last executing test programs: 8m6.682798356s ago: executing program 32 (id=265): sendmsg$key(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2, 0x13, 0x4, 0x8, 0x5, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_sa={0x2, 0x1, 0x1e126580, 0x10, 0x7, 0x88, 0x3, 0x40000000}]}, 0x28}}, 0x60000090) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0xfffffee8) 4m33.312605017s ago: executing program 33 (id=765): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000001e00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001e40)='./sys\x00', &(0x7f0000001e80)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000001f00)='3', 0x1) 3m14.279026422s ago: executing program 34 (id=887): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080), 0x20000328) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 2m27.947226528s ago: executing program 6 (id=995): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 2m27.526122511s ago: executing program 6 (id=998): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000500)={0x8b8d, 0x12, 0x11, 0xa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x2000000003, 0x20000, 0x82a, 0x0, 0xc1, 0x80}) io_setup(0x2, &(0x7f0000000580)) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x8002, 0x0) r4 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000740)="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", 0x554, r4) write$P9_RSTATu(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0200000400000005"], 0x21e) 2m24.703421505s ago: executing program 6 (id=1001): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 2m24.380572838s ago: executing program 6 (id=1002): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x804, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@nfs}, {@rodir}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@errors_continue}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f0000000e00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) 2m22.653501482s ago: executing program 6 (id=1004): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x50, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000780)=0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) writev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x7, 0x1, 0x2, 0x0, 0x8}) sendfile(r2, r4, 0x0, 0x20000023896) 2m21.451079224s ago: executing program 6 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYRESDEC=r0], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001700), 0x8, 0x10, &(0x7f0000000140), 0x10}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000240)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0300000000000000000000000000000000000000c1f0f5696a06411706000000000000002ca3157b55d10ef3395c99ab11395378ed71", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r1, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000800)=[0x0], &(0x7f0000001780)=[0x0, 0x0], 0x0, 0x5f, &(0x7f00000017c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x200000000000013f, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000080001801000020a01f1799886153612020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000097407003e0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = getpgid(0x0) syz_open_procfs$pagemap(r5, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003880)={r4, 0x2000012, 0xb, 0x0, &(0x7f0000003900)="63ec33c9e9b98600000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = memfd_create(&(0x7f0000000500)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80x0, 0x5f, &(0x7f00000017c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x200000000000013f, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000080001801000020a01f1799886153612020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000097407003e0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = getpgid(0x0) syz_open_procfs$pagemap(r5, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003880)={r4, 0x2000012, 0xb, 0x0, &(0x7f0000003900)="63ec33c9e9b98600000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = memfd_create(&(0x7f0000000500)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2m3.124896553s ago: executing program 2 (id=1038): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x50, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000780)=0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) writev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x7, 0x1, 0x2, 0x0, 0x8}) sendfile(r2, r4, 0x0, 0x20000023896) 2m0.202491228s ago: executing program 1 (id=1044): mkdir(&(0x7f0000004b00)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000004b40)='./config\x00', &(0x7f0000005280)='configfs\x00', 0x0, 0x0) open(&(0x7f0000005500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) 2m0.051175733s ago: executing program 1 (id=1045): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x804, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@nfs}, {@rodir}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@errors_continue}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f0000000e00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) 1m59.147113714s ago: executing program 1 (id=1050): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0xa, 0x200) ioctl$OTPGETREGIONINFO(r0, 0x400c4d0f, 0x0) 1m56.267531225s ago: executing program 2 (id=1054): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0x10) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newtfilter={0x45c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0xa, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x430, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffc4, 0x0, 0x6, 0x6, 0x81, 0x8, 0x3, 0x0, 0x4, 0x3, 0x6, 0x8000000, 0x215, 0x3, 0xc2f1, 0x2c2, 0x8173, 0x8, 0xd, 0xf, 0x3, 0x4, 0x2, 0x1, 0x3ff, 0x8, 0x7, 0x1, 0x0, 0x80000000, 0x6, 0x6, 0x8, 0x9, 0xff, 0x7, 0x8, 0x400, 0x1, 0xffffffff, 0x8, 0xfffff234, 0x7fffffff, 0x80, 0x8, 0x7, 0x7, 0xe39, 0x7, 0x92, 0x9, 0xae27, 0x1, 0x9, 0x8, 0x9, 0x2, 0x1, 0xd, 0x0, 0x2, 0xfff, 0xbb3, 0x7, 0x80, 0x7f, 0x40, 0x0, 0x0, 0x9, 0x63, 0x8, 0x4300, 0xbdc, 0xfffffff8, 0x100, 0x693bb0ee, 0x55, 0x1, 0x9, 0x5, 0x80, 0x2c8a512d, 0x3, 0x3, 0x8001, 0xfffffff8, 0x4, 0x3, 0x762f, 0x8, 0x9, 0x1, 0x81, 0x2cdf, 0xfffffff4, 0x8, 0x80, 0x5, 0xd, 0x1f, 0x6, 0x1, 0x5, 0x6, 0x40, 0x100010, 0xfffff712, 0x43f, 0x9, 0x7, 0xfe, 0x0, 0x4, 0x8, 0x0, 0xd2, 0x7, 0x8, 0x6, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x6, 0xfffffffe, 0x1ff, 0x10001, 0x5, 0xa, 0x3, 0xc4c, 0x8, 0x3, 0x9, 0x10000, 0xc0, 0x5, 0x80000001, 0x0, 0x101, 0x1, 0x2, 0x1, 0x2ae, 0x11e5, 0xffff0001, 0x5, 0x0, 0x6edd, 0xffff, 0x8, 0x0, 0xff, 0x8, 0x6e25, 0x8, 0x1, 0xfffffff8, 0x2, 0x9, 0xfffffff7, 0x4, 0x5, 0x1, 0x8, 0x6, 0x3, 0x2, 0x3ff, 0x40, 0x40, 0x0, 0x3, 0x9, 0x5e55, 0x6, 0x5, 0x5, 0x9, 0x4be9, 0x1ff, 0x8001, 0x3, 0xe, 0x800, 0x6, 0x10001, 0x100, 0x5, 0xfffffa93, 0xffffffff, 0x2, 0x4, 0x3, 0x2, 0x3, 0xfff, 0x7, 0x97, 0x5, 0x81, 0x40, 0x0, 0xfffff801, 0x8, 0x9, 0x6, 0x5, 0x4, 0x3, 0x1, 0x7, 0x4, 0x5, 0xfffffffe, 0x9, 0x3, 0xae71, 0x1, 0x6, 0x6, 0x7, 0x1, 0x100, 0x6, 0x28000000, 0x7, 0x7f, 0x3, 0x1, 0x4, 0xa, 0x76a, 0x401, 0xf, 0x2, 0x0, 0x4, 0x7, 0xa0000000, 0x7794, 0x6, 0x9, 0x400, 0xfff, 0xff, 0x8, 0x2, 0x7221, 0x3, 0x7, 0xfffffff8, 0x5]}]}, @TCA_U32_SEL={0x24, 0x5, {0x1, 0x2, 0x5, 0x800, 0x0, 0x7, 0x8001, 0x6, [{0xfffffffb, 0xffff8000, 0x7, 0xffffaa94}]}}]}}]}, 0x45c}}, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d00), 0xa0602, 0x0) writev(r1, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 1m54.459234497s ago: executing program 1 (id=1055): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='4', 0x1) 1m53.761888298s ago: executing program 36 (id=1055): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='4', 0x1) 1m53.755106858s ago: executing program 2 (id=1057): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000940)=0x8001, 0x4) listen(r0, 0x198) 1m53.549334079s ago: executing program 2 (id=1060): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x804, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@nfs}, {@rodir}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@errors_continue}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000a40)="$eJzs3c2KW2UYAOD35D/tIlm4EqEHdOGqdLyCKVJBHBCULNSFFpuCTEIhgUBUjF15BV6BCN6MG/EGvADFnV2IR05OfstJTKQzGfR5Vh/vT7/3+3oms8qZT14ZXj56Mn789MtfotVKonIe5/EsiW5UYunrKPXzb+VxAOCGe5Zl8Xs212oWoel2RX1HZ61y5cMBAFdi4/d/dupZAIDr8f4HH75z/+LiwXtp2ooYfjPpJRGtdf7+4/gsBtGPe9GJPyOylWL91tsXD6KW5rrx2nA26U16EcOPf1z2/xox7z+LTnTL+8/y7u+T2OifTXr1uLXY/3wQ/Xe/i068VN7/RlrY7I9eI15/dWP+u9GJnz6NJzGIR4vZlv1fnaXpm9m3f3zxUR7N+5PZpNdc1S2qq9f2nwIAAAAAAAAAAAAAAAAAAAAAwH/e3XSlu/3+neWL//fk97wfaLbxfp57aZpmSVG/7q/Fy7WonfLsAAAAAAAAAAAAAAAAAAAAcFOMp59fPhwM+qMDFlE5tHj5tf6SVPy1HWlGxCG7N0tTd8qK66X/TjFPVBejDZKII84+Gk/r0Zx3/nNx9ZhbHY2n7Xye/iipxTFd+Ul3X12yirQ3U3ei2CuPtIvFRuTg3X+4Xdzi86lWEVk+XZcPk+hX9t5Yq+wheQGLrOTxq+7sajwfaUf5AfPUnt0bt//VzFlnRyqJiPrqMrdr5j9kt9YPZP3F3mHpx0XjCj6CAAAAAAAAAAAAAAAAAACAhfWXfkuST08wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcwPrv/x+xmC2ad9Vk1XxRi0XkxEcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf+DvAAAA//+zu1nK") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f0000000e00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) 1m52.609998264s ago: executing program 2 (id=1062): openat$rfkill(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x100000f, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x482, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCMBIC(r2, 0x5417, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x5}, 0x0) ioprio_get$pid(0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x101, 0x11, 0x5, 0x0, 0x0) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 1m52.107115135s ago: executing program 2 (id=1065): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000000780), 0x318, 0xfc0, 0x0) 1m49.166919171s ago: executing program 37 (id=1065): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000600), 0x2, 0x141102) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000000780), 0x318, 0xfc0, 0x0) 1m32.868242936s ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000380)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000400)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) sendmsg$nl_generic(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x14, 0x31, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x46854}, 0x4) 1m30.303469105s ago: executing program 3 (id=1094): 1m29.65465272s ago: executing program 3 (id=1096): openat$rfkill(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x100000f, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x482, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCMBIC(r2, 0x5417, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x5}, 0x0) ioprio_get$pid(0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x101, 0x11, 0x5, 0x0, 0x0) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 1m29.107689636s ago: executing program 3 (id=1098): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x804, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@nfs}, {@rodir}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@errors_continue}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f0000000e00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) 1m28.025514975s ago: executing program 3 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0x5, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xc, [0xf, 0xc, 0x6, 0xb, 0xe, 0x1, 0x9, 0xb, 0xd, 0x3, 0x4, 0x9, 0x3, 0xa, 0x3, 0x2], 0x0, [0x9, 0x3, 0x7, 0x8000, 0xf2, 0xfff, 0x6, 0x4, 0x5b86, 0x8, 0x8, 0x3ff, 0x10, 0x2, 0x9, 0x1], [0x7, 0xd, 0x5, 0x0, 0x800, 0x2, 0x1000, 0x8001, 0x4, 0x3, 0x42f, 0x4, 0x8, 0xffff, 0xaede, 0x9]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4040800) 1m26.803173648s ago: executing program 3 (id=1105): getpid() r0 = open(&(0x7f0000004540)='.\x00', 0x0, 0x0) flock(r0, 0x6) symlinkat(&(0x7f0000004580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000046c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m26.748646324s ago: executing program 8 (id=1106): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x50, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000780)=0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) writev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x7, 0x1, 0x2, 0x0, 0x8}) sendfile(r2, r4, 0x0, 0x20000023896) 1m26.164707512s ago: executing program 38 (id=1105): getpid() r0 = open(&(0x7f0000004540)='.\x00', 0x0, 0x0) flock(r0, 0x6) symlinkat(&(0x7f0000004580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000046c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m25.813936368s ago: executing program 8 (id=1108): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[], 0x9, 0x18e, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000006100), &(0x7f0000006140)='./bus\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000006180)) rmdir(&(0x7f0000000600)='./bus\x00') 1m25.360538064s ago: executing program 8 (id=1109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cifs\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f00000000c0)='./cifs\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000140)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,,ass=root,vers=2.1,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000001c0)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100100200"/84, 0x54, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) 1m24.156038565s ago: executing program 8 (id=1111): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x804, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@nfs}, {@rodir}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@errors_continue}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f0000000e00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) 1m23.234482668s ago: executing program 8 (id=1112): syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 1m22.671034755s ago: executing program 8 (id=1113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x30}}, 0x40) 1m22.254454467s ago: executing program 39 (id=1113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x30}}, 0x40) 12.97836519s ago: executing program 9 (id=1257): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003075f37407104020695a4010203010902"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 11.897282818s ago: executing program 5 (id=1260): ioperm(0x4, 0x8, 0x5) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 11.651252843s ago: executing program 0 (id=1261): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000400), 0x492492492492846, 0x0) connect$unix(r2, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 9.969232611s ago: executing program 9 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000600)='./tracing\x00', &(0x7f0000000980)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./tracing/uprobe_events\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file1', [], 0xa, "c638a17740a3b042087d3843175d0c139c71ab5c85ba84d38033e800"}, 0x27) 9.934861715s ago: executing program 0 (id=1263): socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c000780180001800800", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 9.703132538s ago: executing program 7 (id=1264): openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2}, 0x30, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) 9.68421654s ago: executing program 9 (id=1265): r0 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, r0, 0x91c6b000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 9.532668765s ago: executing program 5 (id=1267): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x40010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000380)='./md0\x00', 0x6180, 0x0) r3 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000440)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r3, 0x40480923, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) userfaultfd(0x80001) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f00000014c0)=""/102400, 0x19000) 9.055007883s ago: executing program 9 (id=1268): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x804, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@nfs}, {@rodir}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@errors_continue}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) 8.395501489s ago: executing program 7 (id=1269): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 8.128592246s ago: executing program 9 (id=1270): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Mas'], 0xc1) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 8.08698301s ago: executing program 7 (id=1271): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}, @ib={0x1b, 0x1, 0x0, {"15a87f1900"}, 0x8005, 0x7, 0x7}}}, 0x118) get_robust_list(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000019e00)=""/127, 0x7f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000000740)=""/151, 0x97}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000880)=""/90, 0x5a}, {&(0x7f0000000900)=""/165, 0xa5}], 0x6, &(0x7f0000019e80)=""/175, 0xaf}, 0x40020000) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000bc0)={0x0, 0x0, 0x2, 0x0, 0x4, 0x10, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, 0x0, 0x0, 0x0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000c40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000c80), 0x0, 0x0) read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019cc0)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019d00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00005c0000/0xb000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) bind$netlink(0xffffffffffffffff, &(0x7f0000019d80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 7.522480187s ago: executing program 9 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='270', 0x3) mkdir(&(0x7f0000000080)='./file0\x00', 0x18b) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) unshare(0x20000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000780)) execveat(0xffffffffffffffff, &(0x7f0000000440)='\x00', 0x0, 0x0, 0x1000) mount$bpf(0x200000000000, &(0x7f0000000a40)='./file0\x00', 0x0, 0x80000, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) 6.135038466s ago: executing program 40 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)='270', 0x3) mkdir(&(0x7f0000000080)='./file0\x00', 0x18b) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) unshare(0x20000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000780)) execveat(0xffffffffffffffff, &(0x7f0000000440)='\x00', 0x0, 0x0, 0x1000) mount$bpf(0x200000000000, &(0x7f0000000a40)='./file0\x00', 0x0, 0x80000, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) 5.943300665s ago: executing program 7 (id=1275): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000480)={'macvlan0\x00', &(0x7f00000004c0)=@ethtool_pauseparam={0x13, 0x8, 0x6, 0x6}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x4, 0x10, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xfffffffc, 0xffffffffffffffff, 0x8000000000000000, 0xd0b, 0x40, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.517050897s ago: executing program 0 (id=1278): write(0xffffffffffffffff, &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0x4, 0x1ffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 5.309701558s ago: executing program 5 (id=1279): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./mysys\x00', &(0x7f00000009c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 5.015152488s ago: executing program 4 (id=1280): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) keyctl$session_to_parent(0x12) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000580)={0x1f, 0xffff, 0x3}, 0x6) write(r3, 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) write(r3, &(0x7f00000005c0)="1b000000080011aaaaaaaaaa0100", 0xe) 4.384959951s ago: executing program 5 (id=1281): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x804, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@nfs}, {@rodir}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@errors_continue}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x7) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000e00)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) 4.052125554s ago: executing program 4 (id=1282): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x33f1, 0x760a, 0x8, 0x5, 0xb, 0x81, 0x0, 0xfffffffe, r1}, &(0x7f00000000c0)=0x20) 4.046930115s ago: executing program 5 (id=1283): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x740, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000500)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000540)) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000740)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000600)={0x2}, &(0x7f0000000640)=0xc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000580)={&(0x7f00000005c0)={0x30, r4, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 3.705664439s ago: executing program 4 (id=1284): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x3}) 3.483520291s ago: executing program 4 (id=1285): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) execve(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) 3.350298514s ago: executing program 0 (id=1286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28) 3.165777763s ago: executing program 5 (id=1287): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, 0x0) 2.641880975s ago: executing program 41 (id=1287): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, 0x0) 2.637061056s ago: executing program 0 (id=1289): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 2.634509036s ago: executing program 7 (id=1290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/firmware_node/eject\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="12", 0x1) 2.544997895s ago: executing program 4 (id=1291): socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) capset(&(0x7f0000000180)={0x20080522}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r0, &(0x7f0000000800)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) mkdirat(0xffffff9c, 0x0, 0x1ff) r2 = openat(0xffffff9c, &(0x7f00000008c0)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='zstd', 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 563.088514ms ago: executing program 7 (id=1292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000240), 0x2e9, 0x0) 317.422988ms ago: executing program 4 (id=1293): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./security\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='appraise', 0x8) 0s ago: executing program 0 (id=1294): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x3}) kernel console output (not intermixed with test programs): xfat: Deprecated parameter 'utf8' [ 515.103822][ T5471] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 515.264304][ T8226] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 515.336714][ T5471] usb 2-1: Using ep0 maxpacket: 32 [ 515.361077][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 515.384401][ T5471] usb 2-1: unable to get BOS descriptor or descriptor too short [ 515.419322][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 515.440603][ T5471] usb 2-1: config 14 has an invalid interface number: 228 but max is 0 [ 515.464514][ T8233] netlink: 64 bytes leftover after parsing attributes in process `syz.6.947'. [ 515.478565][ T5471] usb 2-1: config 14 has no interface number 0 [ 515.517709][ T5471] usb 2-1: config 14 interface 228 has no altsetting 0 [ 515.554849][ T5471] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 515.565962][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 515.599075][ T5471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.611704][ T8233] netlink: 64 bytes leftover after parsing attributes in process `syz.6.947'. [ 515.638979][ T5471] usb 2-1: Product: syz [ 515.653371][ T5471] usb 2-1: Manufacturer: syz [ 515.671742][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 515.680799][ T5471] usb 2-1: SerialNumber: syz [ 515.707454][ T8233] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 515.802415][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 515.854450][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 515.914560][ T5471] legousbtower 2-1:14.228: interrupt endpoints not found [ 515.945282][ T8232] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 515.978193][ T5471] usb 2-1: USB disconnect, device number 12 [ 517.868652][ T8250] loop2: detected capacity change from 0 to 4096 [ 517.942502][ T8105] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 518.030100][ T8105] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 518.109221][ T8105] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 519.971236][ T8105] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 520.089113][ T4311] device hsr_slave_0 left promiscuous mode [ 520.167485][ T4311] device hsr_slave_1 left promiscuous mode [ 521.474738][ T4311] device veth1_macvtap left promiscuous mode [ 521.513810][ T4311] device veth0_macvtap left promiscuous mode [ 521.582983][ T4311] device veth1_vlan left promiscuous mode [ 521.863977][ T4311] device veth0_vlan left promiscuous mode [ 521.939256][ T8271] CIFS: Attempting to mount \\127.0.0.1\share [ 523.443072][ T8271] CIFS: VFS: cifs_mount failed w/return code = -112 [ 527.389226][ T8295] ubi0: attaching mtd0 [ 527.417655][ T8295] ubi0: scanning is finished [ 527.422410][ T8295] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 528.820538][ T8295] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 530.661007][ T4311] bond0 (unregistering): Released all slaves [ 532.458899][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.645652][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.821519][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.892802][ T8105] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.959694][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.012142][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.058077][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.065444][ T4559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.158309][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.202692][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.253457][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 533.307899][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.315165][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.373453][ T8341] CIFS: Attempting to mount \\127.0.0.1\share [ 533.394796][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.460065][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.519695][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.582670][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.629846][ T8105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.807990][ T8105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.848762][ T8341] CIFS: VFS: cifs_mount failed w/return code = -112 [ 534.982786][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 535.015919][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.606087][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 536.644683][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 536.812550][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.832167][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.857185][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 539.291694][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 539.428047][ T4290] Bluetooth: Wrong link type (-22) [ 539.452256][ T8374] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 539.776766][ T8386] Console: switching to colour VGA+ 80x25 [ 539.922038][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 539.938492][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 539.985040][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.631601][ T8399] device vlan0 entered promiscuous mode [ 542.825750][ T8399] team0: Port device vlan0 added [ 543.043926][ T8399] syz.2.985 (8399) used greatest stack depth: 20304 bytes left [ 543.089290][ T8413] loop3: detected capacity change from 0 to 256 [ 544.348117][ T8413] exfat: Deprecated parameter 'utf8' [ 544.556181][ T8413] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 546.711060][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 546.755608][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 546.857503][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 546.916932][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 546.978915][ T8105] device veth0_vlan entered promiscuous mode [ 547.006737][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.995'. [ 547.044953][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.081731][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 547.098757][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.148834][ T8105] device veth1_vlan entered promiscuous mode [ 548.420918][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 548.548883][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 548.707762][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.838290][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.892228][ T8105] device veth0_macvtap entered promiscuous mode [ 549.921720][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 550.021084][ T8105] device veth1_macvtap entered promiscuous mode [ 550.107946][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.120365][ T8466] FAULT_INJECTION: forcing a failure. [ 550.120365][ T8466] name failslab, interval 1, probability 0, space 0, times 0 [ 550.236589][ T8469] futex_wake_op: syz.6.1001 tries to shift op by 144; fix this program [ 550.245167][ T8469] futex_wake_op: syz.6.1001 tries to shift op by 144; fix this program [ 550.368198][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.413025][ T8471] loop6: detected capacity change from 0 to 256 [ 550.433620][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.463766][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 550.475462][ T8466] CPU: 0 PID: 8466 Comm: syz.3.999 Not tainted syzkaller #0 [ 550.482771][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 550.492839][ T8466] Call Trace: [ 550.496121][ T8466] [ 550.499053][ T8466] dump_stack_lvl+0x188/0x24e [ 550.503827][ T8466] ? show_regs_print_info+0x12/0x12 [ 550.509034][ T8466] ? load_image+0x410/0x410 [ 550.513542][ T8466] ? __might_sleep+0xd0/0xd0 [ 550.518152][ T8466] ? __lock_acquire+0x7ea0/0x7ea0 [ 550.523179][ T8466] should_fail_ex+0x390/0x4c0 [ 550.527874][ T8466] should_failslab+0x5/0x20 [ 550.532372][ T8466] slab_pre_alloc_hook+0x59/0x300 [ 550.537393][ T8466] ? ops_init+0x8a/0x5e0 [ 550.541656][ T8466] __kmem_cache_alloc_node+0x4f/0x270 [ 550.547030][ T8466] ? ops_init+0x8a/0x5e0 [ 550.551277][ T8466] __kmalloc+0xa3/0x240 [ 550.555446][ T8466] ? skbedit_init_net+0x156/0x190 [ 550.560586][ T8466] ops_init+0x8a/0x5e0 [ 550.564686][ T8466] setup_net+0x4f2/0xbd0 [ 550.569021][ T8466] ? copy_net_ns+0x5b0/0x5b0 [ 550.573621][ T8466] ? copy_net_ns+0x324/0x5b0 [ 550.578214][ T8466] ? down_read_killable+0x1cc/0x340 [ 550.583424][ T8466] copy_net_ns+0x33e/0x5b0 [ 550.587844][ T8466] create_new_namespaces+0x3ce/0x700 [ 550.593193][ T8466] unshare_nsproxy_namespaces+0x116/0x160 [ 550.598921][ T8466] ksys_unshare+0x4f6/0x8e0 [ 550.603480][ T8466] ? sighand_ctor+0x40/0x40 [ 550.608032][ T8466] ? lock_chain_count+0x20/0x20 [ 550.612918][ T8466] ? syscall_enter_from_user_mode+0x21/0x80 [ 550.618829][ T8466] __x64_sys_unshare+0x34/0x40 [ 550.623789][ T8466] do_syscall_64+0x4c/0xa0 [ 550.628228][ T8466] ? clear_bhb_loop+0x60/0xb0 [ 550.632922][ T8466] ? clear_bhb_loop+0x60/0xb0 [ 550.637615][ T8466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.643510][ T8466] RIP: 0033:0x7f9962f9fb19 [ 550.647929][ T8466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.667623][ T8466] RSP: 002b:00007f9963f09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 550.676049][ T8466] RAX: ffffffffffffffda RBX: 00007f9963225fa0 RCX: 00007f9962f9fb19 [ 550.684202][ T8466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 550.692167][ T8466] RBP: 00007f9963037b70 R08: 0000000000000000 R09: 0000000000000000 [ 550.700147][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.708111][ T8466] R13: 00007f9963226038 R14: 00007f9963225fa0 R15: 00007ffca8bbc538 [ 550.716098][ T8466] [ 551.573722][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.633421][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.940050][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.990703][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.026319][ T7380] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 552.079208][ T7380] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 552.105729][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.164737][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.261921][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 552.317054][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 552.397956][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.456470][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.496510][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.556725][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.596473][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.663669][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.693613][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.753692][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.814203][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.937579][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.967353][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 553.013449][ T8105] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.046498][ T8105] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.073793][ T8105] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.082520][ T8105] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.468827][ T4311] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.649981][ T8496] loop2: detected capacity change from 0 to 256 [ 553.672337][ T4311] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.708522][ T8496] exfat: Deprecated parameter 'utf8' [ 553.730871][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.798159][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.820989][ T8496] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 553.909716][ T4311] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.989633][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 554.134900][ T4311] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.866104][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.728927][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.928529][ T8513] futex_wake_op: syz.2.1011 tries to shift op by 144; fix this program [ 556.936967][ T8513] futex_wake_op: syz.2.1011 tries to shift op by 144; fix this program [ 557.065285][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 558.762163][ T8528] ip_tables: iptables: counters copy to user failed while replacing table [ 558.777600][ T27] audit: type=1326 audit(1794056335.963:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cae59fb19 code=0x7ffc0000 [ 558.803526][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 558.814014][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 558.822499][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 558.830444][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 558.838955][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 558.846341][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 559.839026][ T27] audit: type=1326 audit(1794056336.073:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cae59fb19 code=0x7ffc0000 [ 560.107133][ T8526] rxe_eth0 speed is unknown, defaulting to 1000 [ 560.403761][ T8545] Invalid ELF header magic: != ELF [ 561.222102][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 561.245175][ T27] audit: type=1326 audit(1794056336.073:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cae59fb19 code=0x7ffc0000 [ 561.527584][ T27] audit: type=1326 audit(1794056336.083:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f0cae59fb19 code=0x7ffc0000 [ 562.869084][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.896562][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.934794][ T27] audit: type=1326 audit(1794056336.083:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cae59fb19 code=0x7ffc0000 [ 563.265794][ T8555] futex_wake_op: syz.1.1022 tries to shift op by 144; fix this program [ 563.274220][ T8555] futex_wake_op: syz.1.1022 tries to shift op by 144; fix this program [ 563.335278][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 563.376483][ T27] audit: type=1326 audit(1794056336.083:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cae59fb19 code=0x7ffc0000 [ 563.665492][ T27] audit: type=1326 audit(1794056336.083:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0cae59fb19 code=0x7ffc0000 [ 565.021550][ T27] audit: type=1326 audit(1794056336.083:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1014" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0cae59fb19 code=0x7ffc0000 [ 565.344030][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 565.352882][ T8526] chnl_net:caif_netlink_parms(): no params data found [ 567.424119][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 567.436416][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.458156][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.626458][ T8526] device bridge_slave_0 entered promiscuous mode [ 568.013721][ T8604] Invalid ELF header magic: != ELF [ 568.738972][ T8603] overlayfs: failed to resolve './file1': -2 [ 568.773632][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.832459][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.957967][ T8526] device bridge_slave_1 entered promiscuous mode [ 569.003691][ T4311] device hsr_slave_0 left promiscuous mode [ 569.163665][ T4311] device hsr_slave_1 left promiscuous mode [ 569.187676][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.312309][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.384475][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.391902][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.552342][ T4311] device bridge_slave_1 left promiscuous mode [ 570.597174][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.605026][ T8622] ubi0: attaching mtd0 [ 570.609909][ T8622] ubi0: scanning is finished [ 570.648522][ T4311] device bridge_slave_0 left promiscuous mode [ 570.657258][ T8622] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 570.672610][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.736768][ T8623] using random self ethernet address [ 570.807672][ T4311] device veth1_macvtap left promiscuous mode [ 570.841802][ T4311] device veth0_macvtap left promiscuous mode [ 570.868443][ T8623] using random host ethernet address [ 570.893619][ T4311] device veth1_vlan left promiscuous mode [ 570.899422][ T4311] device veth0_vlan left promiscuous mode [ 570.961928][ T8627] loop0: detected capacity change from 0 to 4096 [ 570.982943][ T8622] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 571.040196][ T8627] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 571.092879][ T8627] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 571.138171][ T8627] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 571.182051][ T8627] loop0: [ 573.188822][ T8636] gadgetfs: bound to dummy_udc driver [ 574.669826][ T8653] loop1: detected capacity change from 0 to 256 [ 575.149882][ T8656] kvm: pic: level sensitive irq not supported [ 575.150058][ T8656] kvm: pic: non byte read [ 575.169533][ T8656] kvm: pic: non byte read [ 575.458215][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 575.524467][ T4275] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 575.532214][ T4275] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 575.793750][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 576.989347][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.129202][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.255370][ T5471] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 577.453419][ T5471] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 577.472345][ T5471] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.497896][ T5471] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 577.521941][ T5471] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.564675][ T5471] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 577.587319][ T5471] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 577.608552][ T5471] usb 4-1: Product: syz [ 577.620979][ T5471] usb 4-1: Manufacturer: syz [ 577.660836][ T5471] cdc_wdm 4-1:1.0: skipping garbage [ 577.677084][ T5471] cdc_wdm 4-1:1.0: skipping garbage [ 577.692085][ T5471] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 577.708480][ T5471] cdc_wdm 4-1:1.0: Unknown control protocol [ 577.853210][ T5471] usb 4-1: USB disconnect, device number 12 [ 578.236220][ T4311] bond0 (unregistering): Released all slaves [ 578.433887][ T5471] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 579.003797][ T5471] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 579.662063][ T8526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.207976][ T5471] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.277279][ T8526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.307716][ T5471] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 580.381077][ T5471] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.494711][ T8526] team0: Port device team_slave_0 added [ 580.501075][ T5471] usb 4-1: string descriptor 0 read error: -71 [ 580.553030][ T5471] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 580.582696][ T8526] team0: Port device team_slave_1 added [ 580.620751][ T5471] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 580.717153][ T5471] usb 4-1: can't set config #1, error -71 [ 580.763091][ T5471] usb 4-1: USB disconnect, device number 13 [ 580.835755][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.842725][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.062079][ T8526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.213205][ T8694] loop2: detected capacity change from 0 to 256 [ 581.237139][ T8526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.290842][ T8526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.728879][ T8526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.796296][ T8692] netlink: 'syz.3.1058': attribute type 21 has an invalid length. [ 581.870695][ T8692] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1058'. [ 582.069032][ T4279] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 582.083098][ T8526] device hsr_slave_0 entered promiscuous mode [ 582.113207][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.122753][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.131721][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.139332][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.146991][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 582.154193][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 582.189141][ T4279] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 582.226773][ T8526] device hsr_slave_1 entered promiscuous mode [ 582.265152][ T8526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.272747][ T8526] Cannot create hsr debugfs directory [ 582.543314][ T8706] rxe_eth0 speed is unknown, defaulting to 1000 [ 585.083708][ T8720] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1064'. [ 585.092781][ T8720] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1064'. [ 585.101810][ T8720] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 585.208924][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 585.255441][ T4311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.318642][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 585.327112][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 585.334671][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 585.342015][ T8719] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 585.495278][ T4311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.760683][ T4311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.256997][ T4311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.271048][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 589.278453][ T8526] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 589.343607][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 589.363540][ T8526] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 589.458812][ T8526] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 589.543749][ T8526] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 589.668862][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 589.678968][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 589.687782][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 589.695259][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 589.703808][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 589.712244][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 589.828547][ T4311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.933410][ T8706] chnl_net:caif_netlink_parms(): no params data found [ 590.030563][ T4311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.083397][ T8748] rxe_eth0 speed is unknown, defaulting to 1000 [ 590.231676][ T4311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.457506][ T4311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.515601][ T8526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.845855][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 590.866742][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 590.912996][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.942014][ T8706] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.962669][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.987813][ T8706] device bridge_slave_0 entered promiscuous mode [ 591.075458][ T8706] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.089694][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.118114][ T8706] device bridge_slave_1 entered promiscuous mode [ 591.147635][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 591.167632][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 591.188643][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.195800][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.269239][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 591.351216][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 591.378151][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 591.393774][ T6983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 591.422075][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.429226][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.437747][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 591.508504][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 591.527547][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 591.596559][ T6983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 591.616756][ T8706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.632381][ T6983] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 591.653244][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 591.661485][ T4393] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 591.692632][ T6983] usb 4-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 591.703631][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 591.737434][ T6983] usb 4-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 591.747672][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 591.767156][ T8706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.784741][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 591.798231][ T6983] usb 4-1: config 66 interface 0 has no altsetting 0 [ 591.818410][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 591.829630][ T6983] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 591.850644][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 591.861800][ T4393] usb 8-1: Using ep0 maxpacket: 16 [ 591.877064][ T6983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.887524][ T4393] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.909764][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 591.929177][ T6983] usb 4-1: Product: syz [ 591.933368][ T6983] usb 4-1: Manufacturer: syz [ 591.944117][ T4393] usb 8-1: config 0 interface 0 has no altsetting 0 [ 591.950746][ T4393] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 591.970896][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 591.982275][ T6983] usb 4-1: SerialNumber: syz [ 592.008553][ T8526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.030981][ T4393] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.054508][ T8526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 592.074240][ T4393] usb 8-1: config 0 descriptor?? [ 592.100018][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 592.158971][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 592.248055][ T8706] team0: Port device team_slave_0 added [ 592.292868][ T6983] ati_remote2 4-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 592.354375][ T6983] usb 4-1: USB disconnect, device number 14 [ 592.383211][ T8706] team0: Port device team_slave_1 added [ 592.528226][ T4393] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 592.671456][ T8706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.739692][ T8706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.801411][ T8706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.821148][ T8748] chnl_net:caif_netlink_parms(): no params data found [ 592.937542][ T3737] usb 8-1: USB disconnect, device number 2 [ 592.992634][ T8706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.014867][ T8706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.103194][ T8706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.252942][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 593.286956][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 593.650905][ T8526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.824417][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 593.998383][ T8706] device hsr_slave_0 entered promiscuous mode [ 594.040092][ T8706] device hsr_slave_1 entered promiscuous mode [ 594.099405][ T8706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.163700][ T8706] Cannot create hsr debugfs directory [ 594.975939][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.013636][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.085823][ T8748] device bridge_slave_0 entered promiscuous mode [ 595.453266][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.469479][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.495026][ T8748] device bridge_slave_1 entered promiscuous mode [ 595.747355][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 595.778242][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 595.813007][ T8526] device veth0_vlan entered promiscuous mode [ 595.885470][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 595.903543][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 595.910809][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 595.951684][ T8526] device veth1_vlan entered promiscuous mode [ 595.998374][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.169377][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 596.197914][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 596.226815][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.302762][ T8526] device veth0_macvtap entered promiscuous mode [ 596.383350][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 596.424112][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 596.711146][ T8526] device veth1_macvtap entered promiscuous mode [ 596.753384][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 596.787254][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 596.878560][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.967850][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.997875][ T8856] loop7: detected capacity change from 0 to 64 [ 597.013600][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.084182][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.144187][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.204166][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.244280][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.286748][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.326972][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.408105][ T8748] team0: Port device team_slave_0 added [ 597.444301][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 597.641847][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 597.798170][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.830975][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.861880][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.890987][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.920417][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.952373][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.981692][ T8526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.992767][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 598.020530][ T8526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.051589][ T8526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.084050][ T8748] team0: Port device team_slave_1 added [ 598.097839][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 598.110691][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 598.164412][ T8526] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.198222][ T8526] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.211112][ T8526] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.221896][ T8526] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.327136][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.351654][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.440968][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.525967][ T8706] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 598.577467][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.608763][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.697463][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.753342][ T8706] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 598.795235][ T4311] device hsr_slave_0 left promiscuous mode [ 598.815998][ T4311] device hsr_slave_1 left promiscuous mode [ 598.838150][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.876333][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.897382][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.912192][ T8879] FAULT_INJECTION: forcing a failure. [ 598.912192][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 598.931008][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.948783][ T4311] device bridge_slave_1 left promiscuous mode [ 598.955858][ T8879] CPU: 0 PID: 8879 Comm: syz.7.1089 Not tainted syzkaller #0 [ 598.963244][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 598.973296][ T8879] Call Trace: [ 598.976590][ T8879] [ 598.979533][ T8879] dump_stack_lvl+0x188/0x24e [ 598.984218][ T8879] ? show_regs_print_info+0x12/0x12 [ 598.989423][ T8879] ? load_image+0x410/0x410 [ 598.993945][ T8879] ? __might_sleep+0xd0/0xd0 [ 598.998552][ T8879] ? __lock_acquire+0x7ea0/0x7ea0 [ 599.003596][ T8879] should_fail_ex+0x390/0x4c0 [ 599.008310][ T8879] should_failslab+0x5/0x20 [ 599.012818][ T8879] slab_pre_alloc_hook+0x59/0x300 [ 599.017863][ T8879] kmem_cache_alloc+0x56/0x2f0 [ 599.022628][ T8879] ? mas_alloc_nodes+0x2ec/0x880 [ 599.027576][ T8879] mas_alloc_nodes+0x2ec/0x880 [ 599.032343][ T8879] mas_preallocate+0x162/0x3b0 [ 599.037122][ T8879] __vma_adjust+0x2ff/0x1d00 [ 599.041740][ T8879] ? validate_mm+0x2e0/0x2e0 [ 599.046334][ T8879] ? can_vma_merge_before+0x261/0x280 [ 599.051795][ T8879] vma_merge+0x994/0xa50 [ 599.056037][ T8879] ? vma_mas_szero+0xb0/0xb0 [ 599.060642][ T8879] mlock_fixup+0x31c/0x580 [ 599.065078][ T8879] apply_vma_lock_flags+0x257/0x3b0 [ 599.070274][ T8879] ? do_mlock+0x640/0x640 [ 599.074612][ T8879] ? rwsem_write_trylock+0x135/0x1c0 [ 599.079930][ T8879] ? do_mlock+0x194/0x640 [ 599.084288][ T8879] do_mlock+0x4d6/0x640 [ 599.088451][ T8879] ? lru_gen_add_folio+0xe20/0xe20 [ 599.093573][ T8879] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 599.099562][ T8879] ? lock_chain_count+0x20/0x20 [ 599.104438][ T8879] ? syscall_enter_from_user_mode+0x21/0x80 [ 599.110342][ T8879] __x64_sys_mlock+0x5c/0x70 [ 599.114928][ T8879] do_syscall_64+0x4c/0xa0 [ 599.119342][ T8879] ? clear_bhb_loop+0x60/0xb0 [ 599.124018][ T8879] ? clear_bhb_loop+0x60/0xb0 [ 599.128705][ T8879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.134594][ T8879] RIP: 0033:0x7f6dda19fb19 [ 599.139022][ T8879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.158629][ T8879] RSP: 002b:00007f6ddb0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 599.167041][ T8879] RAX: ffffffffffffffda RBX: 00007f6dda425fa0 RCX: 00007f6dda19fb19 [ 599.175026][ T8879] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 599.182991][ T8879] RBP: 00007f6dda237b70 R08: 0000000000000000 R09: 0000000000000000 [ 599.190954][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.198916][ T8879] R13: 00007f6dda426038 R14: 00007f6dda425fa0 R15: 00007ffe814ec368 [ 599.206916][ T8879] [ 599.906855][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.935238][ T4311] device bridge_slave_0 left promiscuous mode [ 599.945491][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.977227][ T4311] device hsr_slave_0 left promiscuous mode [ 599.996077][ T4311] device hsr_slave_1 left promiscuous mode [ 600.015572][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.023019][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.042912][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.065906][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.075885][ T4311] device bridge_slave_1 left promiscuous mode [ 600.082054][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.107369][ T4311] device bridge_slave_0 left promiscuous mode [ 600.126051][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.186525][ T4311] device veth1_macvtap left promiscuous mode [ 600.192599][ T4311] device veth0_macvtap left promiscuous mode [ 600.215339][ T4311] device veth1_vlan left promiscuous mode [ 600.222858][ T4311] device veth1_macvtap left promiscuous mode [ 600.246274][ T4311] device veth0_macvtap left promiscuous mode [ 600.252629][ T4311] device veth1_vlan left promiscuous mode [ 600.260699][ T4311] device veth0_vlan left promiscuous mode [ 600.981619][ T4311] bond3 (unregistering): (slave team0): Releasing active interface [ 600.998699][ T4311] bond3 (unregistering): Released all slaves [ 601.300899][ T4311] bond2 (unregistering): Released all slaves [ 601.486078][ T4311] bond1 (unregistering): Released all slaves [ 601.806717][ T4311] team0 (unregistering): Port device vlan0 removed [ 602.230214][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 602.290268][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 602.357244][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.422311][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.871180][ T4311] bond0 (unregistering): Released all slaves [ 603.593158][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 603.660090][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 603.719370][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.781536][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.255721][ T4311] bond0 (unregistering): Released all slaves [ 604.341048][ T8706] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 604.439259][ T8885] rxe_eth0 speed is unknown, defaulting to 1000 [ 604.555155][ T8706] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 604.607512][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.629919][ T8748] device hsr_slave_0 entered promiscuous mode [ 604.649490][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.698253][ T8748] device hsr_slave_1 entered promiscuous mode [ 604.722809][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 604.812192][ T7959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.039821][ T7959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.157198][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 605.240472][ T8706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.379420][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 605.407856][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.444050][ T8706] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.506271][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 605.558577][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.581117][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.588297][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.668404][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 605.713697][ T4393] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 605.732637][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.767698][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.798583][ T8906] loop3: detected capacity change from 0 to 256 [ 605.808170][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.815309][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.868356][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 605.945330][ T4393] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.236520][ T4393] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 606.269059][ T4393] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 606.295958][ T4393] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.317856][ T4393] usb 9-1: Product: syz [ 606.331722][ T4393] usb 9-1: Manufacturer: syz [ 606.346038][ T4393] usb 9-1: SerialNumber: syz [ 606.496452][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 606.512647][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 606.557970][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.572263][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.591981][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.651872][ T4276] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 606.709430][ T4276] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 606.748247][ T8706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 606.792817][ T8706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.829002][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.854236][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.874943][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.915047][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.946966][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.979685][ T8917] FAULT_INJECTION: forcing a failure. [ 606.979685][ T8917] name failslab, interval 1, probability 0, space 0, times 0 [ 607.040203][ T8917] CPU: 0 PID: 8917 Comm: syz.7.1104 Not tainted syzkaller #0 [ 607.047626][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 607.057700][ T8917] Call Trace: [ 607.060986][ T8917] [ 607.063921][ T8917] dump_stack_lvl+0x188/0x24e [ 607.068622][ T8917] ? show_regs_print_info+0x12/0x12 [ 607.073830][ T8917] ? load_image+0x410/0x410 [ 607.078369][ T8917] ? __lock_acquire+0x7ea0/0x7ea0 [ 607.083424][ T8917] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 607.089423][ T8917] should_fail_ex+0x390/0x4c0 [ 607.094112][ T8917] should_failslab+0x5/0x20 [ 607.098617][ T8917] slab_pre_alloc_hook+0x59/0x300 [ 607.103638][ T8917] ? string+0x257/0x290 [ 607.107790][ T8917] ? __kthread_create_on_node+0x3e7/0x540 [ 607.113558][ T8917] __kmem_cache_alloc_node+0x4f/0x270 [ 607.118931][ T8917] ? __kthread_create_on_node+0x3e7/0x540 [ 607.124661][ T8917] __kmalloc_node_track_caller+0xa0/0x240 [ 607.130380][ T8917] kvasprintf+0xe8/0x1a0 [ 607.134676][ T8917] ? widen_string+0x3b/0x2b0 [ 607.139275][ T8917] ? string+0x257/0x290 [ 607.143433][ T8917] ? bust_spinlocks+0xd0/0xd0 [ 607.148119][ T8917] __kthread_create_on_node+0x3e7/0x540 [ 607.153668][ T8917] ? kthread_create_on_node+0x140/0x140 [ 607.159213][ T8917] ? alloc_workqueue+0xf00/0x14a0 [ 607.164246][ T8917] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 607.169614][ T8917] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 607.174986][ T8917] kthread_create_on_node+0xe8/0x140 [ 607.180276][ T8917] ? tsk_fork_get_node+0x60/0x60 [ 607.185392][ T8917] ? rcu_is_watching+0x11/0xa0 [ 607.190243][ T8917] init_rescuer+0x1a6/0x290 [ 607.194745][ T8917] alloc_workqueue+0xf00/0x14a0 [ 607.199611][ T8917] ? apply_workqueue_attrs+0x180/0x180 [ 607.205156][ T8917] ? mempool_alloc_pages+0x20/0x20 [ 607.210325][ T8917] ? mempool_kfree+0x20/0x20 [ 607.214963][ T8917] ? mempool_init+0x36/0x50 [ 607.219504][ T8917] dm_integrity_ctr+0x1db2/0x4de0 [ 607.224632][ T8917] ? sb_check+0x310/0x310 [ 607.228969][ T8917] ? dm_split_args+0x8e/0x560 [ 607.233658][ T8917] ? rcu_is_watching+0x11/0xa0 [ 607.238434][ T8917] ? skip_spaces+0x86/0xa0 [ 607.242851][ T8917] dm_table_add_target+0x571/0xbc0 [ 607.247972][ T8917] table_load+0x2ce/0x760 [ 607.252309][ T8917] ? dev_wait+0x330/0x330 [ 607.256651][ T8917] ? __might_fault+0xc2/0x120 [ 607.261324][ T8917] ? __might_fault+0xa6/0x120 [ 607.265998][ T8917] dm_ctl_ioctl+0xa9c/0xec0 [ 607.270524][ T8917] ? dev_wait+0x330/0x330 [ 607.274884][ T8917] ? dm_poll+0x120/0x120 [ 607.279182][ T8917] ? bpf_lsm_file_ioctl+0x5/0x10 [ 607.284131][ T8917] ? security_file_ioctl+0x7c/0xa0 [ 607.289247][ T8917] ? dm_poll+0x120/0x120 [ 607.293486][ T8917] __se_sys_ioctl+0xfa/0x170 [ 607.298083][ T8917] do_syscall_64+0x4c/0xa0 [ 607.302562][ T8917] ? clear_bhb_loop+0x60/0xb0 [ 607.307264][ T8917] ? clear_bhb_loop+0x60/0xb0 [ 607.311976][ T8917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.317867][ T8917] RIP: 0033:0x7f6dda19fb19 [ 607.322299][ T8917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.341990][ T8917] RSP: 002b:00007f6ddb0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.350422][ T8917] RAX: ffffffffffffffda RBX: 00007f6dda425fa0 RCX: 00007f6dda19fb19 [ 607.358427][ T8917] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 607.366398][ T8917] RBP: 00007f6dda237b70 R08: 0000000000000000 R09: 0000000000000000 [ 607.374366][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.382347][ T8917] R13: 00007f6dda426038 R14: 00007f6dda425fa0 R15: 00007ffe814ec368 [ 607.390327][ T8917] [ 607.408581][ T6983] usb 9-1: USB disconnect, device number 2 [ 607.556813][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 608.339437][ T4311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.424334][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.457096][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.541960][ T4311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.577314][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.673094][ T4311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.737507][ T8748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 608.847003][ T4311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.914891][ T8748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 608.969462][ T8748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 608.980260][ T8935] loop8: detected capacity change from 0 to 64 [ 609.021855][ T8748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 609.450858][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.461178][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.474907][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.483708][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.496452][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.504723][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 609.511837][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.644531][ T8942] CIFS: Attempting to mount \\127.0.0.1\share [ 609.676883][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.700638][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 609.710916][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.738221][ T8939] rxe_eth0 speed is unknown, defaulting to 1000 [ 609.810315][ T8917] device-mapper: table: 248:4: integrity: Cannot allocate workqueue (-ENOMEM) [ 609.863722][ T8917] device-mapper: ioctl: error adding target to table [ 609.972653][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.016051][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.060899][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.068056][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.172020][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.189085][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.212610][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.239456][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.246624][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.272792][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.351959][ T8748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.391469][ T8748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.434336][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.451037][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 610.464434][ T8942] CIFS: VFS: cifs_mount failed w/return code = -512 [ 610.477250][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 610.497419][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 610.535715][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 610.565580][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 610.597617][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.611097][ T8953] loop8: detected capacity change from 0 to 256 [ 610.644083][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 610.690711][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.730085][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.760837][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.830260][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 610.852443][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.982659][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 611.007870][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.099896][ T8706] device veth0_vlan entered promiscuous mode [ 611.129919][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.157243][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 611.268069][ T8706] device veth1_vlan entered promiscuous mode [ 611.441503][ T8526] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 611.509590][ T8526] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 611.583796][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 611.678181][ T8706] device veth0_macvtap entered promiscuous mode [ 611.797634][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 611.815219][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 611.834673][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 611.867357][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.887017][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 611.894652][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 611.913324][ T8706] device veth1_macvtap entered promiscuous mode [ 611.937817][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.296157][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 612.330960][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 612.401729][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.497026][ T8967] loop7: detected capacity change from 0 to 128 [ 612.509402][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.565770][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.608522][ T8967] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 612.635285][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.668222][ T8967] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 612.721490][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.757037][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.798754][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.822044][ T8939] chnl_net:caif_netlink_parms(): no params data found [ 612.970998][ T8105] EXT4-fs (loop7): unmounting filesystem. [ 613.127051][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 613.158001][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 613.190396][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.200664][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.218044][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.237774][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.245341][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 613.252674][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.427379][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.446624][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.458528][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.471091][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.486660][ T8706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.498629][ T8706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.513089][ T8706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.544786][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 613.585152][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 613.601859][ T8706] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.611330][ T8706] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.626228][ T8706] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.640276][ T8706] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.663750][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 613.679309][ T8973] rxe_eth0 speed is unknown, defaulting to 1000 [ 613.792109][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 613.842620][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 613.912146][ T8748] device veth0_vlan entered promiscuous mode [ 613.964286][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 613.997825][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.052873][ T8748] device veth1_vlan entered promiscuous mode [ 614.143697][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.176699][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.198104][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 614.277791][ T4311] device hsr_slave_0 left promiscuous mode [ 614.297498][ T4311] device hsr_slave_1 left promiscuous mode [ 614.317774][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.337056][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.350120][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.072598][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.343730][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 615.743628][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 616.107054][ T4311] device bridge_slave_1 left promiscuous mode [ 616.113258][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.139270][ T4311] device bridge_slave_0 left promiscuous mode [ 616.165720][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.197924][ T4311] device veth1_macvtap left promiscuous mode [ 616.207261][ T4311] device veth0_macvtap left promiscuous mode [ 616.213319][ T4311] device veth1_vlan left promiscuous mode [ 616.221139][ T4311] device veth0_vlan left promiscuous mode [ 617.313666][ T8997] Invalid ELF header magic: != ELF [ 618.104418][ T8996] overlayfs: failed to resolve './file0': -2 [ 618.116917][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 618.127175][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 618.332515][ T8999] loop7: detected capacity change from 0 to 512 [ 618.355488][ T8999] EXT4-fs: Ignoring removed oldalloc option [ 618.393088][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 618.409538][ T8999] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 618.453724][ T8999] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 618.534215][ T8999] EXT4-fs (loop7): 1 orphan inode deleted [ 618.539975][ T8999] EXT4-fs (loop7): 1 truncate cleaned up [ 618.569933][ T8999] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 618.581881][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 618.620111][ T8999] EXT4-fs error (device loop7): empty_inline_dir:1912: inode #12: block 7: comm syz.7.1123: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 618.678795][ T8999] EXT4-fs (loop7): Remounting filesystem read-only [ 618.687630][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.698675][ T8999] EXT4-fs warning (device loop7): empty_inline_dir:1919: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 618.748069][ T8999] EXT4-fs (loop7): shut down requested (0) [ 618.812786][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.857004][ T8105] EXT4-fs (loop7): unmounting filesystem. [ 619.280680][ T6985] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 619.382021][ T4311] bond0 (unregistering): Released all slaves [ 619.461608][ T8748] device veth0_macvtap entered promiscuous mode [ 619.474687][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.502306][ T6985] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 619.518848][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 619.531702][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 619.542874][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.551124][ T6985] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.567280][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.577207][ T6985] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 619.588678][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 619.598300][ T6985] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.621150][ T8748] device veth1_macvtap entered promiscuous mode [ 619.635442][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.656745][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.666086][ T6985] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 619.678724][ T6985] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 619.688193][ T8939] device bridge_slave_0 entered promiscuous mode [ 619.706025][ T6985] usb 8-1: Product: syz [ 619.710723][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 619.725199][ T6985] usb 8-1: Manufacturer: syz [ 619.736126][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.755341][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.767729][ T6985] cdc_wdm 8-1:1.0: skipping garbage [ 619.772960][ T6985] cdc_wdm 8-1:1.0: skipping garbage [ 619.791736][ T8939] device bridge_slave_1 entered promiscuous mode [ 619.823074][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.840828][ T6985] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 619.848520][ T6985] cdc_wdm 8-1:1.0: Unknown control protocol [ 619.859354][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.893375][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.908555][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.918646][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.933524][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.950950][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.968226][ T6985] usb 8-1: USB disconnect, device number 3 [ 620.005138][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.022196][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.030639][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.043239][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.052863][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 620.069447][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.082194][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.096345][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.107721][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.121080][ T8748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.132618][ T8748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.148389][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 620.170361][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.222766][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.255258][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.278242][ T8748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.307250][ T8748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.333488][ T8748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.352876][ T8748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.374973][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.443081][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.563989][ T6985] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 620.581291][ T8939] team0: Port device team_slave_0 added [ 621.859482][ T8939] team0: Port device team_slave_1 added [ 621.866620][ T6985] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 621.964532][ T6985] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.003520][ T6985] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 622.050926][ T6985] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.166111][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.180623][ T6985] usb 8-1: string descriptor 0 read error: -71 [ 622.203596][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.223776][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 622.230439][ T6985] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 622.292507][ T6985] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 622.312530][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.345751][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.383263][ T6985] usb 8-1: can't set config #1, error -71 [ 622.391384][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.455820][ T6985] usb 8-1: USB disconnect, device number 4 [ 622.541135][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.604529][ T4559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.612513][ T4559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.625483][ T8973] chnl_net:caif_netlink_parms(): no params data found [ 622.666245][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.799836][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.103669][ T9037] Invalid ELF header magic: != ELF [ 623.911605][ T9036] overlayfs: failed to resolve './file0': -2 [ 624.005658][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.024445][ T9040] CIFS: Attempting to mount \\127.0.0.1\share [ 624.112373][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.309041][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.320176][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.618843][ T9040] CIFS: VFS: cifs_mount failed w/return code = -112 [ 625.934328][ T4311] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.152818][ T4311] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.255816][ T8939] device hsr_slave_0 entered promiscuous mode [ 626.307618][ T8939] device hsr_slave_1 entered promiscuous mode [ 626.322726][ T9053] loop7: detected capacity change from 0 to 4096 [ 626.340167][ T8939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.384094][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 626.400972][ T8939] Cannot create hsr debugfs directory [ 626.510640][ T9062] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 626.578186][ T4311] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.848819][ T4311] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.081395][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.136960][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.199965][ T8973] device bridge_slave_0 entered promiscuous mode [ 627.291909][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.339517][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.380958][ T8973] device bridge_slave_1 entered promiscuous mode [ 627.569337][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.987257][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.207105][ T8973] team0: Port device team_slave_0 added [ 628.510422][ T8973] team0: Port device team_slave_1 added [ 628.943680][ T9092] Invalid ELF header magic: != ELF [ 629.834368][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.860209][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.587776][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.670764][ T9105] CIFS: Attempting to mount \\127.0.0.1\share [ 631.724061][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.850835][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.294646][ T9113] loop7: detected capacity change from 0 to 16 [ 633.361219][ T9105] CIFS: VFS: cifs_mount failed w/return code = -112 [ 634.427169][ T9113] erofs: (device loop7): mounted with root inode @ nid 36. [ 635.229043][ T27] audit: type=1800 audit(1794056409.132:88): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1142" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 635.278115][ T4290] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 635.389003][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.757901][ T9122] loop7: detected capacity change from 0 to 128 [ 635.885586][ T27] audit: type=1800 audit(1794056410.072:89): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1145" name="file1" dev="loop7" ino=1048741 res=0 errno=0 [ 637.205326][ T6983] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 637.235542][ T8973] device hsr_slave_0 entered promiscuous mode [ 637.261382][ T8973] device hsr_slave_1 entered promiscuous mode [ 637.281236][ T8973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.315982][ T8973] Cannot create hsr debugfs directory [ 637.363674][ T6983] usb 8-1: device descriptor read/64, error -71 [ 637.633499][ T6983] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 637.716387][ T9150] netlink: 'syz.9.1152': attribute type 4 has an invalid length. [ 637.815270][ T6983] usb 8-1: device descriptor read/64, error -71 [ 637.943737][ T6983] usb usb8-port1: attempt power cycle [ 638.346388][ T8939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.373603][ T6983] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 638.428325][ T8939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.438211][ T6983] usb 8-1: device descriptor read/8, error -71 [ 638.511089][ T8939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.585700][ T8939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.707598][ T4311] device hsr_slave_0 left promiscuous mode [ 638.732444][ T4311] device hsr_slave_1 left promiscuous mode [ 638.753634][ T6983] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 638.776602][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.818543][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.837407][ T6983] usb 8-1: device descriptor read/8, error -71 [ 638.852507][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.892628][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.934880][ T4311] device bridge_slave_1 left promiscuous mode [ 638.941084][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.983834][ T6983] usb usb8-port1: unable to enumerate USB device [ 639.019668][ T4311] device bridge_slave_0 left promiscuous mode [ 639.057566][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.158676][ T4311] device veth1_macvtap left promiscuous mode [ 639.185842][ T4311] device veth0_macvtap left promiscuous mode [ 639.232619][ T4311] device veth1_vlan left promiscuous mode [ 639.268287][ T9172] kvm: pic: non byte write [ 639.279993][ T4311] device veth0_vlan left promiscuous mode [ 639.541979][ T9180] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1157'. [ 640.053517][ T6983] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 640.074906][ T9189] FAULT_INJECTION: forcing a failure. [ 640.074906][ T9189] name fail_futex, interval 1, probability 0, space 0, times 1 [ 640.176941][ T9189] CPU: 0 PID: 9189 Comm: syz.7.1159 Not tainted syzkaller #0 [ 640.184351][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 640.194420][ T9189] Call Trace: [ 640.197694][ T9189] [ 640.200635][ T9189] dump_stack_lvl+0x188/0x24e [ 640.205404][ T9189] ? show_regs_print_info+0x12/0x12 [ 640.210605][ T9189] ? load_image+0x410/0x410 [ 640.215117][ T9189] ? stack_trace_save+0xa6/0xf0 [ 640.220104][ T9189] ? __stack_depot_save+0x35/0x480 [ 640.225313][ T9189] should_fail_ex+0x390/0x4c0 [ 640.230040][ T9189] get_futex_key+0x1a6/0xe70 [ 640.234660][ T9189] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.240739][ T9189] ? futex_setup_timer+0xc0/0xc0 [ 640.245681][ T9189] futex_wake+0x123/0x4f0 [ 640.250015][ T9189] ? futex_wake_mark+0x150/0x150 [ 640.254961][ T9189] ? lockdep_hardirqs_on+0x94/0x140 [ 640.260176][ T9189] do_futex+0x2e2/0x320 [ 640.264328][ T9189] ? __ia32_sys_get_robust_list+0x100/0x100 [ 640.270217][ T9189] ? do_mknodat+0x476/0x4d0 [ 640.274723][ T9189] ? kmem_cache_free+0xf7/0x2a0 [ 640.279578][ T9189] __se_sys_futex+0x381/0x410 [ 640.284252][ T9189] ? do_o_path+0x200/0x200 [ 640.288663][ T9189] ? __x64_sys_futex+0xf0/0xf0 [ 640.293426][ T9189] ? __x64_sys_futex+0x1d/0xf0 [ 640.298184][ T9189] do_syscall_64+0x4c/0xa0 [ 640.302598][ T9189] ? clear_bhb_loop+0x60/0xb0 [ 640.307271][ T9189] ? clear_bhb_loop+0x60/0xb0 [ 640.311942][ T9189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.317930][ T9189] RIP: 0033:0x7f6dda19fb19 [ 640.322341][ T9189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.341953][ T9189] RSP: 002b:00007f6ddb0bf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 640.350364][ T9189] RAX: ffffffffffffffda RBX: 00007f6dda425fa8 RCX: 00007f6dda19fb19 [ 640.358338][ T9189] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6dda425fac [ 640.366327][ T9189] RBP: 00007f6dda425fa0 R08: 0001321c9131486b R09: 0000000000000000 [ 640.374300][ T9189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.382287][ T9189] R13: 00007f6dda426038 R14: 00007ffe814ec280 R15: 00007ffe814ec368 [ 640.390281][ T9189] [ 640.508923][ T6983] usb 10-1: Using ep0 maxpacket: 32 [ 640.529964][ T6983] usb 10-1: unable to get BOS descriptor or descriptor too short [ 640.572789][ T6983] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.616149][ T6983] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 640.678872][ T6983] usb 10-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 640.719272][ T6983] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.750774][ T6983] usb 10-1: Product: syz [ 640.760874][ T6983] usb 10-1: Manufacturer: syz [ 640.770993][ T6983] usb 10-1: SerialNumber: syz [ 641.481971][ T9203] FAULT_INJECTION: forcing a failure. [ 641.481971][ T9203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 641.563584][ T9203] CPU: 0 PID: 9203 Comm: syz.7.1160 Not tainted syzkaller #0 [ 641.570998][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 641.581051][ T9203] Call Trace: [ 641.584324][ T9203] [ 641.587266][ T9203] dump_stack_lvl+0x188/0x24e [ 641.591971][ T9203] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 641.598139][ T9203] ? show_regs_print_info+0x12/0x12 [ 641.603331][ T9203] ? load_image+0x410/0x410 [ 641.607850][ T9203] ? should_fail_ex+0x33d/0x4c0 [ 641.612701][ T9203] should_fail_ex+0x390/0x4c0 [ 641.617377][ T9203] prepare_alloc_pages+0x1e1/0x5b0 [ 641.622548][ T9203] __alloc_pages+0x130/0x4f0 [ 641.627136][ T9203] ? zone_statistics+0x170/0x170 [ 641.632089][ T9203] folio_alloc+0x1c/0x60 [ 641.636349][ T9203] filemap_alloc_folio+0xdb/0x480 [ 641.641369][ T9203] ? __filemap_get_folio+0x10f/0xde0 [ 641.646658][ T9203] ? filemap_add_folio+0x3d0/0x3d0 [ 641.651781][ T9203] ? __lock_acquire+0x7ea0/0x7ea0 [ 641.656829][ T9203] ? xas_load+0x127/0x140 [ 641.661180][ T9203] __filemap_get_folio+0x6ba/0xde0 [ 641.666319][ T9203] ? __filemap_get_folio+0x10f/0xde0 [ 641.671614][ T9203] ? page_cache_prev_miss+0x380/0x380 [ 641.677025][ T9203] pagecache_get_page+0x26/0x260 [ 641.682038][ T9203] aio_setup_ring+0x3ab/0xf50 [ 641.686764][ T9203] ? free_ioctx_reqs+0x180/0x180 [ 641.691702][ T9203] ioctx_alloc+0x315/0x7b0 [ 641.696119][ T9203] __se_sys_io_setup+0x7b/0x190 [ 641.700981][ T9203] do_syscall_64+0x4c/0xa0 [ 641.705401][ T9203] ? clear_bhb_loop+0x60/0xb0 [ 641.710149][ T9203] ? clear_bhb_loop+0x60/0xb0 [ 641.714824][ T9203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.720731][ T9203] RIP: 0033:0x7f6dda19fb19 [ 641.725149][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.744767][ T9203] RSP: 002b:00007f6ddb0bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 641.753272][ T9203] RAX: ffffffffffffffda RBX: 00007f6dda425fa0 RCX: 00007f6dda19fb19 [ 641.761247][ T9203] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 00000000000003ff [ 641.769228][ T9203] RBP: 00007f6dda237b70 R08: 0000000000000000 R09: 0000000000000000 [ 641.777200][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.785162][ T9203] R13: 00007f6dda426038 R14: 00007f6dda425fa0 R15: 00007ffe814ec368 [ 641.793138][ T9203] [ 644.483003][ T6983] snd-usb-audio: probe of 10-1:1.0 failed with error -2 [ 644.520930][ T9102] udevd[9102]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.543928][ T6983] usb 10-1: USB disconnect, device number 2 [ 644.598321][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 644.744635][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 644.832515][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.889135][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.308619][ T4311] bond0 (unregistering): Released all slaves [ 645.477223][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1162'. [ 648.059806][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.337449][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.375627][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 648.407509][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.473669][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 648.514163][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 648.567688][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.574850][ T7959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.642373][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 648.691829][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 648.737895][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.745044][ T7959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.856819][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 648.909487][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 648.969290][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 649.009808][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 649.054668][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 649.092603][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 649.127584][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 649.157162][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 650.832060][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 650.878346][ T8939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.917354][ T8939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 650.951094][ T9244] loop7: detected capacity change from 0 to 64 [ 650.983817][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 650.991859][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 651.058827][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 651.102481][ T9242] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1164'. [ 651.953604][ T9257] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1169'. [ 651.962572][ T9257] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1169'. [ 651.971555][ T9257] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 652.398203][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 652.406979][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 652.414483][ T9256] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 652.421810][ T9256] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 652.576870][ T8973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 653.985069][ T8973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 654.627728][ T8973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 654.682142][ T8973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 654.746384][ T9274] Bluetooth: MGMT ver 1.22 [ 655.194494][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.267190][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.319666][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.389704][ T8973] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.457109][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.491113][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.546921][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.604516][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.637927][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.713690][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.720827][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.794028][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.851025][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.921060][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.928270][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.072486][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 656.115264][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 656.174448][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 656.227812][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 656.288264][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 656.367962][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 656.424458][ T9301] block device autoloading is deprecated and will be removed. [ 656.436321][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 656.478458][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.514659][ T9301] block device autoloading is deprecated and will be removed. [ 656.540998][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.573729][ T9301] device-mapper: table: 248:5: verity: Data device is too small (-EINVAL) [ 656.594099][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 656.619734][ T9301] device-mapper: ioctl: error adding target to table [ 656.652683][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.717060][ T8973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.767269][ T9309] block device autoloading is deprecated and will be removed. [ 656.802970][ T8973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.849371][ T8939] device veth0_vlan entered promiscuous mode [ 656.884709][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.931586][ T9314] Bluetooth: MGMT ver 1.22 [ 656.940824][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.997716][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 657.057358][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.206144][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.483660][ T9321] Invalid ELF header magic: != ELF [ 658.373009][ T8939] device veth1_vlan entered promiscuous mode [ 658.514082][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 658.521798][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 658.603159][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 658.651611][ T9327] FAULT_INJECTION: forcing a failure. [ 658.651611][ T9327] name failslab, interval 1, probability 0, space 0, times 0 [ 658.749707][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 658.789789][ T9327] CPU: 0 PID: 9327 Comm: syz.7.1184 Not tainted syzkaller #0 [ 658.797196][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 658.807341][ T9327] Call Trace: [ 658.810621][ T9327] [ 658.813551][ T9327] dump_stack_lvl+0x188/0x24e [ 658.818258][ T9327] ? show_regs_print_info+0x12/0x12 [ 658.823454][ T9327] ? load_image+0x410/0x410 [ 658.827964][ T9327] should_fail_ex+0x390/0x4c0 [ 658.832643][ T9327] should_failslab+0x5/0x20 [ 658.837162][ T9327] slab_pre_alloc_hook+0x59/0x300 [ 658.842193][ T9327] ? __might_sleep+0xd0/0xd0 [ 658.846789][ T9327] ? bdi_split_work_to_wbs+0x4dd/0x8f0 [ 658.852305][ T9327] __kmem_cache_alloc_node+0x4f/0x270 [ 658.857774][ T9327] ? bdi_split_work_to_wbs+0x4dd/0x8f0 [ 658.863232][ T9327] kmalloc_trace+0x26/0xe0 [ 658.867642][ T9327] bdi_split_work_to_wbs+0x4dd/0x8f0 [ 658.872926][ T9327] ? bdi_split_work_to_wbs+0xfb/0x8f0 [ 658.878308][ T9327] ? sync_inodes_sb+0xa10/0xa10 [ 658.883157][ T9327] ? rwsem_write_trylock+0x135/0x1c0 [ 658.888468][ T9327] sync_inodes_sb+0x1b8/0xa10 [ 658.893165][ T9327] ? __might_sleep+0xd0/0xd0 [ 658.897752][ T9327] ? try_to_writeback_inodes_sb+0xc0/0xc0 [ 658.903470][ T9327] ? __rwlock_init+0x140/0x140 [ 658.908231][ T9327] ? down_read+0x1a8/0x2d0 [ 658.912642][ T9327] ? ksys_sync+0x170/0x170 [ 658.917105][ T9327] iterate_supers+0x11e/0x1d0 [ 658.921784][ T9327] ksys_sync+0x9d/0x170 [ 658.925940][ T9327] ? sync_filesystem+0x220/0x220 [ 658.930881][ T9327] ? syscall_enter_from_user_mode+0x21/0x80 [ 658.936772][ T9327] ? lockdep_hardirqs_on+0x94/0x140 [ 658.941967][ T9327] __ia32_sys_sync+0xa/0x10 [ 658.946467][ T9327] do_syscall_64+0x4c/0xa0 [ 658.950886][ T9327] ? clear_bhb_loop+0x60/0xb0 [ 658.955561][ T9327] ? clear_bhb_loop+0x60/0xb0 [ 658.960257][ T9327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 658.966164][ T9327] RIP: 0033:0x7f6dda19fb19 [ 658.970597][ T9327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.990209][ T9327] RSP: 002b:00007f6ddb0bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 658.998635][ T9327] RAX: ffffffffffffffda RBX: 00007f6dda425fa0 RCX: 00007f6dda19fb19 [ 659.006610][ T9327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.014574][ T9327] RBP: 00007f6dda425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 659.022544][ T9327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.030510][ T9327] R13: 00007f6dda426038 R14: 00007f6dda425fa0 R15: 00007ffe814ec368 [ 659.038490][ T9327] [ 659.041600][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.050812][ T4290] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 659.058011][ T4290] Bluetooth: hci3: command 0x1407 tx timeout [ 659.104341][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 659.136368][ T8939] device veth0_macvtap entered promiscuous mode [ 659.189599][ T8939] device veth1_macvtap entered promiscuous mode [ 659.332719][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.413499][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.493547][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.535652][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.613523][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.675645][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.726998][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.756405][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 659.788073][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 659.814236][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 659.850552][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 659.888514][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.933518][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.966358][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.006344][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.040514][ T8939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.072788][ T8939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.127518][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.160906][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 660.187683][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 660.231763][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.256193][ T8939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.309966][ T8939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.375714][ T8939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.441925][ T8939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.571429][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 660.623625][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.890753][ T7959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.935766][ T7959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.995462][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 661.128175][ T4740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.168477][ T4740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.232158][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.812660][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 661.867626][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 661.974594][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 662.018047][ T9382] block device autoloading is deprecated and will be removed. [ 662.034062][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 662.083130][ T8973] device veth0_vlan entered promiscuous mode [ 662.112716][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 662.141003][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 662.191551][ T9388] netlink: 'syz.0.1198': attribute type 39 has an invalid length. [ 662.366645][ T8973] device veth1_vlan entered promiscuous mode [ 662.500200][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 662.541752][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 662.589643][ T8973] device veth0_macvtap entered promiscuous mode [ 662.647265][ T8973] device veth1_macvtap entered promiscuous mode [ 662.740631][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.812502][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.873439][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.165286][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.239511][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.305034][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.376855][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.444051][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.514687][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.579640][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 663.617165][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 663.657981][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 663.705953][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.751742][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.807300][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.858348][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.920078][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.971149][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.022416][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.067909][ T8973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.125763][ T8973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.185169][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.237750][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 664.286535][ T6653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 664.351487][ T8973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.413475][ T8973] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.422195][ T8973] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.571033][ T8973] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.247433][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.311121][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.326290][ T9427] loop0: detected capacity change from 0 to 16 [ 665.410622][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 665.505888][ T9427] erofs: (device loop0): mounted with root inode @ nid 36. [ 665.533341][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.606945][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.676976][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 666.463965][ T6983] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 666.677610][ T6983] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.742302][ T6983] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 666.833280][ T6983] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 666.910142][ T6983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.969196][ T6983] usb 6-1: Product: syz [ 667.000407][ T6983] usb 6-1: Manufacturer: syz [ 667.048855][ T6983] usb 6-1: SerialNumber: syz [ 667.055531][ T9455] loop0: detected capacity change from 0 to 2048 [ 667.139155][ T9455] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 667.296710][ T9458] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 667.392822][ T9455] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=4, rec_len=24, name_len=6 [ 667.427876][ T6983] usb 6-1: USB disconnect, device number 6 [ 667.591599][ T9455] Remounting filesystem read-only [ 668.263570][ T6983] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 668.466126][ T6983] usb 10-1: device descriptor read/64, error -71 [ 669.057628][ T6983] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 669.067739][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 669.077518][ T4290] CPU: 0 PID: 4290 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 669.085063][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 669.095114][ T4290] Workqueue: hci3 hci_rx_work [ 669.099842][ T4290] Call Trace: [ 669.103116][ T4290] [ 669.106053][ T4290] dump_stack_lvl+0x188/0x24e [ 669.110730][ T4290] ? show_regs_print_info+0x12/0x12 [ 669.115922][ T4290] ? load_image+0x410/0x410 [ 669.120426][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 669.125667][ T4290] ? __lock_acquire+0x7ea0/0x7ea0 [ 669.130688][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 669.135361][ T4290] ? do_raw_spin_unlock+0x11d/0x230 [ 669.140557][ T4290] kobject_add_internal+0x617/0xca0 [ 669.145776][ T4290] kobject_add+0x160/0x230 [ 669.150192][ T4290] ? kobject_init+0x1c0/0x1c0 [ 669.154861][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 669.160141][ T4290] ? klist_children_get+0x50/0x50 [ 669.165198][ T4290] ? get_device_parent+0x121/0x3e0 [ 669.170304][ T4290] device_add+0x470/0x1050 [ 669.174719][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 669.179700][ T4290] le_conn_complete_evt+0x10db/0x17c0 [ 669.185519][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 669.191755][ T4290] ? __copy_skb_header+0x3ba/0x4f0 [ 669.196992][ T4290] ? memcpy+0x3c/0x60 [ 669.201004][ T4290] ? skb_pull_data+0xec/0x1f0 [ 669.205707][ T4290] hci_le_enh_conn_complete_evt+0x185/0x460 [ 669.211609][ T4290] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 669.218025][ T4290] hci_event_packet+0x61f/0xe60 [ 669.223006][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 669.229095][ T4290] ? bis_list+0x280/0x280 [ 669.233426][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 669.239328][ T4290] ? kcov_remote_start+0x50f/0x810 [ 669.244440][ T4290] ? lockdep_hardirqs_on+0x94/0x140 [ 669.249639][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 669.254835][ T4290] hci_rx_work+0x3eb/0xd40 [ 669.259251][ T4290] ? _raw_spin_unlock+0x40/0x40 [ 669.264107][ T4290] ? process_one_work+0x7b4/0x1160 [ 669.269226][ T4290] process_one_work+0x8ab/0x1160 [ 669.274182][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 669.279812][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 669.284929][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 669.290471][ T4290] ? wq_worker_running+0x97/0x190 [ 669.295507][ T4290] worker_thread+0xaf5/0x12a0 [ 669.300198][ T4290] kthread+0x29d/0x330 [ 669.304279][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 669.309295][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 669.313880][ T4290] ret_from_fork+0x1f/0x30 [ 669.318335][ T4290] [ 669.326164][ T4290] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 669.340584][ T4290] Bluetooth: hci3: failed to register connection device [ 669.753359][ T9491] 9pnet_fd: Insufficient options for proto=fd [ 669.762639][ T6983] usb 10-1: device descriptor read/64, error -71 [ 669.923727][ T6983] usb usb10-port1: attempt power cycle [ 670.356551][ T6983] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 670.452759][ T6983] usb 10-1: device descriptor read/8, error -71 [ 671.849141][ T6983] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 672.101310][ T6983] usb 10-1: device descriptor read/8, error -71 [ 672.171674][ T27] audit: type=1326 audit(1794056446.352:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba379fb19 code=0x7ffc0000 [ 672.263670][ T6983] usb usb10-port1: unable to enumerate USB device [ 672.343496][ T7] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 672.364857][ T27] audit: type=1326 audit(1794056446.392:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba379fb19 code=0x7ffc0000 [ 672.493243][ T9510] loop5: detected capacity change from 0 to 8192 [ 672.593540][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 672.601338][ T27] audit: type=1326 audit(1794056446.392:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ba379fb19 code=0x7ffc0000 [ 672.656449][ T7] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 672.713696][ T6983] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 672.763455][ T7] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x4E, skipping [ 672.855749][ T6983] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 672.912289][ T7] usb 8-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 672.942155][ T27] audit: type=1326 audit(1794056446.392:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba379fb19 code=0x7ffc0000 [ 673.033693][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.105810][ T7] usb 8-1: Product: syz [ 673.130300][ T7] usb 8-1: Manufacturer: syz [ 673.170712][ T27] audit: type=1326 audit(1794056446.392:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba379fb19 code=0x7ffc0000 [ 673.213483][ T7] usb 8-1: SerialNumber: syz [ 673.253716][ T9506] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 673.325281][ T9506] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 673.424262][ T8973] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 673.432502][ T8973] FAT-fs (loop5): Filesystem has been set read-only [ 673.456479][ T27] audit: type=1326 audit(1794056446.392:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ba379f7ab code=0x7ffc0000 [ 673.633608][ T7] usb 8-1: MIDIStreaming interface descriptor not found [ 673.710139][ T27] audit: type=1326 audit(1794056446.392:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ba379f7ab code=0x7ffc0000 [ 673.848542][ T7] usb 8-1: USB disconnect, device number 9 [ 673.965295][ T27] audit: type=1326 audit(1794056446.392:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ba379f7ab code=0x7ffc0000 [ 674.211050][ T27] audit: type=1326 audit(1794056446.392:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ba379f7ab code=0x7ffc0000 [ 674.308463][ T4355] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 674.338477][ T9534] udevd[9534]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 674.451469][ T27] audit: type=1326 audit(1794056446.392:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ba379f7ab code=0x7ffc0000 [ 674.647214][ T4355] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 674.706492][ T4355] usb 10-1: config 1 has no interface number 0 [ 674.756672][ T4355] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 674.826914][ T4355] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.891703][ T4355] usb 10-1: Product: syz [ 675.039191][ T9554] loop0: detected capacity change from 0 to 32768 [ 675.059619][ T9554] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1235 (9554) [ 675.089536][ T4355] usb 10-1: Manufacturer: syz [ 675.132682][ T4355] usb 10-1: SerialNumber: syz [ 675.186843][ T9554] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 675.197135][ T9554] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 675.206062][ T9554] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 675.215799][ T9554] BTRFS info (device loop0): use zstd compression, level 3 [ 675.222995][ T9554] BTRFS info (device loop0): force clearing of disk cache [ 675.230324][ T9554] BTRFS info (device loop0): enabling disk space caching [ 675.238141][ T9554] BTRFS info (device loop0): disk space caching is enabled [ 675.388663][ T4355] usb 10-1: 3:0 : does not exist [ 675.408132][ T9554] BTRFS info (device loop0): enabling ssd optimizations [ 675.417591][ T9554] BTRFS info (device loop0): rebuilding free space tree [ 675.453711][ T9554] BTRFS info (device loop0): disabling free space tree [ 675.460744][ T9554] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 675.470653][ T9554] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 675.495706][ T4355] usb 10-1: 3:0 : does not exist [ 675.614124][ T4355] usb 10-1: USB disconnect, device number 7 [ 676.340630][ T8939] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 676.723930][ T9551] loop7: detected capacity change from 0 to 32768 [ 676.854657][ T9591] block device autoloading is deprecated and will be removed. [ 677.321058][ T9551] XFS (loop7): Mounting V5 Filesystem [ 677.410012][ T9551] XFS (loop7): Ending clean mount [ 677.517236][ T9551] XFS (loop7): Quotacheck needed: Please wait. [ 677.721642][ T9551] XFS (loop7): Quotacheck: Done. [ 677.890545][ T8105] XFS (loop7): Unmounting Filesystem [ 678.013288][ T6653] tipc: Subscription rejected, illegal request [ 681.087075][ T9655] FAULT_INJECTION: forcing a failure. [ 681.087075][ T9655] name failslab, interval 1, probability 0, space 0, times 0 [ 681.204225][ T9655] CPU: 0 PID: 9655 Comm: syz.4.1254 Not tainted syzkaller #0 [ 681.211628][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 681.221678][ T9655] Call Trace: [ 681.224970][ T9655] [ 681.227909][ T9655] dump_stack_lvl+0x188/0x24e [ 681.232597][ T9655] ? show_regs_print_info+0x12/0x12 [ 681.237794][ T9655] ? load_image+0x410/0x410 [ 681.242381][ T9655] ? __might_sleep+0xd0/0xd0 [ 681.246970][ T9655] ? __lock_acquire+0x7ea0/0x7ea0 [ 681.252017][ T9655] should_fail_ex+0x390/0x4c0 [ 681.256746][ T9655] should_failslab+0x5/0x20 [ 681.261259][ T9655] slab_pre_alloc_hook+0x59/0x300 [ 681.266310][ T9655] ? blk_stat_alloc_callback+0x92/0x210 [ 681.271909][ T9655] __kmem_cache_alloc_node+0x4f/0x270 [ 681.277288][ T9655] ? blk_stat_alloc_callback+0x92/0x210 [ 681.282842][ T9655] __kmalloc+0xa3/0x240 [ 681.286999][ T9655] ? blk_mq_init_allocated_queue+0x1800/0x1800 [ 681.293148][ T9655] ? blk_mq_poll_stats_fn+0x1e0/0x1e0 [ 681.298870][ T9655] blk_stat_alloc_callback+0x92/0x210 [ 681.304234][ T9655] ? blk_mq_init_allocated_queue+0x1800/0x1800 [ 681.310377][ T9655] ? blk_mq_poll_stats_fn+0x1e0/0x1e0 [ 681.315741][ T9655] blk_mq_init_allocated_queue+0x181/0x1800 [ 681.321643][ T9655] ? blk_mq_alloc_disk_for_queue+0x60/0x60 [ 681.327462][ T9655] ? blk_set_default_limits+0x17b/0x4b0 [ 681.333037][ T9655] ? blk_alloc_queue+0x50d/0x5d0 [ 681.337991][ T9655] __blk_mq_alloc_disk+0xba/0x1e0 [ 681.343016][ T9655] loop_add+0x326/0x9a0 [ 681.347217][ T9655] loop_control_ioctl+0x124/0x590 [ 681.352235][ T9655] ? loop_set_hw_queue_depth+0x60/0x60 [ 681.357692][ T9655] ? bpf_lsm_file_ioctl+0x5/0x10 [ 681.362630][ T9655] ? security_file_ioctl+0x7c/0xa0 [ 681.367744][ T9655] ? loop_set_hw_queue_depth+0x60/0x60 [ 681.373193][ T9655] __se_sys_ioctl+0xfa/0x170 [ 681.377781][ T9655] do_syscall_64+0x4c/0xa0 [ 681.382193][ T9655] ? clear_bhb_loop+0x60/0xb0 [ 681.386868][ T9655] ? clear_bhb_loop+0x60/0xb0 [ 681.391556][ T9655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.397441][ T9655] RIP: 0033:0x7f3ba379fb19 [ 681.401858][ T9655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.421467][ T9655] RSP: 002b:00007f3ba458c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.429889][ T9655] RAX: ffffffffffffffda RBX: 00007f3ba3a25fa0 RCX: 00007f3ba379fb19 [ 681.437854][ T9655] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 681.445912][ T9655] RBP: 00007f3ba3837b70 R08: 0000000000000000 R09: 0000000000000000 [ 681.453876][ T9655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.461841][ T9655] R13: 00007f3ba3a26038 R14: 00007f3ba3a25fa0 R15: 00007ffd152a3278 [ 681.469816][ T9655] [ 682.113542][ T9608] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 682.186388][ T9648] loop7: detected capacity change from 0 to 32768 [ 682.335337][ T9608] usb 10-1: unable to get BOS descriptor or descriptor too short [ 682.384301][ T9608] usb 10-1: config 0 has no interfaces? [ 682.432987][ T9608] usb 10-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 682.513237][ T9608] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.567182][ T9608] usb 10-1: Product: syz [ 682.571463][ T9608] usb 10-1: Manufacturer: syz [ 682.619043][ T9608] usb 10-1: SerialNumber: syz [ 682.653003][ T9608] usb 10-1: config 0 descriptor?? [ 682.902119][ T9605] usb 10-1: USB disconnect, device number 8 [ 684.737365][ T9691] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 684.881142][ T9694] Line length is too long: Should be less than 4094 [ 685.222669][ T9704] FAULT_INJECTION: forcing a failure. [ 685.222669][ T9704] name fail_futex, interval 1, probability 0, space 0, times 0 [ 685.334536][ T9704] CPU: 0 PID: 9704 Comm: syz.4.1266 Not tainted syzkaller #0 [ 685.341950][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 685.352029][ T9704] Call Trace: [ 685.355337][ T9704] [ 685.358380][ T9704] dump_stack_lvl+0x188/0x24e [ 685.363081][ T9704] ? unwind_get_return_address+0x49/0x80 [ 685.368755][ T9704] ? stack_trace_save+0xf0/0xf0 [ 685.373811][ T9704] ? show_regs_print_info+0x12/0x12 [ 685.379021][ T9704] ? load_image+0x410/0x410 [ 685.383550][ T9704] ? stack_trace_save+0xa6/0xf0 [ 685.388420][ T9704] should_fail_ex+0x390/0x4c0 [ 685.393114][ T9704] get_futex_key+0x1a6/0xe70 [ 685.397696][ T9704] ? kasan_set_track+0x4b/0x70 [ 685.402479][ T9704] ? kasan_save_free_info+0x27/0x40 [ 685.407702][ T9704] ? ____kasan_slab_free+0x126/0x1f0 [ 685.413006][ T9704] ? do_symlinkat+0x3ac/0x400 [ 685.417777][ T9704] ? futex_setup_timer+0xc0/0xc0 [ 685.422755][ T9704] futex_wake+0x123/0x4f0 [ 685.427109][ T9704] ? futex_wake_mark+0x150/0x150 [ 685.432082][ T9704] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 685.438070][ T9704] ? lock_chain_count+0x20/0x20 [ 685.442948][ T9704] do_futex+0x2e2/0x320 [ 685.447113][ T9704] ? __ia32_sys_get_robust_list+0x100/0x100 [ 685.453031][ T9704] ? slab_free_freelist_hook+0x133/0x1b0 [ 685.458666][ T9704] __se_sys_futex+0x381/0x410 [ 685.463356][ T9704] ? __x64_sys_futex+0xf0/0xf0 [ 685.468120][ T9704] ? __x64_sys_futex+0x1d/0xf0 [ 685.472889][ T9704] do_syscall_64+0x4c/0xa0 [ 685.477318][ T9704] ? clear_bhb_loop+0x60/0xb0 [ 685.482003][ T9704] ? clear_bhb_loop+0x60/0xb0 [ 685.486679][ T9704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.492566][ T9704] RIP: 0033:0x7f3ba379fb19 [ 685.496977][ T9704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.516603][ T9704] RSP: 002b:00007f3ba458c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 685.525045][ T9704] RAX: ffffffffffffffda RBX: 00007f3ba3a25fa8 RCX: 00007f3ba379fb19 [ 685.533022][ T9704] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ba3a25fac [ 685.540990][ T9704] RBP: 00007f3ba3a25fa0 R08: 00098a5ad4ce91b7 R09: 0000000000000000 [ 685.548999][ T9704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.556984][ T9704] R13: 00007f3ba3a26038 R14: 00007ffd152a3190 R15: 00007ffd152a3278 [ 685.564985][ T9704] [ 685.708788][ T9712] loop9: detected capacity change from 0 to 256 [ 685.746426][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.752809][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.295529][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 686.549595][ T8706] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 686.603676][ T8706] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 688.150104][ T4740] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.506148][ T4740] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.753181][ T4740] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.010137][ T4740] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.795181][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 689.807012][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 689.815531][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 689.822964][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 689.831756][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 689.840297][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.258937][ T9757] Bluetooth: MGMT ver 1.22 [ 690.460439][ T9759] loop5: detected capacity change from 0 to 256 [ 690.522159][ T9751] rxe_eth0 speed is unknown, defaulting to 1000 [ 690.641013][ T8973] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 690.734202][ T8973] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 691.416525][ T9773] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 691.906708][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 693.983465][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 694.555085][ T9751] chnl_net:caif_netlink_parms(): no params data found [ 694.577170][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 694.577183][ T27] audit: type=1807 audit(1794056468.762:142): action=appraise res=1 [ 694.616702][ T9802] ima: policy update completed [ 694.690933][ T27] audit: type=1802 audit(1794056468.852:143): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.1293" res=1 errno=0 [ 694.898422][ T27] audit: type=1800 audit(1794056468.912:144): pid=9801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="sed" name="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1893 res=0 errno=0 [ 695.027680][ T4740] device hsr_slave_0 left promiscuous mode [ 695.111879][ T27] audit: type=1800 audit(1794056468.922:145): pid=3641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14637 res=0 errno=0 [ 695.148220][ T4740] device hsr_slave_1 left promiscuous mode [ 695.193744][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.217291][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 SYZFAIL: posix_spawnp failed (errno 13: Permission denied) [ 695.232949][ T27] audit: type=1800 audit(1794056468.922:146): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14637 res=0 errno=0 [ 695.285910][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.343893][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.370215][ T27] audit: type=1800 audit(1794056468.922:147): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14637 res=0 errno=0 [ 695.463684][ T4740] device bridge_slave_1 left promiscuous mode [ 695.469894][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.543628][ T27] audit: type=1800 audit(1794056468.922:148): pid=9517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14637 res=0 errno=0 [ 695.687435][ T27] audit: type=1800 audit(1794056468.972:149): pid=9805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd-run-hook" name="/bin/sed" dev="sda1" ino=86 res=0 errno=0 [ 695.787565][ T4740] device bridge_slave_0 left promiscuous mode [ 695.813548][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.856983][ T27] audit: type=1800 audit(1794056469.062:150): pid=9808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd-run-hook" name="/bin/sed" dev="sda1" ino=86 res=0 errno=0 [ 696.003461][ T27] audit: type=1800 audit(1794056469.172:151): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd-run-hook" name="/usr/bin/cmp" dev="sda1" ino=1497 res=0 errno=0 [ 696.063503][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 696.187107][ T4740] device veth1_macvtap left promiscuous mode [ 696.193156][ T4740] device veth0_macvtap left promiscuous mode [ 696.244439][ T4740] device veth1_vlan left promiscuous mode [ 696.250348][ T4740] device veth0_vlan left promiscuous mode [ 697.318742][ T4740] team0 (unregistering): Port device team_slave_1 removed [ 697.379696][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 697.437689][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.498914][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.932283][ T4740] bond0 (unregistering): Released all slaves [ 698.143643][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 699.047520][ T4740] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.180691][ T4740] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.282516][ T4740] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.371444][ T4740] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.588825][ T27] kauditd_printk_skb: 459 callbacks suppressed [ 699.588835][ T27] audit: type=1800 audit(1794056473.772:611): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 699.682682][ T4393] rxe_eth0 speed is unknown, defaulting to 1000 [ 699.698215][ T27] audit: type=1800 audit(1794056473.812:612): pid=9865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 699.801642][ T27] audit: type=1800 audit(1794056473.812:613): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 699.899362][ T27] audit: type=1800 audit(1794056473.822:614): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 699.972654][ T27] audit: type=1800 audit(1794056473.822:615): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 700.029198][ T27] audit: type=1800 audit(1794056473.822:616): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 700.079621][ T27] audit: type=1800 audit(1794056473.832:617): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 700.105736][ T27] audit: type=1800 audit(1794056473.832:618): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 700.131949][ T27] audit: type=1800 audit(1794056473.842:619): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 700.158800][ T27] audit: type=1800 audit(1794056473.852:620): pid=9873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="dhcpcd" name="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0 [ 700.931902][ T4740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.009257][ T4740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.067443][ T4740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.122492][ T4740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.304873][ T4740] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.369967][ T4740] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.411912][ T4740] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.477604][ T4740] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.652140][ T4740] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.717536][ T4740] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.771105][ T4740] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.812557][ T4740] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.227683][ T4740] device hsr_slave_0 left promiscuous mode [ 704.239121][ T4740] device hsr_slave_1 left promiscuous mode [ 704.247932][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.258451][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.266398][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.276882][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.284756][ T4740] device bridge_slave_1 left promiscuous mode [ 704.291047][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.302515][ T4740] device bridge_slave_0 left promiscuous mode [ 704.309878][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.329547][ T4740] device hsr_slave_0 left promiscuous mode [ 704.338899][ T4740] device hsr_slave_1 left promiscuous mode [ 704.347611][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.359585][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.367388][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.377885][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.385699][ T4740] device bridge_slave_1 left promiscuous mode [ 704.393143][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.405919][ T4740] device bridge_slave_0 left promiscuous mode [ 704.412093][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.426213][ T4740] device hsr_slave_0 left promiscuous mode [ 704.432438][ T4740] device hsr_slave_1 left promiscuous mode [ 704.440205][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.449687][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.459307][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.470617][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.479626][ T4740] device bridge_slave_1 left promiscuous mode [ 704.487724][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.498370][ T4740] device bridge_slave_0 left promiscuous mode [ 704.506344][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.518237][ T4740] device hsr_slave_0 left promiscuous mode [ 704.526456][ T4740] device hsr_slave_1 left promiscuous mode [ 704.532671][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.541572][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.551225][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.560051][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.569398][ T4740] device bridge_slave_1 left promiscuous mode [ 704.578344][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.588970][ T4740] device bridge_slave_0 left promiscuous mode [ 704.596528][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.660587][ T4740] device veth1_macvtap left promiscuous mode [ 704.668456][ T4740] device veth0_macvtap left promiscuous mode [ 704.677391][ T4740] device veth1_vlan left promiscuous mode [ 704.683213][ T4740] device veth0_vlan left promiscuous mode [ 704.694782][ T4740] device veth1_macvtap left promiscuous mode [ 704.700798][ T4740] device veth0_macvtap left promiscuous mode [ 704.710376][ T4740] device veth1_vlan left promiscuous mode [ 704.720499][ T4740] device veth0_vlan left promiscuous mode [ 704.729602][ T4740] device veth1_macvtap left promiscuous mode [ 704.736889][ T4740] device veth0_macvtap left promiscuous mode [ 704.742930][ T4740] device veth1_vlan left promiscuous mode [ 704.750834][ T4740] device veth0_vlan left promiscuous mode [ 704.759073][ T4740] device veth1_macvtap left promiscuous mode [ 704.767176][ T4740] device veth0_macvtap left promiscuous mode [ 704.773217][ T4740] device veth1_vlan left promiscuous mode [ 704.780624][ T4740] device veth0_vlan left promiscuous mode [ 705.160977][ T4740] bond0 (unregistering): Released all slaves