ T9824] ? __x64_sys_futex+0xf0/0xf0 [ 779.796281][ T9824] ? __x64_sys_futex+0x21/0xf0 [ 779.801076][ T9824] do_syscall_64+0x55/0xb0 [ 779.805512][ T9824] ? clear_bhb_loop+0x40/0x90 [ 779.810211][ T9824] ? clear_bhb_loop+0x40/0x90 [ 779.814924][ T9824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.820872][ T9824] RIP: 0033:0x7f1f26fa8fd9 [ 779.825307][ T9824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.844959][ T9824] RSP: 002b:00007f1f27f290e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 779.853465][ T9824] RAX: ffffffffffffffda RBX: 00007f1f27225fa8 RCX: 00007f1f26fa8fd9 [ 779.861482][ T9824] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1f27225fac [ 779.869495][ T9824] RBP: 00007f1f27225fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 779.877513][ T9824] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 779.885511][ T9824] R13: 00007f1f27226038 R14: 00007ffdb20063a0 R15: 00007ffdb2006488 [ 779.893518][ T9824] [ 780.033551][ T9830] jffs2: notice: (9830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 785.616795][ T9859] FAULT_INJECTION: forcing a failure. [ 785.616795][ T9859] name fail_futex, interval 1, probability 0, space 0, times 0 [ 785.703992][ T9859] CPU: 1 PID: 9859 Comm: syz.3.1135 Not tainted syzkaller #0 [ 785.711468][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 785.721581][ T9859] Call Trace: [ 785.724920][ T9859] [ 785.727923][ T9859] dump_stack_lvl+0x18c/0x250 [ 785.732760][ T9859] ? show_regs_print_info+0x20/0x20 [ 785.738039][ T9859] ? load_image+0x420/0x420 [ 785.742623][ T9859] ? kernel_text_address+0xa0/0xd0 [ 785.747779][ T9859] ? __kernel_text_address+0xd/0x30 [ 785.753017][ T9859] should_fail_ex+0x394/0x4c0 [ 785.757737][ T9859] get_futex_key+0x134/0xf40 [ 785.762357][ T9859] ? stack_trace_save+0xaa/0x100 [ 785.767329][ T9859] ? futex_setup_timer+0xc0/0xc0 [ 785.772311][ T9859] ? __stack_depot_save+0x1f/0x660 [ 785.777484][ T9859] futex_wait_setup+0xbc/0x270 [ 785.782346][ T9859] ? futex_wait_multiple+0x970/0x970 [ 785.787760][ T9859] ? do_sys_openat2+0x170/0x1d0 [ 785.792662][ T9859] ? do_syscall_64+0x55/0xb0 [ 785.797301][ T9859] futex_wait+0x1cf/0x640 [ 785.801678][ T9859] ? futex_wait_setup+0x270/0x270 [ 785.806762][ T9859] do_futex+0x2ff/0x3e0 [ 785.810954][ T9859] ? __ia32_sys_get_robust_list+0x110/0x110 [ 785.816922][ T9859] __se_sys_futex+0x3a9/0x440 [ 785.821642][ T9859] ? __x64_sys_futex+0xf0/0xf0 [ 785.826457][ T9859] ? __x64_sys_futex+0x21/0xf0 [ 785.831261][ T9859] do_syscall_64+0x55/0xb0 [ 785.835713][ T9859] ? clear_bhb_loop+0x40/0x90 [ 785.840450][ T9859] ? clear_bhb_loop+0x40/0x90 [ 785.845190][ T9859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.851120][ T9859] RIP: 0033:0x7f5c49da8fd9 [ 785.855568][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.875211][ T9859] RSP: 002b:00007f5c4ad3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 785.883671][ T9859] RAX: ffffffffffffffda RBX: 00007f5c4a025fa8 RCX: 00007f5c49da8fd9 [ 785.891677][ T9859] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5c4a025fa8 [ 785.899678][ T9859] RBP: 00007f5c4a025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 785.907685][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.915684][ T9859] R13: 00007f5c4a026038 R14: 00007fff15827560 R15: 00007fff15827648 [ 785.923703][ T9859] [ 786.298098][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.495349][ T9867] jffs2: notice: (9867) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 792.178654][ T9896] jffs2: notice: (9896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 796.752034][ T9929] Bluetooth: MGMT ver 1.22 [ 798.679023][ T9936] jffs2: notice: (9936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 800.577489][ T9951] ip_tables: iptables: counters copy to user failed while replacing table [ 801.813175][ T9951] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 808.899132][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.905807][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.574541][T10004] jffs2: notice: (10004) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 820.702776][T10026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.196955][T10052] jffs2: notice: (10052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 822.349109][T10057] xt_hashlimit: size too large, truncated to 1048576 [ 828.826963][T10075] jffs2: notice: (10075) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 837.525382][T10115] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 837.525382][T10115] [ 837.582754][T10115] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 837.675073][T10115] CIFS: Attempting to mount //127.0.0.1/share [ 837.701201][T10115] CIFS: VFS: Error connecting to socket. Aborting operation. [ 837.748114][T10115] CIFS: VFS: cifs_mount failed w/return code = -101 [ 841.589229][ T9931] Bluetooth: hci0: unexpected event for opcode 0x042e [ 866.253537][ T9931] Bluetooth: hci1: unexpected event for opcode 0x042e [ 868.548026][T10252] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 868.574448][T10252] CIFS: Attempting to mount //127.0.0.1/share [ 868.584249][T10252] CIFS: VFS: Error connecting to socket. Aborting operation. [ 868.591947][T10252] CIFS: VFS: cifs_mount failed w/return code = -101 [ 870.193777][T10270] xt_hashlimit: size too large, truncated to 1048576 [ 870.562166][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.571921][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.976787][T10276] xt_hashlimit: size too large, truncated to 1048576 [ 879.923142][ T9931] Bluetooth: hci1: unexpected event for opcode 0x042e [ 881.962094][ T9931] Bluetooth: hci2: unexpected event for opcode 0x042e [ 882.216968][T10308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 892.367649][ T9931] Bluetooth: hci3: unexpected event for opcode 0x042e [ 892.573064][T10355] Bluetooth: MGMT ver 1.22 [ 892.866892][ T9931] Bluetooth: hci2: unexpected event for opcode 0x042e [ 893.052598][T10359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.728531][T10382] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 895.728531][T10382] [ 895.742267][T10382] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 895.755409][T10382] CIFS: Attempting to mount //127.0.0.1/share [ 895.762098][T10382] CIFS: VFS: Error connecting to socket. Aborting operation. [ 895.769588][T10382] CIFS: VFS: cifs_mount failed w/return code = -101 [ 896.136259][T10387] syz.2.1277: attempt to access beyond end of device [ 896.136259][T10387] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 896.149701][T10387] EXT4-fs (loop2): unable to read superblock [ 896.992475][T10393] jffs2: notice: (10393) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 900.424645][ T9931] Bluetooth: hci1: unexpected event for opcode 0x042e [ 900.441517][T10413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 901.082650][ T9931] Bluetooth: hci3: unexpected event for opcode 0x042e [ 903.737771][T10436] jffs2: notice: (10436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 908.133993][T10452] syz.3.1287: attempt to access beyond end of device [ 908.133993][T10452] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 908.149159][T10452] EXT4-fs (loop3): unable to read superblock [ 910.184682][T10462] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 910.184682][T10462] [ 910.199018][T10462] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 910.211876][T10462] CIFS: Attempting to mount //127.0.0.1/share [ 912.374831][T10462] CIFS: VFS: cifs_mount failed w/return code = -112 [ 913.622550][ T8692] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 913.909255][ T9931] Bluetooth: hci1: unexpected event for opcode 0x042e [ 914.072644][ T8692] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 914.096592][ T8692] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 914.108141][ T8692] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 914.121317][ T8692] usb 2-1: config 0 interface 0 has no altsetting 0 [ 914.128066][ T8692] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 914.148053][ T8692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.194609][ T8692] usb 2-1: config 0 descriptor?? [ 914.200633][T10486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 914.215185][ T8692] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 914.441933][ T5136] bcm5974 2-1:0.0: could not read from device [ 914.475078][ T5136] bcm5974 2-1:0.0: could not read from device [ 914.483108][ T8692] usb 2-1: USB disconnect, device number 3 [ 917.018918][T10511] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 917.018918][T10511] [ 917.032705][T10511] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 917.045309][T10511] CIFS: Attempting to mount //127.0.0.1/share [ 917.814514][T10511] CIFS: VFS: cifs_mount failed w/return code = -112 [ 919.509880][T10537] xt_hashlimit: size too large, truncated to 1048576 [ 919.605975][T10534] tmpfs: Unknown parameter 'mp' [ 926.961456][T10567] tmpfs: Unknown parameter 'mp' [ 932.010071][T10587] syz.3.1334: attempt to access beyond end of device [ 932.010071][T10587] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 932.024241][T10587] EXT4-fs (loop3): unable to read superblock [ 932.944392][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.950961][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.794095][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 936.805535][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 936.830171][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 936.848586][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 936.869449][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 936.878649][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 938.772201][T10601] rxe_eth0 speed is unknown, defaulting to 1000 [ 938.976157][ T5796] Bluetooth: hci4: command tx timeout [ 940.289821][ T1075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.559708][ T1075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.698039][ T1075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.058180][ T5796] Bluetooth: hci4: command tx timeout [ 941.066441][ T1075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.048281][ T5796] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 943.133101][ T5796] Bluetooth: hci4: command tx timeout [ 943.148850][T10601] chnl_net:caif_netlink_parms(): no params data found [ 945.270141][ T5796] Bluetooth: hci4: command tx timeout [ 947.602712][T10601] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.622578][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.664922][T10601] bridge_slave_0: entered allmulticast mode [ 947.693317][T10601] bridge_slave_0: entered promiscuous mode [ 947.755387][T10601] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.773290][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.780607][T10601] bridge_slave_1: entered allmulticast mode [ 947.804067][T10601] bridge_slave_1: entered promiscuous mode [ 950.118361][T10601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.185825][T10601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.441866][T10601] team0: Port device team_slave_0 added [ 952.476853][T10601] team0: Port device team_slave_1 added [ 952.733306][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.740328][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.817608][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.851131][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.893329][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.001811][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.703880][T10601] hsr_slave_0: entered promiscuous mode [ 955.927108][T10601] hsr_slave_1: entered promiscuous mode [ 955.993058][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 956.000705][T10601] Cannot create hsr debugfs directory [ 956.917604][ T1075] hsr_slave_0: left promiscuous mode [ 956.988432][ T1075] hsr_slave_1: left promiscuous mode [ 957.042867][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.050418][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.076364][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.092134][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.123514][ T1075] bridge_slave_1: left allmulticast mode [ 957.129266][ T1075] bridge_slave_1: left promiscuous mode [ 957.165055][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.283599][ T1075] bridge_slave_0: left allmulticast mode [ 957.289336][ T1075] bridge_slave_0: left promiscuous mode [ 957.315561][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.400940][ T5796] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 957.432104][ T1075] veth1_macvtap: left promiscuous mode [ 957.438216][ T1075] veth0_macvtap: left promiscuous mode [ 957.444116][ T1075] veth1_vlan: left promiscuous mode [ 957.449712][ T1075] veth0_vlan: left promiscuous mode [ 965.189740][ T1075] team0 (unregistering): Port device team_slave_1 removed [ 965.297567][ T1075] team0 (unregistering): Port device team_slave_0 removed [ 965.395820][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.702858][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.248480][T10754] ip_tables: iptables: counters copy to user failed while replacing table [ 968.288268][T10757] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 968.390923][ T5796] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 968.431936][ T1075] bond0 (unregistering): Released all slaves [ 970.458341][T10601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 970.656121][T10601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 970.718561][T10601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 970.842502][T10601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 970.920482][ T9931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 970.943103][ T9931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 970.959061][ T9931] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 970.979184][ T9931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 970.987412][ T9931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 970.995159][ T9931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 971.259176][T10772] rxe_eth0 speed is unknown, defaulting to 1000 [ 971.467771][T10601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.556985][T10601] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.674350][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.681579][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.751944][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.759227][ T9292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.017877][T10601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 973.052917][ T9931] Bluetooth: hci2: command tx timeout [ 973.411221][ T1075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.607074][ T1075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.905349][T10772] chnl_net:caif_netlink_parms(): no params data found [ 975.026848][ T1075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.137141][ T9931] Bluetooth: hci2: command tx timeout [ 975.155509][ T1075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.294988][T10601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.519295][ T28] audit: type=1800 audit(1794481710.860:14): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1372" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 975.891264][T10772] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.941696][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.949349][T10772] bridge_slave_0: entered allmulticast mode [ 975.965727][T10772] bridge_slave_0: entered promiscuous mode [ 976.020782][T10772] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.056539][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.084815][T10772] bridge_slave_1: entered allmulticast mode [ 976.108404][T10772] bridge_slave_1: entered promiscuous mode [ 976.337042][T10772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.386808][T10772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.483941][T10832] ip_tables: iptables: counters copy to user failed while replacing table [ 976.542532][T10772] team0: Port device team_slave_0 added [ 977.229501][ T9931] Bluetooth: hci2: command tx timeout [ 977.233171][T10772] team0: Port device team_slave_1 added [ 977.484789][T10838] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 978.192638][T10843] Bluetooth: MGMT ver 1.22 [ 978.844302][ T9931] Bluetooth: hci0: unexpected event for opcode 0x002e [ 978.920910][T10772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.938421][T10772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.971123][T10772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.036192][T10772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.043522][T10772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.073963][T10772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.256059][T10772] hsr_slave_0: entered promiscuous mode [ 979.273638][T10772] hsr_slave_1: entered promiscuous mode [ 979.282184][T10772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.292435][ T9931] Bluetooth: hci2: command tx timeout [ 979.303302][T10772] Cannot create hsr debugfs directory [ 979.349172][T10601] veth0_vlan: entered promiscuous mode [ 980.774357][T10601] veth1_vlan: entered promiscuous mode [ 981.893148][T10601] veth0_macvtap: entered promiscuous mode [ 983.418161][T10601] veth1_macvtap: entered promiscuous mode [ 983.780468][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.818151][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.852971][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.867993][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.892613][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.912415][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.949886][T10601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.976784][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.012648][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.032657][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.062545][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.086435][T10601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.128549][T10601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.152541][T10601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.161351][T10601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.192406][T10601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.223842][ T1075] hsr_slave_0: left promiscuous mode [ 984.236465][ T1075] hsr_slave_1: left promiscuous mode [ 984.245679][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.272599][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.293459][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.300991][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.360518][ T1075] veth1_macvtap: left promiscuous mode [ 984.372731][ T1075] veth0_macvtap: left promiscuous mode [ 984.378521][ T1075] veth1_vlan: left promiscuous mode [ 984.392832][ T1075] veth0_vlan: left promiscuous mode [ 985.568474][T10878] jffs2: notice: (10878) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 985.668525][T10878] jffs2: warning: (10878) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=68 [ 986.339790][T10888] ip_tables: iptables: counters copy to user failed while replacing table [ 987.369059][T10889] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 990.264216][ T1075] team0 (unregistering): Port device team_slave_1 removed [ 990.365422][ T1075] team0 (unregistering): Port device team_slave_0 removed [ 990.482189][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.551200][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.823438][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.833925][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.480904][ T1075] bond0 (unregistering): Released all slaves [ 994.614288][T10772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 994.638811][T10772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 994.669456][T10912] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 994.669456][T10912] [ 994.683526][T10912] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 994.696133][T10912] CIFS: Attempting to mount //127.0.0.1/share [ 994.715249][T10772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 994.733750][T10772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 995.256586][T10919] FAULT_INJECTION: forcing a failure. [ 995.256586][T10919] name fail_futex, interval 1, probability 0, space 0, times 0 [ 995.292665][T10919] CPU: 1 PID: 10919 Comm: syz.0.1391 Not tainted syzkaller #0 [ 995.300184][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 995.310258][T10919] Call Trace: [ 995.313553][T10919] [ 995.316494][T10919] dump_stack_lvl+0x18c/0x250 [ 995.321202][T10919] ? show_regs_print_info+0x20/0x20 [ 995.326421][T10919] ? load_image+0x420/0x420 [ 995.330937][T10919] ? cmp_ex_search+0x1e/0x80 [ 995.335616][T10919] ? bsearch+0x8a/0xb0 [ 995.339703][T10919] ? rep_movs_alternative+0x13/0x90 [ 995.344943][T10919] should_fail_ex+0x394/0x4c0 [ 995.349669][T10919] get_futex_key+0x134/0xf40 [ 995.354280][T10919] ? fixup_exception+0x11bb/0x1d90 [ 995.359468][T10919] ? futex_setup_timer+0xc0/0xc0 [ 995.364446][T10919] futex_wake+0x127/0x4f0 [ 995.368797][T10919] ? futex_wake_mark+0x150/0x150 [ 995.373765][T10919] ? lockdep_hardirqs_on+0x98/0x150 [ 995.378975][T10919] do_futex+0x35d/0x3e0 [ 995.383142][T10919] ? __might_sleep+0xe0/0xe0 [ 995.387752][T10919] ? __ia32_sys_get_robust_list+0x110/0x110 [ 995.393661][T10919] ? rcuref_put_slowpath+0x131/0x150 [ 995.398963][T10919] __se_sys_futex+0x3a9/0x440 [ 995.403662][T10919] ? __x64_sys_futex+0xf0/0xf0 [ 995.408444][T10919] ? __x64_sys_futex+0x21/0xf0 [ 995.413221][T10919] do_syscall_64+0x55/0xb0 [ 995.417654][T10919] ? clear_bhb_loop+0x40/0x90 [ 995.422367][T10919] ? clear_bhb_loop+0x40/0x90 [ 995.427082][T10919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 995.432989][T10919] RIP: 0033:0x7f85587a8fd9 [ 995.437412][T10919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.457121][T10919] RSP: 002b:00007f85596790e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 995.465561][T10919] RAX: ffffffffffffffda RBX: 00007f8558a25fa8 RCX: 00007f85587a8fd9 [ 995.473563][T10919] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8558a25fac [ 995.481545][T10919] RBP: 00007f8558a25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 995.489547][T10919] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 995.497564][T10919] R13: 00007f8558a26038 R14: 00007ffcf02a3b50 R15: 00007ffcf02a3c38 [ 995.505559][T10919] [ 995.515479][T10912] CIFS: VFS: cifs_mount failed w/return code = -512 [ 995.554751][T10772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.700098][T10772] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.786183][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.793490][ T9292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.903838][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.911072][ T9292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.253718][ T9931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 998.264956][ T9931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 998.275230][ T9931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 998.301760][ T9931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 998.310230][ T9931] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 998.323100][ T9931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 998.701032][T10937] rxe_eth0 speed is unknown, defaulting to 1000 [ 998.911551][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.160630][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.305857][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.357246][T10772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.445175][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.042296][T10937] chnl_net:caif_netlink_parms(): no params data found [ 1001.155083][T10943] Bluetooth: hci3: command tx timeout [ 1002.114019][T10937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.121259][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.142845][T10937] bridge_slave_0: entered allmulticast mode [ 1002.165704][T10986] device-mapper: table: 248:2: multipath: not enough priority group arguments (-EINVAL) [ 1002.183961][T10937] bridge_slave_0: entered promiscuous mode [ 1002.208830][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.222518][T10986] device-mapper: ioctl: error adding target to table [ 1002.223396][T10990] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 1002.234185][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.258543][T10937] bridge_slave_1: entered allmulticast mode [ 1002.266498][T10937] bridge_slave_1: entered promiscuous mode [ 1002.359854][T10772] veth0_vlan: entered promiscuous mode [ 1002.428697][T10937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.490701][T10996] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1002.490701][T10996] [ 1002.504526][T10996] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1002.517200][T10996] CIFS: Attempting to mount //127.0.0.1/share [ 1002.556942][T10937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.657282][T10937] team0: Port device team_slave_0 added [ 1002.677644][T10772] veth1_vlan: entered promiscuous mode [ 1002.707047][T10937] team0: Port device team_slave_1 added [ 1002.796545][T11005] jffs2: notice: (11005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1002.858133][T10937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.869599][T10937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.915655][T10937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.018693][T10937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.041574][T10937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.139670][T10937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.212880][T10943] Bluetooth: hci3: command tx timeout [ 1003.231571][T10996] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1003.444377][ T50] hsr_slave_0: left promiscuous mode [ 1003.469143][ T50] hsr_slave_1: left promiscuous mode [ 1003.476243][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.705310][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.800249][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.873763][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.971135][ T50] bridge_slave_1: left allmulticast mode [ 1004.021846][ T50] bridge_slave_1: left promiscuous mode [ 1004.086050][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.236384][ T50] bridge_slave_0: left allmulticast mode [ 1004.286034][ T50] bridge_slave_0: left promiscuous mode [ 1004.291943][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.501323][T10943] Bluetooth: hci3: command tx timeout [ 1005.606194][ T50] veth1_macvtap: left promiscuous mode [ 1005.611828][ T50] veth0_macvtap: left promiscuous mode [ 1005.618150][ T50] veth1_vlan: left promiscuous mode [ 1005.625988][ T50] veth0_vlan: left promiscuous mode [ 1007.500736][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1007.540924][ T5796] Bluetooth: hci3: command tx timeout [ 1007.607326][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1007.733138][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.844117][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.486524][ T50] bond0 (unregistering): Released all slaves [ 1008.691477][T10937] hsr_slave_0: entered promiscuous mode [ 1008.698321][T10937] hsr_slave_1: entered promiscuous mode [ 1008.863490][T10772] veth0_macvtap: entered promiscuous mode [ 1008.898448][T10772] veth1_macvtap: entered promiscuous mode [ 1009.113160][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.139821][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.160224][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.172839][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.185130][T10772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.290893][T10772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.356699][T10772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.414443][T10772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.669266][T10772] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.706757][T10772] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.810438][T10772] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.822379][T10772] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.865943][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 1012.588881][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.611637][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.762888][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.771150][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.101041][T10937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1013.133989][T10937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1013.195455][T11079] jffs2: notice: (11079) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1013.395113][T10937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1013.464730][T10937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1013.890342][T10937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.960161][T10937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.030734][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.037946][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.166659][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.174073][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.594004][T10937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.421093][T11110] jffs2: notice: (11110) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1021.531530][T10937] veth0_vlan: entered promiscuous mode [ 1021.630230][T10937] veth1_vlan: entered promiscuous mode [ 1021.896243][T10937] veth0_macvtap: entered promiscuous mode [ 1021.974242][T10937] veth1_macvtap: entered promiscuous mode [ 1022.126626][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.242396][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.282659][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.322440][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.382424][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.442451][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.491254][T10937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.544830][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.572698][ T5796] Bluetooth: hci0: unexpected event for opcode 0x042e [ 1022.579648][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.744494][T10937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.757497][T10937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.773361][T10937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.845463][T10937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.889363][T10937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.899444][T10937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.912067][T10937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.336132][T11155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1023.709190][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.802369][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.015564][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.083185][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.255154][T11164] jffs2: notice: (11164) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1030.703295][T11208] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1030.703295][T11208] [ 1030.717789][T11208] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1030.730453][T11208] CIFS: Attempting to mount //127.0.0.1/share [ 1030.738496][T11208] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1030.746058][T11208] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1030.825260][T11211] jffs2: notice: (11211) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1037.550168][T11254] jffs2: notice: (11254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1037.765136][T11254] jffs2: warning: (11254) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=68 [ 1040.024118][T11274] loop0: detected capacity change from 0 to 1024 [ 1042.701710][T11293] jffs2: notice: (11293) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1045.780140][T11322] loop3: detected capacity change from 0 to 1024 [ 1048.676907][T11344] jffs2: notice: (11344) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1055.462667][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.469075][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.861943][T11396] jffs2: notice: (11396) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1056.718605][T11402] loop3: detected capacity change from 0 to 1024 [ 1063.482862][T11440] loop0: detected capacity change from 0 to 1024 [ 1064.654475][T11448] FAULT_INJECTION: forcing a failure. [ 1064.654475][T11448] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.693346][T11448] CPU: 0 PID: 11448 Comm: syz.5.1469 Not tainted syzkaller #0 [ 1064.700911][T11448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1064.711027][T11448] Call Trace: [ 1064.714367][T11448] [ 1064.717330][T11448] dump_stack_lvl+0x18c/0x250 [ 1064.722054][T11448] ? show_regs_print_info+0x20/0x20 [ 1064.727301][T11448] ? load_image+0x420/0x420 [ 1064.731843][T11448] ? __might_sleep+0xe0/0xe0 [ 1064.736460][T11448] ? __lock_acquire+0x7eb0/0x7eb0 [ 1064.741512][T11448] ? mark_lock+0x94/0x320 [ 1064.745954][T11448] should_fail_ex+0x394/0x4c0 [ 1064.750659][T11448] should_failslab+0x9/0x20 [ 1064.755181][T11448] slab_pre_alloc_hook+0x59/0x300 [ 1064.760230][T11448] ? snd_seq_port_connect+0x6b/0x420 [ 1064.765558][T11448] __kmem_cache_alloc_node+0x53/0x260 [ 1064.770953][T11448] ? snd_seq_port_connect+0x6b/0x420 [ 1064.776261][T11448] kmalloc_trace+0x2a/0xe0 [ 1064.780705][T11448] snd_seq_port_connect+0x6b/0x420 [ 1064.785864][T11448] ? do_raw_read_unlock+0x3d/0x80 [ 1064.790918][T11448] ? _raw_read_unlock+0x28/0x40 [ 1064.795791][T11448] snd_seq_ioctl_subscribe_port+0x318/0x6e0 [ 1064.801781][T11448] ? snd_seq_oss_midi_open+0x19a/0x800 [ 1064.807271][T11448] ? snd_seq_ioctl_set_port_info+0x1a0/0x1a0 [ 1064.813463][T11448] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1064.819403][T11448] ? _raw_spin_unlock+0x40/0x40 [ 1064.824284][T11448] snd_seq_oss_midi_open+0x4f7/0x800 [ 1064.829595][T11448] ? snd_seq_oss_midi_open_all+0xc0/0xc0 [ 1064.835288][T11448] snd_seq_oss_midi_open_all+0x59/0xc0 [ 1064.840774][T11448] snd_seq_oss_open+0x9b3/0xf10 [ 1064.845651][T11448] ? snd_seq_oss_delete_client+0x50/0x50 [ 1064.851343][T11448] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1064.857524][T11448] ? soundcore_open+0x274/0x4c0 [ 1064.862398][T11448] ? odev_open+0x5c/0xa0 [ 1064.866682][T11448] ? __lock_acquire+0x7eb0/0x7eb0 [ 1064.871729][T11448] ? snd_seq_oss_process_event+0x29b0/0x29b0 [ 1064.877748][T11448] ? async_call_lookup_ports+0x20/0x20 [ 1064.883269][T11448] ? do_raw_spin_unlock+0x121/0x230 [ 1064.888524][T11448] ? soundcore_open+0x310/0x4c0 [ 1064.893420][T11448] odev_open+0x67/0xa0 [ 1064.897551][T11448] chrdev_open+0x58c/0x600 [ 1064.902100][T11448] ? cd_forget+0x160/0x160 [ 1064.906577][T11448] ? fsnotify_perm+0x3ed/0x5e0 [ 1064.911380][T11448] do_dentry_open+0x880/0x14b0 [ 1064.916188][T11448] ? cd_forget+0x160/0x160 [ 1064.920664][T11448] path_openat+0x284f/0x3270 [ 1064.925301][T11448] ? do_sys_openat2+0xda/0x1d0 [ 1064.930108][T11448] ? do_filp_open+0x430/0x430 [ 1064.934836][T11448] do_filp_open+0x1f2/0x430 [ 1064.939399][T11448] ? vfs_tmpfile+0x620/0x620 [ 1064.944044][T11448] ? _raw_spin_unlock+0x28/0x40 [ 1064.948938][T11448] ? alloc_fd+0x590/0x640 [ 1064.953302][T11448] do_sys_openat2+0x134/0x1d0 [ 1064.958035][T11448] ? do_sys_open+0xe0/0xe0 [ 1064.962503][T11448] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1064.968540][T11448] ? lock_chain_count+0x20/0x20 [ 1064.973444][T11448] __x64_sys_openat+0x139/0x160 [ 1064.978381][T11448] do_syscall_64+0x55/0xb0 [ 1064.982827][T11448] ? clear_bhb_loop+0x40/0x90 [ 1064.987529][T11448] ? clear_bhb_loop+0x40/0x90 [ 1064.992234][T11448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.998192][T11448] RIP: 0033:0x7fbc55da8fd9 [ 1065.002630][T11448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.022312][T11448] RSP: 002b:00007fbc56c72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1065.030789][T11448] RAX: ffffffffffffffda RBX: 00007fbc56025fa0 RCX: 00007fbc55da8fd9 [ 1065.038811][T11448] RDX: 0000000000020040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1065.046839][T11448] RBP: 00007fbc55e37fed R08: 0000000000000000 R09: 0000000000000000 [ 1065.054837][T11448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.062827][T11448] R13: 00007fbc56026038 R14: 00007fbc56025fa0 R15: 00007fff7eabe768 [ 1065.070834][T11448] [ 1067.774892][T11474] jffs2: notice: (11474) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1073.915132][T11525] jffs2: notice: (11525) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1074.131623][T11529] loop4: detected capacity change from 0 to 1024 [ 1079.384615][ T789] IPVS: starting estimator thread 0... [ 1079.501591][T11571] IPVS: using max 18 ests per chain, 43200 per kthread [ 1081.380252][T11582] jffs2: notice: (11582) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1087.051378][T11630] loop3: detected capacity change from 0 to 1024 [ 1087.199064][T11634] No source specified [ 1089.779073][T11639] jffs2: notice: (11639) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1090.134536][ T28] audit: type=1800 audit(1794481825.480:15): pid=11652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1515" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 1091.708359][ T5796] Bluetooth: hci1: unexpected event for opcode 0x042e [ 1094.781825][T11683] loop3: detected capacity change from 0 to 1024 [ 1099.615827][T10943] Bluetooth: hci2: command 0x0406 tx timeout [ 1099.644523][ T28] audit: type=1800 audit(1794481833.690:16): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1526" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 1102.529603][T11725] loop5: detected capacity change from 0 to 1024 [ 1104.008039][T10943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1104.020103][T10943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1104.047127][T10943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1104.058343][T10943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1104.076401][T10943] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1104.092667][T10943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1104.443596][T11741] rxe_eth0 speed is unknown, defaulting to 1000 [ 1105.240185][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.388540][ T5796] Bluetooth: hci2: unexpected event for opcode 0x042e [ 1106.521652][ T5796] Bluetooth: hci4: command tx timeout [ 1106.586958][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.837038][T11764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1107.905139][T11769] ip_tables: iptables: counters copy to user failed while replacing table [ 1107.929588][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.330191][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.572901][T10943] Bluetooth: hci4: command tx timeout [ 1110.578735][T11785] loop4: detected capacity change from 0 to 1024 [ 1110.652707][T10943] Bluetooth: hci4: command tx timeout [ 1112.165275][T11741] chnl_net:caif_netlink_parms(): no params data found [ 1112.817062][T10943] Bluetooth: hci4: command tx timeout [ 1113.988072][T11741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.012580][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.047214][T11741] bridge_slave_0: entered allmulticast mode [ 1114.075263][T11741] bridge_slave_0: entered promiscuous mode [ 1114.187017][T11741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.196917][T11833] jffs2: notice: (11833) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1114.222718][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.337032][T11741] bridge_slave_1: entered allmulticast mode [ 1114.385147][T11741] bridge_slave_1: entered promiscuous mode [ 1114.678449][T11741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.850385][T11741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.009870][T11741] team0: Port device team_slave_0 added [ 1115.153544][T11741] team0: Port device team_slave_1 added [ 1115.914880][T11844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1116.109427][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.115980][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.204946][T11741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.211971][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.378355][T11741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.380114][T11848] jffs2: notice: (11848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1116.487253][T11741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.540190][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.567438][T11741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.728498][T11857] loop4: detected capacity change from 0 to 1024 [ 1117.924337][T11741] hsr_slave_0: entered promiscuous mode [ 1117.976044][T11741] hsr_slave_1: entered promiscuous mode [ 1118.011703][T11741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1118.031703][T11741] Cannot create hsr debugfs directory [ 1118.067615][T11876] jffs2: notice: (11876) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1118.146653][ T32] hsr_slave_0: left promiscuous mode [ 1118.422026][ T32] hsr_slave_1: left promiscuous mode [ 1118.549718][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.655457][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.780009][ T32] bridge_slave_1: left allmulticast mode [ 1118.847588][ T32] bridge_slave_1: left promiscuous mode [ 1119.002752][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.113253][ T32] bridge_slave_0: left allmulticast mode [ 1119.132580][ T32] bridge_slave_0: left promiscuous mode [ 1119.138459][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.287060][ T32] veth1_macvtap: left promiscuous mode [ 1119.295896][ T32] veth0_macvtap: left promiscuous mode [ 1119.301676][ T32] veth1_vlan: left promiscuous mode [ 1119.387404][ T32] veth0_vlan: left promiscuous mode [ 1119.673520][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1119.891991][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 1119.919490][ T5884] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 1119.938148][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.981127][ T5884] usb 5-1: config 0 has no interface number 0 [ 1120.003919][ T5884] usb 5-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1120.016518][ T5884] usb 5-1: config 0 interface 74 has no altsetting 0 [ 1120.057876][ T5884] usb 5-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 1120.072535][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.080901][ T5884] usb 5-1: Product: syz [ 1120.088513][ T5884] usb 5-1: Manufacturer: syz [ 1120.103677][ T5884] usb 5-1: SerialNumber: syz [ 1120.133853][ T5884] usb 5-1: config 0 descriptor?? [ 1120.164997][ T5884] em28xx 5-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 1120.192377][ T5884] em28xx 5-1:0.74: Video interface 74 found: [ 1120.875769][T10943] Bluetooth: hci1: unexpected event for opcode 0x042e [ 1121.185283][ T5884] em28xx 5-1:0.74: unknown em28xx chip ID (0) [ 1121.189369][T11906] ip_tables: iptables: counters copy to user failed while replacing table [ 1121.349646][ T32] team0 (unregistering): Port device team_slave_1 removed [ 1122.264839][ T32] team0 (unregistering): Port device team_slave_0 removed [ 1122.351900][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.396130][ T5884] em28xx 5-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 1122.416084][ T5884] em28xx 5-1:0.74: board has no eeprom [ 1122.432386][ T5884] em28xx 5-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 1122.440392][ T5884] em28xx 5-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 1122.459215][ T5884] em28xx 5-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 1122.490822][ T5884] em28xx 5-1:0.74: couldn't read from i2c device 0xba: error -5 [ 1122.509091][ T5884] em28xx 5-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 1122.536340][ T5884] em28xx 5-1:0.74: couldn't read from i2c device 0x90: error -5 [ 1122.548250][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.560286][ T5884] em28xx 5-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 1122.576367][ T5884] em28xx 5-1:0.74: couldn't read from i2c device 0x42: error -5 [ 1122.609631][ T5884] em28xx 5-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 1122.619347][ T5884] em28xx 5-1:0.74: couldn't read from i2c device 0x60: error -5 [ 1122.648321][ T5884] em28xx 5-1:0.74: No sensor detected [ 1122.738394][ T5884] em28xx 5-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 1122.748212][ T5884] em28xx 5-1:0.74: Currently, V4L2 is not supported on this model [ 1122.765348][ T789] em28xx 5-1:0.74: Registering snapshot button... [ 1123.095144][ T789] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.74/input/input10 [ 1123.116450][ T5884] usb 5-1: USB disconnect, device number 2 [ 1123.242030][ T5884] em28xx 5-1:0.74: Disconnecting em28xx [ 1123.325722][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 1123.390999][ T789] em28xx 5-1:0.74: Remote control support is not available for this card. [ 1123.443962][ T5884] em28xx 5-1:0.74: Closing input extension [ 1123.451616][ T5884] em28xx 5-1:0.74: Deregistering snapshot button [ 1123.615540][T11915] loop4: detected capacity change from 0 to 1024 [ 1123.697597][ T5884] em28xx 5-1:0.74: Freeing device [ 1124.481513][ T32] bond0 (unregistering): Released all slaves [ 1124.736729][T11907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1127.783572][T11919] syz.4.1561: attempt to access beyond end of device [ 1127.783572][T11919] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1127.797000][T11919] EXT4-fs (loop4): unable to read superblock [ 1129.123927][T11942] ip_tables: iptables: counters copy to user failed while replacing table [ 1129.347428][T11741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1129.620728][T11741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1129.906231][T11741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1130.062234][T11947] loop3: detected capacity change from 0 to 1024 [ 1130.105925][T11741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1131.345709][T11741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.417518][T11741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.461073][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.468381][ T9292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.506991][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.514292][ T9292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.604389][T10943] Bluetooth: hci1: unexpected event for opcode 0x042e [ 1131.738666][T11741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1132.718546][T11741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.821138][T11978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1135.643719][T11741] veth0_vlan: entered promiscuous mode [ 1135.683878][T11741] veth1_vlan: entered promiscuous mode [ 1135.834926][T11741] veth0_macvtap: entered promiscuous mode [ 1135.867168][T11741] veth1_macvtap: entered promiscuous mode [ 1135.909972][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.944471][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.975727][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.002367][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.036025][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.072530][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.104741][T11741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.132101][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.162669][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.190278][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.225811][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.252408][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.268213][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.294297][T11741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.383549][T11741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.421006][T11741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.440235][T11741] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.472750][T11741] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.633612][ T9292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.643770][ T9292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.744727][ T9292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.780848][ T9292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.046307][T12028] ip_tables: iptables: counters copy to user failed while replacing table [ 1138.056190][T12027] loop5: detected capacity change from 0 to 1024 [ 1140.200588][T12042] jffs2: notice: (12042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1140.405302][T10943] Bluetooth: hci3: unexpected event for opcode 0x042e [ 1144.147344][T12067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1144.172598][T10943] Bluetooth: hci1: unexpected event for opcode 0x042e [ 1144.630019][T12079] loop6: detected capacity change from 0 to 1024 [ 1148.533567][T12124] loop5: detected capacity change from 0 to 1024 [ 1150.524356][T10943] Bluetooth: hci2: unexpected event for opcode 0x042e [ 1150.700726][T10943] Bluetooth: hci1: unexpected event for opcode 0x042e [ 1152.739400][T12164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1153.749147][T12173] loop6: detected capacity change from 0 to 1024 [ 1162.959851][T12229] loop3: detected capacity change from 0 to 1024 [ 1166.090813][T12245] jffs2: notice: (12245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1170.614068][T12303] jffs2: notice: (12303) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1177.462553][T12353] jffs2: notice: (12353) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1177.538991][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.545484][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.179349][T10943] Bluetooth: hci3: unexpected event for opcode 0x042e [ 1190.717909][T12428] ip_tables: iptables: counters copy to user failed while replacing table [ 1194.940470][T12458] jffs2: notice: (12458) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1195.193832][ T9571] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1195.492373][ T9571] usb 6-1: Using ep0 maxpacket: 8 [ 1195.517949][ T9571] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.562469][ T9571] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1195.571606][ T9571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.604824][ T9571] usb 6-1: config 0 descriptor?? [ 1195.625100][ T9571] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1197.822624][ T9571] gspca_vc032x: reg_r err -110 [ 1197.827594][ T9571] vc032x: probe of 6-1:0.0 failed with error -110 [ 1197.890025][ T5884] usb 6-1: USB disconnect, device number 2 [ 1198.081244][T10943] Bluetooth: hci2: unexpected event for opcode 0x042e [ 1198.500388][T12483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1198.708232][T12486] ip_tables: iptables: counters copy to user failed while replacing table [ 1200.794307][T12517] jffs2: notice: (12517) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1204.932777][T12542] fuse: Bad value for 'fd' [ 1208.746186][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1673'. [ 1209.482953][T10943] Bluetooth: hci2: unexpected event for opcode 0x042e [ 1211.508117][T12589] jffs2: notice: (12589) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1214.852404][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1215.104464][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 1215.124318][ T23] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1215.148372][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.192297][ T23] usb 6-1: config 0 has no interface number 0 [ 1215.198543][ T23] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1215.273447][ T23] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1215.315854][ T23] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1215.352026][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.411228][ T23] usb 6-1: Product: syz [ 1215.423792][ T23] usb 6-1: Manufacturer: syz [ 1215.428543][ T23] usb 6-1: SerialNumber: syz [ 1215.486722][ T23] usb 6-1: config 0 descriptor?? [ 1215.517900][ T23] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1215.567698][ T23] cx231xx 6-1:0.1: Not found matching IAD interface [ 1215.776604][ T9571] usb 6-1: USB disconnect, device number 3 [ 1216.706141][T10943] Bluetooth: hci2: unexpected event for opcode 0x042e [ 1219.134114][T12670] jffs2: notice: (12670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1222.532630][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1222.839946][ T5845] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1223.057004][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.106251][ T5845] usb 5-1: Product: syz [ 1223.127586][ T5845] usb 5-1: Manufacturer: syz [ 1223.172328][ T5845] usb 5-1: SerialNumber: syz [ 1223.193226][ T5845] usb 5-1: config 0 descriptor?? [ 1223.285094][ T5845] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 003 [ 1225.238330][ T5845] i2c i2c-1: failure reading functionality [ 1225.315879][ T5845] i2c i2c-1: connected i2c-tiny-usb device [ 1225.448073][ T5845] usb 5-1: USB disconnect, device number 3 [ 1231.536167][ T5796] Bluetooth: hci4: command 0x0406 tx timeout [ 1231.744233][ T5796] Bluetooth: hci2: unexpected event for opcode 0x042e [ 1235.321613][T12780] svc: failed to register nfsdv3 RPC service (errno 97). [ 1235.352442][T12780] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1237.920925][T12797] ip_tables: iptables: counters copy to user failed while replacing table [ 1238.988200][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.994913][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.823330][T10943] Bluetooth: hci3: unexpected event for opcode 0x042e [ 1244.042037][T12823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1250.880850][T12870] jffs2: notice: (12870) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1259.184913][T10943] Bluetooth: hci4: unexpected event for opcode 0x042e [ 1260.968167][T12927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1261.593028][T12931] loop6: detected capacity change from 0 to 1024 [ 1272.359357][T13004] loop5: detected capacity change from 0 to 1024 [ 1279.730808][T13047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1283.367127][T13084] loop5: detected capacity change from 0 to 1024 [ 1288.314953][T13113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1288.843116][T13124] jffs2: notice: (13124) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1289.059529][T13124] jffs2: warning: (13124) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=44 [ 1295.323503][T13162] jffs2: notice: (13162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1297.174201][T13172] loop6: detected capacity change from 0 to 1024 [ 1300.682964][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.689409][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.324573][T13233] loop3: detected capacity change from 0 to 1024 [ 1309.755693][T10943] Bluetooth: hci4: unexpected event for opcode 0x042e [ 1312.731753][T13249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1319.346051][T13280] loop3: detected capacity change from 0 to 1024 [ 1320.166951][T13286] svc: failed to register nfsdv3 RPC service (errno 97). [ 1320.282928][T13286] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1320.736830][T10943] Bluetooth: hci4: unexpected event for opcode 0x042e [ 1323.428960][T13306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1328.168159][T13325] netlink: 'syz.5.1820': attribute type 1 has an invalid length. [ 1328.272060][T13325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.115841][T13349] loop6: detected capacity change from 0 to 1024 [ 1341.403494][T13383] syz.4.1827: attempt to access beyond end of device [ 1341.403494][T13383] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1341.417750][T13383] EXT4-fs (loop4): unable to read superblock [ 1345.908935][T10943] Bluetooth: hci4: unexpected event for opcode 0x042e [ 1347.133674][T13404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1348.552803][T13414] No source specified [ 1349.836709][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.895339][T13419] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1349.984532][T10943] Bluetooth: hci2: unexpected event for opcode 0x042e [ 1351.083500][T13428] jffs2: notice: (13428) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1352.756061][T13439] capability: warning: `syz.4.1849' uses deprecated v2 capabilities in a way that may be insecure [ 1354.792324][T13446] No source specified [ 1355.928471][T13451] loop6: detected capacity change from 0 to 1024 [ 1361.181735][T13473] jffs2: notice: (13473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1361.733057][T13476] tipc: Can't bind to reserved service type 1 [ 1361.858046][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.864492][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.186990][T13480] ip_tables: iptables: counters copy to user failed while replacing table [ 1365.489126][T13502] loop5: detected capacity change from 0 to 1024 [ 1366.689469][T13511] jffs2: notice: (13511) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1367.473410][T13516] fuse: Bad value for 'group_id' [ 1369.443628][T13523] ip_tables: iptables: counters copy to user failed while replacing table [ 1372.583627][T13544] jffs2: notice: (13544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1376.208479][T13561] loop4: detected capacity change from 0 to 1024 [ 1377.167002][T13569] ip_tables: iptables: counters copy to user failed while replacing table [ 1379.785699][T13583] ip_tables: iptables: counters copy to user failed while replacing table [ 1383.536275][T13595] jffs2: notice: (13595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1385.412251][ T789] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1385.602274][ T789] usb 5-1: Using ep0 maxpacket: 32 [ 1385.619006][ T789] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.665551][ T789] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1385.680884][ T789] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1385.690584][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.705658][ T789] usb 5-1: config 0 descriptor?? [ 1385.723641][ T789] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1385.796888][T13618] loop6: detected capacity change from 0 to 1024 [ 1388.498706][T10288] usb 5-1: USB disconnect, device number 4 [ 1392.305417][T13639] ip_tables: iptables: counters copy to user failed while replacing table [ 1393.323706][T13645] jffs2: notice: (13645) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1397.672482][T10288] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1397.904634][T10288] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1397.968832][T10288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.022209][T10288] usb 4-1: Product: syz [ 1398.032485][T10288] usb 4-1: Manufacturer: syz [ 1398.037178][T10288] usb 4-1: SerialNumber: syz [ 1398.582492][T10288] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1401.382765][T13688] jffs2: notice: (13688) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1401.591481][T10288] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 1401.822335][T10288] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1401.902408][T10288] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1401.941730][T10288] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1401.969450][T10288] usb 4-1: USB disconnect, device number 4 [ 1402.065189][T13696] loop4: detected capacity change from 0 to 1024 [ 1407.801951][T13710] ip_tables: iptables: counters copy to user failed while replacing table [ 1409.039346][T13718] syz.5.1922 (13718): drop_caches: 0 [ 1411.509538][T13741] loop4: detected capacity change from 0 to 1024 [ 1414.328787][T13757] No source specified [ 1415.768941][T13771] ip_tables: iptables: counters copy to user failed while replacing table [ 1420.473656][T13800] No source specified [ 1421.983882][T13805] loop5: detected capacity change from 0 to 1024 [ 1423.904859][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.911266][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.524047][T13835] No source specified [ 1432.619080][T13844] ip_tables: iptables: counters copy to user failed while replacing table [ 1433.631715][T13850] loop5: detected capacity change from 0 to 1024 [ 1438.853082][T13872] No source specified [ 1440.686714][T13883] ip_tables: iptables: counters copy to user failed while replacing table [ 1446.403301][T13903] FAULT_INJECTION: forcing a failure. [ 1446.403301][T13903] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.432379][T13903] CPU: 1 PID: 13903 Comm: syz.6.1963 Not tainted syzkaller #0 [ 1446.439939][T13903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1446.450046][T13903] Call Trace: [ 1446.453365][T13903] [ 1446.456332][T13903] dump_stack_lvl+0x18c/0x250 [ 1446.461071][T13903] ? show_regs_print_info+0x20/0x20 [ 1446.466324][T13903] ? load_image+0x420/0x420 [ 1446.470865][T13903] ? __lock_acquire+0x7eb0/0x7eb0 [ 1446.475931][T13903] should_fail_ex+0x394/0x4c0 [ 1446.480644][T13903] should_failslab+0x9/0x20 [ 1446.485184][T13903] slab_pre_alloc_hook+0x59/0x300 [ 1446.490259][T13903] kmem_cache_alloc+0x5a/0x2d0 [ 1446.495051][T13903] ? create_new_namespaces+0x34/0x700 [ 1446.500461][T13903] create_new_namespaces+0x34/0x700 [ 1446.505704][T13903] __se_sys_setns+0x2f3/0x1740 [ 1446.510517][T13903] ? __x64_sys_setns+0x60/0x60 [ 1446.515322][T13903] ? lockdep_hardirqs_on+0x98/0x150 [ 1446.520556][T13903] do_syscall_64+0x55/0xb0 [ 1446.525008][T13903] ? clear_bhb_loop+0x40/0x90 [ 1446.529723][T13903] ? clear_bhb_loop+0x40/0x90 [ 1446.534436][T13903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1446.540368][T13903] RIP: 0033:0x7f08fdda8fd9 [ 1446.544815][T13903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.564460][T13903] RSP: 002b:00007f08febe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1446.572926][T13903] RAX: ffffffffffffffda RBX: 00007f08fe025fa0 RCX: 00007f08fdda8fd9 [ 1446.580924][T13903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 1446.588927][T13903] RBP: 00007f08fde37fed R08: 0000000000000000 R09: 0000000000000000 [ 1446.596960][T13903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1446.604959][T13903] R13: 00007f08fe026038 R14: 00007f08fe025fa0 R15: 00007ffd8593f198 [ 1446.612971][T13903] [ 1446.853586][T10943] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1448.520214][T13915] No source specified [ 1450.116977][T13923] ip_tables: iptables: counters copy to user failed while replacing table [ 1457.474320][T13953] loop6: detected capacity change from 0 to 1024 [ 1459.545916][T10943] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1462.459772][T13976] No source specified [ 1463.787704][T13981] ip_tables: iptables: counters copy to user failed while replacing table [ 1464.482612][ T28] audit: type=1326 audit(1794482199.690:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13982 comm="syz.5.1991" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc55da8fd9 code=0x0 [ 1466.758985][T13999] loop5: detected capacity change from 0 to 1024 [ 1471.337897][T14022] ip_tables: iptables: counters copy to user failed while replacing table [ 1476.590127][T14038] No source specified [ 1478.299412][T14043] ip_tables: iptables: counters copy to user failed while replacing table [ 1478.429741][T14045] (null): rxe_set_mtu: Set mtu to 1024 [ 1479.660528][T14045] infiniband syz2: set active [ 1479.667983][T14045] infiniband syz2: added bond_slave_1 [ 1479.677359][T14045] syz2: rxe_create_cq: returned err = -12 [ 1479.683754][T14045] infiniband syz2: Couldn't create ib_mad CQ [ 1479.690350][T14045] infiniband syz2: Couldn't open port 1 [ 1479.803868][T14045] RDS/IB: syz2: added [ 1479.809087][T14045] smc: adding ib device syz2 with port count 1 [ 1479.902429][T14045] smc: ib device syz2 port 1 has pnetid [ 1480.128815][T14058] loop5: detected capacity change from 0 to 1024 [ 1484.762833][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.769234][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.043092][T14082] ip_tables: iptables: counters copy to user failed while replacing table [ 1488.090370][T14084] ip_tables: iptables: counters copy to user failed while replacing table [ 1498.834355][T14118] loop4: detected capacity change from 0 to 1024 [ 1499.164555][T14123] ip_tables: iptables: counters copy to user failed while replacing table [ 1504.882954][T14135] syz.5.2029: attempt to access beyond end of device [ 1504.882954][T14135] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1504.896154][T14135] EXT4-fs (loop5): unable to read superblock [ 1506.310128][T14152] ip_tables: iptables: counters copy to user failed while replacing table [ 1512.332927][T14184] syz.5.2039: attempt to access beyond end of device [ 1512.332927][T14184] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1512.346083][T14184] EXT4-fs (loop5): unable to read superblock [ 1512.834062][T14188] ip_tables: iptables: counters copy to user failed while replacing table [ 1513.865347][T14192] ip_tables: iptables: counters copy to user failed while replacing table [ 1514.572221][ T789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1514.877626][ T789] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1514.912452][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.913422][T14201] loop6: detected capacity change from 0 to 1024 [ 1514.920535][ T789] usb 4-1: Product: syz [ 1514.982921][ T789] usb 4-1: Manufacturer: syz [ 1514.987613][ T789] usb 4-1: SerialNumber: syz [ 1516.941511][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1517.490492][T10943] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 1517.535884][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1517.592266][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1517.638651][ T789] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1517.716859][ T789] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1517.781948][ T789] usb 4-1: USB disconnect, device number 5 [ 1520.413468][T14224] syz.5.2049: attempt to access beyond end of device [ 1520.413468][T14224] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1520.426718][T14224] EXT4-fs (loop5): unable to read superblock [ 1525.564073][T14249] ip_tables: iptables: counters copy to user failed while replacing table [ 1526.523751][T14252] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2057'. [ 1526.572178][T14252] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2057'. [ 1527.552934][T14254] syz.5.2058: attempt to access beyond end of device [ 1527.552934][T14254] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1527.566473][T14254] EXT4-fs (loop5): unable to read superblock [ 1528.079611][T14258] loop6: detected capacity change from 0 to 1024 [ 1528.476500][T14261] ip_tables: iptables: counters copy to user failed while replacing table [ 1531.183685][T14273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1537.832202][ T5884] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1538.093689][ T5884] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1538.156626][ T5884] usb 7-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice= 0.40 [ 1538.186353][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.226894][ T5884] usb 7-1: Product: syz [ 1538.231170][ T5884] usb 7-1: Manufacturer: syz [ 1538.272168][ T5884] usb 7-1: SerialNumber: syz [ 1538.658414][ T5884] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1539.720936][ T5884] usb 7-1: USB disconnect, device number 2 [ 1545.791004][T14345] loop5: detected capacity change from 0 to 1024 [ 1546.028355][T14348] ip_tables: iptables: counters copy to user failed while replacing table [ 1546.185138][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.191607][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.614136][T14355] syz.4.2079: attempt to access beyond end of device [ 1547.614136][T14355] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1547.697501][T14356] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1547.788479][T14358] fuse: Bad value for 'fd' [ 1549.713009][T14360] syz.3.2068: attempt to access beyond end of device [ 1549.713009][T14360] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1549.726186][T14360] EXT4-fs (loop3): unable to read superblock [ 1552.563453][T14380] ip_tables: iptables: counters copy to user failed while replacing table [ 1553.810898][T14388] fuse: Bad value for 'user_id' [ 1555.709527][T14390] loop5: detected capacity change from 0 to 1024 [ 1560.602170][ T28] audit: type=1800 audit(1794482295.960:18): pid=14414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2091" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 1561.880292][T14421] ip_tables: iptables: counters copy to user failed while replacing table [ 1565.153231][T14434] No source specified [ 1565.623743][T14433] loop6: detected capacity change from 0 to 1024 [ 1567.410036][T14445] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 1567.418576][T14445] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 1567.427618][T14445] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 1567.437863][T14445] Error parsing options; rc = [-22] [ 1576.604508][T14494] ip_tables: iptables: counters copy to user failed while replacing table [ 1576.938350][T14498] loop3: detected capacity change from 0 to 1024 [ 1580.669815][T14511] ip_tables: iptables: counters copy to user failed while replacing table [ 1584.507746][T14545] ip_tables: iptables: counters copy to user failed while replacing table [ 1587.272560][T14557] No source specified [ 1587.822228][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1588.032375][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 1588.049820][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.071704][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1588.101897][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.142257][ T23] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1588.171809][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.213739][ T23] hub 5-1:1.0: bad descriptor, ignoring hub [ 1588.232329][ T23] hub: probe of 5-1:1.0 failed with error -5 [ 1588.272877][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 1588.278170][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 1588.314846][ T23] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1590.392490][ T8692] usb 5-1: USB disconnect, device number 5 [ 1590.453101][T14571] loop3: detected capacity change from 0 to 1024 [ 1590.732398][ T5796] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1590.801867][T14573] tmpfs: Bad value for 'mpol' [ 1595.532233][ T5796] Bluetooth: hci4: command 0x0406 tx timeout [ 1598.237965][T14603] ip_tables: iptables: counters copy to user failed while replacing table [ 1607.626906][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.639502][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.726858][T14642] loop4: detected capacity change from 0 to 1024 [ 1610.000019][T14651] ip_tables: iptables: counters copy to user failed while replacing table [ 1625.858863][T14712] loop4: detected capacity change from 0 to 1024 [ 1634.273357][T14563] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1636.102738][T14759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1638.335523][T14563] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1638.344568][T14563] Bluetooth: hci4: Injecting HCI hardware error event [ 1638.354581][T14563] Bluetooth: hci4: hardware error 0x00 [ 1640.527706][T14784] syz.4.2192: attempt to access beyond end of device [ 1640.527706][T14784] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1640.572450][T14563] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1640.767509][T14787] fuse: Bad value for 'fd' [ 1641.305264][T14785] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1642.272357][T14794] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 1642.280329][T14794] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 1642.289213][T14794] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 1642.362348][T14794] Error parsing options; rc = [-22] [ 1644.064900][T14563] Bluetooth: hci3: unexpected event for opcode 0x002e [ 1647.496339][T14817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1649.002931][T14825] No source specified [ 1652.068404][T14834] loop7: detected capacity change from 0 to 7 [ 1652.154068][T14834] Dev loop7: unable to read RDB block 7 [ 1652.159945][T14834] loop7: unable to read partition table [ 1652.222687][T14834] loop7: partition table beyond EOD, truncated [ 1652.231832][T14834] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1654.813275][ T8692] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1654.917236][T14853] syz.5.2207: attempt to access beyond end of device [ 1654.917236][T14853] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1655.033637][T14856] fuse: Bad value for 'fd' [ 1655.102504][ T8692] usb 7-1: Using ep0 maxpacket: 32 [ 1655.206751][ T8692] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1655.323494][ T8692] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.394435][ T8692] usb 7-1: config 0 has no interface number 0 [ 1655.400673][ T8692] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1655.521480][ T8692] usb 7-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1655.604408][ T8692] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1655.634441][ T8692] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1655.672146][ T8692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.732526][ T8692] usb 7-1: Product: syz [ 1655.749139][ T8692] usb 7-1: Manufacturer: syz [ 1655.762082][ T8692] usb 7-1: SerialNumber: syz [ 1655.795280][ T8692] usb 7-1: config 0 descriptor?? [ 1655.898212][T14563] Bluetooth: hci2: unexpected event for opcode 0x002e [ 1656.126236][ T8692] usb 7-1: can't set config #0, error -71 [ 1657.122412][ T8692] usb 7-1: USB disconnect, device number 3 [ 1657.708677][T14865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1658.492571][T14870] No source specified [ 1662.142247][ T8692] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1662.352174][ T8692] usb 6-1: Using ep0 maxpacket: 32 [ 1662.365376][ T8692] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 1662.377464][ T8692] usb 6-1: config 0 has no interface number 0 [ 1662.385338][ T8692] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1663.997822][ T8692] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1664.022451][ T8692] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1664.044321][ T8692] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1664.053697][ T8692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.062430][ T8692] usb 6-1: Product: syz [ 1664.067274][ T8692] usb 6-1: Manufacturer: syz [ 1664.071925][ T8692] usb 6-1: SerialNumber: syz [ 1664.080290][ T8692] usb 6-1: config 0 descriptor?? [ 1664.088031][T14882] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1664.343087][ T8692] usb-storage 6-1:0.20: USB Mass Storage device detected [ 1664.406920][ T8692] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1664.445746][ T8692] scsi host1: usb-storage 6-1:0.20 [ 1664.473568][ T8692] usb 6-1: USB disconnect, device number 4 [ 1670.212761][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.219166][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.402921][T14917] No source specified [ 1674.049253][T14926] syz.6.2218: attempt to access beyond end of device [ 1674.049253][T14926] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1674.239935][T14929] fuse: Bad value for 'fd' [ 1674.808178][T14926] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1675.337428][T14935] fuse: Bad value for 'rootmode' [ 1677.271676][T14945] fscrypt (sda1, inode 1262): Unsupported encryption flags (0x08) [ 1678.652257][T14563] Bluetooth: hci3: command 0x0406 tx timeout [ 1680.980635][T14963] syz.5.2233: attempt to access beyond end of device [ 1680.980635][T14963] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1682.769666][T14963] ================================================================== [ 1682.777871][T14963] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 1682.785725][T14963] Read of size 8 at addr ffff888027aee618 by task syz.5.2233/14963 [ 1682.793732][T14963] [ 1682.796179][T14963] CPU: 0 PID: 14963 Comm: syz.5.2233 Not tainted syzkaller #0 [ 1682.803722][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1682.813821][T14963] Call Trace: [ 1682.817161][T14963] [ 1682.820138][T14963] dump_stack_lvl+0x18c/0x250 [ 1682.824913][T14963] ? read_lock_is_recursive+0x20/0x20 [ 1682.830342][T14963] ? show_regs_print_info+0x20/0x20 [ 1682.835684][T14963] ? load_image+0x420/0x420 [ 1682.840246][T14963] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1682.845755][T14963] ? __virt_addr_valid+0x10c/0x380 [ 1682.850920][T14963] ? __virt_addr_valid+0x10c/0x380 [ 1682.856106][T14963] ? __virt_addr_valid+0x10c/0x380 [ 1682.861276][T14963] print_report+0xa8/0x210 [ 1682.865799][T14963] ? dvb_device_open+0xc9/0x360 [ 1682.870704][T14963] kasan_report+0x117/0x150 [ 1682.875259][T14963] ? dvb_device_open+0xc9/0x360 [ 1682.880170][T14963] dvb_device_open+0xc9/0x360 [ 1682.884955][T14963] chrdev_open+0x58c/0x600 [ 1682.889434][T14963] ? cd_forget+0x160/0x160 [ 1682.893912][T14963] ? fsnotify_perm+0x3ed/0x5e0 [ 1682.898738][T14963] do_dentry_open+0x880/0x14b0 [ 1682.903602][T14963] ? cd_forget+0x160/0x160 [ 1682.908084][T14963] path_openat+0x284f/0x3270 [ 1682.912879][T14963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1682.918928][T14963] ? do_filp_open+0x430/0x430 [ 1682.923661][T14963] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1682.929371][T14963] ? asan.module_dtor+0x20/0x20 [ 1682.934356][T14963] do_filp_open+0x1f2/0x430 [ 1682.938913][T14963] ? vfs_tmpfile+0x620/0x620 [ 1682.943564][T14963] ? _raw_spin_unlock+0x3a/0x40 [ 1682.948470][T14963] ? alloc_fd+0x590/0x640 [ 1682.952857][T14963] do_sys_openat2+0x134/0x1d0 [ 1682.957601][T14963] ? do_sys_open+0xe0/0xe0 [ 1682.962070][T14963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1682.968103][T14963] ? lock_chain_count+0x20/0x20 [ 1682.973008][T14963] __x64_sys_openat+0x139/0x160 [ 1682.977932][T14963] do_syscall_64+0x55/0xb0 [ 1682.982400][T14963] ? clear_bhb_loop+0x40/0x90 [ 1682.987133][T14963] ? clear_bhb_loop+0x40/0x90 [ 1682.991861][T14963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.997804][T14963] RIP: 0033:0x7fbc55d6980e [ 1683.002257][T14963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1683.021926][T14963] RSP: 002b:00007fbc56c50b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1683.030405][T14963] RAX: ffffffffffffffda RBX: 00007fbc56c516c0 RCX: 00007fbc55d6980e [ 1683.038895][T14963] RDX: 0000000000040002 RSI: 00007fbc56c50c00 RDI: ffffffffffffff9c [ 1683.046916][T14963] RBP: 00007fbc56c50c00 R08: 0000000000000000 R09: 0000000000000000 [ 1683.054931][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1683.062940][T14963] R13: 00007fbc56026128 R14: 00007fbc56026090 R15: 00007fff7eabe768 [ 1683.070966][T14963] [ 1683.074024][T14963] [ 1683.076382][T14963] Allocated by task 1: [ 1683.080564][T14963] kasan_set_track+0x4e/0x70 [ 1683.085198][T14963] __kasan_kmalloc+0x8f/0xa0 [ 1683.089834][T14963] dvb_register_device+0x309/0x1df0 [ 1683.095079][T14963] dvb_register_frontend+0x62d/0x900 [ 1683.100517][T14963] vidtv_bridge_probe+0x9d6/0xf60 [ 1683.105657][T14963] platform_probe+0x13b/0x1c0 [ 1683.110412][T14963] really_probe+0x24a/0xae0 [ 1683.114972][T14963] __driver_probe_device+0x1f5/0x390 [ 1683.120405][T14963] driver_probe_device+0x4f/0x420 [ 1683.125486][T14963] __driver_attach+0x444/0x6d0 [ 1683.130335][T14963] bus_for_each_dev+0x235/0x2b0 [ 1683.135237][T14963] bus_add_driver+0x340/0x630 [ 1683.139962][T14963] driver_register+0x23a/0x310 [ 1683.144777][T14963] vidtv_bridge_init+0x49/0x80 [ 1683.149709][T14963] do_one_initcall+0x242/0x790 [ 1683.154643][T14963] do_initcall_level+0x13d/0x1f0 [ 1683.159656][T14963] do_initcalls+0x69/0xd0 [ 1683.164033][T14963] kernel_init_freeable+0x3d9/0x560 [ 1683.169266][T14963] kernel_init+0x1d/0x1c0 [ 1683.173634][T14963] ret_from_fork+0x48/0x80 [ 1683.178102][T14963] ret_from_fork_asm+0x11/0x20 [ 1683.182931][T14963] [ 1683.185290][T14963] Freed by task 14926: [ 1683.189442][T14963] kasan_set_track+0x4e/0x70 [ 1683.194071][T14963] kasan_save_free_info+0x28/0x40 [ 1683.199132][T14963] ____kasan_slab_free+0x126/0x1f0 [ 1683.204281][T14963] slab_free_freelist_hook+0x154/0x240 [ 1683.209788][T14963] __kmem_cache_free+0xba/0x1f0 [ 1683.214675][T14963] dvb_device_open+0x2d9/0x360 [ 1683.219469][T14963] chrdev_open+0x58c/0x600 [ 1683.223926][T14963] do_dentry_open+0x880/0x14b0 [ 1683.228735][T14963] path_openat+0x284f/0x3270 [ 1683.233349][T14963] do_filp_open+0x1f2/0x430 [ 1683.237880][T14963] do_sys_openat2+0x134/0x1d0 [ 1683.242585][T14963] __x64_sys_openat+0x139/0x160 [ 1683.247465][T14963] do_syscall_64+0x55/0xb0 [ 1683.251924][T14963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1683.257852][T14963] [ 1683.260192][T14963] The buggy address belongs to the object at ffff888027aee600 [ 1683.260192][T14963] which belongs to the cache kmalloc-256 of size 256 [ 1683.274347][T14963] The buggy address is located 24 bytes inside of [ 1683.274347][T14963] freed 256-byte region [ffff888027aee600, ffff888027aee700) [ 1683.288091][T14963] [ 1683.290440][T14963] The buggy address belongs to the physical page: [ 1683.296939][T14963] page:ffffea00009ebb80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27aee [ 1683.307125][T14963] head:ffffea00009ebb80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1683.316089][T14963] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1683.324091][T14963] page_type: 0xffffffff() [ 1683.328471][T14963] raw: 00fff00000000840 ffff888018c41b40 dead000000000122 0000000000000000 [ 1683.337097][T14963] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1683.345709][T14963] page dumped because: kasan: bad access detected [ 1683.352164][T14963] page_owner tracks the page as allocated [ 1683.358562][T14963] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19314361621, free_ts 0 [ 1683.378910][T14963] post_alloc_hook+0x1c1/0x200 [ 1683.383713][T14963] get_page_from_freelist+0x2181/0x22a0 [ 1683.389284][T14963] __alloc_pages+0x1f0/0x460 [ 1683.393911][T14963] alloc_page_interleave+0x24/0x1e0 [ 1683.399139][T14963] alloc_slab_page+0x5d/0x180 [ 1683.403840][T14963] new_slab+0x87/0x2d0 [ 1683.407932][T14963] ___slab_alloc+0xc5c/0x12f0 [ 1683.412634][T14963] __kmem_cache_alloc_node+0x122/0x260 [ 1683.418137][T14963] kmalloc_trace+0x2a/0xe0 [ 1683.422594][T14963] bus_add_driver+0x162/0x630 [ 1683.427301][T14963] driver_register+0x23a/0x310 [ 1683.432110][T14963] i2c_register_driver+0xba/0x160 [ 1683.437175][T14963] do_one_initcall+0x242/0x790 [ 1683.441972][T14963] do_initcall_level+0x13d/0x1f0 [ 1683.446937][T14963] do_initcalls+0x69/0xd0 [ 1683.451290][T14963] kernel_init_freeable+0x3d9/0x560 [ 1683.456509][T14963] page_owner free stack trace missing [ 1683.461900][T14963] [ 1683.464243][T14963] Memory state around the buggy address: [ 1683.469969][T14963] ffff888027aee500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1683.478058][T14963] ffff888027aee580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1683.486145][T14963] >ffff888027aee600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1683.494230][T14963] ^ [ 1683.499096][T14963] ffff888027aee680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1683.507171][T14963] ffff888027aee700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1683.515254][T14963] ================================================================== [ 1683.575509][T14963] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1683.582776][T14963] CPU: 0 PID: 14963 Comm: syz.5.2233 Not tainted syzkaller #0 [ 1683.590270][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1683.600363][T14963] Call Trace: [ 1683.603679][T14963] [ 1683.606645][T14963] dump_stack_lvl+0x18c/0x250 [ 1683.611376][T14963] ? show_regs_print_info+0x20/0x20 [ 1683.616619][T14963] ? load_image+0x420/0x420 [ 1683.621173][T14963] panic+0x2ca/0x720 [ 1683.625109][T14963] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1683.631313][T14963] ? bpf_jit_dump+0xd0/0xd0 [ 1683.635859][T14963] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1683.641899][T14963] ? _raw_spin_unlock+0x40/0x40 [ 1683.646801][T14963] ? dvb_device_open+0xc9/0x360 [ 1683.651719][T14963] check_panic_on_warn+0x84/0xa0 [ 1683.656702][T14963] ? dvb_device_open+0xc9/0x360 [ 1683.661590][T14963] end_report+0x6f/0x130 [ 1683.665878][T14963] kasan_report+0x128/0x150 [ 1683.670427][T14963] ? dvb_device_open+0xc9/0x360 [ 1683.675329][T14963] dvb_device_open+0xc9/0x360 [ 1683.680054][T14963] chrdev_open+0x58c/0x600 [ 1683.684523][T14963] ? cd_forget+0x160/0x160 [ 1683.688985][T14963] ? fsnotify_perm+0x3ed/0x5e0 [ 1683.693803][T14963] do_dentry_open+0x880/0x14b0 [ 1683.698614][T14963] ? cd_forget+0x160/0x160 [ 1683.703072][T14963] path_openat+0x284f/0x3270 [ 1683.707720][T14963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1683.713747][T14963] ? do_filp_open+0x430/0x430 [ 1683.718466][T14963] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1683.724149][T14963] ? asan.module_dtor+0x20/0x20 [ 1683.729063][T14963] do_filp_open+0x1f2/0x430 [ 1683.733615][T14963] ? vfs_tmpfile+0x620/0x620 [ 1683.738262][T14963] ? _raw_spin_unlock+0x3a/0x40 [ 1683.743154][T14963] ? alloc_fd+0x590/0x640 [ 1683.747537][T14963] do_sys_openat2+0x134/0x1d0 [ 1683.752264][T14963] ? do_sys_open+0xe0/0xe0 [ 1683.756722][T14963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1683.762746][T14963] ? lock_chain_count+0x20/0x20 [ 1683.767640][T14963] __x64_sys_openat+0x139/0x160 [ 1683.772549][T14963] do_syscall_64+0x55/0xb0 [ 1683.777026][T14963] ? clear_bhb_loop+0x40/0x90 [ 1683.781753][T14963] ? clear_bhb_loop+0x40/0x90 [ 1683.786486][T14963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1683.792434][T14963] RIP: 0033:0x7fbc55d6980e [ 1683.796885][T14963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1683.816551][T14963] RSP: 002b:00007fbc56c50b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1683.825012][T14963] RAX: ffffffffffffffda RBX: 00007fbc56c516c0 RCX: 00007fbc55d6980e [ 1683.833025][T14963] RDX: 0000000000040002 RSI: 00007fbc56c50c00 RDI: ffffffffffffff9c [ 1683.841040][T14963] RBP: 00007fbc56c50c00 R08: 0000000000000000 R09: 0000000000000000 [ 1683.849070][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1683.857081][T14963] R13: 00007fbc56026128 R14: 00007fbc56026090 R15: 00007fff7eabe768 [ 1683.865104][T14963] [ 1683.868757][T14963] Kernel Offset: disabled [ 1683.873094][T14963] Rebooting in 86400 seconds..