last executing test programs: 3m22.173922082s ago: executing program 0 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x26}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m21.598081685s ago: executing program 0 (id=514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc, &(0x7f000000cf3d)=""/195}, 0x23) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f00000000c0)={0x3, 0x100, 0x13, 0xe, 0xffffffff, 0x0, 0x4, 0x8, 0x3fd, 0x3, 0x1, 0x6bf5, 0x1010, 0x2}) 3m17.844092794s ago: executing program 0 (id=522): r0 = openat$autofs(0xffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xfb, 0x95, &(0x7f0000000100)="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", &(0x7f0000000200)=""/149, 0x8, 0x0, 0x65, 0xbc, &(0x7f00000002c0)="6a401157427fa79e8dff96c470e6187dac773fbb19f95dd2728a4d23bae06ca32ed372f9fe59d6bc5ffdf6f0a9cf92e786e0fd16cd8d32ac6576372ab921ad358f691064a5521a22a05aa530a76edfb693a88fde9ebc67939196c188ae8f63e592b9c58798", &(0x7f0000000340)="2f9b8472e93e92f48eeea18d3c810007a84690ade7439640cd40434522478946f9fde491b5a035d54038728cb96f167ba1f8eeecf4a780071d42fc55abaf7c67111147f82f8363b47dc086bd299003b3fd971b61a9b6e3eb10ae653dadcac4b35f0cf6c594dd0ce19d08f38704f089971d66a3c037c1da3545af8000256e0ce116c5199a8f7c329b19e9b7449952889957e89d18ebe365d1fe5f910f5bbbf8549c46c6b756106b173f710feba0d95809a5f3873de6429da714e51e3f", 0x1, 0x0, 0xba34}, 0x4c) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES64=r0], 0x0) 3m16.744252932s ago: executing program 0 (id=526): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc31, &(0x7f0000001a40)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000dc0), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0xffffffffffffffd9, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xffffffff, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x1f) 3m14.193918079s ago: executing program 0 (id=533): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf0300000000000085000000d1000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x1, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) add_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="e0a089181569f57d7c08211fcb589c285db36920bf3590fe007f3a08ec25c506531919f7629f642cbd8a8e0fc36743169ab17fda3f96bd1075048e9cf48dbf2ae2eef17e2a8caee3f232aeca5009c8dce44416b00230c67aa5ea176397cb9ba17d6bcf42e86e587e08289495bbece6e30700a35a2b5b28f58e957ebe19344528e275f2cad2446938c75f700491f6aa83329a67d9c53445795158f9cd418f303b1db7bf855c85d8ce9000ec9990c638a249471cf495231c2b86f5f06ddb7f7b92ebe5429e2bcd59943519165bfd7a16b0691a323e68c31f67ec5bd11e5dd3bbfe7db7e8075a2ce813be88d4209ab1e17600e54b31e0bf5592", 0xf8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) 3m13.495287277s ago: executing program 0 (id=536): r0 = openat$autofs(0xffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05d21a04"], 0x45) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "231d5f", 0x2}}}, 0xd) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xfb, 0x95, &(0x7f0000000100)="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", &(0x7f0000000200)=""/149, 0x8, 0x0, 0x65, 0xbc, &(0x7f00000002c0)="6a401157427fa79e8dff96c470e6187dac773fbb19f95dd2728a4d23bae06ca32ed372f9fe59d6bc5ffdf6f0a9cf92e786e0fd16cd8d32ac6576372ab921ad358f691064a5521a22a05aa530a76edfb693a88fde9ebc67939196c188ae8f63e592b9c58798", &(0x7f0000000340)="2f9b8472e93e92f48eeea18d3c810007a84690ade7439640cd40434522478946f9fde491b5a035d54038728cb96f167ba1f8eeecf4a780071d42fc55abaf7c67111147f82f8363b47dc086bd299003b3fd971b61a9b6e3eb10ae653dadcac4b35f0cf6c594dd0ce19d08f38704f089971d66a3c037c1da3545af8000256e0ce116c5199a8f7c329b19e9b7449952889957e89d18ebe365d1fe5f910f5bbbf8549c46c6b756106b173f710feba0d95809a5f3873de6429da714e51e3f", 0x1, 0x0, 0xba34}, 0x4c) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES64=r0], 0x0) 3m10.891455522s ago: executing program 32 (id=536): r0 = openat$autofs(0xffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05d21a04"], 0x45) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "231d5f", 0x2}}}, 0xd) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xfb, 0x95, &(0x7f0000000100)="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", &(0x7f0000000200)=""/149, 0x8, 0x0, 0x65, 0xbc, &(0x7f00000002c0)="6a401157427fa79e8dff96c470e6187dac773fbb19f95dd2728a4d23bae06ca32ed372f9fe59d6bc5ffdf6f0a9cf92e786e0fd16cd8d32ac6576372ab921ad358f691064a5521a22a05aa530a76edfb693a88fde9ebc67939196c188ae8f63e592b9c58798", &(0x7f0000000340)="2f9b8472e93e92f48eeea18d3c810007a84690ade7439640cd40434522478946f9fde491b5a035d54038728cb96f167ba1f8eeecf4a780071d42fc55abaf7c67111147f82f8363b47dc086bd299003b3fd971b61a9b6e3eb10ae653dadcac4b35f0cf6c594dd0ce19d08f38704f089971d66a3c037c1da3545af8000256e0ce116c5199a8f7c329b19e9b7449952889957e89d18ebe365d1fe5f910f5bbbf8549c46c6b756106b173f710feba0d95809a5f3873de6429da714e51e3f", 0x1, 0x0, 0xba34}, 0x4c) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES64=r0], 0x0) 3m1.496930713s ago: executing program 1 (id=561): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) 3m0.399876787s ago: executing program 1 (id=562): r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x2a002, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', '#^@\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x4090) (async) sendmsg$sock(r0, &(0x7f0000001380)={&(0x7f0000000180)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000200)="9673694f385f8e70a2d30c746645fe9442d91a762f5fee7488c86b7dab394a5b0ebb5f802ac182926672526ae76fb62ad77b0ef25cc1f5eb557edacaee87ae869b8787c9d6a83c2e33be0e48f433bf6b14bd58ff58292a2588a5e0177d3021634cc8a38a4e", 0x65}, {&(0x7f0000000280)="be568c626901c1177edeb09bb75d0e16c16d05dc6c7468279b52ef2cd2a4072069167fc4525996a6f6b4a3e3b7ae59915ed4a29893cf59e4668ab4f5c97ba3f6b021998e8be7fa2670e46c6ecf67159d2ee24d608d9fc2edd2cf3fdb2e9d70f10c4499b0d5e1acfb1cdfbbc9fe38f98d609a17d30857f289480b1ea014051a7c880087e0a96203cd15b11257c3f0ecff49fe2534038f6710b9792839552a03da40ad35a68ad3dfc5b29e896b2ff20140c3566d3c6c91806707f88cced4c04de1459ad095da208f40bdd478b659cefae4a0be8c4b6540729762f3c116e98ec70afba0b8dab64af9bf9ac624fef738dd47ae8a3d006db7c7ff53ce360eb85e4ffa2a69a8f9405e83a425681658dd8831f2d8d567c83952d880d61ab49cd61cdf404150760888013f132c63655ae72b12ecde2b6b77c6fdffc231d23634b16aedfb8c46a94298d3f56ddd7a9e0a756fcef772f916ba91d55fde153d0e40472082aaa3d4d4ac8a1f1324c1c86cb3706588945927de137b1e8a4998ca961073821e7d68efdf654d7bcd06f7e16d300b97905436cf93401f55e4728f55878813cc1a7ef428b9f97db94a91d7d4c755b6cab406ac81742c43ec796651c3cd3bad9e8382a7e608114afe4f20ef7dcdf89a40662e9b91303be91f317dad96163bd2d8758adeaa562f76e004b29bf3c12896822d2e5ea33ec402dfb08f3203165d5d86a97f1abbfea4456c4b0ad96d44656ea7d3d8c396e653338bba916085e841195f1b98652b404f38ef7caffbe40d115ecc0735be1b1a64903787da9bb42d3b03235a46abec745fab866914808ad18f5ddc8f75a16d5d2773ba3642368104ede037588c4dfe5b7fbb53eddebcc5d8c59d55374417a8b04020f346ae77b1f53e577885f1abd8ec306d11c581fe3bae4dbfcd137d510b887235a65f3490acd736acaf8d4075cf5d1f27197b5557fcc456ef28694861418847993fa61c6016aff6f227bcc14b4531490df0e796450c8ccb73a62ce31cbfba11683d87982b0e1de2fdb5bdee2e2272da9deced462fbfedd92bbfd7be8804df59bedef0bd2cc42c17529a5c6ddb9349c997e1a4632ebc6f464f5fc66dd688f76b36c6d35303653c1826bb881972932bc173c2cb7766d93b410f1444bb56f277a68faa87dfa3bcfbf79f26d603d577f6d1af89f622a1c0b32474e06b08d0e9ede1167286bce2b6988aeeadd7bade4a679e85f75f5caa4cdae175112a3162b5c795d193d3c3f97162afe17d9678948eb1394260077312dc0bdd6a6a65631d1750b22e6cd4f75334705fb8acc9a0c3fb4d21462a143cae2fb64ca67aa6003a8b8aeff487f79192653c0b7772d30c1d36ee1366ac6467e5ccc9205b7abb16e92a59ac6898398061dc1d004d922394d3fb24078c35437f7a993f29798d09f3bdc163912f825f7c9cb64801a5463ecce642fd5c12096fc792f41ae3e206a108ef4fc08db51147f626fbf71ce5d3e16e54df99426985e6c3d0d05dd6598ce923aaa3cf14e0a53f790d7d140e19849e2366ac21ed86935d23d365e49279cc5435a6133cf8b060182926b81d10ab1e6085c4cf8d334d627d5f2a271c0631c2869a50c59d9b2a3f88c0e1928df44190a9905da30400844e43cfa70782c07be9b25594aff34170ca3ba3273f170f00c4b010509176fc399880548124c4ce3c48226b0e2122c1db7c6c4abeb31c9684ff07f4ff950a4542e265b4566b2bda61aeb6ebb5ce760f06ad5bdb18db0b2199e16c67efd55bc6bd2d1938bc0f2adccd610f759f5b6e59aeeb6ad42b51d0ecd807ce7fc31be08aababd7b679600d38290f8f9f0e6e89979cb826d0de41eb0d0a9ec7ec4e2099cd7d9da78d02b2c66bc311b7fd2d0ef0017ff11d12d2edb25b8c167b17461d7d6c01cdec6f39fb5640cdf14327274506e0cc77518ae8007c372cd53a2fc8f0ddd3d955c347e595fe6d6f728b370dbb3bc3f921b580c4663f42c1b9dbf82e7c87115df6b6ef991dd39d08854c0082d44993aa0c2ee68ca3fe21e652ec88cc8a81a2ca67eddc63da648cf06bcd81fa3d738d6ebf54630a19afb27b130301b575c0a7b83bd91697989592a8ae316aa9c62adcd916a55e25b91a0c57f8274b796708b96f0d206db824b8768bfe45897e3f88893391246d6c2c6fe3899701d370ed7db484c2281804e19d76677f07080a4e0ad511a33c6a1cb66c85aafd1cacd5fc81f04301200b9da7624787c6b4b116a7cd0266b71d086a20b213fde7a68af952167c37c37097ac11162ce9950a39d9a9afadee604a882681fcfc860bbd296925a219e93b3fe47e02e35e3dcdde297f887d92e5214be942ddb1e34051e0df16a6fda549dfe48550223d99cfabdd869cfd9168b79d6fc46cad2bec22a6a9b2ada4c2cf27082f014c713577ee3b87939c09833202e391139480eb0faa50f191518771c1efec1e7e8a261fe07401ae53c65310ebe741fbbba8258cd622523f8e0daec6af2b1ce64d66a87a96f60a4dbbfb6da87884aab147accf33b93a3c0f951af53cc121b4e6a59130faac2cab020ff593ae5931f00ce6cb207821766e73069e15934db8775792d64790ce3461e8d27a4c0b889d9edc38e6a9c9fb28f32da386716e8b3080efd91895fd80750d5c45e668acc467a1979ce97cfdef33b714cd54ba345a58c617c4e834ba260c16abcb98f3bc3fd10f0c1d256a0feefd05ba2c4a1956fb308cae4e9c084874f5f74f0eee07a87c9667f2b673037dc9af4bc224a31a6a9235a30ca8c0c3eef9de65cdd1f8b3848e4779921702c8a8624d296b508379dc5c88c52a77a893ed5b813588fe4c8c4b6ae2a46ce2e5ca69e19a4ffadcd04e656ee19e3194d87bc2945c6e52c163574271bb590372f064ca61e8e3921a457c0f73e071871422105b232408be09d38e83ab817617f0bf40e376bf2fadb785b63b67940a06a37e60b220d0a7d91dcdc8f26c645dd67d4cf154e8c65bac623983067b96bd0c955c9f1f55f96d7dace30efba11d54ed5c068878871776e0cd32631c30868fba9c7e86f3646e3ac01f1b5f8f46fd9430337b55b9642328c280c81ae40040f11baac587b197b4b1b6d0d4181cbcb24d95196f4f1c465b9b8248600484e03f07ff9fc8892f675eb9849bce53c758f3802b332abdc075049b8f37f69bcc6dca865d1119e627e6302b52ebd8010cc27ed3af6d545a772eac61149fa54a31954ac72abd052263398c77d597da61b61c0c50629d420468e53a0521ff6625276979eb5b4fe326dbb89c70762e23c9af125771841c940d20057416990f91444f72979ff5a117de2157786d83740a96a122a990c6aec80b37d5720f35e7cb94781e894aab3c25c6874af21316a8cfe2fc8a264705b86490585992090397a11fd01d5503fa7e8d0034a5331986d660e1bc4e20937685bdf6a769d3e2405e35afac47bd5527067b0b23eec60cfb3dcdd4a3819f1d2a01538e83da8be2553d4242a34c3ca227aeae6ccf9153b8e069b10dc8ec82d7a4e81bc679621f7387d95503ad201f0a451467e4e3cc8baf67282bb3da9e7dd7a3837b29d424ebea589d042ffc3c4e2d224b769dcf6c26fb6f02a64ec6c7fc3c7e9dc183eb12844f9c79b144f4ecc018f9236130fe464b08d719b3eab46ee30b025d188c8929e107c0faa7002637d882e92db08268a13bfd15e69bddae31170382da6c81c0bba7734a53c26f0482c0da249f2a8b9f9344c5d1983e0d0534778dbc9ca0ef27702d842e5c24de55dcfbae5b27c9c0b47d625012d72625ca51946df4b9bf7077f4d4e0d10b8c9b4951582737f5e670177811acff0e27271c10a593d373f7cff4e949736e34c0d34f393fabb287a172e37c47088e384c3de4c1a129fe2d3627f3e708348513cccd3d4f7b3c73226e0f2ae79ddf92a339e549abb44f3ec069204907f54d302f420fb31b909881690b2cc088d5a2bb2cb521ecaf8ae446919a92e32a08a944d0072a2e06cffcdb4627f0ea49cc09eb6acc799de76deb4c24e021a502e2db40cdb580587ef4401d1c433f72b95534f299fbb3c2a40b87ef3d8727b11503509cbb30cc72f9f942c087fdcfba4d337d0a25b5788c10d3237867a49371da9966c537be65777f1fd3dda0c27ca8c3e0a4b35125d4f1ac4e80caf035e9c62993fb60a41b759861f0890f0b98e1c8f0615854dca12dbdf2e11fd600001d458a874793cba29f45a65b50d0f8397f1ae7fd601b3d16bc5e768144641717f9cc75864ba030581c5b39c49ba88c2e6bcd26018e0ae6f5891c5ee3f2c230181679fec9de3ec852e62d0701dc56b9cc8d0f0f13f08bfe04e6905339bb9ad5f78e064b6b2ae0fd6f596d2851b192f5fe6a2436e3e912f5ddd017b1de73e4f70ca05309bd53e3416e7a99bcf2b200b308c3ee30b249036b818f1fd55598c4984518645ea3add1f7c8f8f011d12dd365db5694d81072534309f7946f3577df820ae8e23e9dd0f6bc69aa654c29cd46d998a2dabce3707f792272d45a8b2131f62d4ca58acba19f5a514c0bc92f37ad7a739e8a0126a8e1fc81caa7af6573647b8c589c6f63acac164ca6af7ecc06be018b9fb18a5059e0d2d9a7d4bd3317ec70e860ef486c2bbd401c6c995a24dd6b2dd8cb762ec69922c656226eefa7b95568fca65fa107d29a96813edb75861ae7a8a0308e8aabc9ec65ef6ff6d39bd44f4d89c077588382254bd2541fcffeec423b48da0b4e53fa632c3b531a0e5250dfc91df1512c6b68fcdfc31b1f93ed529653063787f0e950f61c27b7264e0c30726ad452cbe47ee379467a35abb06ed701cfc505a13a015fda8718b4a77af518bf6df8be819c8155435a6e38fe646b11bd0672f532ae48893ac3360792d23875f127fb3ea5bc97233e35fa7bf1c99ba83d75359f05fabfbd3a9a0e14f017511e7535a224b38d52c26312c9f3c3a0f226fb624a46a6d0ed6dd1628fd8b782a2446e6294fd7a4bf015919e385026f39111b8afec9124d0ec1f7de3140e19e8daefcda1179ff4092a263d3e3cee845f79b6c4ed49c596c1fa5baf3cc33f31bd945c1ae7c6e6ba16d13e948e05351551236bcc89cca3a874b99ebf3c0830caa114620459341450919af42bbb48968ddfaafbdc0d34ea1853bb754ef269df790385af82ae6a803651ce2718490254bf272a62e93ef8e361dfd509e27d2c0b88e56b08acf95dcc510c65e15d49e086ddf82b880ebdd81cf56485934b202a85e9dcd85009caa7c6ffef012bcaa83dd0c484843929f9eaea6f58069a8fc0c5195146625f40828d9afea9a890b50293fe25c2452484508c36fcc400a5056d0a5d63f917d1a8054a2d8543a0e42a3b0cf425e04fe91e06046fb95dbb708eb3100cabb115c207e5fb921bef718b79cf2f20d7481f886a413fa1a11bb20c22bf09e39dead2de315146e635f96da671fbe272bdfdc3525da68778700a6fb2116e36d9f3496910dcb5eabceb149f76dedca8a18aef7e808fdc25ab43162abcba81deb7863498ff64d9b4938c1f26550bd0314454001d6c5823dff80be11bbb8d08b8f9285afb79b072ff6f3ce461fa55b4d14cdb86d1ad43f4d4681ba406c80d989dfa9430490a512baf2a4960cd82730e3b4a18d72e6ea310022eb7e93ff848f260631ed0b4f7a4fd4cb6ceed3b80e10af570c9bf1e642e06882ed4ff098217cdb73a781bdb04927c0f0dd27e1943ff73a508c2ce0bd5d81bfb7cdbceccdba760429ec75e5640101a44a92c5181faa5892f02d6465a52373d85018ddaadab2688e32037296795be0c65f22ff3dd161feb", 0x1000}], 0x2, &(0x7f00000012c0)=[@txtime={{0x14}}, @timestamping={{0x10, 0x1, 0x25, 0xb9ad}}, @mark={{0x10, 0x1, 0x24, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0xffffffff}}, @mark={{0x10, 0x1, 0x24, 0xcde}}, @mark={{0x10, 0x1, 0x24, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x620}}, @mark={{0x10, 0x1, 0x24, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0xa9b}}], 0x9c}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001400)={'ip_vti0\x00', &(0x7f00000013c0)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x0, 0xd4, {{0x6, 0x4, 0x1, 0x12, 0x18, 0x66, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@end]}}}}}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0}, &(0x7f0000001480)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000014c0)={{{@in=@local, @in=@local, 0x4e20, 0x4, 0x4e23, 0xfffd, 0xa, 0x80, 0x80, 0x84, r1, r2}, {0x10, 0x5, 0x917, 0x2, 0xf, 0x7, 0x2063, 0x9}, {0x1, 0x3f, 0x9, 0xa}, 0x5, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x34ff, 0x0, 0x3, 0x81, 0x4e1b, 0xfffffffb}}, 0xe4) write$nbd(r0, &(0x7f00000015c0)={0x67446698, 0x0, 0x2, 0x4, 0x2, "9c419e60fa446f7b86c2e310360b1c92f79e4cd1d05af10527"}, 0x29) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000001600)={0x3, 0x0, 0x3, 0x7, 0x3, "e4acd54289e4494fd6d7433b7c86b1d3a23db3"}) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xa}]}, 0x1c}}, 0x20000040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r4, 0x321, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7af}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x50, r4, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x2400c0c0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r0) (async) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) utimensat(r0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001ac0)={{0x77359400}, {r5, r6/1000+10000}}, 0x100) r7 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000001b00), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f0000001b40)='1', 0x1) (async) r8 = socket(0x11, 0x5, 0xff) openat$binderfs(0xffffff9c, &(0x7f0000001b80)='./binderfs2/binder1\x00', 0x804, 0x0) mount$afs(&(0x7f0000001bc0)=@cell={0x25, 'syz0:', 'syz1', '.readonly'}, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0xf000, &(0x7f0000001c80)={[{@flock_strict}, {@flock_openafs}, {@flock_local}, {@flock_local}, {@flock_write}], [{@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x9000000000}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x66, 0x32, 0x37, 0x36, 0x30, 0x31, 0x62], 0x2d, [0x39, 0x36, 0x33, 0x32], 0x2d, [0x35, 0x39, 0x65, 0x62], 0x2d, [0x30, 0x36, 0x54, 0x61], 0x2d, [0x34, 0x64, 0x33, 0x36, 0x33, 0x65, 0x63, 0x35]}}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/$^@//)'}}, {@fowner_gt={'fowner>', r2}}, {@dont_appraise}, {@seclabel}]}) r9 = syz_open_dev$dri(&(0x7f0000001dc0), 0x100, 0x301000) close_range(r9, r7, 0x0) (async) copy_file_range(r8, 0x0, r0, &(0x7f0000001e00), 0x4, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000001e40)={0x8, 0x10000, 0x479, {0x7, 0x3}, 0xe, 0x2}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001f40)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000002040)=0xe4) mount$bpf(0x0, &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00), 0x200000, &(0x7f0000002080)={[{@uid={'uid', 0x3d, 0xee00}}, {@uid={'uid', 0x3d, r10}}, {@mode={'mode', 0x3d, 0x1}}], [{@euid_gt={'euid>', r2}}, {@dont_measure}, {@hash}, {@seclabel}, {@fowner_lt={'fowner<', r2}}, {@audit}]}) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000002140)) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000002180), 0xffffffffffffffff) 2m59.12556707s ago: executing program 1 (id=565): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x45c, 0x4c103) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000003c0)={0x3, 0x0, '\x00', {0x0, @bt={0x9, 0xc, 0x0, 0x6fcf5fe0f8033d7d, 0x10000, 0xd, 0x3, 0x815, 0x2, 0x2, 0x81, 0x5d0b, 0xf5fe, 0xc, 0x7, 0x4, {0x8, 0xc}, 0x3, 0xe}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x28) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0xd000, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") creat(&(0x7f0000000200)='./bus\x00', 0x84) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000005280)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000440)='./bus\x00', &(0x7f0000000000)='./file1\x00') semget$private(0x0, 0x0, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, 0x0, 0x0, 0x3}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x5) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) 2m57.918883126s ago: executing program 1 (id=568): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') iopl(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000104030e0000000000000000020007000500010001000000060006400004"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2004000a) r3 = io_uring_setup(0x1c19, &(0x7f00000002c0)={0x0, 0x501d, 0x2, 0x40, 0x8002}) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210009000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9", 0x5b}, {&(0x7f0000000240)="f6720000cdfd3d280a3aad1fb8abb15bfddfed5923b93f5567c157cf08f39b4f1e7257074b46a28f970675c044369e1211f0135f9d3c66ff505f085faca52e7b6fc7b3b988b32113a6b89041cfe98b9f45cf01fb980635251fbe5a89cfcb04b63745c849f3a8f4902393bc864702410bab7f6517d484011989adf6302f", 0x7d}], 0x2}, 0x4000844) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) getdents64(r0, 0x0, 0x0) 2m56.089164463s ago: executing program 1 (id=572): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000003c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="d700000000000000eb47d3f9c36420c90681f25141", @ANYRESHEX, @ANYBLOB=',\x00']) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, &(0x7f0000000340)=[{0xa, 0x4cc8, 0x1}, {0x0, 0x0, 0xf}], 0x2, 0x1, 0x24, 0x0, 0x17, 0x6f}) 2m55.399201018s ago: executing program 1 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0xc8a0}, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000005c0)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x20004018) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0xc0a45320, &(0x7f00000001c0)={0x1000080, 0x0, 'client1\x00', 0x2, "706283c421ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r4, 0x1e, 0x0, 0xb, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af0"], 0x150}}, 0x0) 2m53.264774761s ago: executing program 33 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0xc8a0}, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000005c0)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x20004018) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0xc0a45320, &(0x7f00000001c0)={0x1000080, 0x0, 'client1\x00', 0x2, "706283c421ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r4, 0x1e, 0x0, 0xb, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af0"], 0x150}}, 0x0) 8.24074849s ago: executing program 5 (id=896): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000018c0)=""/4122, 0x101a}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x80000}], 0x4, 0x2042, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 8.168442865s ago: executing program 2 (id=897): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) 7.154120682s ago: executing program 2 (id=900): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) recvfrom$phonet(r1, 0x0, 0x0, 0x10121, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000000) syz_genetlink_get_family_id$nl80211(0x0, r1) 7.117730695s ago: executing program 5 (id=901): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864505986f7a938a8ec67faf14616110ed71b31dbc97038e855b607f3b8fd245dc050af90e0b87bea2240115096674c8ce63241422749d906fb9bdc2acf7b90194134f58500c830199f3b30bde69478de7851a2f3052e7c6ef4a939", 0x6c}], 0x1) 6.753383697s ago: executing program 3 (id=902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xff, 0x0, 0x5, 0x200, 0x2, 0x8, 0x8000, 0x3, 0x3b8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4005) 6.688064497s ago: executing program 4 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 6.224608396s ago: executing program 2 (id=905): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="710501"], 0x15) socket(0x3, 0x800, 0x6) 5.798149649s ago: executing program 6 (id=906): sendmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="1828091e7edb05867233e5a62c472ef129b9bfe8e941247afb55c72da2389254bdf339b358d6d6ec0c2f8d9a583b1edb66aed84ca0d9eab65028b6a3157b3e99d70e411beb9404c1adf8a4cbbe489fab69a58939bb1162b55383bbb09e3010", 0x5f}], 0x1}}], 0x1, 0x8090) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.365701228s ago: executing program 3 (id=907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="270302005902140000008698ffff1144ee1641d4b8bf636a44a1983722dedc39ec57e8384e40bcac06", 0x29}], 0x1}, 0x4) 5.365505642s ago: executing program 6 (id=908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) 4.961227096s ago: executing program 5 (id=909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000845}, 0x4000004) 4.778005815s ago: executing program 4 (id=910): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000003c40)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) 4.712959561s ago: executing program 2 (id=911): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) recvfrom$phonet(r1, &(0x7f0000000300)=""/202, 0xca, 0x10121, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) 4.387160218s ago: executing program 6 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.029903481s ago: executing program 3 (id=913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000240)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x108000, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 3.93305219s ago: executing program 5 (id=914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x6, 0x80000001, 0x74}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3.841494634s ago: executing program 4 (id=915): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$netlink(0x10, 0x3, 0xb) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000025c0)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26f", 0x76}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000cc0)="c7899b9fac93cacea12ca2d82021c1e83ad7f8a754218dad40bb320ebd0d9c7e8d921848d3a41342ebd0531fcc6659c11fbedd66105914e21c5babbfcaa17f70785c4b7c5567cc5426c01bdb34fe0a8964ba55198aa02449", 0x58}], 0x1}}], 0x3, 0x2010) socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 3.127371933s ago: executing program 2 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020702", 0x4}, {&(0x7f0000000140)="683f0057954e8374745111caea99bc671e3d", 0x12}, {&(0x7f0000000580)="12a5e09e273bc3d6e6fcb62466abeabb17d6183276b7ad38865a", 0x1a}], 0x4) 3.07008591s ago: executing program 6 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 3.069912397s ago: executing program 3 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1600, 0x3, 0x4, 0xe, 0x3, 0xd5fe, 0x0, 0x400]}}]}]}]}, 0x38}}, 0x40) 2.457505793s ago: executing program 4 (id=919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x3, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 2.079500601s ago: executing program 6 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x240008d0) 1.565266274s ago: executing program 4 (id=921): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) 1.108196092s ago: executing program 3 (id=922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x350}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 747.856085ms ago: executing program 5 (id=923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000440)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) shutdown(r0, 0x0) 695.531732ms ago: executing program 6 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 656.364244ms ago: executing program 2 (id=925): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 577.410114ms ago: executing program 4 (id=926): epoll_create(0xffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000005c0)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000640)='cpu.pressure\x00', 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000001740)={0x1f, @none}, 0x8) 324.372159ms ago: executing program 3 (id=927): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401002abd700002dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 0s ago: executing program 5 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40010) kernel console output (not intermixed with test programs): 1] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.241154][ T7868] team0: Port device team_slave_0 added [ 497.289896][ T8030] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.611: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 497.349264][ T7868] team0: Port device team_slave_1 added [ 497.475955][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.551814][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.793592][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.847965][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.886913][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.944725][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.963654][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.032197][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.505581][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 498.572635][ T7868] hsr_slave_0: entered promiscuous mode [ 498.582282][ T8047] forcing mempool usage for bio_alloc_bioset+0xad7/0x1130 [ 498.598831][ T7868] hsr_slave_1: entered promiscuous mode [ 498.634047][ T7868] debugfs: 'hsr0' already exists in 'hsr' [ 498.646416][ T7868] Cannot create hsr debugfs directory [ 500.026682][ T5588] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.077128][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.087349][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.384248][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.431643][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.517202][ T8065] FAULT_INJECTION: forcing a failure. [ 500.517202][ T8065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.574437][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.3.621 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 500.574625][ T8065] Tainted: [L]=SOFTLOCKUP [ 500.574680][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.574763][ T8065] Call Trace: [ 500.574815][ T8065] [ 500.574865][ T8065] __dump_stack+0x26/0x30 [ 500.575029][ T8065] dump_stack_lvl+0x14c/0x1c0 [ 500.575192][ T8065] dump_stack+0x1e/0x25 [ 500.575337][ T8065] should_fail_ex+0x7e2/0x8c0 [ 500.575525][ T8065] should_fail+0x2a/0x40 [ 500.575668][ T8065] should_fail_usercopy+0x2e/0x40 [ 500.575837][ T8065] _copy_to_user+0x35/0x120 [ 500.575985][ T8065] simple_read_from_buffer+0x1b2/0x340 [ 500.576210][ T8065] proc_fail_nth_read+0x1e0/0x2d0 [ 500.576381][ T8065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.576549][ T8065] vfs_read+0x27c/0xf90 [ 500.576716][ T8065] ? stack_depot_save_flags+0x35/0x790 [ 500.576869][ T8065] ? kmsan_get_metadata+0xf1/0x160 [ 500.577063][ T8065] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 500.577259][ T8065] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 500.577474][ T8065] ksys_read+0x1d9/0x470 [ 500.577699][ T8065] __ia32_sys_read+0x9a/0xf0 [ 500.577893][ T8065] ia32_sys_call+0x1914/0x4360 [ 500.578099][ T8065] do_int80_emulation+0x177/0x380 [ 500.578251][ T8065] ? clear_bhb_loop+0x50/0xa0 [ 500.578400][ T8065] ? clear_bhb_loop+0x50/0xa0 [ 500.578574][ T8065] asm_int80_emulation+0x1f/0x30 [ 500.578713][ T8065] RIP: 0023:0xf71e61ab [ 500.578812][ T8065] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 500.578933][ T8065] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 500.579061][ T8065] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 500.579158][ T8065] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 500.579240][ T8065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.579321][ T8065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.579407][ T8065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.579533][ T8065] [ 501.317726][ T7868] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 501.357982][ T8072] FAULT_INJECTION: forcing a failure. [ 501.357982][ T8072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.428412][ T8072] CPU: 0 UID: 0 PID: 8072 Comm: syz.4.622 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 501.428581][ T8072] Tainted: [L]=SOFTLOCKUP [ 501.428628][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 501.428706][ T8072] Call Trace: [ 501.428753][ T8072] [ 501.428799][ T8072] __dump_stack+0x26/0x30 [ 501.428954][ T8072] dump_stack_lvl+0x14c/0x1c0 [ 501.429108][ T8072] dump_stack+0x1e/0x25 [ 501.429244][ T8072] should_fail_ex+0x7e2/0x8c0 [ 501.429414][ T8072] should_fail+0x2a/0x40 [ 501.429555][ T8072] should_fail_usercopy+0x2e/0x40 [ 501.429710][ T8072] _copy_from_user+0x33/0x100 [ 501.429851][ T8072] __sys_connect+0x119/0x680 [ 501.430011][ T8072] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 501.430193][ T8072] ? fput+0x113/0x160 [ 501.430321][ T8072] ? kmsan_get_metadata+0xf1/0x160 [ 501.430503][ T8072] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 501.430696][ T8072] __ia32_sys_connect+0x95/0x100 [ 501.430884][ T8072] ia32_sys_call+0x36df/0x4360 [ 501.431065][ T8072] __do_fast_syscall_32+0x195/0x470 [ 501.431222][ T8072] do_fast_syscall_32+0x37/0x80 [ 501.431363][ T8072] do_SYSENTER_32+0x1f/0x30 [ 501.431500][ T8072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.431666][ T8072] RIP: 0023:0xf6fff01c [ 501.431760][ T8072] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 501.431875][ T8072] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 501.431996][ T8072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 501.432085][ T8072] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 501.432166][ T8072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.432244][ T8072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 501.432324][ T8072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.432446][ T8072] [ 501.643242][ T7868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.653491][ T7868] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 501.746401][ T7868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.757143][ T7868] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 501.804098][ T7868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.815223][ T7868] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 501.876244][ T7868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.413921][ T8084] gfs2: path_lookup on c::: returned error -2 [ 502.633005][ T8084] loop2: detected capacity change from 0 to 512 [ 502.650596][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.688363][ T8084] ext4: Unknown parameter '' [ 502.709127][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.330329][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.582394][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.831061][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.926257][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.934165][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.107738][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.115423][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.245436][ T8097] loop3: detected capacity change from 0 to 4096 [ 504.287316][ T8097] nilfs2: Unknown parameter '01777777777777777777777' [ 504.493176][ T5231] 8021q: adding VLAN 0 to HW filter on device eth5 [ 506.087836][ T8115] loop2: detected capacity change from 0 to 512 [ 506.258960][ T8115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.367575][ T8115] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.390907][ T8118] loop4: detected capacity change from 0 to 128 [ 506.520633][ T8118] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.544878][ T8115] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.637: corrupted xattr block 13: invalid checksum [ 506.635842][ T8115] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.637: corrupted xattr block 13: invalid checksum [ 506.650642][ T8118] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 506.765847][ T7698] veth0_vlan: entered promiscuous mode [ 506.932644][ T8115] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.637: bg 0: bad block bitmap checksum [ 506.988599][ T8122] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 507.000135][ T7698] veth1_vlan: entered promiscuous mode [ 507.072506][ T8115] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 507.335991][ T8114] [U] ¹ [ 507.479751][ T7698] veth0_macvtap: entered promiscuous mode [ 507.567782][ T7698] veth1_macvtap: entered promiscuous mode [ 507.686867][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.823542][ T5580] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.918397][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.172127][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.460866][ T7076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.499227][ T7076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.766129][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.806309][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.988507][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.634'. [ 510.069925][ T8142] bridge0: port 3(vlan2) entered blocking state [ 510.076941][ T8142] bridge0: port 3(vlan2) entered forwarding state [ 510.119140][ T8142] bridge_slave_0: entered promiscuous mode [ 510.207240][ T7076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.235540][ T7076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.504167][ T8164] loop3: detected capacity change from 0 to 256 [ 510.600794][ T5231] 8021q: adding VLAN 0 to HW filter on device eth6 [ 510.941885][ T8164] FAT-fs (loop3): Directory bread(block 64) failed [ 511.003297][ T8164] FAT-fs (loop3): Directory bread(block 65) failed [ 511.091922][ T8164] FAT-fs (loop3): Directory bread(block 66) failed [ 511.151151][ T8164] FAT-fs (loop3): Directory bread(block 67) failed [ 511.195524][ T8164] FAT-fs (loop3): Directory bread(block 68) failed [ 511.204153][ T8164] FAT-fs (loop3): Directory bread(block 69) failed [ 511.235965][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.242595][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.289942][ T8164] FAT-fs (loop3): Directory bread(block 70) failed [ 511.329456][ T8164] FAT-fs (loop3): Directory bread(block 71) failed [ 511.390591][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.401093][ T8164] FAT-fs (loop3): Directory bread(block 72) failed [ 511.459521][ T8164] FAT-fs (loop3): Directory bread(block 73) failed [ 511.608085][ T8175] FAULT_INJECTION: forcing a failure. [ 511.608085][ T8175] name failslab, interval 1, probability 0, space 0, times 0 [ 511.654460][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.2.639 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 511.654661][ T8175] Tainted: [L]=SOFTLOCKUP [ 511.654710][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.654790][ T8175] Call Trace: [ 511.654837][ T8175] [ 511.654883][ T8175] __dump_stack+0x26/0x30 [ 511.655042][ T8175] dump_stack_lvl+0x14c/0x1c0 [ 511.655194][ T8175] dump_stack+0x1e/0x25 [ 511.655334][ T8175] should_fail_ex+0x7e2/0x8c0 [ 511.655553][ T8175] should_failslab+0x158/0x200 [ 511.655748][ T8175] __kmalloc_noprof+0x1e0/0x1660 [ 511.655882][ T8175] ? __msan_warning+0x1b/0x30 [ 511.656038][ T8175] ? kernfs_fop_write_iter+0x293/0xa80 [ 511.656239][ T8175] ? filter_irq_stacks+0x13f/0x190 [ 511.656378][ T8175] ? kmsan_get_metadata+0xf1/0x160 [ 511.656583][ T8175] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 511.656777][ T8175] kernfs_fop_write_iter+0x293/0xa80 [ 511.657002][ T8175] vfs_write+0xbe1/0x15c0 [ 511.657200][ T8175] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 511.657384][ T8175] ksys_write+0x1d9/0x470 [ 511.657567][ T8175] __ia32_sys_write+0x9a/0xf0 [ 511.657743][ T8175] ia32_sys_call+0x37a7/0x4360 [ 511.657948][ T8175] __do_fast_syscall_32+0x195/0x470 [ 511.658122][ T8175] do_fast_syscall_32+0x37/0x80 [ 511.658269][ T8175] do_SYSENTER_32+0x1f/0x30 [ 511.658403][ T8175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.658589][ T8175] RIP: 0023:0xf7f7501c [ 511.658698][ T8175] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 511.658811][ T8175] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 511.658938][ T8175] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 511.659025][ T8175] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.659100][ T8175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 511.659174][ T8175] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 511.659254][ T8175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 511.659362][ T8175] [ 512.681727][ T8164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.716659][ T8164] bridge0: port 3(bond2) entered blocking state [ 512.750466][ T8164] bridge0: port 3(bond2) entered disabled state [ 512.782005][ T8164] bond2: entered allmulticast mode [ 512.849467][ T8164] bond2: entered promiscuous mode [ 512.869463][ T8164] bridge0: port 3(bond2) entered blocking state [ 512.876441][ T8164] bridge0: port 3(bond2) entered forwarding state [ 512.957248][ T7078] bridge0: port 3(bond2) entered disabled state [ 514.488101][ T7868] veth0_vlan: entered promiscuous mode [ 514.647841][ T7868] veth1_vlan: entered promiscuous mode [ 515.164537][ T7868] veth0_macvtap: entered promiscuous mode [ 515.379274][ T7868] veth1_macvtap: entered promiscuous mode [ 515.562028][ T8219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.623977][ T8219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.725983][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.774518][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.780631][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.907866][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.019100][ T1097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.057423][ T7076] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.095512][ T7076] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.129313][ T7076] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.010523][ T5231] 8021q: adding VLAN 0 to HW filter on device eth7 [ 517.039879][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.089247][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.178575][ T8233] FAULT_INJECTION: forcing a failure. [ 517.178575][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.243611][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.2.646 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 517.243780][ T8233] Tainted: [L]=SOFTLOCKUP [ 517.243829][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 517.243908][ T8233] Call Trace: [ 517.243955][ T8233] [ 517.243999][ T8233] __dump_stack+0x26/0x30 [ 517.244152][ T8233] dump_stack_lvl+0x14c/0x1c0 [ 517.244309][ T8233] dump_stack+0x1e/0x25 [ 517.244483][ T8233] should_fail_ex+0x7e2/0x8c0 [ 517.244666][ T8233] should_fail+0x2a/0x40 [ 517.244833][ T8233] should_fail_usercopy+0x2e/0x40 [ 517.245002][ T8233] _copy_to_user+0x35/0x120 [ 517.245153][ T8233] simple_read_from_buffer+0x1b2/0x340 [ 517.245397][ T8233] proc_fail_nth_read+0x1e0/0x2d0 [ 517.245573][ T8233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 517.245748][ T8233] vfs_read+0x27c/0xf90 [ 517.245929][ T8233] ? stack_depot_save_flags+0x35/0x790 [ 517.246086][ T8233] ? kmsan_get_metadata+0xf1/0x160 [ 517.246282][ T8233] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 517.246483][ T8233] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 517.246705][ T8233] ksys_read+0x1d9/0x470 [ 517.246901][ T8233] __ia32_sys_read+0x9a/0xf0 [ 517.247104][ T8233] ia32_sys_call+0x1914/0x4360 [ 517.247294][ T8233] do_int80_emulation+0x177/0x380 [ 517.247434][ T8233] ? clear_bhb_loop+0x50/0xa0 [ 517.247571][ T8233] ? clear_bhb_loop+0x50/0xa0 [ 517.247704][ T8233] asm_int80_emulation+0x1f/0x30 [ 517.247834][ T8233] RIP: 0023:0xf71761ab [ 517.247928][ T8233] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 517.248043][ T8233] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 517.248157][ T8233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54365d0 [ 517.248253][ T8233] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 517.248329][ T8233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.248414][ T8233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.248487][ T8233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.248595][ T8233] [ 517.716726][ T8237] loop3: detected capacity change from 0 to 512 [ 518.001686][ T8237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 518.113325][ T8237] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.465473][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.543280][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.950829][ T7061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.987595][ T7061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.231549][ T7076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.269354][ T7076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.677439][ T5588] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 520.260626][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 520.370830][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 521.186058][ T4875] Bluetooth: hci4: ISO packet for unknown connection handle 1824 [ 521.890383][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.977315][ T11] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 521.977471][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.165636][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 522.318104][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 522.352060][ T11] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 522.387037][ T11] usb 5-1: can't read configurations, error -71 [ 522.881159][ T8299] hsr0: entered promiscuous mode [ 523.046778][ T5231] 8021q: adding VLAN 0 to HW filter on device eth8 [ 523.193183][ T8302] binder: 8298:8302 unknown command 0 [ 523.286982][ T8302] binder: 8298:8302 ioctl c0306201 80000340 returned -22 [ 523.390584][ T8306] loop2: detected capacity change from 0 to 256 [ 523.750172][ T8298] hsr0: left promiscuous mode [ 523.794679][ T8306] ptrace attach of "ci-upstream-kmsan-gce-386-root/syz-executor exec"[5593] was attempted by "ci-upstream-kmsan-gce-386-root/syz-executor exec"[8306] [ 525.394438][ T8326] random: crng reseeded on system resumption [ 525.580751][ T7065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.628887][ T7065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.644914][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.715025][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.771330][ T8333] random: crng reseeded on system resumption [ 525.826501][ T8334] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 526.046960][ T7063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.115845][ T7063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.300477][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.310665][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.706657][ T5675] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 527.847375][ T8361] loop5: detected capacity change from 0 to 64 [ 527.913501][ T5675] usb 7-1: Using ep0 maxpacket: 32 [ 527.960561][ T5675] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.094579][ T5675] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 528.251639][ T5675] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.404206][ T5675] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 528.536375][ T5675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.639020][ T5675] usb 7-1: config 0 descriptor?? [ 528.681202][ T8352] raw-gadget.7 gadget.6: fail, usb_ep_enable returned -22 [ 528.837171][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 528.949681][ T5675] hub 7-1:0.0: USB hub found [ 529.195134][ T5675] hub 7-1:0.0: 2 ports detected [ 529.598966][ T8367] comedi comedi3: pcm3724: I/O base address not correctly aligned [ 529.982566][ T5675] usb 7-1: USB disconnect, device number 2 [ 531.152969][ T8379] FAULT_INJECTION: forcing a failure. [ 531.152969][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.223425][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.3.672 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 531.223603][ T8379] Tainted: [L]=SOFTLOCKUP [ 531.223660][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.223734][ T8379] Call Trace: [ 531.223782][ T8379] [ 531.223826][ T8379] __dump_stack+0x26/0x30 [ 531.223972][ T8379] dump_stack_lvl+0x14c/0x1c0 [ 531.224129][ T8379] dump_stack+0x1e/0x25 [ 531.224265][ T8379] should_fail_ex+0x7e2/0x8c0 [ 531.224454][ T8379] should_fail+0x2a/0x40 [ 531.224599][ T8379] should_fail_usercopy+0x2e/0x40 [ 531.224753][ T8379] _copy_from_user+0x33/0x100 [ 531.224890][ T8379] get_compat_msghdr+0x63/0x740 [ 531.225025][ T8379] ? kmsan_get_metadata+0xf1/0x160 [ 531.225216][ T8379] ___sys_sendmsg+0x198/0x3b0 [ 531.225384][ T8379] ? kmsan_get_metadata+0xf1/0x160 [ 531.225564][ T8379] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 531.225756][ T8379] ? __rcu_read_unlock+0x6c/0xd0 [ 531.225877][ T8379] ? __fget_files+0x3b4/0x4a0 [ 531.226008][ T8379] ? __fget_files+0x3b9/0x4a0 [ 531.226147][ T8379] ? kmsan_get_metadata+0xf1/0x160 [ 531.226338][ T8379] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 531.226531][ T8379] __sys_sendmsg+0x1aa/0x300 [ 531.226719][ T8379] ? fput+0x113/0x160 [ 531.226848][ T8379] ? kmsan_get_metadata+0xf1/0x160 [ 531.227050][ T8379] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 531.227200][ T8379] ia32_sys_call+0x1e4a/0x4360 [ 531.227372][ T8379] __do_fast_syscall_32+0x195/0x470 [ 531.227523][ T8379] do_fast_syscall_32+0x37/0x80 [ 531.227661][ T8379] do_SYSENTER_32+0x1f/0x30 [ 531.227785][ T8379] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.227947][ T8379] RIP: 0023:0xf7fe801c [ 531.228036][ T8379] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 531.228150][ T8379] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 531.228269][ T8379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 531.228354][ T8379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.228427][ T8379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.228501][ T8379] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.228576][ T8379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.228688][ T8379] [ 531.771364][ T8384] loop5: detected capacity change from 0 to 7 [ 531.791479][ T8384] Dev loop5: unable to read RDB block 7 [ 531.813091][ T11] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 531.886833][ T8384] loop5: AHDI p1 [ 531.913972][ T8384] loop5: partition table partially beyond EOD, truncated [ 531.985141][ T11] usb 5-1: config 5 has an invalid interface number: 52 but max is 0 [ 532.031953][ T11] usb 5-1: config 5 has no interface number 0 [ 532.077971][ T11] usb 5-1: config 5 interface 52 has no altsetting 0 [ 532.119064][ T8389] FAULT_INJECTION: forcing a failure. [ 532.119064][ T8389] name failslab, interval 1, probability 0, space 0, times 0 [ 532.172239][ T11] usb 5-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=37.9f [ 532.216152][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.231089][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: syz.5.674 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 532.231267][ T8389] Tainted: [L]=SOFTLOCKUP [ 532.231324][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.231411][ T8389] Call Trace: [ 532.231465][ T8389] [ 532.231522][ T8389] __dump_stack+0x26/0x30 [ 532.231692][ T8389] dump_stack_lvl+0x14c/0x1c0 [ 532.231880][ T8389] dump_stack+0x1e/0x25 [ 532.232013][ T8389] should_fail_ex+0x7e2/0x8c0 [ 532.232185][ T8389] should_failslab+0x158/0x200 [ 532.232370][ T8389] __kmalloc_noprof+0x1e0/0x1660 [ 532.232503][ T8389] ? kfree+0x20/0x1100 [ 532.232674][ T8389] ? tomoyo_realpath_from_path+0xd3/0x9f0 [ 532.232853][ T8389] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 532.233039][ T8389] ? tomoyo_path_number_perm+0x81/0x7d0 [ 532.233218][ T8389] ? filter_irq_stacks+0x49/0x190 [ 532.233348][ T8389] ? kmsan_get_metadata+0xf1/0x160 [ 532.233547][ T8389] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.233762][ T8389] tomoyo_realpath_from_path+0xeb/0x9f0 [ 532.233977][ T8389] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.234187][ T8389] ? __srcu_read_lock+0x5e/0xd0 [ 532.234354][ T8389] tomoyo_path_number_perm+0x1d0/0x7d0 [ 532.234602][ T8389] ? kmsan_get_metadata+0xf1/0x160 [ 532.234803][ T8389] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.235058][ T8389] tomoyo_file_ioctl+0x3d/0x50 [ 532.235208][ T8389] security_file_ioctl_compat+0x139/0x570 [ 532.235403][ T8389] __ia32_compat_sys_ioctl+0x150/0x1270 [ 532.235616][ T8389] ? ksys_write+0x3ac/0x470 [ 532.235774][ T8389] ? kmsan_get_metadata+0xf1/0x160 [ 532.235971][ T8389] ia32_sys_call+0x2854/0x4360 [ 532.236153][ T8389] __do_fast_syscall_32+0x195/0x470 [ 532.236310][ T8389] do_fast_syscall_32+0x37/0x80 [ 532.236447][ T8389] do_SYSENTER_32+0x1f/0x30 [ 532.236589][ T8389] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.236777][ T8389] RIP: 0023:0xf7fd601c [ 532.236881][ T8389] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 532.237015][ T8389] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 532.237143][ T8389] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 532.237231][ T8389] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.237313][ T8389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.237391][ T8389] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.237472][ T8389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.237590][ T8389] [ 532.556536][ T8389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.578817][ T11] usb 5-1: Product: syz [ 532.583646][ T11] usb 5-1: Manufacturer: syz [ 532.588530][ T11] usb 5-1: SerialNumber: syz [ 532.786982][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.818570][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.603873][ T11] pegasus 5-1:5.52: Missing or invalid endpoints [ 533.690781][ T11] usb 5-1: USB disconnect, device number 30 [ 533.774409][ T8404] random: crng reseeded on system resumption [ 534.709188][ T5675] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 534.902305][ T8416] fuse: Bad value for 'fd' [ 534.955877][ T8417] fuse: Bad value for 'fd' [ 534.964363][ T5675] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 535.017313][ T5675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.051191][ T5675] usb 6-1: Product: syz [ 535.067547][ T5675] usb 6-1: Manufacturer: syz [ 535.099159][ T5675] usb 6-1: SerialNumber: syz [ 535.127431][ T5675] usb 6-1: config 0 descriptor?? [ 535.164275][ T5675] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 535.193440][ T5675] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 535.226778][ T5675] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 535.503838][ T11] usb 6-1: USB disconnect, device number 2 [ 535.966108][ T8433] FAULT_INJECTION: forcing a failure. [ 535.966108][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 536.083289][ T8433] CPU: 1 UID: 0 PID: 8433 Comm: syz.6.685 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 536.083460][ T8433] Tainted: [L]=SOFTLOCKUP [ 536.083511][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.083592][ T8433] Call Trace: [ 536.083639][ T8433] [ 536.083694][ T8433] __dump_stack+0x26/0x30 [ 536.083852][ T8433] dump_stack_lvl+0x14c/0x1c0 [ 536.083996][ T8433] dump_stack+0x1e/0x25 [ 536.084121][ T8433] should_fail_ex+0x7e2/0x8c0 [ 536.084289][ T8433] should_failslab+0x158/0x200 [ 536.084492][ T8433] __kmalloc_cache_noprof+0x125/0x1240 [ 536.084634][ T8433] ? kmsan_get_metadata+0xf1/0x160 [ 536.084712][ T29] audit: type=1326 audit(1781466245.089:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.687" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71361ab code=0x7ffc0000 [ 536.084811][ T8433] ? snd_mixer_oss_proc_write+0x8de/0xcf0 [ 536.085348][ T8433] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 536.085774][ T8433] ? kmsan_get_metadata+0xf1/0x160 [ 536.086283][ T8433] snd_mixer_oss_proc_write+0x8de/0xcf0 [ 536.086867][ T8433] ? _parse_integer_limit+0x3dc/0x440 [ 536.087298][ T8433] ? kmsan_get_metadata+0x70/0x160 [ 536.087766][ T8433] ? kmsan_get_metadata+0xf1/0x160 [ 536.088186][ T8433] ? kmsan_get_metadata+0xf1/0x160 [ 536.088592][ T8433] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 536.089020][ T8433] ? __pfx_snd_mixer_oss_proc_write+0x10/0x10 [ 536.089494][ T8433] snd_info_text_entry_release+0x130/0x390 [ 536.090064][ T8433] ? __pfx_snd_info_text_entry_release+0x10/0x10 [ 536.090508][ T8433] close_pdeo+0x180/0x460 [ 536.090901][ T8433] ? kmsan_get_metadata+0xf1/0x160 [ 536.091323][ T8433] proc_reg_release+0x1cf/0x320 [ 536.091748][ T8433] ? __pfx_proc_reg_release+0x10/0x10 [ 536.092207][ T8433] __fput+0x60e/0x1010 [ 536.092697][ T8433] fput_close_sync+0xbc/0x210 [ 536.093067][ T8433] __ia32_sys_close+0xef/0x2c0 [ 536.093510][ T8433] ia32_sys_call+0x37cf/0x4360 [ 536.093955][ T8433] __do_fast_syscall_32+0x195/0x470 [ 536.094323][ T8433] do_fast_syscall_32+0x37/0x80 [ 536.094693][ T8433] do_SYSENTER_32+0x1f/0x30 [ 536.095034][ T8433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.095431][ T8433] RIP: 0023:0xf7f2601c [ 536.095641][ T8433] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 536.095829][ T8433] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 536.095939][ T8433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 536.096082][ T8433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.096266][ T8433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.096431][ T8433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 536.096625][ T8433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.096865][ T8433] [ 536.571034][ T29] audit: type=1326 audit(1781466245.089:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.687" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 536.599050][ T29] audit: type=1326 audit(1781466245.089:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.687" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 536.696027][ T29] audit: type=1326 audit(1781466245.129:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.687" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 536.852348][ T29] audit: type=1326 audit(1781466245.129:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.4.687" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 537.828597][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.691'. [ 537.900049][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.691'. [ 537.913554][ T5674] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 538.180952][ T5674] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 538.217671][ T5674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.235197][ T5674] usb 7-1: Product: syz [ 538.261972][ T5674] usb 7-1: Manufacturer: syz [ 538.278678][ T5674] usb 7-1: SerialNumber: syz [ 539.101323][ T5674] rtl8150 7-1:1.0: couldn't reset the device [ 539.129040][ T5674] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 539.236323][ T5674] usb 7-1: USB disconnect, device number 3 [ 541.362528][ T8485] FAULT_INJECTION: forcing a failure. [ 541.362528][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.449300][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.3.703 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 541.449462][ T8485] Tainted: [L]=SOFTLOCKUP [ 541.449545][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.449631][ T8485] Call Trace: [ 541.449681][ T8485] [ 541.449732][ T8485] __dump_stack+0x26/0x30 [ 541.449892][ T8485] dump_stack_lvl+0x14c/0x1c0 [ 541.450064][ T8485] dump_stack+0x1e/0x25 [ 541.450210][ T8485] should_fail_ex+0x7e2/0x8c0 [ 541.450391][ T8485] should_fail+0x2a/0x40 [ 541.450533][ T8485] should_fail_usercopy+0x2e/0x40 [ 541.450713][ T8485] _copy_from_user+0x33/0x100 [ 541.450853][ T8485] get_compat_msghdr+0x63/0x740 [ 541.450991][ T8485] ? kmsan_get_metadata+0xf1/0x160 [ 541.451194][ T8485] ___sys_sendmsg+0x198/0x3b0 [ 541.451367][ T8485] ? kmsan_get_metadata+0xf1/0x160 [ 541.451555][ T8485] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 541.451744][ T8485] ? __rcu_read_unlock+0x6c/0xd0 [ 541.451865][ T8485] ? __fget_files+0x3b4/0x4a0 [ 541.452001][ T8485] ? __fget_files+0x3b9/0x4a0 [ 541.452156][ T8485] ? kmsan_get_metadata+0xf1/0x160 [ 541.452337][ T8485] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 541.452528][ T8485] __sys_sendmsg+0x1aa/0x300 [ 541.452709][ T8485] ? fput+0x113/0x160 [ 541.452835][ T8485] ? kmsan_get_metadata+0xf1/0x160 [ 541.453032][ T8485] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 541.453185][ T8485] ia32_sys_call+0x1e4a/0x4360 [ 541.453387][ T8485] __do_fast_syscall_32+0x195/0x470 [ 541.453555][ T8485] do_fast_syscall_32+0x37/0x80 [ 541.453702][ T8485] do_SYSENTER_32+0x1f/0x30 [ 541.453846][ T8485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.454034][ T8485] RIP: 0023:0xf7fe801c [ 541.454155][ T8485] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 541.454295][ T8485] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 541.454439][ T8485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 541.454538][ T8485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.454624][ T8485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.454712][ T8485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 541.454804][ T8485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.454934][ T8485] [ 541.862463][ T8489] loop4: detected capacity change from 0 to 512 [ 542.096043][ T8489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.156143][ T8489] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.183325][ T5674] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 542.273383][ T8489] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 542.373067][ T5674] usb 7-1: Using ep0 maxpacket: 8 [ 542.382925][ T8489] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 542.423271][ T5674] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.498317][ T5674] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 542.534908][ T8489] EXT4-fs (loop4): This should not happen!! Data will be lost [ 542.534908][ T8489] [ 542.576894][ T5674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.586903][ T8489] EXT4-fs (loop4): Total free blocks count 0 [ 542.586997][ T8489] EXT4-fs (loop4): Free/Dirty block details [ 542.587070][ T8489] EXT4-fs (loop4): free_blocks=65280 [ 542.587149][ T8489] EXT4-fs (loop4): dirty_blocks=33 [ 542.587225][ T8489] EXT4-fs (loop4): Block reservation details [ 542.587296][ T8489] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 542.801086][ T5674] usb 7-1: Product: syz [ 542.824105][ T5674] usb 7-1: Manufacturer: syz [ 542.871744][ T5674] usb 7-1: SerialNumber: syz [ 542.919393][ T5674] usb 7-1: config 0 descriptor?? [ 542.942946][ T8489] ext4: Unknown parameter '¥Õúj}£V[\XœÿàÚûµ3ë[Í_?üÎÚÇ?üÝo¿üà{ßúiÖ­™¢íè8ÎRoè‡q2ãññy+ÁX1žKew„ÿKŸ‰ˆ·³û¿[vo' [ 542.989625][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 543.007160][ T5674] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 543.294673][ T8507] input: syz1 as /devices/virtual/input/input21 [ 543.309885][ T5674] usb 7-1: USB disconnect, device number 4 [ 543.427139][ T8507] input: failed to attach handler leds to device input21, error: -6 [ 544.307027][ T5580] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 544.917300][ T5580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.515502][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.606371][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.775256][ T8520] FAULT_INJECTION: forcing a failure. [ 549.775256][ T8520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.895426][ T8520] CPU: 1 UID: 0 PID: 8520 Comm: syz.2.711 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 549.895641][ T8520] Tainted: [L]=SOFTLOCKUP [ 549.895704][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 549.895783][ T8520] Call Trace: [ 549.895830][ T8520] [ 549.895877][ T8520] __dump_stack+0x26/0x30 [ 549.896033][ T8520] dump_stack_lvl+0x14c/0x1c0 [ 549.896186][ T8520] dump_stack+0x1e/0x25 [ 549.896328][ T8520] should_fail_ex+0x7e2/0x8c0 [ 549.896498][ T8520] should_fail+0x2a/0x40 [ 549.896641][ T8520] should_fail_usercopy+0x2e/0x40 [ 549.896800][ T8520] _copy_to_user+0x35/0x120 [ 549.896942][ T8520] simple_read_from_buffer+0x1b2/0x340 [ 549.897155][ T8520] proc_fail_nth_read+0x1e0/0x2d0 [ 549.897311][ T8520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.897453][ T8520] vfs_read+0x27c/0xf90 [ 549.897608][ T8520] ? stack_depot_save_flags+0x35/0x790 [ 549.897764][ T8520] ? kmsan_get_metadata+0xf1/0x160 [ 549.897949][ T8520] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 549.898158][ T8520] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 549.898365][ T8520] ksys_read+0x1d9/0x470 [ 549.898551][ T8520] __ia32_sys_read+0x9a/0xf0 [ 549.898737][ T8520] ia32_sys_call+0x1914/0x4360 [ 549.898920][ T8520] do_int80_emulation+0x177/0x380 [ 549.899060][ T8520] ? clear_bhb_loop+0x50/0xa0 [ 549.899199][ T8520] ? clear_bhb_loop+0x50/0xa0 [ 549.899342][ T8520] asm_int80_emulation+0x1f/0x30 [ 549.899475][ T8520] RIP: 0023:0xf71761ab [ 549.899578][ T8520] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 549.899694][ T8520] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 549.899817][ T8520] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54365d0 [ 549.899911][ T8520] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 549.899987][ T8520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.900062][ T8520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 549.900134][ T8520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.900242][ T8520] [ 550.558293][ T8530] input: syz1 as /devices/virtual/input/input22 [ 550.693277][ T8530] input: failed to attach handler leds to device input22, error: -6 [ 556.325304][ T5674] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 556.574412][ T5674] usb 5-1: Using ep0 maxpacket: 32 [ 556.631634][ T5674] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 556.666070][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.6.717'. [ 556.687058][ T5674] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.749983][ T5674] usb 5-1: config 0 has no interface number 0 [ 556.811499][ T5674] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 556.845955][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.6.717'. [ 556.925072][ T5674] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 557.017734][ T5674] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 557.111371][ T5674] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.129646][ T4875] Bluetooth: hci0: ISO packet for unknown connection handle 1824 [ 557.179260][ T5674] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 557.249238][ T5674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.263700][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 557.289535][ T5674] usb 5-1: Product: syz [ 557.313943][ T5674] usb 5-1: Manufacturer: syz [ 557.324705][ T5674] usb 5-1: SerialNumber: syz [ 557.360738][ T5674] usb 5-1: config 0 descriptor?? [ 557.386391][ T8546] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 558.742184][ T8557] loop4: detected capacity change from 0 to 1024 [ 558.859491][ T8557] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 559.767583][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.932380][ T8564] input: syz1 as /devices/virtual/input/input23 [ 559.941291][ T8564] input: failed to attach handler leds to device input23, error: -6 [ 560.221337][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.766455][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.069202][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.314820][ T5674] usb 5-1: probing VID:PID(0424:012C) [ 564.324529][ T5674] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 564.331201][ T5674] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 564.339265][ T5674] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 564.559442][ T5674] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 564.726365][ T5674] usb 5-1: USB disconnect, device number 31 [ 565.031242][ T8584] FAULT_INJECTION: forcing a failure. [ 565.031242][ T8584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.123677][ T8584] CPU: 1 UID: 0 PID: 8584 Comm: syz.5.726 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 565.123829][ T8584] Tainted: [L]=SOFTLOCKUP [ 565.123875][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.123949][ T8584] Call Trace: [ 565.123992][ T8584] [ 565.124036][ T8584] __dump_stack+0x26/0x30 [ 565.124199][ T8584] dump_stack_lvl+0x14c/0x1c0 [ 565.124357][ T8584] dump_stack+0x1e/0x25 [ 565.124532][ T8584] should_fail_ex+0x7e2/0x8c0 [ 565.124721][ T8584] should_fail+0x2a/0x40 [ 565.124868][ T8584] should_fail_usercopy+0x2e/0x40 [ 565.125039][ T8584] _copy_from_user+0x33/0x100 [ 565.125192][ T8584] __sys_bind+0x1af/0x5e0 [ 565.125384][ T8584] ? kmsan_get_metadata+0xf1/0x160 [ 565.125594][ T8584] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 565.125778][ T8584] ? kmsan_get_metadata+0xf1/0x160 [ 565.125971][ T8584] __ia32_sys_bind+0x95/0x100 [ 565.126137][ T8584] ia32_sys_call+0x394b/0x4360 [ 565.126323][ T8584] __do_fast_syscall_32+0x195/0x470 [ 565.126478][ T8584] do_fast_syscall_32+0x37/0x80 [ 565.126608][ T8584] do_SYSENTER_32+0x1f/0x30 [ 565.126731][ T8584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.126900][ T8584] RIP: 0023:0xf7fd601c [ 565.127012][ T8584] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 565.127132][ T8584] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 565.127256][ T8584] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 565.127348][ T8584] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 565.127432][ T8584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.127512][ T8584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 565.127593][ T8584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.127706][ T8584] [ 565.442564][ T8583] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 565.583299][ T8588] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 565.823132][ T5671] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 566.033055][ T5671] usb 5-1: unable to get BOS descriptor or descriptor too short [ 566.076903][ T5671] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 566.117118][ T5671] usb 5-1: can't read configurations, error -22 [ 566.197547][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.275715][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.294994][ T5671] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 566.504156][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.628500][ T5671] usb 5-1: unable to get BOS descriptor or descriptor too short [ 566.694596][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.729820][ T5671] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 566.836468][ T5671] usb 5-1: can't read configurations, error -22 [ 566.949201][ T5671] usb usb5-port1: attempt power cycle [ 567.009558][ T8599] netlink: 48 bytes leftover after parsing attributes in process `syz.6.733'. [ 567.167858][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.733'. [ 567.266573][ T8604] IPVS: Error connecting to the multicast addr [ 567.384493][ T5671] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 567.445303][ T5671] usb 5-1: unable to get BOS descriptor or descriptor too short [ 567.481702][ T5671] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 567.503234][ T5671] usb 5-1: can't read configurations, error -22 [ 567.654757][ T5671] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 567.729520][ T5671] usb 5-1: unable to get BOS descriptor or descriptor too short [ 567.790698][ T5671] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 567.837082][ T5671] usb 5-1: can't read configurations, error -22 [ 567.878314][ T5671] usb usb5-port1: unable to enumerate USB device [ 568.498528][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 568.700208][ T8619] comedi comedi3: pcm3724: I/O base address not correctly aligned [ 568.890625][ T8623] FAULT_INJECTION: forcing a failure. [ 568.890625][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.952006][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.4.738 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 568.952194][ T8623] Tainted: [L]=SOFTLOCKUP [ 568.952251][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 568.952345][ T8623] Call Trace: [ 568.952400][ T8623] [ 568.952452][ T8623] __dump_stack+0x26/0x30 [ 568.952639][ T8623] dump_stack_lvl+0x14c/0x1c0 [ 568.952796][ T8623] dump_stack+0x1e/0x25 [ 568.952927][ T8623] should_fail_ex+0x7e2/0x8c0 [ 568.953090][ T8623] should_fail+0x2a/0x40 [ 568.953216][ T8623] should_fail_usercopy+0x2e/0x40 [ 568.953360][ T8623] _copy_from_user+0x33/0x100 [ 568.953484][ T8623] get_compat_msghdr+0x63/0x740 [ 568.953615][ T8623] ? do_recvmmsg+0x50b/0xdf0 [ 568.953725][ T8623] ___sys_recvmsg+0x17f/0x850 [ 568.953882][ T8623] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 568.954074][ T8623] ? __fget_files+0x3b4/0x4a0 [ 568.954198][ T8623] ? __fget_files+0x3b9/0x4a0 [ 568.954327][ T8623] ? kmsan_get_metadata+0xf1/0x160 [ 568.954518][ T8623] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 568.954746][ T8623] do_recvmmsg+0x50b/0xdf0 [ 568.954859][ T8623] ? __msan_warning+0x1b/0x30 [ 568.955010][ T8623] ? filter_irq_stacks+0x12c/0x190 [ 568.955152][ T8623] ? stack_depot_save_flags+0x35/0x790 [ 568.955289][ T8623] ? kmsan_get_metadata+0xf1/0x160 [ 568.955543][ T8623] __sys_recvmmsg+0xf3/0x450 [ 568.955669][ T8623] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 568.955844][ T8623] __ia32_compat_sys_recvmmsg_time32+0x102/0x1b0 [ 568.956008][ T8623] ia32_sys_call+0x3ec3/0x4360 [ 568.956175][ T8623] __do_fast_syscall_32+0x195/0x470 [ 568.956320][ T8623] do_fast_syscall_32+0x37/0x80 [ 568.956434][ T8623] do_SYSENTER_32+0x1f/0x30 [ 568.956547][ T8623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 568.956706][ T8623] RIP: 0023:0xf6fff01c [ 568.956790][ T8623] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 568.956896][ T8623] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 568.957009][ T8623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005100 [ 568.957089][ T8623] RDX: 0000000000000001 RSI: 0000000040010102 RDI: 0000000000000000 [ 568.957162][ T8623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 568.957233][ T8623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 568.957302][ T8623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.957403][ T8623] [ 569.683215][ T4875] Bluetooth: hci0: ISO packet for unknown connection handle 1824 [ 569.874898][ T8635] netlink: 9 bytes leftover after parsing attributes in process `syz.6.740'. [ 570.071177][ T8635] netlink: 9 bytes leftover after parsing attributes in process `syz.6.740'. [ 570.277635][ T8642] FAULT_INJECTION: forcing a failure. [ 570.277635][ T8642] name failslab, interval 1, probability 0, space 0, times 0 [ 570.333452][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.2.742 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 570.333611][ T8642] Tainted: [L]=SOFTLOCKUP [ 570.333657][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.333730][ T8642] Call Trace: [ 570.333776][ T8642] [ 570.333819][ T8642] __dump_stack+0x26/0x30 [ 570.333952][ T8642] dump_stack_lvl+0x14c/0x1c0 [ 570.334104][ T8642] dump_stack+0x1e/0x25 [ 570.334231][ T8642] should_fail_ex+0x7e2/0x8c0 [ 570.334437][ T8642] should_failslab+0x158/0x200 [ 570.334627][ T8642] __kmalloc_cache_noprof+0x125/0x1240 [ 570.334770][ T8642] ? snd_pcm_oss_change_params_locked+0x10d/0x6670 [ 570.334979][ T8642] ? filter_irq_stacks+0x49/0x190 [ 570.335106][ T8642] ? kmsan_get_metadata+0xf1/0x160 [ 570.335300][ T8642] snd_pcm_oss_change_params_locked+0x10d/0x6670 [ 570.335511][ T8642] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 570.335700][ T8642] ? kmsan_internal_poison_memory+0x78/0x90 [ 570.335837][ T8642] ? kmsan_internal_poison_memory+0x4a/0x90 [ 570.335973][ T8642] ? kmsan_slab_free+0xce/0x140 [ 570.336106][ T8642] ? kmem_cache_free+0x254/0xea0 [ 570.336214][ T8642] ? security_file_free+0xe5/0x1c0 [ 570.336338][ T8642] ? __fput+0xb5f/0x1010 [ 570.336470][ T8642] ? ____fput+0x25/0x30 [ 570.336588][ T8642] ? task_work_run+0x208/0x2b0 [ 570.336726][ T8642] ? exit_to_user_mode_loop+0x505/0x2420 [ 570.336851][ T8642] ? __do_fast_syscall_32+0x2dc/0x470 [ 570.336977][ T8642] ? do_fast_syscall_32+0x37/0x80 [ 570.337094][ T8642] ? do_SYSENTER_32+0x1f/0x30 [ 570.337212][ T8642] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.337374][ T8642] ? kmsan_get_metadata+0xf1/0x160 [ 570.337544][ T8642] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 570.337713][ T8642] snd_pcm_oss_change_params+0x15b/0x1d0 [ 570.337850][ T8642] snd_pcm_oss_make_ready+0xda/0x4a0 [ 570.337986][ T8642] snd_pcm_oss_sync+0x2be/0x1660 [ 570.338124][ T8642] ? kmsan_get_metadata+0xf1/0x160 [ 570.338275][ T8642] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 570.338444][ T8642] snd_pcm_oss_release+0x1e0/0x520 [ 570.338612][ T8642] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 570.338770][ T8642] __fput+0x60e/0x1010 [ 570.338909][ T8642] ? __pfx_____fput+0x10/0x10 [ 570.339035][ T8642] ____fput+0x25/0x30 [ 570.339159][ T8642] task_work_run+0x208/0x2b0 [ 570.339282][ T8642] exit_to_user_mode_loop+0x505/0x2420 [ 570.339440][ T8642] ? __ia32_sys_close_range+0x96/0xe0 [ 570.339573][ T8642] __do_fast_syscall_32+0x2dc/0x470 [ 570.339703][ T8642] do_fast_syscall_32+0x37/0x80 [ 570.339818][ T8642] do_SYSENTER_32+0x1f/0x30 [ 570.339930][ T8642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.340069][ T8642] RIP: 0023:0xf7f7501c [ 570.340150][ T8642] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 570.340252][ T8642] RSP: 002b:00000000f541550c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 570.340363][ T8642] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 570.340433][ T8642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.340499][ T8642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.340566][ T8642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 570.340632][ T8642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.340747][ T8642] [ 570.348848][ T8644] FAULT_INJECTION: forcing a failure. [ 570.348848][ T8644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.861899][ T8644] CPU: 1 UID: 0 PID: 8644 Comm: syz.3.744 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 570.862056][ T8644] Tainted: [L]=SOFTLOCKUP [ 570.862103][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.862174][ T8644] Call Trace: [ 570.862218][ T8644] [ 570.862254][ T8644] __dump_stack+0x26/0x30 [ 570.862393][ T8644] dump_stack_lvl+0x14c/0x1c0 [ 570.862536][ T8644] dump_stack+0x1e/0x25 [ 570.862663][ T8644] should_fail_ex+0x7e2/0x8c0 [ 570.862833][ T8644] should_fail+0x2a/0x40 [ 570.862958][ T8644] should_fail_usercopy+0x2e/0x40 [ 570.863107][ T8644] _copy_from_user+0x33/0x100 [ 570.863237][ T8644] get_compat_msghdr+0x63/0x740 [ 570.863368][ T8644] ? kmsan_get_metadata+0xf1/0x160 [ 570.863551][ T8644] ___sys_sendmsg+0x198/0x3b0 [ 570.863715][ T8644] ? kmsan_get_metadata+0xf1/0x160 [ 570.863893][ T8644] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 570.864065][ T8644] ? __rcu_read_unlock+0x6c/0xd0 [ 570.864185][ T8644] ? __fget_files+0x3b4/0x4a0 [ 570.864313][ T8644] ? __fget_files+0x3b9/0x4a0 [ 570.864467][ T8644] ? kmsan_get_metadata+0xf1/0x160 [ 570.864673][ T8644] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 570.864892][ T8644] __sys_sendmsg+0x1aa/0x300 [ 570.865096][ T8644] ? fput+0x113/0x160 [ 570.865224][ T8644] ? kmsan_get_metadata+0xf1/0x160 [ 570.865417][ T8644] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 570.865568][ T8644] ia32_sys_call+0x1e4a/0x4360 [ 570.865757][ T8644] __do_fast_syscall_32+0x195/0x470 [ 570.865905][ T8644] do_fast_syscall_32+0x37/0x80 [ 570.866036][ T8644] do_SYSENTER_32+0x1f/0x30 [ 570.866179][ T8644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 570.866363][ T8644] RIP: 0023:0xf7fe801c [ 570.866461][ T8644] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 570.866584][ T8644] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 570.866711][ T8644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 570.866833][ T8644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 570.866916][ T8644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 570.867002][ T8644] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 570.867088][ T8644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.867209][ T8644] [ 571.197567][ T8643] loop4: detected capacity change from 0 to 2048 [ 571.313935][ T8643] EXT4-fs: Ignoring removed mblk_io_submit option [ 571.538831][ T8643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.706044][ T8643] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.968693][ T8657] 9p: Bad value for 'rfdno' [ 572.155532][ T5675] libceph: connect (1)[c::]:6789 error -101 [ 572.184610][ T5675] libceph: mon0 (1)[c::]:6789 connect error [ 572.276643][ T8657] ceph: No mds server is up or the cluster is laggy [ 572.343879][ T5675] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 572.465045][ T5674] libceph: connect (1)[c::]:6789 error -101 [ 572.477408][ T5674] libceph: mon0 (1)[c::]:6789 connect error [ 572.569119][ T8643] loop4: detected capacity change from 0 to 4096 [ 572.633443][ T5675] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 572.670446][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.679146][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.690845][ T5675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.703458][ T8657] syzkaller0: entered promiscuous mode [ 572.709124][ T8657] syzkaller0: entered allmulticast mode [ 572.753481][ T5675] usb 6-1: Product: syz [ 572.789119][ T5675] usb 6-1: Manufacturer: syz [ 572.807914][ T8671] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 572.823667][ T5675] usb 6-1: SerialNumber: syz [ 572.878181][ T5675] usb 6-1: config 0 descriptor?? [ 572.939179][ T8657] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 573.046116][ T5675] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 573.087641][ T5675] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 573.104708][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.130286][ T5675] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 573.200901][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.456016][ T5675] usb 6-1: USB disconnect, device number 3 [ 573.863119][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.6.751'. [ 577.103602][ T8702] netlink: 56 bytes leftover after parsing attributes in process `syz.2.757'. [ 577.285946][ T8698] netlink: 'syz.6.755': attribute type 1 has an invalid length. [ 577.861988][ T8710] FAULT_INJECTION: forcing a failure. [ 577.861988][ T8710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.926434][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.5.759 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 577.926605][ T8710] Tainted: [L]=SOFTLOCKUP [ 577.926665][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 577.926739][ T8710] Call Trace: [ 577.926785][ T8710] [ 577.926828][ T8710] __dump_stack+0x26/0x30 [ 577.926973][ T8710] dump_stack_lvl+0x14c/0x1c0 [ 577.927125][ T8710] dump_stack+0x1e/0x25 [ 577.927253][ T8710] should_fail_ex+0x7e2/0x8c0 [ 577.927417][ T8710] should_fail+0x2a/0x40 [ 577.927540][ T8710] should_fail_usercopy+0x2e/0x40 [ 577.927686][ T8710] _copy_from_user+0x33/0x100 [ 577.927822][ T8710] do_ip_vs_set_ctl+0x2a3/0x1920 [ 577.928113][ T8710] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 577.928277][ T8710] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 577.928456][ T8710] ? kmsan_get_metadata+0xf1/0x160 [ 577.928618][ T8710] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 577.928810][ T8710] ? kmsan_get_metadata+0xf1/0x160 [ 577.928983][ T8710] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 577.929149][ T8710] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 577.929335][ T8710] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 577.929502][ T8710] nf_setsockopt+0x4fb/0x550 [ 577.929752][ T8710] ip_setsockopt+0x1f2/0x210 [ 577.929964][ T8710] ? __pfx_ip_setsockopt+0x10/0x10 [ 577.930139][ T8710] tcp_setsockopt+0x157/0x180 [ 577.930325][ T8710] ? __pfx_tcp_setsockopt+0x10/0x10 [ 577.930451][ T8710] sock_common_setsockopt+0xf5/0x140 [ 577.930614][ T8710] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 577.930770][ T8710] smc_setsockopt+0x2cd/0x1430 [ 577.930967][ T8710] ? __pfx_smc_setsockopt+0x10/0x10 [ 577.931110][ T8710] __sys_setsockopt+0x43e/0x580 [ 577.931303][ T8710] __ia32_sys_setsockopt+0xf3/0x1a0 [ 577.931504][ T8710] ia32_sys_call+0x34c3/0x4360 [ 577.931686][ T8710] __do_fast_syscall_32+0x195/0x470 [ 577.931844][ T8710] do_fast_syscall_32+0x37/0x80 [ 577.931982][ T8710] do_SYSENTER_32+0x1f/0x30 [ 577.932124][ T8710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 577.932292][ T8710] RIP: 0023:0xf7fd601c [ 577.932389][ T8710] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 577.932504][ T8710] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 577.932624][ T8710] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 577.932708][ T8710] RDX: 000000000000048c RSI: 00000000800002c0 RDI: 0000000000000018 [ 577.932799][ T8710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.932890][ T8710] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 577.932968][ T8710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.933095][ T8710] [ 578.576042][ T8715] loop4: detected capacity change from 0 to 2048 [ 578.614200][ T8715] EXT4-fs: Ignoring removed mblk_io_submit option [ 578.751562][ T8715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.909024][ T8715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.382358][ T8729] 9p: Bad value for 'rfdno' [ 579.421435][ T8730] 9p: Bad value for 'rfdno' [ 579.463957][ T5677] libceph: connect (1)[c::]:6789 error -101 [ 579.473107][ T5677] libceph: mon0 (1)[c::]:6789 connect error [ 579.543501][ T5674] libceph: connect (1)[c::]:6789 error -101 [ 579.554256][ T5674] libceph: mon0 (1)[c::]:6789 connect error [ 579.630582][ T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 579.739953][ T8729] ceph: No mds server is up or the cluster is laggy [ 579.755722][ T5677] libceph: connect (1)[c::]:6789 error -101 [ 579.792933][ T8715] loop4: detected capacity change from 0 to 4096 [ 579.804207][ T5677] libceph: mon0 (1)[c::]:6789 connect error [ 579.814037][ T8730] ceph: No mds server is up or the cluster is laggy [ 579.835121][ T5674] libceph: connect (1)[c::]:6789 error -101 [ 579.874446][ T5674] libceph: mon0 (1)[c::]:6789 connect error [ 579.911472][ T11] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 579.972209][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.018892][ T8745] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.059656][ T11] usb 6-1: Product: syz [ 580.077638][ T11] usb 6-1: Manufacturer: syz [ 580.097952][ T11] usb 6-1: SerialNumber: syz [ 580.151544][ T11] usb 6-1: config 0 descriptor?? [ 580.178526][ T8738] syzkaller0: entered promiscuous mode [ 580.203676][ T8738] syzkaller0: entered allmulticast mode [ 580.268023][ T11] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 580.302286][ T11] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 580.355024][ T8730] syzkaller0: entered promiscuous mode [ 580.364955][ T11] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 580.368474][ T8729] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 580.418388][ T8730] syzkaller0: entered allmulticast mode [ 580.616471][ T8730] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 580.638949][ T11] usb 6-1: USB disconnect, device number 4 [ 581.009496][ T8757] FAULT_INJECTION: forcing a failure. [ 581.009496][ T8757] name failslab, interval 1, probability 0, space 0, times 0 [ 581.022485][ T8757] CPU: 0 UID: 0 PID: 8757 Comm: syz.4.767 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 581.022652][ T8757] Tainted: [L]=SOFTLOCKUP [ 581.022702][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.022779][ T8757] Call Trace: [ 581.022827][ T8757] [ 581.022876][ T8757] __dump_stack+0x26/0x30 [ 581.023028][ T8757] dump_stack_lvl+0x14c/0x1c0 [ 581.023182][ T8757] dump_stack+0x1e/0x25 [ 581.023325][ T8757] should_fail_ex+0x7e2/0x8c0 [ 581.023498][ T8757] should_failslab+0x158/0x200 [ 581.023684][ T8757] kmem_cache_alloc_noprof+0x146/0x1250 [ 581.023877][ T8757] ? __pfx_do_sys_openat2+0x1/0x10 [ 581.024020][ T8757] ? do_getname+0x4a/0x530 [ 581.024159][ T8757] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 581.024358][ T8757] do_getname+0x4a/0x530 [ 581.024521][ T8757] getname_flags+0x36/0x50 [ 581.024660][ T8757] do_sys_openat2+0xb2/0x370 [ 581.024830][ T8757] __ia32_compat_sys_openat+0x238/0x300 [ 581.025026][ T8757] ia32_sys_call+0x330b/0x4360 [ 581.025241][ T8757] __do_fast_syscall_32+0x195/0x470 [ 581.025420][ T8757] do_fast_syscall_32+0x37/0x80 [ 581.025567][ T8757] do_SYSENTER_32+0x1f/0x30 [ 581.025711][ T8757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.025891][ T8757] RIP: 0023:0xf6fff01c [ 581.025991][ T8757] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 581.026117][ T8757] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 581.026248][ T8757] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 581.026362][ T8757] RDX: 0000000000181080 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.026444][ T8757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.026519][ T8757] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 581.026599][ T8757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.026710][ T8757] [ 582.232340][ T8762] input: syz1 as /devices/virtual/input/input24 [ 582.240351][ T8762] input: failed to attach handler leds to device input24, error: -6 [ 587.229879][ T4875] Bluetooth: hci2: ISO packet for unknown connection handle 1824 [ 588.451827][ T8790] Bluetooth: MGMT ver 1.23 [ 588.969266][ T8800] 9p: Bad value for 'rfdno' [ 589.104866][ T11] libceph: connect (1)[c::]:6789 error -101 [ 589.131539][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 589.199729][ T8796] loop3: detected capacity change from 0 to 2048 [ 589.273705][ T8796] EXT4-fs: Ignoring removed mblk_io_submit option [ 589.474741][ T5677] libceph: connect (1)[c::]:6789 error -101 [ 589.485421][ T5677] libceph: mon0 (1)[c::]:6789 connect error [ 589.503299][ T8796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.548614][ T8801] syzkaller0: entered promiscuous mode [ 589.679849][ T8796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.689916][ T8801] syzkaller0: entered allmulticast mode [ 589.809762][ T8801] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 589.894318][ T29] audit: type=1326 audit(1781466298.909:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.018182][ T5677] libceph: connect (1)[c::]:6789 error -101 [ 590.053602][ T29] audit: type=1326 audit(1781466298.939:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.071455][ T5677] libceph: mon0 (1)[c::]:6789 connect error [ 590.097719][ T5583] Bluetooth: hci0: command 0x0406 tx timeout [ 590.186237][ T29] audit: type=1326 audit(1781466298.939:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.212123][ T29] audit: type=1326 audit(1781466298.959:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.240468][ T29] audit: type=1326 audit(1781466298.959:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.273279][ T29] audit: type=1326 audit(1781466298.969:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.430402][ T29] audit: type=1326 audit(1781466298.969:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.494669][ T8800] ceph: No mds server is up or the cluster is laggy [ 590.598862][ T29] audit: type=1326 audit(1781466298.989:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.723097][ T11] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 590.753399][ T8796] loop3: detected capacity change from 0 to 4096 [ 590.765005][ T29] audit: type=1326 audit(1781466298.989:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 590.910329][ T8825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 590.923963][ T29] audit: type=1326 audit(1781466298.999:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.4.780" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf6fff01c code=0x7ffc0000 [ 591.029091][ T11] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 591.092427][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.139402][ T11] usb 7-1: Product: syz [ 591.166338][ T11] usb 7-1: Manufacturer: syz [ 591.240699][ T11] usb 7-1: SerialNumber: syz [ 591.275191][ T11] usb 7-1: config 0 descriptor?? [ 591.382497][ T11] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 591.434338][ T11] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 591.480296][ T11] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 591.765381][ T5675] usb 7-1: USB disconnect, device number 5 [ 592.277015][ T8833] loop4: detected capacity change from 0 to 256 [ 592.358511][ T8832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 592.537682][ T8833] exfat: Deprecated parameter 'utf8' [ 592.690084][ T8833] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 593.017900][ T8833] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0f1fc7f3, utbl_chksum : 0xe619d30d) [ 593.316905][ T4875] Bluetooth: hci3: ISO packet for unknown connection handle 1824 [ 594.143547][ T8844] FAULT_INJECTION: forcing a failure. [ 594.143547][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 594.267353][ T8844] CPU: 1 UID: 0 PID: 8844 Comm: syz.2.788 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 594.267518][ T8844] Tainted: [L]=SOFTLOCKUP [ 594.267569][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 594.267647][ T8844] Call Trace: [ 594.267697][ T8844] [ 594.267744][ T8844] __dump_stack+0x26/0x30 [ 594.267897][ T8844] dump_stack_lvl+0x14c/0x1c0 [ 594.268050][ T8844] dump_stack+0x1e/0x25 [ 594.268185][ T8844] should_fail_ex+0x7e2/0x8c0 [ 594.268365][ T8844] should_failslab+0x158/0x200 [ 594.268551][ T8844] __kmalloc_cache_noprof+0x125/0x1240 [ 594.268694][ T8844] ? __se_sys_memfd_create+0x55c/0xb00 [ 594.268849][ T8844] ? kmsan_get_metadata+0xf1/0x160 [ 594.269026][ T8844] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 594.269221][ T8844] ? kmsan_get_metadata+0xf1/0x160 [ 594.269413][ T8844] __se_sys_memfd_create+0x55c/0xb00 [ 594.269573][ T8844] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 594.269769][ T8844] __ia32_sys_memfd_create+0x76/0xb0 [ 594.269940][ T8844] ia32_sys_call+0x1ca8/0x4360 [ 594.270138][ T8844] __do_fast_syscall_32+0x195/0x470 [ 594.270301][ T8844] do_fast_syscall_32+0x37/0x80 [ 594.270466][ T8844] do_SYSENTER_32+0x1f/0x30 [ 594.270625][ T8844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 594.270809][ T8844] RIP: 0023:0xf7f7501c [ 594.270916][ T8844] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 594.271046][ T8844] RSP: 002b:00000000f543631c EFLAGS: 00000206 ORIG_RAX: 0000000000000164 [ 594.271243][ T8844] RAX: ffffffffffffffda RBX: 00000000f72410ef RCX: 0000000000000000 [ 594.271344][ T8844] RDX: 00000000f7163ece RSI: 00000000f54363c0 RDI: 0000000000000040 [ 594.271440][ T8844] RBP: 0000000080000480 R08: 0000000000000000 R09: 0000000000000000 [ 594.271532][ T8844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 594.271618][ T8844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.271743][ T8844] [ 595.019657][ T8848] loop3: detected capacity change from 0 to 2048 [ 595.331315][ T8848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.453093][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 595.453193][ T29] audit: type=1326 audit(1781466304.429:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 595.608408][ T8855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 595.707736][ T29] audit: type=1326 audit(1781466304.439:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 596.129795][ T8863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.574166][ T29] audit: type=1326 audit(1781466304.439:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 596.792910][ T8869] 9p: Bad value for 'rfdno' [ 597.074992][ T29] audit: type=1326 audit(1781466304.439:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=78 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 598.145861][ T29] audit: type=1326 audit(1781466304.439:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 598.384986][ T29] audit: type=1326 audit(1781466304.449:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 598.466055][ T29] audit: type=1326 audit(1781466304.449:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 598.504981][ T8879] FAULT_INJECTION: forcing a failure. [ 598.504981][ T8879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.521554][ T8873] ceph: No mds server is up or the cluster is laggy [ 598.547507][ T5680] libceph: connect (1)[c::]:6789 error -101 [ 598.564568][ T7073] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 598.577132][ T7073] EXT4-fs (loop3): This should not happen!! Data will be lost [ 598.577132][ T7073] [ 598.581485][ T5680] libceph: mon0 (1)[c::]:6789 connect error [ 598.587760][ T29] audit: type=1326 audit(1781466304.449:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 598.721354][ T7073] EXT4-fs (loop3): Total free blocks count 0 [ 598.733707][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.2.795 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 598.733873][ T8879] Tainted: [L]=SOFTLOCKUP [ 598.733926][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.734008][ T8879] Call Trace: [ 598.734057][ T8879] [ 598.734106][ T8879] __dump_stack+0x26/0x30 [ 598.734285][ T8879] dump_stack_lvl+0x14c/0x1c0 [ 598.734453][ T8879] dump_stack+0x1e/0x25 [ 598.734598][ T8879] should_fail_ex+0x7e2/0x8c0 [ 598.734783][ T8879] should_fail+0x2a/0x40 [ 598.734931][ T8879] should_fail_usercopy+0x2e/0x40 [ 598.735098][ T8879] _copy_from_user+0x33/0x100 [ 598.735254][ T8879] get_compat_msghdr+0x63/0x740 [ 598.735423][ T8879] ? kmsan_get_metadata+0xf1/0x160 [ 598.735644][ T8879] ___sys_sendmsg+0x198/0x3b0 [ 598.735822][ T8879] ? kmsan_get_metadata+0xf1/0x160 [ 598.736010][ T8879] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.736204][ T8879] ? __rcu_read_unlock+0x6c/0xd0 [ 598.736372][ T8879] ? __fget_files+0x3b4/0x4a0 [ 598.736524][ T8879] ? __fget_files+0x3b9/0x4a0 [ 598.736674][ T8879] ? kmsan_get_metadata+0xf1/0x160 [ 598.736868][ T8879] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 598.737078][ T8879] __sys_sendmsg+0x1aa/0x300 [ 598.737280][ T8879] ? fput+0x113/0x160 [ 598.737418][ T8879] ? kmsan_get_metadata+0xf1/0x160 [ 598.737625][ T8879] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 598.737816][ T8879] ia32_sys_call+0x1e4a/0x4360 [ 598.738022][ T8879] __do_fast_syscall_32+0x195/0x470 [ 598.738194][ T8879] do_fast_syscall_32+0x37/0x80 [ 598.738360][ T8879] do_SYSENTER_32+0x1f/0x30 [ 598.738507][ T8879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.738689][ T8879] RIP: 0023:0xf7f7501c [ 598.738794][ T8879] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 598.738921][ T8879] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 598.739079][ T8879] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 598.739170][ T8879] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 598.739249][ T8879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.739334][ T8879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 598.739413][ T8879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.739526][ T8879] [ 599.029189][ T29] audit: type=1326 audit(1781466304.449:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 599.093507][ T7073] EXT4-fs (loop3): Free/Dirty block details [ 599.258943][ T5674] libceph: connect (1)[c::]:6789 error -101 [ 599.283395][ T7073] EXT4-fs (loop3): free_blocks=2415919504 [ 599.327133][ T5674] libceph: mon0 (1)[c::]:6789 connect error [ 599.327800][ T7073] EXT4-fs (loop3): dirty_blocks=64 [ 599.358915][ T29] audit: type=1326 audit(1781466304.449:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.792" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 599.441272][ T7073] EXT4-fs (loop3): Block reservation details [ 599.520949][ T7073] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 599.573986][ T1097] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 599.614860][ T8869] syzkaller0: entered promiscuous mode [ 599.655884][ T8869] syzkaller0: entered allmulticast mode [ 599.699292][ T5588] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 599.815303][ T8869] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 600.032995][ T5677] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 600.242571][ T5677] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 600.297243][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.358709][ T5677] usb 6-1: Product: syz [ 600.386761][ T5677] usb 6-1: Manufacturer: syz [ 600.433001][ T5677] usb 6-1: SerialNumber: syz [ 600.498979][ T5677] usb 6-1: config 0 descriptor?? [ 600.590447][ T4875] Bluetooth: hci1: ISO packet for unknown connection handle 1824 [ 600.628644][ T5677] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 600.732177][ T5677] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 600.808598][ T5677] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 600.926098][ T5677] usb 6-1: USB disconnect, device number 5 [ 601.067071][ T8893] loop3: detected capacity change from 0 to 2048 [ 601.116592][ T8893] EXT4-fs: Ignoring removed mblk_io_submit option [ 601.197512][ T8896] loop6: detected capacity change from 0 to 64 [ 601.269294][ T8896] MINIX-fs: mounting file system with errors, running fsck is recommended [ 601.280400][ T8893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.352373][ T8893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.213728][ T8893] ip6gre1: entered promiscuous mode [ 602.272177][ T8893] ip6gre1: entered allmulticast mode [ 602.576093][ T5677] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 602.707693][ T8915] FAULT_INJECTION: forcing a failure. [ 602.707693][ T8915] name failslab, interval 1, probability 0, space 0, times 0 [ 602.798118][ T8915] CPU: 1 UID: 0 PID: 8915 Comm: syz.5.803 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 602.798279][ T8915] Tainted: [L]=SOFTLOCKUP [ 602.798333][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 602.798410][ T8915] Call Trace: [ 602.798456][ T8915] [ 602.798499][ T8915] __dump_stack+0x26/0x30 [ 602.798648][ T8915] dump_stack_lvl+0x14c/0x1c0 [ 602.798786][ T8915] dump_stack+0x1e/0x25 [ 602.798912][ T8915] should_fail_ex+0x7e2/0x8c0 [ 602.799077][ T8915] should_failslab+0x158/0x200 [ 602.799253][ T8915] __kmalloc_noprof+0x1e0/0x1660 [ 602.799392][ T8915] ? kfree+0x20/0x1100 [ 602.799546][ T8915] ? tomoyo_realpath_from_path+0xd3/0x9f0 [ 602.799718][ T8915] ? tomoyo_realpath_from_path+0xeb/0x9f0 [ 602.799891][ T8915] ? tomoyo_path_number_perm+0x81/0x7d0 [ 602.800072][ T8915] ? filter_irq_stacks+0x49/0x190 [ 602.800191][ T8915] ? kmsan_get_metadata+0xf1/0x160 [ 602.800370][ T8915] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 602.800553][ T8915] tomoyo_realpath_from_path+0xeb/0x9f0 [ 602.800737][ T8915] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 602.800945][ T8915] ? __srcu_read_lock+0x5e/0xd0 [ 602.801099][ T8915] tomoyo_path_number_perm+0x1d0/0x7d0 [ 602.801290][ T8915] ? kmsan_get_metadata+0xf1/0x160 [ 602.801468][ T8915] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 602.801703][ T8915] tomoyo_file_ioctl+0x3d/0x50 [ 602.801837][ T8915] security_file_ioctl_compat+0x139/0x570 [ 602.802002][ T8915] __ia32_compat_sys_ioctl+0x150/0x1270 [ 602.802191][ T8915] ? ksys_write+0x3ac/0x470 [ 602.802385][ T8915] ? kmsan_get_metadata+0xf1/0x160 [ 602.802616][ T8915] ia32_sys_call+0x2854/0x4360 [ 602.802821][ T8915] __do_fast_syscall_32+0x195/0x470 [ 602.802983][ T8915] do_fast_syscall_32+0x37/0x80 [ 602.803116][ T8915] do_SYSENTER_32+0x1f/0x30 [ 602.803234][ T8915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.803400][ T8915] RIP: 0023:0xf7fd601c [ 602.803488][ T8915] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 602.803601][ T8915] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 602.803714][ T8915] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007aa [ 602.803801][ T8915] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.803877][ T8915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 602.803957][ T8915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 602.804030][ T8915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.804127][ T8915] [ 602.895224][ T5677] usb 5-1: Using ep0 maxpacket: 32 [ 603.136042][ T8915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 603.456389][ T8910] loop3: detected capacity change from 0 to 4096 [ 603.616639][ T5677] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 603.667308][ T5677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.757602][ T5677] usb 5-1: config 0 descriptor?? [ 603.870041][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 603.870117][ T29] audit: type=1326 audit(1781466312.879:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 604.052341][ T5677] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 604.125950][ T29] audit: type=1326 audit(1781466312.879:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 604.161474][ T5677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.258558][ T5677] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 604.314666][ T8906] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 604.341998][ T5677] usb 5-1: media controller created [ 604.349256][ T29] audit: type=1326 audit(1781466312.979:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 604.560147][ T29] audit: type=1326 audit(1781466312.979:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 604.629580][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.735416][ T29] audit: type=1326 audit(1781466312.989:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=78 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 604.931652][ T29] audit: type=1326 audit(1781466312.989:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 605.040081][ T5677] az6027: usb out operation failed. (-71) [ 605.076785][ T5677] az6027: usb out operation failed. (-71) [ 605.088914][ T29] audit: type=1326 audit(1781466312.989:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 605.141272][ T5677] stb0899_attach: Driver disabled by Kconfig [ 605.193062][ T5677] az6027: no front-end attached [ 605.193062][ T5677] [ 605.263932][ T5677] az6027: usb out operation failed. (-71) [ 605.292156][ T5677] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 605.300633][ T29] audit: type=1326 audit(1781466313.009:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 605.385555][ T5677] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 605.486710][ T29] audit: type=1326 audit(1781466313.009:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 605.515457][ T5677] dvb-usb: schedule remote query interval to 400 msecs. [ 605.595778][ T5677] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 605.649954][ T8933] 9p: Bad value for 'rfdno' [ 605.697121][ T5677] usb 5-1: USB disconnect, device number 36 [ 605.708729][ T29] audit: type=1326 audit(1781466313.009:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.2.805" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 606.193248][ T8935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.586291][ T11] libceph: connect (1)[c::]:6789 error -101 [ 606.606767][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 606.617690][ T8937] ceph: No mds server is up or the cluster is laggy [ 606.874623][ T5671] libceph: connect (1)[c::]:6789 error -101 [ 606.880900][ T5671] libceph: mon0 (1)[c::]:6789 connect error [ 607.302371][ T8946] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 607.315081][ T5677] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 607.403267][ T8952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.873306][ T4875] Bluetooth: hci1: ISO packet for unknown connection handle 1824 [ 607.965737][ T5671] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 608.378474][ T5671] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 608.425687][ T5671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.472875][ T5671] usb 6-1: Product: syz [ 608.486791][ T5671] usb 6-1: Manufacturer: syz [ 608.521410][ T5671] usb 6-1: SerialNumber: syz [ 608.629840][ T5671] usb 6-1: config 0 descriptor?? [ 608.714446][ T5677] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 608.754288][ T5671] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 608.785757][ T5671] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 608.822144][ T5671] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 608.929570][ T5677] usb 7-1: Using ep0 maxpacket: 16 [ 609.016260][ T5677] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 609.062403][ T5677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.103539][ T5677] usb 7-1: Product: syz [ 609.123345][ T5680] usb 6-1: USB disconnect, device number 6 [ 609.139322][ T5677] usb 7-1: Manufacturer: syz [ 609.169181][ T5677] usb 7-1: SerialNumber: syz [ 609.233903][ T5677] usb 7-1: config 0 descriptor?? [ 609.291505][ T5677] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 609.702557][ T5677] usb 7-1: USB disconnect, device number 6 [ 610.876859][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 610.876954][ T29] audit: type=1326 audit(1781466319.889:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 611.110847][ T29] audit: type=1326 audit(1781466319.919:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 611.281061][ T29] audit: type=1326 audit(1781466319.919:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 611.335775][ T8985] loop4: detected capacity change from 0 to 2048 [ 611.411965][ T8985] EXT4-fs: Ignoring removed mblk_io_submit option [ 611.429020][ T29] audit: type=1326 audit(1781466319.919:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 611.650405][ T29] audit: type=1326 audit(1781466319.929:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 611.694850][ T29] audit: type=1326 audit(1781466319.899:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 611.724614][ T8985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.829118][ T29] audit: type=1326 audit(1781466319.929:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 611.871270][ T8985] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.991940][ T29] audit: type=1326 audit(1781466319.929:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 612.229187][ T9001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.568029][ T9002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.789592][ T29] audit: type=1326 audit(1781466319.929:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=78 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 613.872319][ T29] audit: type=1326 audit(1781466319.929:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8986 comm="syz.5.820" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 614.979463][ T4875] Bluetooth: hci4: ISO packet for unknown connection handle 1824 [ 615.960951][ T9028] FAULT_INJECTION: forcing a failure. [ 615.960951][ T9028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.130815][ T9028] CPU: 1 UID: 0 PID: 9028 Comm: syz.2.831 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 616.130979][ T9028] Tainted: [L]=SOFTLOCKUP [ 616.131030][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.131107][ T9028] Call Trace: [ 616.131154][ T9028] [ 616.131203][ T9028] __dump_stack+0x26/0x30 [ 616.131388][ T9028] dump_stack_lvl+0x14c/0x1c0 [ 616.131575][ T9028] dump_stack+0x1e/0x25 [ 616.131727][ T9028] should_fail_ex+0x7e2/0x8c0 [ 616.131915][ T9028] should_fail+0x2a/0x40 [ 616.132067][ T9028] should_fail_usercopy+0x2e/0x40 [ 616.132242][ T9028] _copy_to_user+0x35/0x120 [ 616.132407][ T9028] simple_read_from_buffer+0x1b2/0x340 [ 616.132657][ T9028] proc_fail_nth_read+0x1e0/0x2d0 [ 616.132820][ T9028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.132973][ T9028] vfs_read+0x27c/0xf90 [ 616.133128][ T9028] ? stack_depot_save_flags+0x35/0x790 [ 616.133270][ T9028] ? kmsan_get_metadata+0xf1/0x160 [ 616.133458][ T9028] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 616.133643][ T9028] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 616.133837][ T9028] ksys_read+0x1d9/0x470 [ 616.134018][ T9028] __ia32_sys_read+0x9a/0xf0 [ 616.134195][ T9028] ia32_sys_call+0x1914/0x4360 [ 616.134386][ T9028] do_int80_emulation+0x177/0x380 [ 616.134551][ T9028] ? clear_bhb_loop+0x50/0xa0 [ 616.134697][ T9028] ? clear_bhb_loop+0x50/0xa0 [ 616.134848][ T9028] asm_int80_emulation+0x1f/0x30 [ 616.134981][ T9028] RIP: 0023:0xf71761ab [ 616.135083][ T9028] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 616.135209][ T9028] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 616.135349][ T9028] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54365d0 [ 616.135443][ T9028] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 616.135535][ T9028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.135612][ T9028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 616.135691][ T9028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.135799][ T9028] [ 616.958760][ T9036] input: syz1 as /devices/virtual/input/input26 [ 617.079803][ T9036] input: failed to attach handler leds to device input26, error: -6 [ 617.970403][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 617.970488][ T29] audit: type=1326 audit(1781466326.949:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 618.286018][ T29] audit: type=1326 audit(1781466326.979:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 618.563188][ T29] audit: type=1326 audit(1781466327.039:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 618.767912][ T29] audit: type=1326 audit(1781466327.059:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=78 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 618.917784][ T29] audit: type=1326 audit(1781466327.059:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 619.195993][ T29] audit: type=1326 audit(1781466327.079:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 619.249697][ T29] audit: type=1326 audit(1781466327.059:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 619.288993][ T29] audit: type=1326 audit(1781466327.089:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 619.421728][ T29] audit: type=1326 audit(1781466327.089:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 619.548044][ T29] audit: type=1326 audit(1781466327.079:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.835" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x7ffc0000 [ 619.888063][ T5677] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 620.136250][ T9044] loop2: detected capacity change from 0 to 2048 [ 620.145802][ T5677] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 620.180474][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 620.203301][ T9044] EXT4-fs: Ignoring removed mblk_io_submit option [ 620.233961][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 620.265194][ T5677] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 620.322068][ T5677] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 620.353113][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.359874][ T9044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.412104][ T5677] usb 6-1: config 0 descriptor?? [ 620.499437][ T9044] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.917919][ T9052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.966133][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.132136][ T9056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 622.259423][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.600948][ T5677] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 622.605565][ T9058] ip6gre1: entered promiscuous mode [ 622.708918][ T9058] ip6gre1: entered allmulticast mode [ 623.389399][ T9066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 623.837041][ T4875] Bluetooth: hci2: ISO packet for unknown connection handle 1824 [ 624.741014][ T5680] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 626.000796][ T9071] netlink: 'syz.4.843': attribute type 12 has an invalid length. [ 626.397211][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.445625][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.596922][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 626.597000][ T29] audit: type=1326 audit(1781466335.599:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 626.704807][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.768073][ T5674] usb 6-1: USB disconnect, device number 7 [ 626.776854][ T29] audit: type=1326 audit(1781466335.599:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 626.818256][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.929011][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.952882][ T29] audit: type=1326 audit(1781466335.669:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 626.996883][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.078696][ T29] audit: type=1326 audit(1781466335.679:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 627.187392][ T29] audit: type=1326 audit(1781466335.689:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=78 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 627.274436][ T9087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.366792][ T9087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.436458][ T9089] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 627.553133][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.848'. [ 628.911556][ T29] audit: type=1326 audit(1781466335.689:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 628.936938][ T29] audit: type=1326 audit(1781466335.699:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 628.961921][ T29] audit: type=1326 audit(1781466335.699:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 628.997617][ T29] audit: type=1326 audit(1781466335.699:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 629.022677][ T29] audit: type=1326 audit(1781466335.709:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9081 comm="syz.5.847" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd601c code=0x7ffc0000 [ 629.112516][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.312236][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.317636][ T4875] Bluetooth: hci3: ISO packet for unknown connection handle 1824 [ 630.383580][ T9104] loop5: detected capacity change from 0 to 256 [ 630.487444][ T9103] loop4: detected capacity change from 0 to 256 [ 630.560079][ T9103] exfat: Deprecated parameter 'namecase' [ 630.599257][ T9103] exfat: Deprecated parameter 'utf8' [ 630.696902][ T9104] FAT-fs (loop5): Directory bread(block 64) failed [ 630.745916][ T9104] FAT-fs (loop5): Directory bread(block 65) failed [ 630.772905][ T9104] FAT-fs (loop5): Directory bread(block 66) failed [ 630.799104][ T9103] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 630.995894][ T9104] FAT-fs (loop5): Directory bread(block 67) failed [ 631.029511][ T9104] FAT-fs (loop5): Directory bread(block 68) failed [ 631.062913][ T9104] FAT-fs (loop5): Directory bread(block 69) failed [ 631.217485][ T9104] FAT-fs (loop5): Directory bread(block 70) failed [ 631.279779][ T9104] FAT-fs (loop5): Directory bread(block 71) failed [ 631.339488][ T9104] FAT-fs (loop5): Directory bread(block 72) failed [ 631.395968][ T9104] FAT-fs (loop5): Directory bread(block 73) failed [ 631.748007][ T9104] FAULT_INJECTION: forcing a failure. [ 631.748007][ T9104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.776439][ T5677] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 631.930290][ T9104] CPU: 0 UID: 0 PID: 9104 Comm: syz.5.855 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 631.930453][ T9104] Tainted: [L]=SOFTLOCKUP [ 631.930504][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.930618][ T9104] Call Trace: [ 631.930662][ T9104] [ 631.930705][ T9104] __dump_stack+0x26/0x30 [ 631.930853][ T9104] dump_stack_lvl+0x14c/0x1c0 [ 631.931014][ T9104] dump_stack+0x1e/0x25 [ 631.931152][ T9104] should_fail_ex+0x7e2/0x8c0 [ 631.931321][ T9104] should_fail+0x2a/0x40 [ 631.931453][ T9104] should_fail_usercopy+0x2e/0x40 [ 631.931614][ T9104] _copy_to_user+0x35/0x120 [ 631.931755][ T9104] simple_read_from_buffer+0x1b2/0x340 [ 631.931967][ T9104] proc_fail_nth_read+0x1e0/0x2d0 [ 631.932133][ T9104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 631.932284][ T9104] vfs_read+0x27c/0xf90 [ 631.932437][ T9104] ? stack_depot_save_flags+0x35/0x790 [ 631.932584][ T9104] ? kmsan_get_metadata+0xf1/0x160 [ 631.932759][ T9104] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 631.932958][ T9104] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 631.933166][ T9104] ksys_read+0x1d9/0x470 [ 631.933357][ T9104] __ia32_sys_read+0x9a/0xf0 [ 631.933544][ T9104] ia32_sys_call+0x1914/0x4360 [ 631.933726][ T9104] do_int80_emulation+0x177/0x380 [ 631.933864][ T9104] ? clear_bhb_loop+0x50/0xa0 [ 631.934006][ T9104] ? clear_bhb_loop+0x50/0xa0 [ 631.934147][ T9104] asm_int80_emulation+0x1f/0x30 [ 631.934276][ T9104] RIP: 0023:0xf71d61ab [ 631.934378][ T9104] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 631.934531][ T9104] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 631.934668][ T9104] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54965d0 [ 631.934766][ T9104] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 631.934850][ T9104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.934930][ T9104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 631.935018][ T9104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.935138][ T9104] [ 632.212989][ T9111] netlink: 88 bytes leftover after parsing attributes in process `syz.4.853'. [ 632.399147][ T5677] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 632.501191][ T5677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 632.646914][ T5677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 632.710877][ T9113] loop2: detected capacity change from 0 to 256 [ 632.746388][ T5677] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 632.899514][ T5677] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.927593][ T9115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.860'. [ 633.044280][ T5677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.143828][ T5677] usb 7-1: config 0 descriptor?? [ 633.224965][ T9113] FAT-fs (loop2): Directory bread(block 64) failed [ 633.308323][ T9113] FAT-fs (loop2): Directory bread(block 65) failed [ 633.343294][ T9113] FAT-fs (loop2): Directory bread(block 66) failed [ 633.350307][ T9113] FAT-fs (loop2): Directory bread(block 67) failed [ 633.419534][ T9113] FAT-fs (loop2): Directory bread(block 68) failed [ 633.460645][ T9113] FAT-fs (loop2): Directory bread(block 69) failed [ 633.498642][ T9113] FAT-fs (loop2): Directory bread(block 70) failed [ 633.533553][ T9113] FAT-fs (loop2): Directory bread(block 71) failed [ 633.567043][ T9119] FAULT_INJECTION: forcing a failure. [ 633.567043][ T9119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.606349][ T9113] FAT-fs (loop2): Directory bread(block 72) failed [ 633.634709][ T9113] FAT-fs (loop2): Directory bread(block 73) failed [ 633.646146][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 633.646223][ T29] audit: type=1326 audit(1781466342.649:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 633.651726][ T9109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.668274][ T9119] CPU: 1 UID: 0 PID: 9119 Comm: syz.4.862 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 633.668697][ T9119] Tainted: [L]=SOFTLOCKUP [ 633.668812][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.669007][ T9119] Call Trace: [ 633.669119][ T9119] [ 633.669243][ T9119] __dump_stack+0x26/0x30 [ 633.669605][ T9119] dump_stack_lvl+0x14c/0x1c0 [ 633.669997][ T9119] dump_stack+0x1e/0x25 [ 633.670349][ T9119] should_fail_ex+0x7e2/0x8c0 [ 633.670771][ T9119] should_fail+0x2a/0x40 [ 633.671120][ T9119] should_fail_usercopy+0x2e/0x40 [ 633.671538][ T9119] _copy_from_iter+0x1b8/0x3000 [ 633.671896][ T9119] ? handle_mm_fault+0x279e/0x6ee0 [ 633.672280][ T9119] ? kmsan_get_metadata+0xf1/0x160 [ 633.672779][ T9119] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 633.673285][ T9119] ? kmsan_get_metadata+0xf1/0x160 [ 633.673796][ T9119] copy_page_from_iter+0x458/0x750 [ 633.674158][ T9119] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 633.674677][ T9119] anon_pipe_write+0x9bb/0x2300 [ 633.675018][ T9119] ? vfs_write+0x451/0x15c0 [ 633.675487][ T9119] ? kmsan_get_metadata+0xf1/0x160 [ 633.676055][ T9119] vfs_write+0xbe1/0x15c0 [ 633.676518][ T9119] ? __pfx_anon_pipe_write+0x10/0x10 [ 633.676852][ T9119] ksys_write+0x1d9/0x470 [ 633.677314][ T9119] __ia32_sys_write+0x9a/0xf0 [ 633.677689][ T9119] ia32_sys_call+0x37a7/0x4360 [ 633.677865][ T9119] do_int80_emulation+0x177/0x380 [ 633.678088][ T9119] ? clear_bhb_loop+0x50/0xa0 [ 633.678393][ T9119] ? clear_bhb_loop+0x50/0xa0 [ 633.678711][ T9119] asm_int80_emulation+0x1f/0x30 [ 633.679008][ T9119] RIP: 0023:0xf71361ab [ 633.679226][ T9119] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 633.679561][ T9119] RSP: 002b:00000000f53ed28c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 633.679839][ T9119] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000f53ed48c [ 633.680041][ T9119] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.680247][ T9119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.680431][ T9119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 633.680631][ T9119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.680920][ T9119] [ 633.704488][ T9109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.070059][ T29] audit: type=1326 audit(1781466342.989:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 634.143459][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.146675][ T29] audit: type=1326 audit(1781466342.989:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 634.174694][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.341304][ T29] audit: type=1326 audit(1781466342.989:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 634.451268][ T5677] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 634.516548][ T29] audit: type=1326 audit(1781466342.989:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 634.703247][ T29] audit: type=1326 audit(1781466342.989:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 634.840967][ T29] audit: type=1326 audit(1781466342.999:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 634.977528][ T29] audit: type=1326 audit(1781466342.999:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 635.137725][ T29] audit: type=1326 audit(1781466342.999:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 635.287519][ T29] audit: type=1326 audit(1781466342.999:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9116 comm="syz.3.863" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 635.893768][ T9132] xt_CT: You must specify a L4 protocol and not use inversions on it [ 635.923341][ T5674] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 637.625561][ T9135] 9p: Bad value for 'rfdno' [ 637.770752][ T5675] libceph: connect (1)[c::]:6789 error -101 [ 637.788782][ T5675] libceph: mon0 (1)[c::]:6789 connect error [ 637.800923][ T5675] libceph: connect (1)[c::]:6789 error -101 [ 637.861970][ T5675] libceph: mon0 (1)[c::]:6789 connect error [ 638.049587][ T9135] ceph: No mds server is up or the cluster is laggy [ 638.205013][ T8373] libceph: connect (1)[c::]:6789 error -101 [ 638.237363][ T8373] libceph: mon0 (1)[c::]:6789 connect error [ 638.411339][ T9142] syzkaller0: entered promiscuous mode [ 638.447968][ T9142] syzkaller0: entered allmulticast mode [ 638.610902][ T5680] usb 7-1: USB disconnect, device number 7 [ 638.636773][ T9135] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 639.289286][ T9161] syzkaller0: entered promiscuous mode [ 639.341867][ T9161] syzkaller0: entered allmulticast mode [ 639.566712][ T9155] tipc: Enabled bearer , priority 0 [ 639.646406][ T9154] tipc: Resetting bearer [ 639.858782][ T9154] tipc: Disabling bearer [ 640.259125][ T9171] netlink: 312 bytes leftover after parsing attributes in process `syz.6.877'. [ 641.116425][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.880'. [ 641.642145][ T9182] tipc: Enabled bearer , priority 0 [ 642.225965][ T9184] syzkaller0: entered promiscuous mode [ 642.232896][ T9184] syzkaller0: entered allmulticast mode [ 642.276119][ T9184] tipc: Resetting bearer [ 642.377449][ T9181] tipc: Resetting bearer [ 642.941749][ T9181] tipc: Disabling bearer [ 643.065096][ T5677] tipc: Node number set to 1993480211 [ 643.838045][ T9205] vlan0: entered promiscuous mode [ 644.460032][ T9209] netlink: 44 bytes leftover after parsing attributes in process `syz.4.893'. [ 645.030086][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 645.991252][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 646.300086][ T9235] syzkaller0: entered promiscuous mode [ 646.347016][ T9235] syzkaller0: entered allmulticast mode [ 646.631131][ T9244] syzkaller0: entered promiscuous mode [ 646.658482][ T9244] syzkaller0: entered allmulticast mode [ 648.720141][ T9276] syzkaller0: entered promiscuous mode [ 648.757694][ T9276] syzkaller0: entered allmulticast mode [ 649.217650][ T9282] syzkaller0: entered promiscuous mode [ 649.233717][ T9282] syzkaller0: entered allmulticast mode [ 649.285671][ T9285] TC_ACT_REPEAT abuse ? [ 650.084256][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 651.361038][ T4875] Bluetooth: hci2: link tx timeout [ 651.367177][ T4875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 652.157325][ T9214] Bluetooth: hci2: link tx timeout [ 652.162790][ T9214] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 652.184089][ T9214] Bluetooth: hci2: link tx timeout [ 652.189515][ T9214] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 652.704966][ T9214] Bluetooth: hci2: link tx timeout [ 652.710356][ T9214] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 652.781988][ T9321] TC_ACT_REPEAT abuse ? [ 652.786620][ T9321] ===================================================== [ 652.794180][ T9321] BUG: KMSAN: uninit-value in __skb_flow_dissect+0x2013/0xa060 [ 652.802054][ T9321] __skb_flow_dissect+0x2013/0xa060 [ 652.807617][ T9321] cake_enqueue+0x114b/0xf6c0 [ 652.812574][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 652.818001][ T9321] packet_xmit+0x8f/0x710 [ 652.822771][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 652.827799][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 652.832994][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 652.837957][ T9321] __sys_sendmsg+0x1aa/0x300 [ 652.842919][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 652.848661][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 652.853792][ T9321] __do_fast_syscall_32+0x195/0x470 [ 652.859187][ T9321] do_fast_syscall_32+0x37/0x80 [ 652.864384][ T9321] do_SYSENTER_32+0x1f/0x30 [ 652.869163][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.875866][ T9321] [ 652.878305][ T9321] [ 652.878305][ T9321] [ 652.887310][ T9321] Uninit was stored to memory at: [ 652.892721][ T9321] skb_data_move+0x3b4/0x4f0 [ 652.897510][ T9321] skb_vlan_push+0x647/0xb70 [ 652.902373][ T9321] tcf_vlan_act+0xc09/0x12c0 [ 652.907434][ T9321] tcf_action_exec+0x21f/0x1190 [ 652.912540][ T9321] mall_classify+0x183/0x290 [ 652.917490][ T9321] tcf_classify+0x855/0x1ca0 [ 652.922350][ T9321] cake_enqueue+0x168/0xf6c0 [ 652.927312][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 652.932538][ T9321] packet_xmit+0x8f/0x710 [ 652.937181][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 652.942242][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 652.947403][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 652.952319][ T9321] __sys_sendmsg+0x1aa/0x300 [ 652.957295][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 652.963130][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 652.968158][ T9321] __do_fast_syscall_32+0x195/0x470 [ 652.973688][ T9321] do_fast_syscall_32+0x37/0x80 [ 652.978720][ T9321] do_SYSENTER_32+0x1f/0x30 [ 652.983580][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.990125][ T9321] [ 652.992539][ T9321] Uninit was stored to memory at: [ 652.997988][ T9321] skb_data_move+0x3b4/0x4f0 [ 653.002924][ T9321] skb_vlan_push+0x647/0xb70 [ 653.007730][ T9321] tcf_vlan_act+0xc09/0x12c0 [ 653.012495][ T9321] tcf_action_exec+0x21f/0x1190 [ 653.017672][ T9321] mall_classify+0x183/0x290 [ 653.022427][ T9321] tcf_classify+0x855/0x1ca0 [ 653.027373][ T9321] cake_enqueue+0x168/0xf6c0 [ 653.032187][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 653.037601][ T9321] packet_xmit+0x8f/0x710 [ 653.042121][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 653.047293][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 653.052267][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 653.057372][ T9321] __sys_sendmsg+0x1aa/0x300 [ 653.062188][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 653.068063][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 653.073180][ T9321] __do_fast_syscall_32+0x195/0x470 [ 653.078557][ T9321] do_fast_syscall_32+0x37/0x80 [ 653.083716][ T9321] do_SYSENTER_32+0x1f/0x30 [ 653.088399][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.095060][ T9321] [ 653.097475][ T9321] Uninit was stored to memory at: [ 653.102915][ T9321] pskb_expand_head+0x497/0x1a40 [ 653.108066][ T9321] skb_vlan_push+0x444/0xb70 [ 653.112982][ T9321] tcf_vlan_act+0xc09/0x12c0 [ 653.117760][ T9321] tcf_action_exec+0x21f/0x1190 [ 653.122906][ T9321] mall_classify+0x183/0x290 [ 653.127627][ T9321] tcf_classify+0x855/0x1ca0 [ 653.132411][ T9321] cake_enqueue+0x168/0xf6c0 [ 653.137314][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 653.142538][ T9321] packet_xmit+0x8f/0x710 [ 653.147108][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 653.152114][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 653.157237][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 653.162120][ T9321] __sys_sendmsg+0x1aa/0x300 [ 653.167022][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 653.172801][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 653.177757][ T9321] __do_fast_syscall_32+0x195/0x470 [ 653.183252][ T9321] do_fast_syscall_32+0x37/0x80 [ 653.188278][ T9321] do_SYSENTER_32+0x1f/0x30 [ 653.193035][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.199551][ T9321] [ 653.201973][ T9321] Uninit was stored to memory at: [ 653.207371][ T9321] skb_data_move+0x3b4/0x4f0 [ 653.212125][ T9321] skb_vlan_push+0x647/0xb70 [ 653.216993][ T9321] tcf_vlan_act+0xc09/0x12c0 [ 653.221740][ T9321] tcf_action_exec+0x21f/0x1190 [ 653.226866][ T9321] mall_classify+0x183/0x290 [ 653.231608][ T9321] tcf_classify+0x855/0x1ca0 [ 653.236492][ T9321] cake_enqueue+0x168/0xf6c0 [ 653.241263][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 653.246642][ T9321] packet_xmit+0x8f/0x710 [ 653.251137][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 653.256265][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 653.261234][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 653.266191][ T9321] __sys_sendmsg+0x1aa/0x300 [ 653.270974][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 653.276822][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 653.281788][ T9321] __do_fast_syscall_32+0x195/0x470 [ 653.287258][ T9321] do_fast_syscall_32+0x37/0x80 [ 653.292273][ T9321] do_SYSENTER_32+0x1f/0x30 [ 653.297028][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.303645][ T9321] [ 653.306040][ T9321] Uninit was stored to memory at: [ 653.311415][ T9321] skb_data_move+0x3b4/0x4f0 [ 653.316297][ T9321] skb_vlan_push+0x647/0xb70 [ 653.321078][ T9321] tcf_vlan_act+0xc09/0x12c0 [ 653.325988][ T9321] tcf_action_exec+0x21f/0x1190 [ 653.331012][ T9321] mall_classify+0x183/0x290 [ 653.335868][ T9321] tcf_classify+0x855/0x1ca0 [ 653.340644][ T9321] cake_enqueue+0x168/0xf6c0 [ 653.345472][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 653.350784][ T9321] packet_xmit+0x8f/0x710 [ 653.355452][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 653.360486][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 653.365574][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 653.370494][ T9321] __sys_sendmsg+0x1aa/0x300 [ 653.375414][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 653.381132][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 653.386211][ T9321] __do_fast_syscall_32+0x195/0x470 [ 653.391647][ T9321] do_fast_syscall_32+0x37/0x80 [ 653.396797][ T9321] do_SYSENTER_32+0x1f/0x30 [ 653.401453][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.408084][ T9321] [ 653.410481][ T9321] Uninit was stored to memory at: [ 653.415891][ T9321] skb_data_move+0x3b4/0x4f0 [ 653.420670][ T9321] skb_vlan_push+0x647/0xb70 [ 653.425545][ T9321] tcf_vlan_act+0xc09/0x12c0 [ 653.430393][ T9321] tcf_action_exec+0x21f/0x1190 [ 653.435527][ T9321] mall_classify+0x183/0x290 [ 653.440271][ T9321] tcf_classify+0x855/0x1ca0 [ 653.445185][ T9321] cake_enqueue+0x168/0xf6c0 [ 653.449951][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 653.455326][ T9321] packet_xmit+0x8f/0x710 [ 653.459825][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 653.464947][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 653.469909][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 653.474896][ T9321] __sys_sendmsg+0x1aa/0x300 [ 653.479682][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 653.485579][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 653.490542][ T9321] __do_fast_syscall_32+0x195/0x470 [ 653.496019][ T9321] do_fast_syscall_32+0x37/0x80 [ 653.501027][ T9321] do_SYSENTER_32+0x1f/0x30 [ 653.505777][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.512337][ T9321] [ 653.514839][ T9321] Uninit was stored to memory at: [ 653.520142][ T9321] skb_data_move+0x3b4/0x4f0 [ 653.525048][ T9321] skb_vlan_push+0x647/0xb70 [ 653.529812][ T9321] tcf_vlan_act+0xc09/0x12c0 [ 653.534684][ T9321] tcf_action_exec+0x21f/0x1190 [ 653.539702][ T9321] mall_classify+0x183/0x290 [ 653.544551][ T9321] tcf_classify+0x855/0x1ca0 [ 653.549349][ T9321] cake_enqueue+0x168/0xf6c0 [ 653.554261][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 653.559488][ T9321] packet_xmit+0x8f/0x710 [ 653.564087][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 653.569111][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 653.574214][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 653.579073][ T9321] __sys_sendmsg+0x1aa/0x300 [ 653.583975][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 653.589690][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 653.594760][ T9321] __do_fast_syscall_32+0x195/0x470 [ 653.600127][ T9321] do_fast_syscall_32+0x37/0x80 [ 653.605239][ T9321] do_SYSENTER_32+0x1f/0x30 [ 653.609893][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.616535][ T9321] [ 653.618931][ T9321] Uninit was created at: [ 653.623498][ T9321] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 653.629652][ T9321] __alloc_skb+0x855/0x1190 [ 653.634462][ T9321] alloc_skb_with_frags+0xc5/0x990 [ 653.639753][ T9321] sock_alloc_send_pskb+0xacb/0xc60 [ 653.645261][ T9321] packet_sendmsg+0x6ed5/0x9d60 [ 653.650271][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 653.655345][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 653.660211][ T9321] __sys_sendmsg+0x1aa/0x300 [ 653.665083][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 653.670796][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 653.675847][ T9321] __do_fast_syscall_32+0x195/0x470 [ 653.681203][ T9321] do_fast_syscall_32+0x37/0x80 [ 653.686347][ T9321] do_SYSENTER_32+0x1f/0x30 [ 653.691010][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.697629][ T9321] [ 653.700071][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.6.924 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 653.711205][ T9321] Tainted: [L]=SOFTLOCKUP [ 653.715711][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.726006][ T9321] ===================================================== [ 653.733127][ T9321] Disabling lock debugging due to kernel taint [ 653.739410][ T9321] Kernel panic - not syncing: kmsan.panic set ... [ 653.745971][ T9321] CPU: 1 UID: 0 PID: 9321 Comm: syz.6.924 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 653.756949][ T9321] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 653.762586][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.772778][ T9321] Call Trace: [ 653.776154][ T9321] [ 653.779186][ T9321] __dump_stack+0x26/0x30 [ 653.783699][ T9321] dump_stack_lvl+0x50/0x1c0 [ 653.788444][ T9321] ? dump_stack+0x12/0x25 [ 653.792930][ T9321] dump_stack+0x1e/0x25 [ 653.797234][ T9321] vpanic+0x7b4/0x1430 [ 653.801521][ T9321] panic+0x15d/0x160 [ 653.805662][ T9321] kmsan_report+0x31a/0x320 [ 653.810421][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 653.815730][ T9321] ? __msan_warning+0x1b/0x30 [ 653.820618][ T9321] ? __skb_flow_dissect+0x2013/0xa060 [ 653.826227][ T9321] ? cake_enqueue+0x114b/0xf6c0 [ 653.831264][ T9321] ? __dev_queue_xmit+0x23c3/0x5a00 [ 653.836666][ T9321] ? packet_xmit+0x8f/0x710 [ 653.841344][ T9321] ? packet_sendmsg+0x8c6b/0x9d60 [ 653.846526][ T9321] ? ____sys_sendmsg+0xf37/0xfd0 [ 653.851663][ T9321] ? ___sys_sendmsg+0x271/0x3b0 [ 653.856722][ T9321] ? __sys_sendmsg+0x1aa/0x300 [ 653.861697][ T9321] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 653.867613][ T9321] ? ia32_sys_call+0x1e4a/0x4360 [ 653.872803][ T9321] ? __do_fast_syscall_32+0x195/0x470 [ 653.878354][ T9321] ? do_fast_syscall_32+0x37/0x80 [ 653.883543][ T9321] ? do_SYSENTER_32+0x1f/0x30 [ 653.888439][ T9321] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.895167][ T9321] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 653.901725][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 653.907049][ T9321] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 653.913082][ T9321] ? __skb_flow_dissect+0x1fc1/0xa060 [ 653.918641][ T9321] ? filter_irq_stacks+0x49/0x190 [ 653.923937][ T9321] ? stack_depot_save_flags+0x35/0x790 [ 653.929583][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 653.934886][ T9321] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 653.941435][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 653.946783][ T9321] __msan_warning+0x1b/0x30 [ 653.951461][ T9321] __skb_flow_dissect+0x2013/0xa060 [ 653.956957][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 653.962320][ T9321] ? cake_enqueue+0xea1/0xf6c0 [ 653.967265][ T9321] ? filter_irq_stacks+0x49/0x190 [ 653.972485][ T9321] ? break_cow+0x3e0/0x650 [ 653.977084][ T9321] cake_enqueue+0x114b/0xf6c0 [ 653.981961][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 653.987346][ T9321] ? kmsan_disable_current+0x40/0x40 [ 653.992816][ T9321] ? packet_sendmsg+0x6e50/0x9d60 [ 653.998005][ T9321] ? ____sys_sendmsg+0xe91/0xfd0 [ 654.003157][ T9321] ? ___sys_sendmsg+0x1a0/0x3b0 [ 654.008206][ T9321] ? __sys_sendmsg+0xb0/0x300 [ 654.013177][ T9321] ? is_module_text_address+0x1f4/0x240 [ 654.018900][ T9321] ? kmsan_get_metadata+0x71/0x160 [ 654.024221][ T9321] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 654.030271][ T9321] ? filter_irq_stacks+0x49/0x190 [ 654.035455][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 654.040770][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 654.046084][ T9321] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 654.052140][ T9321] ? __dev_queue_xmit+0xae1/0x5a00 [ 654.057451][ T9321] ? filter_irq_stacks+0x49/0x190 [ 654.062665][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 654.067983][ T9321] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 654.073997][ T9321] ? __pfx_cake_enqueue+0x10/0x10 [ 654.079224][ T9321] ? __pfx_cake_enqueue+0x10/0x10 [ 654.084449][ T9321] __dev_queue_xmit+0x23c3/0x5a00 [ 654.089692][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 654.095020][ T9321] ? packet_sendmsg+0x85bf/0x9d60 [ 654.100225][ T9321] ? __msan_warning+0x1b/0x30 [ 654.105086][ T9321] ? filter_irq_stacks+0x13f/0x190 [ 654.110366][ T9321] ? __dev_queue_xmit+0x2d4/0x5a00 [ 654.115716][ T9321] packet_xmit+0x8f/0x710 [ 654.120190][ T9321] ? packet_parse_headers+0x92b/0xa20 [ 654.125757][ T9321] packet_sendmsg+0x8c6b/0x9d60 [ 654.130761][ T9321] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 654.136786][ T9321] ? aa_label_sk_perm+0x759/0x810 [ 654.141995][ T9321] ? tomoyo_socket_bind_permission+0x361/0x370 [ 654.148349][ T9321] ? __pfx_filter_irq_stacks+0x10/0x10 [ 654.153980][ T9321] ? stack_depot_save_flags+0x35/0x790 [ 654.159613][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 654.164945][ T9321] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 654.171476][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 654.176860][ T9321] ? __pfx_packet_sendmsg+0x10/0x10 [ 654.182232][ T9321] ____sys_sendmsg+0xf37/0xfd0 [ 654.187242][ T9321] ___sys_sendmsg+0x271/0x3b0 [ 654.192110][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 654.197449][ T9321] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 654.203520][ T9321] ? kmsan_get_metadata+0xf1/0x160 [ 654.208842][ T9321] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 654.214874][ T9321] __sys_sendmsg+0x1aa/0x300 [ 654.219697][ T9321] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 654.225408][ T9321] ia32_sys_call+0x1e4a/0x4360 [ 654.230386][ T9321] __do_fast_syscall_32+0x195/0x470 [ 654.235744][ T9321] do_fast_syscall_32+0x37/0x80 [ 654.240744][ T9321] do_SYSENTER_32+0x1f/0x30 [ 654.245404][ T9321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.251945][ T9321] RIP: 0023:0xf7f2601c [ 654.256152][ T9321] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 654.275930][ T9321] RSP: 002b:00000000f53c550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 654.284500][ T9321] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 654.292611][ T9321] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.300709][ T9321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.308802][ T9321] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 654.316889][ T9321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.325011][ T9321] [ 654.328765][ T9321] Kernel Offset: disabled [ 654.333161][ T9321] Rebooting in 86400 seconds..