last executing test programs: 7m0.848023365s ago: executing program 1 (id=95): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x128}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0xb, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a4f000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x376, &(0x7f0000000980)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021003403a00fe8000000000000000000000000000bbff0200000000000000000000000000013a0c0406f95803000000000000000000000000000000000020010000000000000000000000000001fe880600000000000000000000000101ff01000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000bb33150000000000000502053d0e3f6aaf77a4c5c57072a562494a6a3289f1832a4c44fc8086700396865a88ad9407c8ac7c2a4e034521470a3d06f60563fb4fd3fdffd0353b8c3cf2ced5ea13eb0001000738000000000c8002000100ff7f000000000500000000000000040000000000000007000000000000000700000000000000016f00000000000005028000050200050720000000020605090000000001000000000b00000000000000f706000000000000000000003c06020400000000fe8000000000000000000000000000bbfc020000000000000000000000000001fc0100000000000000000000000000003b0404020240030020010000000000000000000000000000fc01000000000000000000000000000029000929680000000400907800000000608fffff00001100fe8000000000002100000000000000aa00000000b70000000000000000000000ff00000000000000002e0000000000000740000000030e060000feffffffffffffff020000000000000005000000000000000900000000000000a718000000000000730000000008000002000000000000000100009da17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea552a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa37105020000007265fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cb07180000000004000000010000000000008000"/886], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0x8, 0x2, 0x20b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) keyctl$instantiate(0xc, 0x0, &(0x7f0000000d40)=ANY=[@ANYRESDEC, @ANYRES32], 0x2d, 0xfffffffffffffff9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1}, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000009c0)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109023b00010104800d0904000802020600fe04240f"], &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0xd0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 6m53.108793093s ago: executing program 1 (id=110): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="114353012008ba00000037514305", 0xe, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r1, 0x1, 0x7}, 0x14) (fail_nth: 2) 6m52.122279773s ago: executing program 1 (id=115): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 6m50.718953581s ago: executing program 1 (id=117): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) shutdown(0xffffffffffffffff, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0xa, 0x0) getsockname(r2, 0x0, &(0x7f0000000280)) 6m48.032382974s ago: executing program 1 (id=121): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) shutdown(0xffffffffffffffff, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write2(0x11, &(0x7f0000000200)={0x3, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) r3 = eventfd2(0x0, 0x1) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') getsockname(r2, 0x0, &(0x7f0000000280)) 6m35.995072291s ago: executing program 1 (id=133): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x128}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0xb, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a4f000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x376, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/886], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0x8, 0x2, 0x20b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1}, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000009c0)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109023b00010104800d0904000802020600fe04240f"], &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0xd0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 6m19.956416103s ago: executing program 32 (id=133): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x128}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0xb, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a4f000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x376, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/886], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0x8, 0x2, 0x20b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1}, 0x4) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000009c0)=ANY=[@ANYBLOB="12015002020000402505a1a440000102030109023b00010104800d0904000802020600fe04240f"], &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0xd0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 5m15.420425831s ago: executing program 3 (id=229): socket$packet(0x11, 0x3, 0x300) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={0x0, 0x1, 0x629}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa0000000000000000000000000000399f000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e1b, 0x3, @mcast1, 0x1}, 0x80, 0x0}, 0x4c814) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) mkdir(0x0, 0x1ff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m14.330554201s ago: executing program 3 (id=230): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) setrlimit(0x6, &(0x7f00000000c0)={0x200000000, 0x3}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00030400000004", @ANYRES64=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030f0000000f03494e7142000000000000000000ded8c1ca00807006fc6dbe95fa3a84363fdd5179ab905ba3577b2572f3cdc7ced4b18424821793a59c1e1c"], 0x0, 0x0}, 0x0) 5m2.92889522s ago: executing program 3 (id=243): r0 = syz_open_dev$sndctrl(0x0, 0x9b0b, 0x100000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x8, 0x0, 0x800, 0x4, '\x00', 0xd8}, 0x1, [0x8, 0x7fff, 0x2, 0x0, 0x7, 0x0, 0x8000000000000000, 0x9, 0x2, 0x9, 0x2, 0xb24e, 0x5094, 0x7, 0x6, 0x400, 0x8000000000000000, 0x0, 0x5, 0x1, 0x4, 0x90, 0x6, 0x5, 0x7fffffffffffffff, 0x5, 0x10001, 0x7, 0xffffffff7fffffff, 0x6, 0x8, 0x7, 0x10001, 0x7, 0x100, 0x0, 0x1, 0x4, 0x3ff, 0x200, 0xafc, 0x0, 0x6, 0x7, 0x401, 0x4, 0x7, 0x7, 0x9, 0x7, 0x0, 0x6, 0x6, 0x5, 0xa, 0xa2, 0x6, 0x6, 0x397, 0x5, 0x9, 0x2, 0x5, 0x2, 0xfffffffffffffffd, 0x8, 0x7, 0xfffffffeffffffff, 0x401, 0x10, 0x9, 0x2b7, 0x4, 0x624, 0x5, 0x9, 0x3, 0x7, 0x7, 0x9, 0x21, 0xffffffffffffffaa, 0xf, 0x4, 0x4, 0x1, 0x8, 0xffffffff, 0x9, 0x10, 0x14, 0x524, 0x5, 0x7, 0x5, 0xd8, 0x4, 0x0, 0x1, 0xa, 0x8, 0x2, 0x5, 0x400, 0x3, 0xffffffff00000000, 0x3, 0x7fffffff, 0x1, 0x5, 0x100000001, 0x0, 0x7f, 0x9, 0xdd5, 0x180000000000000, 0x8000000000000001, 0x4, 0x6, 0x4, 0x0, 0x7, 0x4ea, 0x6, 0x1, 0x5, 0x3, 0x4]}) 4m57.810769259s ago: executing program 3 (id=251): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001280)={&(0x7f0000000000)="b8ee66c7bbc07076bd4db4de158f90eda1d6dfcb6aaabe1d560600ac4ce9a8700b070cc1a30edbf73a8311b7583943889d6c9dee8fc87867abc2276a50743d3d31ea9bdd", &(0x7f0000000080)=""/142, &(0x7f0000000140)="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", &(0x7f0000001140)="cb575eb483dbb5c5e51217cb2584246dd148529c718d5cb5a482455f0a8a93690705f8798cd93478c89409e1d3c1b54d1ff8945d1cca5b78309286bc33395ec6961ac5cc4df5d2b7f4756813ccdd34308eaae9a651320da77db9135b91b64436274a772402fd77941b7b1ce2699e7f3ee2639c8b4e6c434f4b75742c1b8cefee171b1b3ef207a2636cb895061aa28263e361a13c8655735ecb3e4bbfae177d205d12df9d9f1434991c77703507", 0x0, r0, 0x4}, 0x38) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000015c0)={'ip6gre0\x00', &(0x7f0000001540)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0xad, 0x1, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x700, 0x7, 0x1}}) (async) r2 = creat(&(0x7f0000001600)='./file0\x00', 0x94) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000016c0)=@generic={&(0x7f0000001680)='./file0\x00', 0x0, 0x10}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1a, 0x21, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9dc, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000001400)='syzkaller\x00', 0x7, 0xfc, &(0x7f0000001440)=""/252, 0x41000, 0x4, '\x00', r1, @fallback=0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x1, 0x7, 0x1, 0x1422}, 0x10, 0x0, r3, 0x2, &(0x7f0000001700)=[r0], &(0x7f0000001740)=[{0x4, 0x2, 0xf, 0x3}, {0x4, 0x2, 0x6, 0xb}], 0x10, 0xaaa}, 0x94) recvmsg$unix(r2, &(0x7f0000001a00)={&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f00000018c0)=""/113, 0x71}], 0x1, &(0x7f0000001980)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x68}, 0x41) sched_setaffinity(r11, 0x8, &(0x7f0000001a40)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000001a80)={{0xa, 0x5, 0x3, 0x0, '\x00', 0xfe}, 0x1, [0x11, 0x5, 0xfffffffffffffffc, 0x7, 0x7, 0x0, 0xa, 0xffffffffffffffff, 0xfffffffffffff252, 0xffffffff, 0x5, 0xfffffffffffffffb, 0x2, 0x2, 0x0, 0x9, 0x7, 0x94, 0x4, 0xfffffffffffffff8, 0x5, 0x1, 0xa1, 0x5, 0xffffffffffffff4f, 0x2, 0x6, 0xfffffffffffffffa, 0x27e8, 0x2, 0x800, 0x48, 0x4fc, 0x2, 0x8, 0x5, 0x76, 0xa3, 0x8, 0x0, 0x4, 0x0, 0x3, 0x2, 0xffffffffffffff6e, 0x5, 0x3, 0x7, 0x8001, 0x8, 0x8a9f, 0x2, 0x1, 0xe4ae, 0x3, 0xe, 0x3, 0x9, 0x700000000000000, 0xb43e, 0x7ff, 0x3, 0x3, 0x80000000, 0x5, 0xa, 0x7, 0x8000000000000000, 0x350, 0x5, 0x1, 0x8001, 0x2, 0xffffffffffff6c77, 0x0, 0x8, 0x7, 0x97, 0x8, 0x100, 0x8, 0xf5, 0x9, 0x7, 0x9, 0x9, 0x5, 0x0, 0xfff, 0x10, 0x2, 0x4, 0xe, 0x4, 0x4, 0x1, 0xce, 0x7462, 0x7, 0xb08, 0x7fffffffffffffff, 0x0, 0x1, 0xfffffffffffffffa, 0x200, 0x2, 0x3, 0x5, 0x8001, 0x4ff, 0x1, 0x3c7fc00, 0x6, 0xa, 0x5, 0x5, 0x4, 0x1000, 0x4, 0x7f, 0xffffffffffffffff, 0x7ff, 0x4, 0x4, 0xa47, 0x1, 0x37, 0x9]}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002080)={@ifindex=r1, 0xb, 0x1, 0x1, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002040)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000020c0)={r9, r1, 0x25, 0x10, @val=@tcx={@void, @value=r5, @void, @void, r16}}, 0x1c) (async) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x1e, 0xe, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@exit, @jmp={0x5, 0x0, 0x5, 0x5, 0xb, 0x40, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f00000021c0)='syzkaller\x00', 0x6, 0x1a, &(0x7f0000002200)=""/26, 0x41100, 0x14, '\x00', 0x0, @fallback=0x8, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002240)={0x2, 0x6, 0x8, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000002280)=[r7, r9, r8, r0], &(0x7f00000022c0)=[{0x0, 0x3, 0xb, 0xb}, {0x1, 0x3, 0x7, 0xda67eec00599cbc9}, {0x4, 0x5, 0x4, 0x8}, {0x0, 0x2, 0x6, 0xa}, {0x5, 0x2, 0x7, 0x6}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{r5, 0xffffffffffffffff}, &(0x7f0000002100), &(0x7f0000002400)=r17}, 0x20) (async) r19 = getuid() stat(&(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r4, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r8, &(0x7f0000004b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000006f40), &(0x7f0000006f80), &(0x7f0000006fc0)=0x0) syz_fuse_handle_req(r5, &(0x7f0000002480)="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", 0x2000, &(0x7f0000007240)={&(0x7f0000004480)={0x50, 0x0, 0x6, {0x7, 0x2d, 0x3, 0xffffffffc0090020, 0x3ff, 0x1, 0x8, 0x8, 0x0, 0x0, 0x20, 0x8}}, &(0x7f0000004500)={0x18, 0x0, 0x8, {0xc}}, &(0x7f0000004540)={0x18, 0x0, 0x81, {0x9}}, &(0x7f0000004580)={0x18, 0xffffffffffffffda, 0x2, {0x3}}, &(0x7f00000045c0)={0x18, 0x0, 0x4d, {0x6ae}}, &(0x7f0000004600)={0x28, 0x0, 0x7, {{0x100000000, 0xe, 0x2, r11}}}, &(0x7f0000004640)={0x60, 0x0, 0x3, {{0xe0000000000000, 0x6, 0x7, 0x3, 0xfffffffeffffffff, 0xfffffff3, 0x7, 0x8}}}, &(0x7f00000046c0)={0x18, 0x0, 0xe59, {0x9}}, &(0x7f0000004700)={0x13, 0x0, 0x7, {']}\x00'}}, &(0x7f0000004740)={0x20, 0x0, 0x0, {0x0, 0x8}}, &(0x7f0000004780)={0x78, 0x0, 0xe7, {0x2, 0x5, 0x0, {0x6, 0x9, 0x8000000000000001, 0x0, 0x6, 0x40, 0x3, 0x3, 0x14ca, 0xa000, 0x4, r14, 0x0, 0x5, 0x3}}}, &(0x7f0000004800)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0xc, 0x5, {0x4, 0x9, 0x8, 0xc, 0x6, 0x5, 0x8, 0x4, 0x10000, 0x1000, 0x8, r19, r13, 0x7fffffff, 0xffff0000}}}, &(0x7f00000048c0)={0xf0, 0x0, 0xa, [{0x5, 0x1, 0x8, 0x65a, 'ip6gre0\x00'}, {0x0, 0x5, 0x2, 0x1, '\xff\xff'}, {0x2, 0x7, 0x3, 0x0, '{/]'}, {0x2, 0x3, 0x2, 0xfffffff8, '*\''}, {0x0, 0x70d5, 0x2, 0x3, '\xff\xff'}, {0x1, 0x781, 0xf, 0x9, '%],-):%\x8d.@-e!(['}, {0x3, 0x8e5b, 0x0, 0xe}]}, &(0x7f0000006b40)={0x3d0, 0x0, 0x4, [{{0x4, 0x3, 0x8, 0x31, 0x3f, 0x3, {0x5, 0x7f, 0x400, 0x0, 0x3, 0x1, 0xfffffe80, 0xb189, 0x5, 0x4000, 0x52, r14, r13, 0x76c, 0x9}}, {0x1, 0xfbc, 0x8, 0x40, 'ip6gre0\x00'}}, {{0x3, 0x1, 0x0, 0x0, 0x1, 0x4, {0x0, 0x0, 0x8, 0xfffffffffffffffc, 0xfffffffffffff63d, 0x9, 0x5, 0x6, 0x0, 0xa000, 0xfffffff7, r12, r13, 0x10000, 0x91}}, {0x5, 0x3, 0x1, 0x8, '}'}}, {{0x4, 0x1, 0x8, 0x4, 0x3, 0x5, {0x3, 0x6, 0x8, 0x2, 0x326, 0x0, 0xff, 0x1, 0x8, 0x6000, 0xf, r20, r15, 0x0, 0x5}}, {0x2, 0x22, 0x2, 0x4769, '\xff\xff'}}, {{0x3, 0x3, 0x7ca0, 0x12000000000, 0x101, 0x3ff, {0x2, 0x1, 0xfffffffffffff5bd, 0x5f4, 0x0, 0x1, 0x1, 0x5, 0xbe, 0xa000, 0x4, r14, r13, 0x0, 0xffffffff}}, {0x6, 0x7, 0x2, 0xdb, '\xff\xff'}}, {{0x5, 0x0, 0x5, 0x9, 0x9, 0x1000, {0x1, 0x0, 0x1, 0x100000000, 0x4, 0x100000000, 0x1, 0x101, 0x3, 0x1000, 0x1000, r21, r13, 0x1ff, 0xa}}, {0x4, 0x4, 0x8, 0x7, 'syztnl1\x00'}}, {{0x4, 0x3, 0x6, 0x8, 0x6, 0x0, {0x2, 0x5cf3, 0x6, 0x9, 0x1a2, 0x67, 0xf4fc, 0x3, 0x7ff, 0x2000, 0x5, r22, r15, 0x8001, 0x7ff}}, {0x9, 0x4, 0x5, 0x6, '\x1d-\x81:-'}}]}, &(0x7f0000007000)={0xa0, 0x0, 0x5, {{0x1, 0x3, 0x4, 0x7, 0x6b, 0x0, {0x0, 0x8, 0x5, 0x2, 0x0, 0x3, 0x1, 0xf, 0x4, 0x8000, 0x2, r14, r23, 0xffffffff, 0x81}}, {0x0, 0x10}}}, &(0x7f00000070c0)={0x20, 0x0, 0x8, {0x2, 0x4, 0x6, 0x101}}, &(0x7f0000007100)={0x130, 0x0, 0x4, {0xa1b, 0x0, 0x0, '\x00', {0x4, 0x478, 0xf42, 0x6, r12, r13, 0x8000, '\x00', 0xd, 0x48d, 0x3, 0x8784, {0x2, 0x9}, {0x8b1, 0x2}, {0x1, 0xc15}, {0x3, 0x10}, 0x0, 0xcf14, 0x3, 0x7}}}}) (async, rerun: 32) r24 = fcntl$dupfd(r18, 0x0, r10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000007300)) (async, rerun: 32) r25 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000007340), 0x40081, 0x0) (rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r25, 0x400c6615, &(0x7f0000007380)={0x0, @aes128, 0x0, @desc4}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000007400)={r2, r6, 0x11, 0x0, @val=@iter={&(0x7f00000073c0)=@cgroup={0x1, r6, 0x7}, 0x10}}, 0x20) (async, rerun: 64) setpriority(0x0, r11, 0x3) (async, rerun: 64) prctl$PR_SET_PTRACER(0x59616d61, r11) ioctl$KVM_CREATE_GUEST_MEMFD(r24, 0xc040aed4, &(0x7f0000007440)={0x18000, 0x2}) (async, rerun: 64) openat$cgroup_subtree(r24, &(0x7f0000007480), 0x2, 0x0) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000007580)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000074c0)={0x40, 0x10, 0x80, 0x0, 0x10}, 0x8, 0x2, 0x7fff, 0x0, 0x1, 0xb, &(0x7f0000007500)="25822805f39e7d5906b574b27054efddff838cfbd5310a23671a1fb645fb0f9678ddbe28dadf1d9dcd82e647c3624fc105d50930536617aa33dbd113dea770a380fbe651294fbea87466f7e894c22b29f227a17e8e4fbcb823d4cf5cae75a566b9580cb6f17e69"}) (async) getpeername$inet6(r2, &(0x7f00000075c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000007600)=0x1c) 4m56.961901026s ago: executing program 3 (id=254): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc010000000000000000000000fba20000000000000000000000000000000001242081000000000000000800000086dd080088be86dd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x0, 0x0, 0x25}, 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_f2fs\x00', 0x1ed) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0xb, 0x6, 0x2, 0x8, @mcast2, @mcast1, 0x700, 0x10, 0x8, 0x100}}) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f001600060005", 0x2f}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="68000000300005060000000d0000000000000100540001005000010009000100676174650000000040000280"], 0x68}], 0x1}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000c000080000006ee0300000004000068ae66f81cb899e31117dea7b77c30a8703b76348f70c4d37420de8e1e8aa6a26b3c15bb8c6ca3f02cf4fdc0962f2d39d7a3ef0858a1e449c18747ab2ee7b57f644c7bfd4664632b94edb54d99dcd7b6904ad0b64d4f1f857e92e4957bab951ee5cda9d559623f9de47cebc11d1caad5c7f3cec4f36c2cf2bad497f56ba2ea565edb7159e35e7172fda4c8bcfdcf8a1c7539", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0400000004000000030000000600"/28], 0x50) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000040)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) fallocate(r5, 0x0, 0x800657, 0x40000b7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x805, 0x0) 4m52.757077789s ago: executing program 3 (id=259): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x2081, 0xac) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fcntl$lock(r1, 0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x101}) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r2], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r3 = syz_ublk_setup_io_uring(0x37eb, &(0x7f0000000180)={0x0, 0x7d0d, 0x0, 0x1, 0xae, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x6, 0x4010, r3, 0x0) 4m36.849670489s ago: executing program 33 (id=259): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x2081, 0xac) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) fcntl$lock(r1, 0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x101}) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r2], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r3 = syz_ublk_setup_io_uring(0x37eb, &(0x7f0000000180)={0x0, 0x7d0d, 0x0, 0x1, 0xae, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x6, 0x4010, r3, 0x0) 12.729964923s ago: executing program 0 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1c8983, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x40046607, 0x0) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, 0x0) ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a") 11.241414561s ago: executing program 2 (id=701): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0xffffffff, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xff, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r8, 0xa1}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929f5277a", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 10.808660421s ago: executing program 0 (id=702): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x50}, 0x28) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r7, &(0x7f0000000000)='7', 0x1) unshare(0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newaddr={0x3c, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x78, 0x9, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x180}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 8.015726516s ago: executing program 2 (id=706): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000001c0)) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffff8, 0x0, 0x25, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x1, 0x1) getdents64(r1, 0xffffffffffffffff, 0x43) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc028020", 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048004) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x6592, 0x400}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="b18a475fbe26449b4d5863d6c14cb918827f3c3cebb00d7a50d1549dee4383e0dbc03e7b7e0287817f65131d63e357edc7c59a73e745b9361e3621189def49561be2c8bf85458ef048e0363b41fd5ddbdcac5c327c3220b10a4bcb0217698ed011023491e41ccce22f8b6e2e5717edc97157", 0x72}, {&(0x7f0000000780)="54649a7e5c4d1190b5aba18b62be5bae78f79058de38e6618a648eafc44a5a4be1cc9f0ad5bb9c000083e6f91055e8c411d593c80600000000000000183a38d136aa5a14b10320643243de4790d8ebe892c60d16bf1048ff7ea7d62042d9d78642663ba18903b1eb024086227b70b815d9c957a2b594e9f53b0f99f7275c591fd7c5707fd3b064f0e838618c8e1328cc3f249db250de1b2430dd52f1865dc8121535fefcd088f62bbcafe4015effc9abbb58ea1a418edd8f408ca7fb4d382941376653a86daabcb342c2e5cd0287", 0xce}, {&(0x7f0000000140)="9c0f900000", 0x5}, {&(0x7f0000000940)="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", 0xfffffe8b}], 0x4, 0x0, 0x0, 0x4004001}}], 0x1, 0x4040011) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 7.195668609s ago: executing program 2 (id=707): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400090004"], 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="8f6bb66f", 0x3c, 0x0, 0x0, 0xfffffffffffffec8) 7.130698337s ago: executing program 2 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0xfffffffe, 0x0, 0x0, 0x5, 0x1, 0x8000}]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x47, 0x3, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002bc0)={0x28, 0xfffffffffffffffe, 0x0, {{0x4, 0x6}}}, 0x28) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_in']) syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 6.594701822s ago: executing program 0 (id=710): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x1}, 0xfe}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket(0xa, 0x3, 0x87) unshare(0x2c060400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="1c0000191000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000), &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha3-256\x00'}}, 0x0, 0x0) 5.270276213s ago: executing program 4 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46000000000000000686", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.047101628s ago: executing program 4 (id=713): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 5.016451636s ago: executing program 4 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, 0x3f, 0x1, 0x70bd2b, 0x4, {0x3}, [@nested={0x4, 0x122}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.966358618s ago: executing program 4 (id=715): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex=r3, 0x13, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r3, 0x25, 0x4, @val=@tcx={@void, @value=r1, @void, @void, r4}}, 0x1c) 4.57849378s ago: executing program 0 (id=716): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f00000001c0)) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffff8, 0x0, 0x25, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0x1, 0x1) getdents64(r1, 0xffffffffffffffff, 0x43) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc028020", 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048004) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x6592, 0x400}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="b18a475fbe26449b4d5863d6c14cb918827f3c3cebb00d7a50d1549dee4383e0dbc03e7b7e0287817f65131d63e357edc7c59a73e745b9361e3621189def49561be2c8bf85458ef048e0363b41fd5ddbdcac5c327c3220b10a4bcb0217698ed011023491e41ccce22f8b6e2e5717edc97157", 0x72}, {&(0x7f0000000780)="54649a7e5c4d1190b5aba18b62be5bae78f79058de38e6618a648eafc44a5a4be1cc9f0ad5bb9c000083e6f91055e8c411d593c80600000000000000183a38d136aa5a14b10320643243de4790d8ebe892c60d16bf1048ff7ea7d62042d9d78642663ba18903b1eb024086227b70b815d9c957a2b594e9f53b0f99f7275c591fd7c5707fd3b064f0e838618c8e1328cc3f249db250de1b2430dd52f1865dc8121535fefcd088f62bbcafe4015effc9abbb58ea1a418edd8f408ca7fb4d382941376653a86daabcb342c2e5cd0287", 0xce}, {&(0x7f0000000140)="9c0f900000", 0x5}, {&(0x7f0000000940)="60369961acde2fb9d767082b1efceca6210f1f68f3eafc332adf0db994c4000000000000db85878f9fbd68febebebe29f2beef64484217877be427aa96b2ce288a231a7ab652a92906c99919b42b2f705e7a7173dfa72fdfdcf3fc4d5947c9ff03360b686a33ec3d9be6d39b05aa73bf048bd79f06de9f9c9ccc48aec1c95aded2fac015e54708deb6dbd35e5377d1c43bdb38f464d195b5364a6527256bf199e31a92f8ad7b9335336b6f3488bb643de41fb0f0c1eba51c1430ca3fd8de266ddb7edb263d0bb916c2b1bd670d2530e93ac7bcbb08000000000000006429c792b6249f00000000e9c9a39da5b3f9658b8aa9fad5c03e4a8602cfe9fef14294eafb2e0808ed60eb3f2187e9daaf77f6305a19bcb7eda71b9b9ef77e1723e61877e8db5e2d0ca7e73cefd67f5b3c7e7467705c148559c777ff8dc75af9ffcb6415e1aa0da9c97780cebbfa56ec", 0xfffffe8b}], 0x4, 0x0, 0x0, 0x4004001}}], 0x1, 0x4040011) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 4.375179613s ago: executing program 0 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd37caee30804ec6"], 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000000400)=0x4, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="63000000020601030000000000000000050000002400078008000840000000521800018014000240fe8000000000000000d23cb8ae6718605e40020073797a3100000000050004000000000005000500e86173683a6e54742c69666163650000"], 0x70}}, 0x4080) write(0xffffffffffffffff, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x203, 0x33ba8, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0xffff, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f0000000780)=[@nested_load_syzos={0x136, 0x120, {0x3, 0x4, [@nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x72b6}}, @wrmsr={0x65, 0x20, {0x31a, 0x8000}}, @nested_vmresume={0x130, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x7cfd, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0xfffffffe, 0x1}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb1, 0x3, 0x5dcc, 0x2}}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x6dd5}}, @code={0xa, 0x51, {"48b806000000000000000f23c80f21f8350c0090000f23f8f2a60f0137640f01c466660fc773000f00d1f3440fe660c366b886000f00d867430f07c422a14528"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x40, {"c4e1f9f7c6c4e1c1e03e0f20d835080000000f22d866ba6100b0e6ee410fc73bdb077500460f923f430f65d9460f30"}}, @code={0xa, 0x66, {"3e0f07c7442400bdd40000c74424029012c9b1c7442406000000000f011c24b805000000b9df0000000f01c1430f01cb66bad00466ed66baf80cb86fd48286ef66bafc0cec460f01c4c4a211cf31d916c481915dc0"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xfffffffffffffffb, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x2c, 0x100000001, 0x200, 0xffffffffffff2d0b}}, @nested_load_code={0x12e, 0x7d, {0x0, "c7442400f5000000c744240235000000ff2c2466430f1bf76436660f73db0066430f38813bb8010000000f01c1c744240008000000c744240296000000c7442406000000000f011c24c4a219b95a0065660f3882947e0500000047dbe30f38f9950c000000"}}, @wrmsr={0x65, 0x20, {0xaf3, 0x8}}, @cpuid={0x64, 0x18, {0x1, 0x200000}}], 0x3f4}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000c00)={{0xdddd1000, 0x50000, 0xa164322afdb1c09e, 0x6, 0xb, 0x4, 0x6, 0x40, 0x2, 0x9, 0xe, 0x4}, {0xd000, 0x200000, 0xa, 0x41, 0x6, 0x5, 0x4, 0xfe, 0x3, 0x6, 0x3, 0x2}, {0xeeeecff9, 0xffc, 0x0, 0xfe, 0x8e, 0xb3, 0xe4, 0xc, 0x1, 0x8, 0x8, 0x1}, {0x1ff8, 0x5000, 0xd, 0x1, 0x7, 0x8, 0x8, 0x4, 0x65, 0x2, 0x1, 0x8}, {0x30000, 0x58000, 0x3, 0x9, 0xff, 0x6, 0x80, 0x8, 0x8, 0x7, 0x7, 0x1}, {0xffff1000, 0x2000, 0x3, 0x3, 0x7, 0x10, 0x8, 0x1, 0x7, 0x9, 0xb, 0x9}, {0xeeeed000, 0x2ffc, 0xf, 0x8, 0x4, 0x7, 0x8, 0x8, 0xca, 0x5, 0x3, 0x9}, {0xdddd1000, 0xeeeea004, 0x4, 0x8, 0xf9, 0x7b, 0x21, 0xd1, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x8f34}, {0xa000, 0xd6bd}, 0x10000, 0x0, 0x40000, 0x0, 0xa, 0x1400, 0xffffffff, [0xb, 0xa, 0x8, 0xfffffffffffffff7]}) 3.686869116s ago: executing program 2 (id=718): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x50}, 0x28) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r7, &(0x7f0000000000)='7', 0x1) unshare(0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_newaddr={0x3c, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x78, 0x9, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x180}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.678292295s ago: executing program 4 (id=719): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x141b, &(0x7f0000000140)={0x0, 0x2af6, 0x10, 0x2, 0x139}, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0xa, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) (fail_nth: 2) 3.676995836s ago: executing program 0 (id=720): syz_ublk_setup_io_uring(0x33ea, &(0x7f0000000080)={0x0, 0xf812, 0x801, 0x1, 0x3ba}, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000180)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000014c0)={&(0x7f00000004c0)=[0x7, 0x3, 0x5, 0x1, 0x7, 0x5323, 0x6, 0xde5, 0x5eb, 0x0, 0x6, 0x1, 0x5, 0xffffffc0, 0x6, 0xf, 0x139, 0x0, 0xfffff801, 0x6, 0x8, 0x4, 0xd, 0x2, 0x8, 0x9, 0x4, 0x68, 0x0, 0x7048, 0xd60, 0x90f, 0x3, 0x86, 0x80000001, 0x7ff, 0x4, 0x5, 0x8, 0x9, 0xb00, 0x4, 0xa67, 0x5, 0x7, 0x8000, 0x2, 0x5, 0x5, 0xcdac, 0xf, 0x7fffffff, 0x7, 0x40, 0x4, 0x2, 0x9, 0x1, 0x651222f7, 0xf2, 0x3, 0x800, 0x2, 0x80, 0x8, 0xfffeffff, 0x4, 0x80000000, 0x3, 0x4, 0x8dd, 0x5, 0x6, 0x5, 0x6, 0x0, 0x400, 0x0, 0x1, 0x6, 0x8, 0x3, 0x3, 0x40, 0x80000001, 0xaa12, 0x7ff, 0x13f, 0xd, 0x3, 0x81, 0x900, 0x2, 0x4, 0xe, 0x14dd, 0x10001, 0x10, 0x7, 0x6c, 0x2, 0x81, 0x0, 0x9, 0x3, 0x81, 0x40, 0x8, 0x0, 0x10000, 0x2, 0x8, 0x8, 0x2, 0x80, 0x8, 0x3, 0x7, 0x0, 0xce0000, 0xd83, 0xb000, 0x7, 0xfffffff6, 0x0, 0x1, 0x70000, 0x8001, 0x2a9, 0x9fc2, 0x10, 0x9, 0x8, 0x473, 0x5, 0x2, 0xffff, 0xce, 0x7fffffff, 0x7, 0x477, 0xbb, 0x8, 0x4fc, 0xb424, 0x3, 0x6, 0x5, 0x1000, 0x2, 0x8, 0x0, 0x1, 0x8, 0x9, 0x1, 0x4, 0x0, 0x80000000, 0x400, 0x5b, 0x9, 0x4, 0x7f, 0x4, 0x16, 0x6, 0x1ff, 0x9, 0x7fff, 0x9, 0x70f1, 0x7, 0x8001, 0x800, 0x401, 0x2, 0x4, 0xfff, 0xbbb4, 0xe128, 0x3, 0x4, 0x5, 0xdd32, 0x9, 0x1, 0xf224, 0x1, 0x3, 0x3, 0xba, 0x8d4d, 0x9, 0x3d024228, 0xfffffff8, 0x6, 0x0, 0x9, 0x4e5, 0x40, 0x3, 0x7, 0x9, 0xffff0222, 0xfffffff4, 0x7fffffff, 0x6, 0x8, 0x1, 0x15a, 0xe91d, 0x3ff, 0x4, 0x400, 0x3, 0x2, 0xf, 0x8, 0x0, 0x2, 0x9, 0x8000, 0x8, 0x15, 0x9, 0x5, 0x7fff, 0x7, 0x1, 0x9, 0x800, 0x12b3, 0x2, 0x4ffa328b, 0x5b3f, 0x1, 0x0, 0x7fffffff, 0xf, 0xb, 0x4, 0x64c, 0x2, 0x7254, 0x101, 0x0, 0x800, 0xffff7a0e, 0x15f16288, 0x6, 0x1ff, 0x4, 0x5, 0x1ff, 0xfffffff7, 0x1006, 0x6, 0x3210, 0x3, 0x3, 0x2, 0x8001, 0xfff, 0xffffd5b4, 0x7ff, 0x1ff, 0x8000, 0x1, 0x10001, 0x8, 0x7e, 0x4, 0x7, 0x0, 0x6, 0x4, 0x1b5, 0x81, 0xffffc88c, 0x0, 0x0, 0x3, 0x9, 0x6, 0x4, 0xd4, 0x6, 0x0, 0x1, 0x81, 0x6, 0x800, 0x5, 0x0, 0xa1b, 0x4, 0x100, 0x8, 0xfff, 0x2, 0x5758, 0x2358, 0xb00, 0xd, 0x2, 0x2, 0x20000000, 0x9, 0x8, 0x6, 0x18d2, 0x8, 0x80000001, 0x905a, 0x2, 0x7, 0x3, 0x5, 0xb2, 0x4, 0x0, 0xea5b49a, 0xd62f, 0xfff, 0x0, 0x5, 0x9, 0x7, 0xff, 0x8, 0x4, 0x1, 0x2388, 0x8001, 0x4, 0x1d, 0x8, 0xf54, 0x22, 0x7, 0x0, 0x8, 0x8000, 0x8, 0xe5, 0x17e, 0x1000, 0x7, 0x8, 0x9, 0x5, 0x5, 0x7, 0x8, 0x4410, 0x3c, 0x7, 0xeb, 0x1, 0x3, 0xffffff4b, 0x10, 0xc, 0x7, 0x4, 0x640e, 0x7, 0xc2, 0x6a31075a, 0x7, 0xd51, 0x9, 0x0, 0xfffffb02, 0x0, 0x6, 0x7, 0x41, 0x1000, 0xc, 0xf, 0xb43, 0x100, 0x3, 0x4, 0x9, 0x2, 0x8, 0x0, 0x4, 0x40, 0x9, 0x2c, 0x9, 0x9, 0xd19, 0x9, 0xfdf, 0x1, 0x4, 0x200, 0x8, 0x401, 0x7, 0x3, 0x5b, 0x9000000, 0x4, 0x6, 0x80, 0xffff, 0x7e6, 0x10, 0x2, 0x6, 0x7, 0x80, 0xfffffff9, 0x7, 0x5, 0xfea2, 0xfffffffa, 0xfffffffb, 0x100, 0x401, 0x2, 0x3, 0x1000, 0x80000000, 0x9, 0x67, 0x7, 0x9, 0xea8, 0x16000, 0x800, 0x5, 0x3, 0x548, 0x80000001, 0x8, 0x1e4, 0x6, 0x6, 0x1, 0x6, 0x7, 0x4, 0x81, 0x81, 0xffffffed, 0x8000, 0xe2b, 0x0, 0x9, 0x2, 0xf42d, 0x3, 0xe, 0xb865, 0x2, 0x4, 0x0, 0x7, 0x9, 0x3, 0xff, 0xffffffff, 0xf1b4, 0xb1, 0x2, 0x10, 0x2, 0xb3, 0x100ec01, 0x1ff, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0xffffff7f, 0x7fff, 0x186, 0xc4, 0x7, 0x1, 0x8, 0x2, 0xb4, 0x1, 0x0, 0x5, 0x3, 0x0, 0x5cfa, 0x7, 0x18, 0x4b, 0x4709, 0x1ff, 0x0, 0x8, 0xffffffff, 0x3f, 0x7ec9, 0x9, 0xd2, 0x1, 0x6, 0xca3, 0x74, 0x2, 0x6, 0x9, 0x5, 0x6, 0x3f3c, 0x3, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x7f, 0x9, 0x9, 0x8, 0x4, 0x2, 0x4, 0x7, 0x95, 0x3, 0x2, 0x0, 0x401, 0x401, 0x7, 0x92fd, 0x4, 0x60c, 0x5, 0x0, 0x92, 0x5, 0x0, 0x1, 0xed0b, 0x6, 0x5, 0x5, 0x101, 0x7fffffff, 0x3b, 0x666a, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0xfffffffd, 0x8282, 0x8, 0x2, 0x8000, 0x7, 0x80000000, 0x10001, 0x8001, 0xffff3416, 0x3, 0x8001, 0xd1, 0x8, 0x7, 0x3, 0x5a, 0x400, 0xff, 0x5, 0x400, 0x0, 0xe, 0xa00000, 0x4, 0xd9b, 0x7, 0x3, 0xfffffa3f, 0x3, 0x3, 0x2, 0x5, 0x4, 0xa, 0x15c, 0x1, 0x1, 0x401, 0x7, 0x3, 0x3, 0xf4700000, 0x3, 0x2, 0xe8, 0x5, 0xda8, 0x5, 0x9, 0x6, 0xb, 0x8, 0x9, 0x4, 0x101, 0x89, 0x2, 0x83, 0x0, 0x141, 0x0, 0xfd8, 0x3, 0xffffffff, 0x3, 0x0, 0x6, 0x0, 0x2, 0x675, 0x3cee8f1e, 0x80, 0x6, 0xc30, 0x0, 0x3, 0x6, 0x9, 0x2, 0x9, 0x5, 0xffff, 0x1cd, 0x800, 0x4, 0x8, 0x1, 0x3, 0x5, 0x6, 0x3, 0x4, 0xff, 0x2, 0x9, 0x9, 0xa9, 0x7, 0x88, 0xffffffff, 0x7, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x9f7, 0x9, 0xffffffff, 0x1ff, 0x32e, 0x81, 0x0, 0x9, 0x80000000, 0x9, 0x40, 0x5, 0x4, 0xfffeffff, 0x6, 0x5, 0x1, 0x3, 0x101, 0xb54, 0x4, 0x0, 0x5f, 0x0, 0x5, 0x5, 0xb0c8, 0xcff, 0x6a, 0x0, 0x3a, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8, 0xd29, 0xfffff103, 0x7, 0x3, 0x6, 0x0, 0x7ff, 0x4, 0x1621, 0x3, 0x2, 0x3, 0xffff, 0x1, 0x8, 0x53a3079, 0x0, 0x7, 0x6, 0x4, 0x8, 0x2, 0x5, 0x48225044, 0x6, 0x6, 0x3, 0x0, 0xb6, 0x9a, 0x10, 0x5, 0x10, 0x4, 0x7ff, 0x9, 0x1, 0x9, 0x6, 0x8, 0x1, 0x3, 0x7, 0x1ff, 0x7c21, 0x2, 0x2, 0x8, 0x6, 0x5, 0x2, 0x1, 0x200, 0x71ac4689, 0xdd, 0xff, 0x7, 0x3, 0x3, 0x4, 0x5, 0xc1e6, 0x4, 0x1, 0xfffffeff, 0x4, 0x8, 0xffffffff, 0x80, 0x0, 0xc, 0x5, 0x81, 0x7, 0x3d9d, 0x4, 0xfe68, 0x261, 0x80, 0x7, 0xd, 0x401, 0x411, 0x3ff, 0xe, 0x4, 0xfffff001, 0x0, 0xfffffff8, 0x8, 0x9, 0x0, 0x1, 0x4, 0x1000, 0x1, 0x1a, 0x5c143a52, 0x10001, 0x7ff, 0x5, 0x2, 0x6, 0x3ff, 0x2, 0x2ad, 0x5, 0x2, 0x3b8, 0x1, 0x0, 0x2, 0x2, 0x40, 0x8, 0xf, 0x948, 0x7, 0x6, 0xc306, 0x1, 0xfffff801, 0xffffff5e, 0x7f, 0x1ff, 0x3, 0x7, 0x9c0d, 0x7f9, 0xfffffffc, 0x9, 0x4, 0xffffffff, 0xfffffff7, 0x7d, 0x8, 0x6, 0x3, 0xfb7, 0xff, 0x5, 0x81, 0x5, 0x6, 0x7869, 0x10001, 0xc, 0xc79, 0xe, 0x6, 0x8000, 0x46, 0x1e5b, 0x400, 0x99, 0x7, 0x7, 0x0, 0x5, 0x3, 0x5, 0x8001, 0xffffffff, 0x2, 0x3, 0x4, 0x9, 0x8001, 0x401, 0x4, 0xb2, 0x5, 0x1, 0x4, 0x1, 0x161, 0x2, 0xef18, 0x2, 0x9, 0x7721, 0x8, 0x5, 0x378, 0xc0000000, 0xff, 0x9, 0x7, 0x3, 0xfffffff9, 0x2, 0x4, 0x1, 0xe879, 0x4, 0x0, 0x6, 0x33d7478f, 0x5e, 0x5, 0x0, 0x101, 0xc9, 0x6, 0x3, 0x0, 0x5, 0x1, 0x5, 0x5, 0x7, 0x401000, 0xee03, 0x7, 0xb33, 0x0, 0xfffeffff, 0x3, 0x8, 0x8, 0x0, 0x7, 0x7142, 0xbea7, 0xfff, 0x9, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x52b, 0x6, 0x6, 0x8, 0x30, 0xffffffff, 0x473, 0x1, 0x80000003, 0x9, 0x2, 0xf5b8, 0x7, 0x77a, 0x0, 0x1, 0x3, 0xdfe9, 0x6, 0x8, 0x0, 0x5, 0x10001, 0x0, 0xf68, 0xfffffff0, 0x3, 0x9, 0x3c, 0x1, 0xe, 0x4, 0x400, 0x5, 0x7fff, 0x8, 0xc06, 0x28, 0xffff, 0x0, 0xd1bb, 0x4, 0x2, 0x9, 0x100, 0x0, 0xfffffffa, 0x5, 0x66, 0x7, 0xe6a6, 0x5, 0x4, 0x4, 0xf30c, 0x5, 0x3, 0x3, 0x7, 0x2, 0x1, 0x6, 0x9, 0x8, 0x1, 0x1, 0x81, 0x4, 0x5, 0x4c, 0x2, 0x3, 0x401, 0x6, 0x0, 0x9fe, 0xb31, 0xfffffffc, 0x3, 0xe, 0x0, 0x0, 0x5, 0xffffffff, 0x8], 0x2, 0x400, 0x3}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0xb0f1, 0x80, 0x1, 0x2fb}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7956, 0x10, 0x1, 0x1fc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdcec, 0x400, 0x1, 0x177}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d12, 0x1, 0x3, 0x16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3274, 0x1, 0x0, 0x2a9}}], 0x4, &(0x7f00000018c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff3}, 0x0, 0x0, '\x00', {0x1, 0x287, 0x0, &(0x7f00000008c0)=@buf_max_buf="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"}}, &(0x7f0000001940)) r8 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 507.450589ms ago: executing program 4 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000400000004000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46000000000000000686", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 0s ago: executing program 2 (id=722): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) kernel console output (not intermixed with test programs): 49][ T7814] should_failslab+0xa8/0x100 [ 394.530800][ T7814] __kmalloc_noprof+0xfb/0x790 [ 394.530831][ T7814] ? __register_sysctl_table+0xc02/0x1370 [ 394.530861][ T7814] ? __register_sysctl_table+0xc02/0x1370 [ 394.530898][ T7814] __register_sysctl_table+0xc02/0x1370 [ 394.530957][ T7814] register_pidns_sysctls+0x105/0x1e0 [ 394.530986][ T7814] copy_pid_ns+0x54d/0x940 [ 394.531047][ T7814] ? __pfx_copy_pid_ns+0x10/0x10 [ 394.531078][ T7814] ? rcu_is_watching+0x16/0xb0 [ 394.531114][ T7814] ? __pfx_copy_mnt_ns+0x10/0x10 [ 394.531137][ T7814] ? create_new_namespaces+0x33/0x6b0 [ 394.531175][ T7814] ? copy_ipcs+0x2a9/0x6c0 [ 394.531207][ T7814] ? copy_utsname+0x184/0x620 [ 394.531237][ T7814] create_new_namespaces+0x2ad/0x6b0 [ 394.531272][ T7814] ? security_capable+0x7e/0x2c0 [ 394.531314][ T7814] unshare_nsproxy_namespaces+0x149/0x190 [ 394.531351][ T7814] ksys_unshare+0x5a7/0x950 [ 394.531394][ T7814] ? __pfx_ksys_unshare+0x10/0x10 [ 394.531429][ T7814] ? rcu_is_watching+0x16/0xb0 [ 394.531475][ T7814] __x64_sys_unshare+0x38/0x50 [ 394.531510][ T7814] do_syscall_64+0x166/0x520 [ 394.531534][ T7814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.531558][ T7814] ? clear_bhb_loop+0x70/0xc0 [ 394.531587][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.531611][ T7814] RIP: 0033:0x7f8a15dfe159 [ 394.531633][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.531655][ T7814] RSP: 002b:00007f8a14014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 394.531681][ T7814] RAX: ffffffffffffffda RBX: 00007f8a16086180 RCX: 00007f8a15dfe159 [ 394.531699][ T7814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 394.531715][ T7814] RBP: 00007f8a15e9506b R08: 0000000000000000 R09: 0000000000000000 [ 394.531730][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.531744][ T7814] R13: 00007f8a16086218 R14: 00007f8a16086180 R15: 00007fff46074198 [ 394.531787][ T7814] [ 394.531828][ T7814] sysctl could not get directory: /kernel -12 [ 395.393425][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.455528][ T154] bond0 (unregistering): Released all slaves [ 395.849335][ T7821] FAULT_INJECTION: forcing a failure. [ 395.849335][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.849376][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.0.448 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.849401][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 395.849415][ T7821] Call Trace: [ 395.849423][ T7821] [ 395.849432][ T7821] dump_stack_lvl+0xe8/0x150 [ 395.849470][ T7821] should_fail_ex+0x46b/0x600 [ 395.849506][ T7821] _copy_from_user+0x2d/0xb0 [ 395.849539][ T7821] __sys_bpf+0x2e7/0xd90 [ 395.849590][ T7821] ? __pfx___sys_bpf+0x10/0x10 [ 395.849622][ T7821] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 395.849648][ T7821] ? rt_mutex_slowunlock+0x219/0x460 [ 395.849695][ T7821] ? ksys_write+0x248/0x270 [ 395.849722][ T7821] ? __pfx_ksys_write+0x10/0x10 [ 395.849752][ T7821] __x64_sys_bpf+0xba/0xd0 [ 395.849782][ T7821] do_syscall_64+0x166/0x520 [ 395.849802][ T7821] ? trace_irq_disable+0x3b/0x140 [ 395.849829][ T7821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.849850][ T7821] ? clear_bhb_loop+0x70/0xc0 [ 395.849876][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.849896][ T7821] RIP: 0033:0x7f367485e159 [ 395.849915][ T7821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.849932][ T7821] RSP: 002b:00007f3672a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.849955][ T7821] RAX: ffffffffffffffda RBX: 00007f3674ae6090 RCX: 00007f367485e159 [ 395.849970][ T7821] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 395.849984][ T7821] RBP: 00007f3672a95090 R08: 0000000000000000 R09: 0000000000000000 [ 395.849998][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.850011][ T7821] R13: 00007f3674ae6128 R14: 00007f3674ae6090 R15: 00007ffc13ba1c28 [ 395.850043][ T7821] [ 396.102783][ T7822] FAULT_INJECTION: forcing a failure. [ 396.102783][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.102821][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.4.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 396.102847][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 396.102861][ T7822] Call Trace: [ 396.102869][ T7822] [ 396.102878][ T7822] dump_stack_lvl+0xe8/0x150 [ 396.102926][ T7822] should_fail_ex+0x46b/0x600 [ 396.102960][ T7822] _copy_to_user+0x31/0xb0 [ 396.102993][ T7822] simple_read_from_buffer+0xe1/0x170 [ 396.103021][ T7822] proc_fail_nth_read+0x1be/0x230 [ 396.103051][ T7822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.103080][ T7822] ? rw_verify_area+0x250/0x4d0 [ 396.103107][ T7822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.103132][ T7822] vfs_read+0x219/0xa90 [ 396.103183][ T7822] ? __pfx_vfs_read+0x10/0x10 [ 396.103209][ T7822] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 396.103233][ T7822] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 396.103253][ T7822] ? mutex_lock_nested+0x152/0x1d0 [ 396.103278][ T7822] ? fdget_pos+0x252/0x320 [ 396.103307][ T7822] ksys_read+0x156/0x270 [ 396.103333][ T7822] ? __pfx_ksys_read+0x10/0x10 [ 396.103353][ T7822] ? __task_pid_nr_ns+0x28/0x470 [ 396.103386][ T7822] do_syscall_64+0x166/0x520 [ 396.103407][ T7822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.103427][ T7822] ? clear_bhb_loop+0x70/0xc0 [ 396.103452][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.103473][ T7822] RIP: 0033:0x7f8a15dbe98e [ 396.103490][ T7822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.103508][ T7822] RSP: 002b:00007f8a14055fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.103530][ T7822] RAX: ffffffffffffffda RBX: 00007f8a140566c0 RCX: 00007f8a15dbe98e [ 396.103544][ T7822] RDX: 000000000000000f RSI: 00007f8a140560a0 RDI: 0000000000000005 [ 396.103557][ T7822] RBP: 00007f8a14056090 R08: 0000000000000000 R09: 0000000000000000 [ 396.103570][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.103582][ T7822] R13: 00007f8a16086038 R14: 00007f8a16085fa0 R15: 00007fff46074198 [ 396.103617][ T7822] [ 396.364557][ T7827] 9p: Bad value for 'wfdno' [ 397.506539][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.509389][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.509609][ T7634] bridge_slave_0: entered allmulticast mode [ 397.543116][ T7634] bridge_slave_0: entered promiscuous mode [ 400.251529][ T154] hsr_slave_0: left promiscuous mode [ 400.284698][ T154] hsr_slave_1: left promiscuous mode [ 400.304667][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.324384][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.333761][ T7844] FAULT_INJECTION: forcing a failure. [ 400.333761][ T7844] name failslab, interval 1, probability 0, space 0, times 0 [ 400.333855][ T7844] CPU: 0 UID: 0 PID: 7844 Comm: syz.2.455 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.333929][ T7844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 400.333960][ T7844] Call Trace: [ 400.333980][ T7844] [ 400.334000][ T7844] dump_stack_lvl+0xe8/0x150 [ 400.334096][ T7844] should_fail_ex+0x46b/0x600 [ 400.334183][ T7844] should_failslab+0xa8/0x100 [ 400.334274][ T7844] kmem_cache_alloc_node_noprof+0xac/0x660 [ 400.334351][ T7844] ? __alloc_skb+0x1db/0x7a0 [ 400.334407][ T7844] ? __alloc_skb+0x1db/0x7a0 [ 400.334467][ T7844] __alloc_skb+0x1db/0x7a0 [ 400.334538][ T7844] netlink_sendmsg+0x5d4/0xb40 [ 400.334698][ T7844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.334775][ T7844] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 400.334869][ T7844] ? __kernel_text_address+0xd/0x30 [ 400.334928][ T7844] ? unwind_get_return_address+0x4d/0x90 [ 400.334997][ T7844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.335076][ T7844] sock_sendmsg_nosec+0x13a/0x180 [ 400.335129][ T7844] ____sys_sendmsg+0x565/0x870 [ 400.335158][ T7844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.335188][ T7844] ? import_iovec+0x73/0xa0 [ 400.335288][ T7844] ___sys_sendmsg+0x2a5/0x360 [ 400.335349][ T7844] ? __lock_acquire+0x747/0x2de0 [ 400.335438][ T7844] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.335587][ T7844] ? __fget_files+0x2a/0x420 [ 400.335635][ T7844] ? __fget_files+0x3a8/0x420 [ 400.335708][ T7844] __x64_sys_sendmsg+0x1b7/0x290 [ 400.335790][ T7844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.335930][ T7844] do_syscall_64+0x166/0x520 [ 400.335992][ T7844] ? trace_irq_disable+0x3b/0x140 [ 400.336057][ T7844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.336124][ T7844] ? clear_bhb_loop+0x70/0xc0 [ 400.336191][ T7844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.336253][ T7844] RIP: 0033:0x7f6aa574e159 [ 400.336306][ T7844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.336357][ T7844] RSP: 002b:00007f6aa39a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.336418][ T7844] RAX: ffffffffffffffda RBX: 00007f6aa59d5fa0 RCX: 00007f6aa574e159 [ 400.336466][ T7844] RDX: 0000000020000004 RSI: 0000200000000040 RDI: 0000000000000004 [ 400.336508][ T7844] RBP: 00007f6aa39a6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.336553][ T7844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.336594][ T7844] R13: 00007f6aa59d6038 R14: 00007f6aa59d5fa0 R15: 00007ffeb9bd85c8 [ 400.336673][ T7844] [ 402.593909][ T154] team0 (unregistering): Port device team_slave_1 removed [ 402.689895][ T154] team0 (unregistering): Port device team_slave_0 removed [ 402.749188][ T7858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.454'. [ 402.942216][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.942339][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.942538][ T7634] bridge_slave_1: entered allmulticast mode [ 404.640168][ T7634] bridge_slave_1: entered promiscuous mode [ 407.080294][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.136444][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.549827][ T7859] syz.2.461 (7859): drop_caches: 2 [ 407.814938][ T7634] team0: Port device team_slave_0 added [ 407.820923][ T7634] team0: Port device team_slave_1 added [ 407.879937][ T7883] syz.4.467 (7883): attempted to duplicate a private mapping with mremap. This is not supported. [ 408.042743][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.042764][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.042791][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.109194][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.109224][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.109252][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.237410][ T7888] kAFS: No cell specified [ 409.332308][ T7888] tmpfs: Using encoding : utf8-12.1.0 [ 409.973686][ T7634] hsr_slave_0: entered promiscuous mode [ 409.990701][ T7634] hsr_slave_1: entered promiscuous mode [ 410.022378][ T7634] debugfs: 'hsr0' already exists in 'hsr' [ 410.022405][ T7634] Cannot create hsr debugfs directory [ 410.927717][ T13] bridge_slave_1: left allmulticast mode [ 410.927744][ T13] bridge_slave_1: left promiscuous mode [ 410.928070][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.089131][ T13] bridge_slave_0: left allmulticast mode [ 411.089157][ T13] bridge_slave_0: left promiscuous mode [ 411.089324][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.514823][ T7913] FAULT_INJECTION: forcing a failure. [ 411.514823][ T7913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.514862][ T7913] CPU: 0 UID: 0 PID: 7913 Comm: syz.2.473 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.514888][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 411.514902][ T7913] Call Trace: [ 411.514911][ T7913] [ 411.514920][ T7913] dump_stack_lvl+0xe8/0x150 [ 411.514958][ T7913] should_fail_ex+0x46b/0x600 [ 411.514994][ T7913] strncpy_from_user+0x36/0x2c0 [ 411.515027][ T7913] do_getname+0x77/0x250 [ 411.515065][ T7913] __se_sys_rename+0x2b/0x2c0 [ 411.515092][ T7913] do_syscall_64+0x166/0x520 [ 411.515115][ T7913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.515139][ T7913] ? clear_bhb_loop+0x70/0xc0 [ 411.515168][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.515198][ T7913] RIP: 0033:0x7f6aa574e159 [ 411.515219][ T7913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.515238][ T7913] RSP: 002b:00007f6aa3964028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 411.515263][ T7913] RAX: ffffffffffffffda RBX: 00007f6aa59d6180 RCX: 00007f6aa574e159 [ 411.515280][ T7913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 411.515295][ T7913] RBP: 00007f6aa3964090 R08: 0000000000000000 R09: 0000000000000000 [ 411.515310][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.515324][ T7913] R13: 00007f6aa59d6218 R14: 00007f6aa59d6180 R15: 00007ffeb9bd85c8 [ 411.515359][ T7913] [ 411.518822][ T7913] 9p: Bad value for 'rfdno' [ 414.265894][ T7926] netlink: 48 bytes leftover after parsing attributes in process `syz.0.475'. [ 414.950861][ T7918] FAULT_INJECTION: forcing a failure. [ 414.950861][ T7918] name fail_futex, interval 1, probability 0, space 0, times 0 [ 414.950899][ T7918] CPU: 0 UID: 0 PID: 7918 Comm: syz.4.472 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 414.950926][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 414.950939][ T7918] Call Trace: [ 414.950947][ T7918] [ 414.950956][ T7918] dump_stack_lvl+0xe8/0x150 [ 414.951004][ T7918] should_fail_ex+0x46b/0x600 [ 414.951040][ T7918] get_futex_key+0x1b4/0x1580 [ 414.951088][ T7918] ? __pfx_get_futex_key+0x10/0x10 [ 414.951137][ T7918] futex_wake+0x119/0x600 [ 414.951168][ T7918] ? __pfx_futex_wake+0x10/0x10 [ 414.951190][ T7918] ? do_raw_spin_lock+0x12b/0x2f0 [ 414.951232][ T7918] do_futex+0x458/0x4e0 [ 414.951259][ T7918] ? __pfx_do_futex+0x10/0x10 [ 414.951287][ T7918] ? __might_fault+0xaf/0x130 [ 414.951321][ T7918] mm_exit_exec_release+0x10d/0x290 [ 414.951355][ T7918] exit_mm+0x50/0x240 [ 414.951379][ T7918] do_exit+0x6cd/0x2360 [ 414.951411][ T7918] ? __pfx_do_exit+0x10/0x10 [ 414.951433][ T7918] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 414.951474][ T7918] ? rt_spin_unlock+0x159/0x200 [ 414.951505][ T7918] do_group_exit+0x22d/0x2f0 [ 414.951528][ T7918] ? rt_spin_unlock+0x165/0x200 [ 414.951561][ T7918] get_signal+0x121b/0x12c0 [ 414.951613][ T7918] arch_do_signal_or_restart+0xbb/0x860 [ 414.951651][ T7918] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 414.951694][ T7918] ? __x64_sys_recvmmsg+0x198/0x250 [ 414.951732][ T7918] exit_to_user_mode_loop+0x10e/0x770 [ 414.951761][ T7918] ? rcu_is_watching+0x16/0xb0 [ 414.951799][ T7918] do_syscall_64+0x328/0x520 [ 414.951821][ T7918] ? trace_irq_disable+0x3b/0x140 [ 414.951851][ T7918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.951879][ T7918] ? clear_bhb_loop+0x70/0xc0 [ 414.951905][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.951929][ T7918] RIP: 0033:0x7f8a15dfe159 [ 414.951950][ T7918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.951977][ T7918] RSP: 002b:00007f8a14035028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 414.952003][ T7918] RAX: fffffffffffffe00 RBX: 00007f8a16086090 RCX: 00007f8a15dfe159 [ 414.952020][ T7918] RDX: 0000000000000001 RSI: 0000200000004600 RDI: 0000000000000003 [ 414.952035][ T7918] RBP: 00007f8a14035090 R08: 0000000000000000 R09: 0000000000000000 [ 414.952050][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.952064][ T7918] R13: 00007f8a16086128 R14: 00007f8a16086090 R15: 00007fff46074198 [ 414.952098][ T7918] [ 415.397377][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.454459][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.457171][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.458524][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.460820][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.675288][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.009833][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.047533][ T13] bond0 (unregistering): Released all slaves [ 417.674171][ T7946] 9p: Bad value for 'rfdno' [ 417.711729][ T5597] Bluetooth: hci3: command tx timeout [ 419.209162][ T7961] FAULT_INJECTION: forcing a failure. [ 419.209162][ T7961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.209191][ T7961] CPU: 0 UID: 0 PID: 7961 Comm: syz.2.482 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 419.209210][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 419.209220][ T7961] Call Trace: [ 419.209226][ T7961] [ 419.209233][ T7961] dump_stack_lvl+0xe8/0x150 [ 419.209261][ T7961] should_fail_ex+0x46b/0x600 [ 419.209287][ T7961] _copy_to_user+0x31/0xb0 [ 419.209312][ T7961] rng_dev_read+0x3ed/0x7c0 [ 419.209407][ T7961] ? __pfx_rng_dev_read+0x10/0x10 [ 419.209434][ T7961] ? bpf_lsm_file_permission+0x9/0x20 [ 419.209451][ T7961] ? security_file_permission+0x75/0x260 [ 419.209480][ T7961] ? rw_verify_area+0x250/0x4d0 [ 419.209503][ T7961] vfs_readv+0x588/0x850 [ 419.209528][ T7961] ? __pfx_rng_dev_read+0x10/0x10 [ 419.209554][ T7961] ? __pfx_vfs_readv+0x10/0x10 [ 419.209587][ T7961] ? __fget_files+0x2a/0x420 [ 419.209607][ T7961] ? __fget_files+0x3a8/0x420 [ 419.209622][ T7961] ? __fget_files+0x2a/0x420 [ 419.209645][ T7961] __x64_sys_preadv+0x19f/0x2c0 [ 419.209665][ T7961] ? __pfx___se_sys_futex+0x10/0x10 [ 419.209681][ T7961] ? __pfx___x64_sys_preadv+0x10/0x10 [ 419.209710][ T7961] do_syscall_64+0x166/0x520 [ 419.209725][ T7961] ? trace_irq_disable+0x3b/0x140 [ 419.209749][ T7961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.209765][ T7961] ? clear_bhb_loop+0x70/0xc0 [ 419.209813][ T7961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.209838][ T7961] RIP: 0033:0x7f6aa574e159 [ 419.209860][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.209881][ T7961] RSP: 002b:00007f6aa39a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 419.209907][ T7961] RAX: ffffffffffffffda RBX: 00007f6aa59d5fa0 RCX: 00007f6aa574e159 [ 419.209928][ T7961] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 419.209940][ T7961] RBP: 00007f6aa57e506b R08: 0000000000000000 R09: 0000000000000000 [ 419.209950][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.209961][ T7961] R13: 00007f6aa59d6038 R14: 00007f6aa59d5fa0 R15: 00007ffeb9bd85c8 [ 419.209985][ T7961] [ 419.236664][ T13] hsr_slave_0: left promiscuous mode [ 419.406196][ T13] hsr_slave_1: left promiscuous mode [ 419.430199][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.527503][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.577307][ T7964] input: syz1 as /devices/virtual/input/input28 [ 419.792154][ T5597] Bluetooth: hci3: command tx timeout [ 419.962036][ T31] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 420.115818][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 420.116912][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.116934][ T31] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.120826][ T31] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 420.120844][ T31] usb 1-1: Product: syz [ 420.120854][ T31] usb 1-1: Manufacturer: syz [ 420.180175][ T31] hub 1-1:4.0: USB hub found [ 420.617285][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.700294][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.873782][ T31] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 420.965038][ T31] usb 1-1: USB disconnect, device number 8 [ 421.414086][ T13] team0 (unregistering): Port device team_slave_1 removed [ 421.509022][ T13] team0 (unregistering): Port device team_slave_0 removed [ 421.512164][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.489'. [ 421.656456][ T7986] netlink: 48 bytes leftover after parsing attributes in process `syz.0.490'. [ 421.872040][ T5597] Bluetooth: hci3: command tx timeout [ 423.393561][ T7994] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20002 [ 423.606081][ T7994] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 423.608135][ T7998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.646563][ T7994] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.947286][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 423.952036][ T5597] Bluetooth: hci3: command tx timeout [ 425.823097][ T6017] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 425.975671][ T6017] usb 3-1: Using ep0 maxpacket: 8 [ 425.976534][ T6017] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 426.514975][ T6017] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.519852][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.519883][ T6017] usb 3-1: Product: syz [ 426.519900][ T6017] usb 3-1: Manufacturer: syz [ 426.519917][ T6017] usb 3-1: SerialNumber: syz [ 426.695343][ T6017] usb 3-1: config 0 descriptor?? [ 426.884052][ T6017] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 426.884145][ T6017] usb 3-1: selecting invalid altsetting 1 [ 426.909390][ T6017] gspca_stk014: reg_r err -71 [ 426.909481][ T6017] stk014 3-1:0.0: probe with driver stk014 failed with error -71 [ 426.973738][ T6017] usb 3-1: USB disconnect, device number 20 [ 427.117827][ T8018] netlink: 60 bytes leftover after parsing attributes in process `syz.0.498'. [ 427.396621][ T7634] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.601216][ T7634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.036317][ T8030] netlink: 60 bytes leftover after parsing attributes in process `syz.2.499'. [ 428.229129][ T7634] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 428.521786][ T7634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.550880][ T7634] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.873920][ T7634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.139579][ T7634] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 430.286780][ T7634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.388131][ T7929] lo speed is unknown, defaulting to 1000 [ 430.572033][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 430.762859][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 430.763769][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 430.773823][ T31] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 430.773908][ T31] usb 1-1: config 0 has no interface number 0 [ 430.774084][ T31] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 430.817947][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.817976][ T31] usb 1-1: Product: syz [ 430.817991][ T31] usb 1-1: Manufacturer: syz [ 430.818005][ T31] usb 1-1: SerialNumber: syz [ 430.944754][ T31] usb 1-1: config 0 descriptor?? [ 431.020765][ T8041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.249251][ T8041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 433.857674][ T31] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 433.857708][ T31] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 433.973456][ T31] asix 1-1:0.188: probe with driver asix failed with error -71 [ 434.051408][ T31] usb 1-1: USB disconnect, device number 9 [ 434.138003][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.503'. [ 435.044558][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 435.044582][ T37] audit: type=1326 audit(1790366475.394:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.046971][ T37] audit: type=1326 audit(1790366475.404:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.115895][ T37] audit: type=1326 audit(1790366475.434:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.162910][ T37] audit: type=1326 audit(1790366475.524:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.163068][ T37] audit: type=1326 audit(1790366475.524:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.220198][ T37] audit: type=1326 audit(1790366475.564:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.220349][ T37] audit: type=1326 audit(1790366475.564:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.220465][ T37] audit: type=1326 audit(1790366475.564:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.236391][ T37] audit: type=1326 audit(1790366475.584:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.236527][ T37] audit: type=1326 audit(1790366475.584:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8091 comm="syz.0.507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367485e159 code=0x7ffc0000 [ 435.377679][ T8093] ieee802154 phy0 wpan0: encryption failed: -22 [ 435.586204][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 435.636640][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 435.638982][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 435.656595][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 435.660175][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.836082][ T8113] FAULT_INJECTION: forcing a failure. [ 436.836082][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 436.836124][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.4.510 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 436.836151][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 436.836165][ T8113] Call Trace: [ 436.836174][ T8113] [ 436.836184][ T8113] dump_stack_lvl+0xe8/0x150 [ 436.836224][ T8113] should_fail_ex+0x46b/0x600 [ 436.836260][ T8113] should_failslab+0xa8/0x100 [ 436.836307][ T8113] __kmalloc_noprof+0xfb/0x790 [ 436.836339][ T8113] ? __register_sysctl_table+0xc02/0x1370 [ 436.836369][ T8113] ? __register_sysctl_table+0xc02/0x1370 [ 436.836407][ T8113] __register_sysctl_table+0xc02/0x1370 [ 436.836448][ T8113] register_pidns_sysctls+0x105/0x1e0 [ 436.836478][ T8113] copy_pid_ns+0x54d/0x940 [ 436.836516][ T8113] ? __pfx_copy_pid_ns+0x10/0x10 [ 436.836547][ T8113] ? rcu_is_watching+0x16/0xb0 [ 436.836581][ T8113] ? __pfx_copy_mnt_ns+0x10/0x10 [ 436.836603][ T8113] ? create_new_namespaces+0x33/0x6b0 [ 436.836640][ T8113] ? copy_ipcs+0x2a9/0x6c0 [ 436.836671][ T8113] ? copy_utsname+0x184/0x620 [ 436.836700][ T8113] create_new_namespaces+0x2ad/0x6b0 [ 436.836734][ T8113] ? security_capable+0x7e/0x2c0 [ 436.836776][ T8113] unshare_nsproxy_namespaces+0x149/0x190 [ 436.836811][ T8113] ksys_unshare+0x5a7/0x950 [ 436.836850][ T8113] ? __pfx_ksys_unshare+0x10/0x10 [ 436.836884][ T8113] ? rcu_is_watching+0x16/0xb0 [ 436.836929][ T8113] __x64_sys_unshare+0x38/0x50 [ 436.836963][ T8113] do_syscall_64+0x166/0x520 [ 436.836987][ T8113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.837010][ T8113] ? clear_bhb_loop+0x70/0xc0 [ 436.837038][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.837062][ T8113] RIP: 0033:0x7f8a15dfe159 [ 436.837083][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.837103][ T8113] RSP: 002b:00007f8a14014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 436.837128][ T8113] RAX: ffffffffffffffda RBX: 00007f8a16086180 RCX: 00007f8a15dfe159 [ 436.837145][ T8113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 436.837160][ T8113] RBP: 00007f8a15e9506b R08: 0000000000000000 R09: 0000000000000000 [ 436.837175][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.837189][ T8113] R13: 00007f8a16086218 R14: 00007f8a16086180 R15: 00007fff46074198 [ 436.837224][ T8113] [ 436.837235][ T8113] sysctl could not get directory: /kernel -12 [ 438.093870][ T5597] Bluetooth: hci4: command tx timeout [ 438.556457][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.557386][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.557554][ T7929] bridge_slave_0: entered allmulticast mode [ 438.573395][ T7929] bridge_slave_0: entered promiscuous mode [ 439.500066][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.500200][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.500377][ T7929] bridge_slave_1: entered allmulticast mode [ 439.508982][ T7929] bridge_slave_1: entered promiscuous mode [ 439.661054][ T8130] FAULT_INJECTION: forcing a failure. [ 439.661054][ T8130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.661108][ T8130] CPU: 0 UID: 0 PID: 8130 Comm: syz.0.513 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 439.661136][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 439.661151][ T8130] Call Trace: [ 439.661160][ T8130] [ 439.661170][ T8130] dump_stack_lvl+0xe8/0x150 [ 439.661208][ T8130] should_fail_ex+0x46b/0x600 [ 439.661244][ T8130] _copy_from_user+0x2d/0xb0 [ 439.661280][ T8130] get_itimerspec64+0x1ca/0x310 [ 439.661318][ T8130] ? __pfx_get_itimerspec64+0x10/0x10 [ 439.661356][ T8130] ? __pfx_do_futex+0x10/0x10 [ 439.661387][ T8130] __x64_sys_timerfd_settime+0x149/0x240 [ 439.661416][ T8130] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 439.661467][ T8130] do_syscall_64+0x166/0x520 [ 439.661491][ T8130] ? trace_irq_disable+0x3b/0x140 [ 439.661522][ T8130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.661545][ T8130] ? clear_bhb_loop+0x70/0xc0 [ 439.661573][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.661605][ T8130] RIP: 0033:0x7f367485e159 [ 439.661626][ T8130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.661646][ T8130] RSP: 002b:00007f3672ab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 439.661670][ T8130] RAX: ffffffffffffffda RBX: 00007f3674ae5fa0 RCX: 00007f367485e159 [ 439.661688][ T8130] RDX: 0000200000000380 RSI: 0000000000000005 RDI: 0000000000000005 [ 439.661703][ T8130] RBP: 00007f36748f506b R08: 0000000000000000 R09: 0000000000000000 [ 439.661718][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.661732][ T8130] R13: 00007f3674ae6038 R14: 00007f3674ae5fa0 R15: 00007ffc13ba1c28 [ 439.661766][ T8130] [ 439.944353][ T8139] IPv6: Can't replace route, no match found [ 439.968859][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.968922][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.006217][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.087500][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.118923][ T5597] Bluetooth: hci4: command tx timeout [ 440.712997][ T5724] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 440.869087][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 440.869993][ T5724] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 440.875049][ T5724] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 440.875075][ T5724] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 440.875094][ T5724] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 440.875113][ T5724] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 440.875132][ T5724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 440.875152][ T5724] usb 5-1: config 0 has no interface number 0 [ 440.875194][ T5724] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 440.875222][ T5724] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 440.875244][ T5724] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 440.875280][ T5724] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.875307][ T5724] usb 5-1: config 0 interface 125 has no altsetting 0 [ 440.875324][ T5724] usb 5-1: config 0 interface 125 has no altsetting 2 [ 441.008488][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.008517][ T5724] usb 5-1: Product: syz [ 441.008532][ T5724] usb 5-1: Manufacturer: syz [ 441.008547][ T5724] usb 5-1: SerialNumber: syz [ 441.047093][ T5724] usb 5-1: config 0 descriptor?? [ 441.064474][ T5724] usb 5-1: selecting invalid altsetting 2 [ 441.253599][ T7929] team0: Port device team_slave_0 added [ 441.367718][ T7929] team0: Port device team_slave_1 added [ 442.151194][ T5724] get_1284_register timeout [ 442.315166][ T5597] Bluetooth: hci4: command tx timeout [ 442.340239][ C1] usb 5-1: async_complete: urb error -104 [ 442.340353][ C1] usb 5-1: async_complete: urb error -104 [ 442.340443][ C1] usb 5-1: async_complete: urb error -104 [ 442.340538][ C1] usb 5-1: async_complete: urb error -104 [ 442.797325][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 442.823617][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.823634][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.823661][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.213530][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.213551][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.213577][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.214372][ T8098] lo speed is unknown, defaulting to 1000 [ 443.348508][ T8189] FAULT_INJECTION: forcing a failure. [ 443.348508][ T8189] name failslab, interval 1, probability 0, space 0, times 0 [ 443.348569][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.0.521 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 443.348594][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 443.348607][ T8189] Call Trace: [ 443.348615][ T8189] [ 443.348624][ T8189] dump_stack_lvl+0xe8/0x150 [ 443.348677][ T8189] should_fail_ex+0x46b/0x600 [ 443.348709][ T8189] should_failslab+0xa8/0x100 [ 443.348742][ T8189] __kmalloc_noprof+0xfb/0x790 [ 443.348770][ T8189] ? __register_sysctl_table+0xc02/0x1370 [ 443.348795][ T8189] ? __register_sysctl_table+0xc02/0x1370 [ 443.348828][ T8189] __register_sysctl_table+0xc02/0x1370 [ 443.348865][ T8189] register_pidns_sysctls+0x105/0x1e0 [ 443.348891][ T8189] copy_pid_ns+0x54d/0x940 [ 443.348931][ T8189] ? __pfx_copy_pid_ns+0x10/0x10 [ 443.348977][ T8189] ? rcu_is_watching+0x16/0xb0 [ 443.349009][ T8189] ? __pfx_copy_mnt_ns+0x10/0x10 [ 443.349029][ T8189] ? create_new_namespaces+0x33/0x6b0 [ 443.349065][ T8189] ? copy_ipcs+0x2a9/0x6c0 [ 443.349103][ T8189] ? copy_utsname+0x184/0x620 [ 443.349128][ T8189] create_new_namespaces+0x2ad/0x6b0 [ 443.349158][ T8189] ? security_capable+0x7e/0x2c0 [ 443.349194][ T8189] unshare_nsproxy_namespaces+0x149/0x190 [ 443.349224][ T8189] ksys_unshare+0x5a7/0x950 [ 443.349259][ T8189] ? __pfx_ksys_unshare+0x10/0x10 [ 443.349288][ T8189] ? rcu_is_watching+0x16/0xb0 [ 443.349327][ T8189] __x64_sys_unshare+0x38/0x50 [ 443.349357][ T8189] do_syscall_64+0x166/0x520 [ 443.349377][ T8189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.349398][ T8189] ? clear_bhb_loop+0x70/0xc0 [ 443.349422][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.349442][ T8189] RIP: 0033:0x7f367485e159 [ 443.349461][ T8189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.349478][ T8189] RSP: 002b:00007f3672a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 443.349500][ T8189] RAX: ffffffffffffffda RBX: 00007f3674ae6180 RCX: 00007f367485e159 [ 443.349515][ T8189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 443.349527][ T8189] RBP: 00007f36748f506b R08: 0000000000000000 R09: 0000000000000000 [ 443.349540][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.349552][ T8189] R13: 00007f3674ae6218 R14: 00007f3674ae6180 R15: 00007ffc13ba1c28 [ 443.349584][ T8189] [ 443.349617][ T8189] sysctl could not get directory: /kernel -12 [ 444.241281][ T5724] usb 5-1: USB disconnect, device number 17 [ 444.354084][ T5597] Bluetooth: hci4: command tx timeout [ 444.591607][ T8196] ubi0: attaching mtd0 [ 444.681025][ T8196] ubi0 error: validate_ec_hdr: bad VID header offset 137, expected 64 [ 444.681065][ T8196] ubi0 error: validate_ec_hdr: bad EC header [ 444.681085][ T8196] Erase counter header dump: [ 444.681092][ T8196] magic 0x55424923 [ 444.681102][ T8196] version 1 [ 444.681110][ T8196] ec 1 [ 444.681118][ T8196] vid_hdr_offset 137 [ 444.681127][ T8196] data_offset 201 [ 444.681135][ T8196] image_seq -1738825956 [ 444.681144][ T8196] hdr_crc 0xb5774a51 [ 444.681154][ T8196] erase counter header hexdump: [ 444.681210][ T8196] CPU: 0 UID: 0 PID: 8196 Comm: syz.2.524 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.681245][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 444.681258][ T8196] Call Trace: [ 444.681266][ T8196] [ 444.681275][ T8196] dump_stack_lvl+0xe8/0x150 [ 444.681307][ T8196] validate_ec_hdr+0x20d/0x340 [ 444.681332][ T8196] ubi_io_read_ec_hdr+0x19b/0x6c0 [ 444.681359][ T8196] ubi_attach+0x6f4/0x4f70 [ 444.681414][ T8196] ? __pfx_ubi_attach+0x10/0x10 [ 444.681445][ T8196] ? ubi_attach_mtd_dev+0x1b0e/0x3a50 [ 444.681471][ T8196] ? vmalloc_noprof+0xb2/0xe0 [ 444.681500][ T8196] ubi_attach_mtd_dev+0x1b54/0x3a50 [ 444.681551][ T8196] ctrl_cdev_ioctl+0x301/0x490 [ 444.681600][ T8196] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 444.681627][ T8196] ? __fget_files+0x2a/0x420 [ 444.681651][ T8196] ? __fget_files+0x2a/0x420 [ 444.681687][ T8196] ? bpf_lsm_file_ioctl+0x9/0x20 [ 444.681709][ T8196] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 444.681737][ T8196] __se_sys_ioctl+0xff/0x170 [ 444.681767][ T8196] do_syscall_64+0x166/0x520 [ 444.681787][ T8196] ? trace_irq_disable+0x3b/0x140 [ 444.681813][ T8196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.681834][ T8196] ? clear_bhb_loop+0x70/0xc0 [ 444.681859][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.681879][ T8196] RIP: 0033:0x7f6aa574e159 [ 444.681901][ T8196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.681920][ T8196] RSP: 002b:00007f6aa3985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.681942][ T8196] RAX: ffffffffffffffda RBX: 00007f6aa59d6090 RCX: 00007f6aa574e159 [ 444.681957][ T8196] RDX: 0000200000000100 RSI: 0000000040186f40 RDI: 0000000000000005 [ 444.681971][ T8196] RBP: 00007f6aa57e506b R08: 0000000000000000 R09: 0000000000000000 [ 444.681985][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.681997][ T8196] R13: 00007f6aa59d6128 R14: 00007f6aa59d6090 R15: 00007ffeb9bd85c8 [ 444.682036][ T8196] [ 446.165451][ T8196] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 447.036117][ T154] bridge_slave_1: left allmulticast mode [ 447.036156][ T154] bridge_slave_1: left promiscuous mode [ 447.036435][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.259996][ T154] bridge_slave_0: left allmulticast mode [ 447.260034][ T154] bridge_slave_0: left promiscuous mode [ 447.260288][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.409518][ T8196] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 449.263189][ T8244] FAULT_INJECTION: forcing a failure. [ 449.263189][ T8244] name failslab, interval 1, probability 0, space 0, times 0 [ 449.263263][ T8244] CPU: 1 UID: 0 PID: 8244 Comm: syz.4.530 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 449.263290][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 449.263303][ T8244] Call Trace: [ 449.263312][ T8244] [ 449.263321][ T8244] dump_stack_lvl+0xe8/0x150 [ 449.263358][ T8244] should_fail_ex+0x46b/0x600 [ 449.263393][ T8244] should_failslab+0xa8/0x100 [ 449.263428][ T8244] __kmalloc_noprof+0xfb/0x790 [ 449.263477][ T8244] ? __register_sysctl_table+0xc02/0x1370 [ 449.263506][ T8244] ? __register_sysctl_table+0xc02/0x1370 [ 449.263543][ T8244] __register_sysctl_table+0xc02/0x1370 [ 449.263583][ T8244] register_pidns_sysctls+0x105/0x1e0 [ 449.263613][ T8244] copy_pid_ns+0x54d/0x940 [ 449.263652][ T8244] ? __pfx_copy_pid_ns+0x10/0x10 [ 449.263682][ T8244] ? rcu_is_watching+0x16/0xb0 [ 449.263718][ T8244] ? __pfx_copy_mnt_ns+0x10/0x10 [ 449.263739][ T8244] ? create_new_namespaces+0x33/0x6b0 [ 449.263777][ T8244] ? copy_ipcs+0x2a9/0x6c0 [ 449.263807][ T8244] ? copy_utsname+0x184/0x620 [ 449.263836][ T8244] create_new_namespaces+0x2ad/0x6b0 [ 449.263870][ T8244] ? security_capable+0x7e/0x2c0 [ 449.263910][ T8244] unshare_nsproxy_namespaces+0x149/0x190 [ 449.263945][ T8244] ksys_unshare+0x5a7/0x950 [ 449.263985][ T8244] ? __pfx_ksys_unshare+0x10/0x10 [ 449.264018][ T8244] ? rcu_is_watching+0x16/0xb0 [ 449.264063][ T8244] __x64_sys_unshare+0x38/0x50 [ 449.264104][ T8244] do_syscall_64+0x166/0x520 [ 449.264127][ T8244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.264152][ T8244] ? clear_bhb_loop+0x70/0xc0 [ 449.264190][ T8244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.264211][ T8244] RIP: 0033:0x7f8a15dfe159 [ 449.264232][ T8244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.264251][ T8244] RSP: 002b:00007f8a14014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 449.264276][ T8244] RAX: ffffffffffffffda RBX: 00007f8a16086180 RCX: 00007f8a15dfe159 [ 449.264293][ T8244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 449.264307][ T8244] RBP: 00007f8a15e9506b R08: 0000000000000000 R09: 0000000000000000 [ 449.264321][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.264334][ T8244] R13: 00007f8a16086218 R14: 00007f8a16086180 R15: 00007fff46074198 [ 449.264386][ T8244] [ 449.264424][ T8244] sysctl could not get directory: /kernel -12 [ 450.390777][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.449835][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.484193][ T154] bond0 (unregistering): Released all slaves [ 450.696832][ T7929] hsr_slave_0: entered promiscuous mode [ 450.730856][ T7929] hsr_slave_1: entered promiscuous mode [ 450.731692][ T7929] debugfs: 'hsr0' already exists in 'hsr' [ 450.731714][ T7929] Cannot create hsr debugfs directory [ 452.931787][ T8270] FAULT_INJECTION: forcing a failure. [ 452.931787][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 452.931826][ T8270] CPU: 0 UID: 0 PID: 8270 Comm: syz.0.533 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 452.931853][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 452.931867][ T8270] Call Trace: [ 452.931874][ T8270] [ 452.931883][ T8270] dump_stack_lvl+0xe8/0x150 [ 452.931922][ T8270] should_fail_ex+0x46b/0x600 [ 452.931956][ T8270] should_failslab+0xa8/0x100 [ 452.931991][ T8270] __kmalloc_cache_noprof+0xa1/0x680 [ 452.932022][ T8270] ? __kthread_create_on_node+0x115/0x3d0 [ 452.932053][ T8270] ? __kthread_create_on_node+0x115/0x3d0 [ 452.932086][ T8270] ? __init_swait_queue_head+0xa8/0x150 [ 452.932106][ T8270] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 452.932206][ T8270] __kthread_create_on_node+0x115/0x3d0 [ 452.932244][ T8270] ? __pfx___kthread_create_on_node+0x10/0x10 [ 452.932289][ T8270] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 452.932316][ T8270] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 452.932344][ T8270] kthread_create_on_node+0xeb/0x140 [ 452.932374][ T8270] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 452.932407][ T8270] ? __pfx_kthread_create_on_node+0x10/0x10 [ 452.932440][ T8270] ? rt_spin_unlock+0x159/0x200 [ 452.932477][ T8270] rxrpc_lookup_local+0xfb5/0x1640 [ 452.932505][ T8270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 452.932535][ T8270] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 452.932563][ T8270] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 452.932589][ T8270] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 452.932624][ T8270] ? __local_bh_enable+0x1e3/0x2f0 [ 452.932657][ T8270] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 452.932695][ T8270] rxrpc_sendmsg+0x34b/0x6b0 [ 452.932769][ T8270] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 452.932793][ T8270] sock_sendmsg_nosec+0x13a/0x180 [ 452.932828][ T8270] ____sys_sendmsg+0x565/0x870 [ 452.932861][ T8270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.932894][ T8270] ? import_iovec+0x73/0xa0 [ 452.932930][ T8270] ___sys_sendmsg+0x2a5/0x360 [ 452.932953][ T8270] ? __lock_acquire+0x747/0x2de0 [ 452.932985][ T8270] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.933012][ T8270] ? futex_wait+0x2a2/0x390 [ 452.933068][ T8270] ? __fget_files+0x2a/0x420 [ 452.933091][ T8270] ? __fget_files+0x3a8/0x420 [ 452.933123][ T8270] __x64_sys_sendmsg+0x1b7/0x290 [ 452.933151][ T8270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.933197][ T8270] do_syscall_64+0x166/0x520 [ 452.933218][ T8270] ? trace_irq_disable+0x3b/0x140 [ 452.933245][ T8270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.933268][ T8270] ? clear_bhb_loop+0x70/0xc0 [ 452.933293][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.933316][ T8270] RIP: 0033:0x7f367485e159 [ 452.933335][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.933354][ T8270] RSP: 002b:00007f3672a74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.933378][ T8270] RAX: ffffffffffffffda RBX: 00007f3674ae6180 RCX: 00007f367485e159 [ 452.933394][ T8270] RDX: 00000000200008c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 452.933409][ T8270] RBP: 00007f36748f506b R08: 0000000000000000 R09: 0000000000000000 [ 452.933424][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.933437][ T8270] R13: 00007f3674ae6218 R14: 00007f3674ae6180 R15: 00007ffc13ba1c28 [ 452.933469][ T8270] [ 453.659417][ T154] hsr_slave_0: left promiscuous mode [ 453.692101][ T154] hsr_slave_1: left promiscuous mode [ 453.693293][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.763701][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.584216][ T154] team0 (unregistering): Port device team_slave_1 removed [ 457.827732][ T154] team0 (unregistering): Port device team_slave_0 removed [ 459.896068][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 460.615011][ T8332] FAULT_INJECTION: forcing a failure. [ 460.615011][ T8332] name failslab, interval 1, probability 0, space 0, times 0 [ 460.615050][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.4.547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 460.615081][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.615095][ T8332] Call Trace: [ 460.615104][ T8332] [ 460.615113][ T8332] dump_stack_lvl+0xe8/0x150 [ 460.615152][ T8332] should_fail_ex+0x46b/0x600 [ 460.615188][ T8332] should_failslab+0xa8/0x100 [ 460.615223][ T8332] ? alloc_empty_file+0x5b/0x1d0 [ 460.615258][ T8332] kmem_cache_alloc_noprof+0x9e/0x690 [ 460.615290][ T8332] ? alloc_empty_file+0x5b/0x1d0 [ 460.615331][ T8332] alloc_empty_file+0x5b/0x1d0 [ 460.615365][ T8332] path_openat+0xa2/0x1d60 [ 460.615415][ T8332] do_file_open+0x23e/0x4a0 [ 460.615450][ T8332] ? __pfx_do_file_open+0x10/0x10 [ 460.615512][ T8332] ? alloc_fd+0x654/0x6d0 [ 460.615546][ T8332] do_sys_openat2+0x115/0x200 [ 460.615583][ T8332] ? __se_sys_futex+0x3a8/0x450 [ 460.615607][ T8332] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.615649][ T8332] ? rcu_is_watching+0x16/0xb0 [ 460.615688][ T8332] __x64_sys_openat+0x138/0x170 [ 460.615715][ T8332] do_syscall_64+0x166/0x520 [ 460.615737][ T8332] ? trace_irq_disable+0x3b/0x140 [ 460.615766][ T8332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.615789][ T8332] ? clear_bhb_loop+0x70/0xc0 [ 460.615818][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.615840][ T8332] RIP: 0033:0x7f8a15dfe159 [ 460.615861][ T8332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.615881][ T8332] RSP: 002b:00007f8a14035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.615905][ T8332] RAX: ffffffffffffffda RBX: 00007f8a16086090 RCX: 00007f8a15dfe159 [ 460.615922][ T8332] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 460.615938][ T8332] RBP: 00007f8a15e9506b R08: 0000000000000000 R09: 0000000000000000 [ 460.615952][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.615966][ T8332] R13: 00007f8a16086128 R14: 00007f8a16086090 R15: 00007fff46074198 [ 460.616003][ T8332] [ 461.091990][ T5319] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 461.292013][ T5319] usb 1-1: Using ep0 maxpacket: 8 [ 461.314333][ T5319] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 461.315572][ T5319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.317926][ T5319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.317951][ T5319] usb 1-1: Product: syz [ 461.317965][ T5319] usb 1-1: Manufacturer: syz [ 461.317981][ T5319] usb 1-1: SerialNumber: syz [ 461.382054][ T5319] usb 1-1: config 0 descriptor?? [ 461.771647][ T5319] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 461.771743][ T5319] usb 1-1: selecting invalid altsetting 1 [ 462.284029][ T5319] gspca_stk014: reg_r err -110 [ 462.284145][ T5319] stk014 1-1:0.0: probe with driver stk014 failed with error -110 [ 462.482085][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.483130][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.483302][ T8098] bridge_slave_0: entered allmulticast mode [ 462.521792][ T8098] bridge_slave_0: entered promiscuous mode [ 462.571784][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.574395][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.574572][ T8098] bridge_slave_1: entered allmulticast mode [ 462.615611][ T8098] bridge_slave_1: entered promiscuous mode [ 462.907249][ T31] usb 1-1: USB disconnect, device number 10 [ 463.183725][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.402044][ T5319] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 463.553143][ T5319] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 463.559833][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.559868][ T5319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.559909][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.606424][ T5319] usb 3-1: config 0 descriptor?? [ 463.608002][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.631306][ T8377] netlink: 'syz.4.555': attribute type 2 has an invalid length. [ 463.733840][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 463.772235][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 463.925653][ T31] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 463.930815][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 463.931113][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.038959][ T8375] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 464.083976][ T31] opticon 1-1:1.0: opticon converter detected [ 465.034299][ T5319] usb 3-1: language id specifier not provided by device, defaulting to English [ 465.038540][ T31] usb 1-1: opticon converter now attached to ttyUSB0 [ 465.560826][ T5319] uclogic 0003:256C:006D.000E: v1 frame probing failed: -71 [ 465.560976][ T5319] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 465.561078][ T5319] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 465.603704][ T5319] usb 3-1: USB disconnect, device number 21 [ 466.247872][ T8098] team0: Port device team_slave_0 added [ 467.048212][ T8098] team0: Port device team_slave_1 added [ 467.048595][ T8403] IPv6: Can't replace route, no match found [ 467.246560][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.246582][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.246611][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.351252][ T31] usb 1-1: USB disconnect, device number 11 [ 467.374963][ T31] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 467.375945][ T31] opticon 1-1:1.0: device disconnected [ 467.465542][ T8407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.564'. [ 470.160327][ T8425] FAULT_INJECTION: forcing a failure. [ 470.160327][ T8425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.160361][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.2.568 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.160386][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 470.160398][ T8425] Call Trace: [ 470.160406][ T8425] [ 470.160416][ T8425] dump_stack_lvl+0xe8/0x150 [ 470.160453][ T8425] should_fail_ex+0x46b/0x600 [ 470.160487][ T8425] _copy_from_user+0x2d/0xb0 [ 470.160520][ T8425] get_itimerspec64+0x1ca/0x310 [ 470.160557][ T8425] ? __pfx_get_itimerspec64+0x10/0x10 [ 470.160594][ T8425] ? __pfx_do_futex+0x10/0x10 [ 470.160623][ T8425] __x64_sys_timerfd_settime+0x149/0x240 [ 470.160647][ T8425] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 470.160688][ T8425] do_syscall_64+0x166/0x520 [ 470.160709][ T8425] ? trace_irq_disable+0x3b/0x140 [ 470.160742][ T8425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.160766][ T8425] ? clear_bhb_loop+0x70/0xc0 [ 470.160793][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.160816][ T8425] RIP: 0033:0x7f6aa574e159 [ 470.160836][ T8425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.160856][ T8425] RSP: 002b:00007f6aa39a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 470.160881][ T8425] RAX: ffffffffffffffda RBX: 00007f6aa59d5fa0 RCX: 00007f6aa574e159 [ 470.160899][ T8425] RDX: 0000200000000380 RSI: 0000000000000005 RDI: 0000000000000005 [ 470.160914][ T8425] RBP: 00007f6aa57e506b R08: 0000000000000000 R09: 0000000000000000 [ 470.160929][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.160943][ T8425] R13: 00007f6aa59d6038 R14: 00007f6aa59d5fa0 R15: 00007ffeb9bd85c8 [ 470.160979][ T8425] [ 470.196381][ T8425] IPv6: Can't replace route, no match found [ 470.447356][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.447375][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.447407][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.819091][ T8432] IPv6: Can't replace route, no match found [ 472.387334][ T8098] hsr_slave_0: entered promiscuous mode [ 472.393007][ T8098] hsr_slave_1: entered promiscuous mode [ 472.443407][ T8451] FAULT_INJECTION: forcing a failure. [ 472.443407][ T8451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.443475][ T8451] CPU: 0 UID: 0 PID: 8451 Comm: syz.2.576 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 472.443503][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.443519][ T8451] Call Trace: [ 472.443527][ T8451] [ 472.443538][ T8451] dump_stack_lvl+0xe8/0x150 [ 472.443576][ T8451] should_fail_ex+0x46b/0x600 [ 472.443611][ T8451] _copy_to_user+0x31/0xb0 [ 472.443647][ T8451] rng_dev_read+0x3ed/0x7c0 [ 472.443688][ T8451] ? __pfx_rng_dev_read+0x10/0x10 [ 472.443725][ T8451] ? bpf_lsm_file_permission+0x9/0x20 [ 472.443750][ T8451] ? security_file_permission+0x75/0x260 [ 472.443781][ T8451] ? rw_verify_area+0x250/0x4d0 [ 472.443813][ T8451] vfs_readv+0x588/0x850 [ 472.443848][ T8451] ? __pfx_rng_dev_read+0x10/0x10 [ 472.443886][ T8451] ? __pfx_vfs_readv+0x10/0x10 [ 472.443934][ T8451] ? __fget_files+0x2a/0x420 [ 472.443963][ T8451] ? __fget_files+0x3a8/0x420 [ 472.443986][ T8451] ? __fget_files+0x2a/0x420 [ 472.444018][ T8451] __x64_sys_preadv+0x19f/0x2c0 [ 472.444050][ T8451] ? __pfx___x64_sys_preadv+0x10/0x10 [ 472.444092][ T8451] do_syscall_64+0x166/0x520 [ 472.444113][ T8451] ? trace_irq_disable+0x3b/0x140 [ 472.444142][ T8451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.444164][ T8451] ? clear_bhb_loop+0x70/0xc0 [ 472.444192][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.444214][ T8451] RIP: 0033:0x7f6aa574e159 [ 472.444239][ T8451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.444258][ T8451] RSP: 002b:00007f6aa3985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 472.444283][ T8451] RAX: ffffffffffffffda RBX: 00007f6aa59d6090 RCX: 00007f6aa574e159 [ 472.444301][ T8451] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 472.444315][ T8451] RBP: 00007f6aa57e506b R08: 0000000000000000 R09: 0000000000000000 [ 472.444329][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.444343][ T8451] R13: 00007f6aa59d6128 R14: 00007f6aa59d6090 R15: 00007ffeb9bd85c8 [ 472.444389][ T8451] [ 472.478663][ T8450] FAULT_INJECTION: forcing a failure. [ 472.478663][ T8450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.478759][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.0.575 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 472.478822][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 472.478871][ T8450] Call Trace: [ 472.478893][ T8450] [ 472.478922][ T8450] dump_stack_lvl+0xe8/0x150 [ 472.479024][ T8450] should_fail_ex+0x46b/0x600 [ 472.479121][ T8450] _copy_to_user+0x31/0xb0 [ 472.479214][ T8450] rng_dev_read+0x3ed/0x7c0 [ 472.479315][ T8450] ? __pfx_rng_dev_read+0x10/0x10 [ 472.479433][ T8450] ? bpf_lsm_file_permission+0x9/0x20 [ 472.479502][ T8450] ? security_file_permission+0x75/0x260 [ 472.479581][ T8450] ? rw_verify_area+0x250/0x4d0 [ 472.479663][ T8450] vfs_readv+0x588/0x850 [ 472.479729][ T8450] ? __pfx_rng_dev_read+0x10/0x10 [ 472.479824][ T8450] ? __pfx_vfs_readv+0x10/0x10 [ 472.479971][ T8450] ? __fget_files+0x2a/0x420 [ 472.480050][ T8450] ? __fget_files+0x3a8/0x420 [ 472.480112][ T8450] ? __fget_files+0x2a/0x420 [ 472.480202][ T8450] __x64_sys_preadv+0x19f/0x2c0 [ 472.480284][ T8450] ? __pfx___x64_sys_preadv+0x10/0x10 [ 472.480391][ T8450] do_syscall_64+0x166/0x520 [ 472.480451][ T8450] ? trace_irq_disable+0x3b/0x140 [ 472.480523][ T8450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.480584][ T8450] ? clear_bhb_loop+0x70/0xc0 [ 472.480655][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.480716][ T8450] RIP: 0033:0x7f367485e159 [ 472.480827][ T8450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.480887][ T8450] RSP: 002b:00007f3672a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 472.480956][ T8450] RAX: ffffffffffffffda RBX: 00007f3674ae6090 RCX: 00007f367485e159 [ 472.481006][ T8450] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 472.481039][ T8450] RBP: 00007f36748f506b R08: 0000000000000000 R09: 0000000000000000 [ 472.481079][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.481112][ T8450] R13: 00007f3674ae6128 R14: 00007f3674ae6090 R15: 00007ffc13ba1c28 [ 472.481203][ T8450] [ 472.516589][ T8451] input: syz1 as /devices/virtual/input/input29 [ 472.612345][ T8450] input: syz1 as /devices/virtual/input/input30 [ 473.006549][ T8452] sctp: [Deprecated]: syz.4.577 (pid 8452) Use of int in maxseg socket option. [ 473.006549][ T8452] Use struct sctp_assoc_value instead [ 473.983678][ T8467] FAULT_INJECTION: forcing a failure. [ 473.983678][ T8467] name fail_futex, interval 1, probability 0, space 0, times 0 [ 473.983719][ T8467] CPU: 0 UID: 0 PID: 8467 Comm: syz.2.580 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 473.983746][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 473.983760][ T8467] Call Trace: [ 473.983769][ T8467] [ 473.983780][ T8467] dump_stack_lvl+0xe8/0x150 [ 473.983821][ T8467] should_fail_ex+0x46b/0x600 [ 473.983858][ T8467] get_futex_key+0x1b4/0x1580 [ 473.983898][ T8467] ? __lock_acquire+0x747/0x2de0 [ 473.983936][ T8467] ? __pfx_get_futex_key+0x10/0x10 [ 473.983971][ T8467] ? __cgroup_account_cputime+0xe8/0x120 [ 473.984016][ T8467] futex_wait_setup+0x4a/0x590 [ 473.984051][ T8467] ? __futex_wait+0xe1/0x410 [ 473.984085][ T8467] __futex_wait+0x161/0x410 [ 473.984120][ T8467] ? __pfx___futex_wait+0x10/0x10 [ 473.984154][ T8467] ? __pfx_futex_wake_mark+0x10/0x10 [ 473.984188][ T8467] ? try_to_wake_up+0x84b/0x1430 [ 473.984228][ T8467] futex_wait+0x121/0x390 [ 473.984261][ T8467] ? __pfx_futex_wait+0x10/0x10 [ 473.984303][ T8467] ? _copy_from_user+0x94/0xb0 [ 473.984341][ T8467] do_futex+0x3e7/0x4e0 [ 473.984371][ T8467] ? do_timerfd_settime+0x1b4/0x1190 [ 473.984404][ T8467] ? __pfx_do_futex+0x10/0x10 [ 473.984437][ T8467] __se_sys_futex+0x3a8/0x450 [ 473.984468][ T8467] ? __pfx___se_sys_futex+0x10/0x10 [ 473.984502][ T8467] ? __x64_sys_futex+0x21/0xf0 [ 473.984530][ T8467] do_syscall_64+0x166/0x520 [ 473.984553][ T8467] ? trace_irq_disable+0x3b/0x140 [ 473.984583][ T8467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.984608][ T8467] ? clear_bhb_loop+0x70/0xc0 [ 473.984641][ T8467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.984665][ T8467] RIP: 0033:0x7f6aa574e159 [ 473.984687][ T8467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.984708][ T8467] RSP: 002b:00007f6aa39a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 473.984735][ T8467] RAX: ffffffffffffffda RBX: 00007f6aa59d5fa8 RCX: 00007f6aa574e159 [ 473.984754][ T8467] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6aa59d5fa8 [ 473.984770][ T8467] RBP: 00007f6aa59d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 473.984786][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.984801][ T8467] R13: 00007f6aa59d6038 R14: 00007ffeb9bd84e0 R15: 00007ffeb9bd85c8 [ 473.984838][ T8467] [ 474.421567][ T8469] FAULT_INJECTION: forcing a failure. [ 474.421567][ T8469] name failslab, interval 1, probability 0, space 0, times 0 [ 474.421630][ T8469] CPU: 0 UID: 0 PID: 8469 Comm: syz.0.581 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 474.421658][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 474.421672][ T8469] Call Trace: [ 474.421681][ T8469] [ 474.421691][ T8469] dump_stack_lvl+0xe8/0x150 [ 474.421731][ T8469] should_fail_ex+0x46b/0x600 [ 474.421768][ T8469] should_failslab+0xa8/0x100 [ 474.421806][ T8469] __kmalloc_noprof+0xfb/0x790 [ 474.421839][ T8469] ? __register_sysctl_table+0xc02/0x1370 [ 474.421869][ T8469] ? __register_sysctl_table+0xc02/0x1370 [ 474.421906][ T8469] __register_sysctl_table+0xc02/0x1370 [ 474.421949][ T8469] register_pidns_sysctls+0x105/0x1e0 [ 474.421979][ T8469] copy_pid_ns+0x54d/0x940 [ 474.422018][ T8469] ? __pfx_copy_pid_ns+0x10/0x10 [ 474.422049][ T8469] ? rcu_is_watching+0x16/0xb0 [ 474.422083][ T8469] ? __pfx_copy_mnt_ns+0x10/0x10 [ 474.422104][ T8469] ? create_new_namespaces+0x33/0x6b0 [ 474.422141][ T8469] ? copy_ipcs+0x2a9/0x6c0 [ 474.422170][ T8469] ? copy_utsname+0x184/0x620 [ 474.422199][ T8469] create_new_namespaces+0x2ad/0x6b0 [ 474.422233][ T8469] ? security_capable+0x7e/0x2c0 [ 474.422274][ T8469] unshare_nsproxy_namespaces+0x149/0x190 [ 474.422318][ T8469] ksys_unshare+0x5a7/0x950 [ 474.422358][ T8469] ? __pfx_ksys_unshare+0x10/0x10 [ 474.422392][ T8469] ? rcu_is_watching+0x16/0xb0 [ 474.422446][ T8469] __x64_sys_unshare+0x38/0x50 [ 474.422477][ T8469] do_syscall_64+0x166/0x520 [ 474.422499][ T8469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.422521][ T8469] ? clear_bhb_loop+0x70/0xc0 [ 474.422548][ T8469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.422569][ T8469] RIP: 0033:0x7f367485e159 [ 474.422589][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.422608][ T8469] RSP: 002b:00007f3672a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 474.422632][ T8469] RAX: ffffffffffffffda RBX: 00007f3674ae6180 RCX: 00007f367485e159 [ 474.422648][ T8469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 474.422661][ T8469] RBP: 00007f36748f506b R08: 0000000000000000 R09: 0000000000000000 [ 474.422675][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.422688][ T8469] R13: 00007f3674ae6218 R14: 00007f3674ae6180 R15: 00007ffc13ba1c28 [ 474.422722][ T8469] [ 474.422788][ T8469] sysctl could not get directory: /kernel -12 [ 475.441902][ T5887] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 475.673679][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 475.681326][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.882050][ T8483] FAULT_INJECTION: forcing a failure. [ 478.882050][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 478.882152][ T8483] CPU: 0 UID: 0 PID: 8483 Comm: syz.2.582 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 478.882178][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 478.882192][ T8483] Call Trace: [ 478.882201][ T8483] [ 478.882210][ T8483] dump_stack_lvl+0xe8/0x150 [ 478.882248][ T8483] should_fail_ex+0x46b/0x600 [ 478.882300][ T8483] should_failslab+0xa8/0x100 [ 478.882338][ T8483] __kmalloc_noprof+0xfb/0x790 [ 478.882368][ T8483] ? __register_sysctl_table+0xc02/0x1370 [ 478.882396][ T8483] ? __register_sysctl_table+0xc02/0x1370 [ 478.882431][ T8483] __register_sysctl_table+0xc02/0x1370 [ 478.882482][ T8483] register_pidns_sysctls+0x105/0x1e0 [ 478.882508][ T8483] copy_pid_ns+0x54d/0x940 [ 478.882542][ T8483] ? __pfx_copy_pid_ns+0x10/0x10 [ 478.882569][ T8483] ? rcu_is_watching+0x16/0xb0 [ 478.882599][ T8483] ? __pfx_copy_mnt_ns+0x10/0x10 [ 478.882618][ T8483] ? create_new_namespaces+0x33/0x6b0 [ 478.882650][ T8483] ? copy_ipcs+0x2a9/0x6c0 [ 478.882676][ T8483] ? copy_utsname+0x184/0x620 [ 478.882702][ T8483] create_new_namespaces+0x2ad/0x6b0 [ 478.882732][ T8483] ? security_capable+0x7e/0x2c0 [ 478.882767][ T8483] unshare_nsproxy_namespaces+0x149/0x190 [ 478.882798][ T8483] ksys_unshare+0x5a7/0x950 [ 478.882834][ T8483] ? __pfx_ksys_unshare+0x10/0x10 [ 478.882883][ T8483] __x64_sys_unshare+0x38/0x50 [ 478.882914][ T8483] do_syscall_64+0x166/0x520 [ 478.882952][ T8483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.882976][ T8483] ? clear_bhb_loop+0x70/0xc0 [ 478.883003][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.883024][ T8483] RIP: 0033:0x7f6aa574e159 [ 478.883045][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.883064][ T8483] RSP: 002b:00007f6aa3964028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 478.883089][ T8483] RAX: ffffffffffffffda RBX: 00007f6aa59d6180 RCX: 00007f6aa574e159 [ 478.883105][ T8483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 478.883119][ T8483] RBP: 00007f6aa57e506b R08: 0000000000000000 R09: 0000000000000000 [ 478.883133][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.883146][ T8483] R13: 00007f6aa59d6218 R14: 00007f6aa59d6180 R15: 00007ffeb9bd85c8 [ 478.883179][ T8483] [ 478.883255][ T8483] sysctl could not get directory: /kernel -12 [ 481.807349][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 481.878173][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 481.893670][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 481.938658][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 481.943687][ T5887] net1080 5-1:1.0: probe with driver net1080 failed with error -71 [ 481.956378][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.390440][ T5887] usb 5-1: USB disconnect, device number 18 [ 482.506322][ T8492] nbd4: detected capacity change from 0 to 63 [ 482.509551][ T8492] block nbd4: NBD_DISCONNECT [ 482.542651][ T8492] block nbd4: Disconnected due to user request. [ 482.542675][ T8492] block nbd4: shutting down sockets [ 482.904373][ T59] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.904511][ T59] Buffer I/O error on dev nbd4, logical block 0, async page read [ 482.904595][ T59] Buffer I/O error on dev nbd4, logical block 1, async page read [ 482.904613][ T59] Buffer I/O error on dev nbd4, logical block 2, async page read [ 482.904632][ T59] Buffer I/O error on dev nbd4, logical block 3, async page read [ 483.654643][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.654682][ T6870] Buffer I/O error on dev nbd4, logical block 0, async page read [ 483.654705][ T6870] Buffer I/O error on dev nbd4, logical block 1, async page read [ 483.654725][ T6870] Buffer I/O error on dev nbd4, logical block 2, async page read [ 483.654745][ T6870] Buffer I/O error on dev nbd4, logical block 3, async page read [ 483.657400][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.657432][ T6870] Buffer I/O error on dev nbd4, logical block 0, async page read [ 483.657451][ T6870] Buffer I/O error on dev nbd4, logical block 1, async page read [ 483.662197][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.665439][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.665784][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.666064][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.666288][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.666388][ T6141] ldm_validate_partition_table(): Disk read failed. [ 483.666582][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.666833][ T6870] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 483.671784][ T6141] Dev nbd4: unable to read RDB block 0 [ 483.684626][ T6141] nbd4: unable to read partition table [ 483.978489][ T6141] ldm_validate_partition_table(): Disk read failed. [ 483.986626][ T6141] Dev nbd4: unable to read RDB block 0 [ 483.995793][ T6141] nbd4: unable to read partition table [ 484.432129][ T61] Bluetooth: hci5: command tx timeout [ 485.106787][ T8528] FAULT_INJECTION: forcing a failure. [ 485.106787][ T8528] name failslab, interval 1, probability 0, space 0, times 0 [ 485.106828][ T8528] CPU: 0 UID: 0 PID: 8528 Comm: syz.2.591 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 485.106855][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 485.106869][ T8528] Call Trace: [ 485.106888][ T8528] [ 485.106897][ T8528] dump_stack_lvl+0xe8/0x150 [ 485.106934][ T8528] should_fail_ex+0x46b/0x600 [ 485.106968][ T8528] should_failslab+0xa8/0x100 [ 485.107003][ T8528] __kmalloc_noprof+0xfb/0x790 [ 485.107033][ T8528] ? __register_sysctl_table+0xc02/0x1370 [ 485.107070][ T8528] ? __register_sysctl_table+0xc02/0x1370 [ 485.107104][ T8528] __register_sysctl_table+0xc02/0x1370 [ 485.107157][ T8528] register_pidns_sysctls+0x105/0x1e0 [ 485.107186][ T8528] copy_pid_ns+0x54d/0x940 [ 485.107222][ T8528] ? __pfx_copy_pid_ns+0x10/0x10 [ 485.107250][ T8528] ? rcu_is_watching+0x16/0xb0 [ 485.107284][ T8528] ? __pfx_copy_mnt_ns+0x10/0x10 [ 485.107303][ T8528] ? create_new_namespaces+0x33/0x6b0 [ 485.107337][ T8528] ? copy_ipcs+0x2a9/0x6c0 [ 485.107363][ T8528] ? copy_utsname+0x184/0x620 [ 485.107390][ T8528] create_new_namespaces+0x2ad/0x6b0 [ 485.107422][ T8528] ? security_capable+0x7e/0x2c0 [ 485.107459][ T8528] unshare_nsproxy_namespaces+0x149/0x190 [ 485.107492][ T8528] ksys_unshare+0x5a7/0x950 [ 485.107530][ T8528] ? __pfx_ksys_unshare+0x10/0x10 [ 485.107562][ T8528] ? rcu_is_watching+0x16/0xb0 [ 485.107603][ T8528] __x64_sys_unshare+0x38/0x50 [ 485.107635][ T8528] do_syscall_64+0x166/0x520 [ 485.107665][ T8528] ? trace_irq_disable+0x3b/0x140 [ 485.107693][ T8528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.107717][ T8528] ? clear_bhb_loop+0x70/0xc0 [ 485.107745][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.107767][ T8528] RIP: 0033:0x7f6aa574e159 [ 485.107787][ T8528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.107806][ T8528] RSP: 002b:00007f6aa3964028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 485.107830][ T8528] RAX: ffffffffffffffda RBX: 00007f6aa59d6180 RCX: 00007f6aa574e159 [ 485.107846][ T8528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 485.107860][ T8528] RBP: 00007f6aa57e506b R08: 0000000000000000 R09: 0000000000000000 [ 485.107874][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.107887][ T8528] R13: 00007f6aa59d6218 R14: 00007f6aa59d6180 R15: 00007ffeb9bd85c8 [ 485.107921][ T8528] [ 485.107932][ T8528] sysctl could not get directory: /kernel -12 [ 486.416603][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'. [ 486.438760][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.594'. [ 486.511999][ T61] Bluetooth: hci5: command tx timeout [ 486.655540][ T154] bridge_slave_1: left allmulticast mode [ 486.655581][ T154] bridge_slave_1: left promiscuous mode [ 486.655844][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.664597][ T6017] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 486.845215][ T6017] usb 5-1: Using ep0 maxpacket: 16 [ 486.856307][ T6017] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 486.873078][ T6017] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 486.873106][ T6017] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 486.873127][ T6017] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 486.873148][ T6017] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 486.873167][ T6017] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 486.873187][ T6017] usb 5-1: config 0 has no interface number 0 [ 486.873231][ T6017] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 486.873260][ T6017] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 486.873283][ T6017] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 486.873317][ T6017] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.873345][ T6017] usb 5-1: config 0 interface 125 has no altsetting 0 [ 486.873364][ T6017] usb 5-1: config 0 interface 125 has no altsetting 2 [ 486.883860][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.883916][ T6017] usb 5-1: Product: syz [ 486.883956][ T6017] usb 5-1: Manufacturer: syz [ 486.883988][ T6017] usb 5-1: SerialNumber: syz [ 486.978929][ T6017] usb 5-1: config 0 descriptor?? [ 487.062743][ T6017] usb 5-1: selecting invalid altsetting 2 [ 487.124792][ T154] bridge_slave_0: left allmulticast mode [ 487.124829][ T154] bridge_slave_0: left promiscuous mode [ 487.125467][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.395784][ T6017] get_1284_register timeout [ 488.716084][ C0] usb 5-1: async_complete: urb error -104 [ 488.716204][ C0] usb 5-1: async_complete: urb error -104 [ 488.716304][ C0] usb 5-1: async_complete: urb error -104 [ 488.916071][ T61] Bluetooth: hci5: command tx timeout [ 488.995026][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.042572][ T9] usb 5-1: USB disconnect, device number 19 [ 490.130321][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.287572][ T154] bond0 (unregistering): Released all slaves [ 490.658640][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.661778][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.713121][ T8579] Attempt to restore checkpoint with obsolete wellknown handles [ 490.862048][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 491.106031][ T8584] FAULT_INJECTION: forcing a failure. [ 491.106031][ T8584] name failslab, interval 1, probability 0, space 0, times 0 [ 491.106070][ T8584] CPU: 0 UID: 0 PID: 8584 Comm: syz.4.602 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 491.106097][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 491.106112][ T8584] Call Trace: [ 491.106121][ T8584] [ 491.106130][ T8584] dump_stack_lvl+0xe8/0x150 [ 491.106170][ T8584] should_fail_ex+0x46b/0x600 [ 491.106207][ T8584] should_failslab+0xa8/0x100 [ 491.106247][ T8584] __kmalloc_noprof+0xfb/0x790 [ 491.106278][ T8584] ? __register_sysctl_table+0xc02/0x1370 [ 491.106308][ T8584] ? __register_sysctl_table+0xc02/0x1370 [ 491.106346][ T8584] __register_sysctl_table+0xc02/0x1370 [ 491.106388][ T8584] register_pidns_sysctls+0x105/0x1e0 [ 491.106418][ T8584] copy_pid_ns+0x54d/0x940 [ 491.106457][ T8584] ? __pfx_copy_pid_ns+0x10/0x10 [ 491.106488][ T8584] ? rcu_is_watching+0x16/0xb0 [ 491.106525][ T8584] ? __pfx_copy_mnt_ns+0x10/0x10 [ 491.106550][ T8584] ? create_new_namespaces+0x33/0x6b0 [ 491.106588][ T8584] ? copy_ipcs+0x2a9/0x6c0 [ 491.106619][ T8584] ? copy_utsname+0x184/0x620 [ 491.106648][ T8584] create_new_namespaces+0x2ad/0x6b0 [ 491.106691][ T8584] ? security_capable+0x7e/0x2c0 [ 491.106733][ T8584] unshare_nsproxy_namespaces+0x149/0x190 [ 491.106769][ T8584] ksys_unshare+0x5a7/0x950 [ 491.106811][ T8584] ? __pfx_ksys_unshare+0x10/0x10 [ 491.106845][ T8584] ? rcu_is_watching+0x16/0xb0 [ 491.106889][ T8584] __x64_sys_unshare+0x38/0x50 [ 491.106922][ T8584] do_syscall_64+0x166/0x520 [ 491.106945][ T8584] ? trace_irq_disable+0x3b/0x140 [ 491.106974][ T8584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.106997][ T8584] ? clear_bhb_loop+0x70/0xc0 [ 491.107025][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.107048][ T8584] RIP: 0033:0x7f8a15dfe159 [ 491.107069][ T8584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.107089][ T8584] RSP: 002b:00007f8a14014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 491.107114][ T8584] RAX: ffffffffffffffda RBX: 00007f8a16086180 RCX: 00007f8a15dfe159 [ 491.107132][ T8584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 491.107146][ T8584] RBP: 00007f8a15e9506b R08: 0000000000000000 R09: 0000000000000000 [ 491.107161][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.107176][ T8584] R13: 00007f8a16086218 R14: 00007f8a16086180 R15: 00007fff46074198 [ 491.107212][ T8584] [ 491.107237][ T8584] sysctl could not get directory: /kernel -12 [ 491.126306][ T61] Bluetooth: hci5: command tx timeout [ 491.236728][ T31] usb 3-1: device descriptor read/64, error -71 [ 492.027192][ T8472] lo speed is unknown, defaulting to 1000 [ 492.049771][ T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 492.191916][ T31] usb 3-1: device descriptor read/64, error -71 [ 492.442157][ T31] usb usb3-port1: attempt power cycle [ 494.192890][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 494.402039][ T31] usb 3-1: device not accepting address 24, error -71 [ 494.883660][ T154] hsr_slave_0: left promiscuous mode [ 494.914614][ T154] hsr_slave_1: left promiscuous mode [ 494.915482][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.956684][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.587550][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 495.592738][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 495.672070][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 495.676290][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 495.678703][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 495.679463][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.851970][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 496.853413][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 496.854798][ T9] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 496.854824][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 496.854845][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 496.854865][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 496.854885][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 496.854906][ T9] usb 3-1: config 0 has no interface number 0 [ 496.854949][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 496.854976][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 496.855000][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 496.855035][ T9] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.855063][ T9] usb 3-1: config 0 interface 125 has no altsetting 0 [ 496.855081][ T9] usb 3-1: config 0 interface 125 has no altsetting 2 [ 496.858690][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.858716][ T9] usb 3-1: Product: syz [ 496.858732][ T9] usb 3-1: Manufacturer: syz [ 496.858748][ T9] usb 3-1: SerialNumber: syz [ 496.871575][ T9] usb 3-1: config 0 descriptor?? [ 496.886795][ T9] usb 3-1: selecting invalid altsetting 2 [ 498.113470][ T8641] input: syz1 as /devices/virtual/input/input31 [ 498.713342][ T9] get_1284_register timeout [ 498.717020][ C0] usb 3-1: async_complete: urb error -104 [ 498.717123][ C0] usb 3-1: async_complete: urb error -104 [ 498.717211][ C0] usb 3-1: async_complete: urb error -104 [ 498.717299][ C0] usb 3-1: async_complete: urb error -104 [ 498.870184][ T61] Bluetooth: hci3: command tx timeout [ 499.003625][ T9] usb 3-1: USB disconnect, device number 26 [ 499.147506][ T154] team0 (unregistering): Port device team_slave_1 removed [ 499.244279][ T154] team0 (unregistering): Port device team_slave_0 removed [ 500.543190][ T8658] input: syz1 as /devices/virtual/input/input32 [ 501.132004][ T61] Bluetooth: hci3: command tx timeout [ 501.397017][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.397087][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.155249][ T61] Bluetooth: hci3: command tx timeout [ 503.376077][ T8687] netlink: 60 bytes leftover after parsing attributes in process `syz.4.618'. [ 504.712127][ T8712] FAULT_INJECTION: forcing a failure. [ 504.712127][ T8712] name failslab, interval 1, probability 0, space 0, times 0 [ 504.712185][ T8712] CPU: 1 UID: 0 PID: 8712 Comm: syz.0.611 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 504.712210][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 504.712223][ T8712] Call Trace: [ 504.712249][ T8712] [ 504.712258][ T8712] dump_stack_lvl+0xe8/0x150 [ 504.712296][ T8712] should_fail_ex+0x46b/0x600 [ 504.712330][ T8712] should_failslab+0xa8/0x100 [ 504.712366][ T8712] __kmalloc_noprof+0xfb/0x790 [ 504.712396][ T8712] ? __register_sysctl_table+0xc02/0x1370 [ 504.712423][ T8712] ? __register_sysctl_table+0xc02/0x1370 [ 504.712465][ T8712] __register_sysctl_table+0xc02/0x1370 [ 504.712504][ T8712] register_pidns_sysctls+0x105/0x1e0 [ 504.712531][ T8712] copy_pid_ns+0x54d/0x940 [ 504.712568][ T8712] ? __pfx_copy_pid_ns+0x10/0x10 [ 504.712596][ T8712] ? rcu_is_watching+0x16/0xb0 [ 504.712629][ T8712] ? __pfx_copy_mnt_ns+0x10/0x10 [ 504.712648][ T8712] ? create_new_namespaces+0x33/0x6b0 [ 504.712682][ T8712] ? copy_ipcs+0x2a9/0x6c0 [ 504.712709][ T8712] ? copy_utsname+0x184/0x620 [ 504.712736][ T8712] create_new_namespaces+0x2ad/0x6b0 [ 504.712768][ T8712] ? security_capable+0x7e/0x2c0 [ 504.712805][ T8712] unshare_nsproxy_namespaces+0x149/0x190 [ 504.712839][ T8712] ksys_unshare+0x5a7/0x950 [ 504.712876][ T8712] ? __pfx_ksys_unshare+0x10/0x10 [ 504.712921][ T8712] ? rcu_is_watching+0x16/0xb0 [ 504.712963][ T8712] __x64_sys_unshare+0x38/0x50 [ 504.712994][ T8712] do_syscall_64+0x166/0x520 [ 504.713016][ T8712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.713039][ T8712] ? clear_bhb_loop+0x70/0xc0 [ 504.713065][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.713087][ T8712] RIP: 0033:0x7f367485e159 [ 504.713107][ T8712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.713127][ T8712] RSP: 002b:00007f3672a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 504.713151][ T8712] RAX: ffffffffffffffda RBX: 00007f3674ae6180 RCX: 00007f367485e159 [ 504.713168][ T8712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 504.713182][ T8712] RBP: 00007f36748f506b R08: 0000000000000000 R09: 0000000000000000 [ 504.713196][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.713210][ T8712] R13: 00007f3674ae6218 R14: 00007f3674ae6180 R15: 00007ffc13ba1c28 [ 504.713243][ T8712] [ 504.713280][ T8712] sysctl could not get directory: /kernel -12 [ 505.304045][ T61] Bluetooth: hci3: command tx timeout [ 505.677587][ T8631] lo speed is unknown, defaulting to 1000 [ 506.162024][ T8724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.615'. [ 509.032068][ T8472] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.032929][ T8472] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.033110][ T8472] bridge_slave_0: entered allmulticast mode [ 509.046190][ T8472] bridge_slave_0: entered promiscuous mode [ 509.081106][ T8472] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.081250][ T8472] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.081411][ T8472] bridge_slave_1: entered allmulticast mode [ 509.105453][ T8472] bridge_slave_1: entered promiscuous mode [ 509.296452][ T8472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.334239][ T8472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.277024][ T8472] team0: Port device team_slave_0 added [ 510.305163][ T8472] team0: Port device team_slave_1 added [ 513.145879][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.145896][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.145917][ T8472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.218820][ T8472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.218835][ T8472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.218857][ T8472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.790915][ T8798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.634'. [ 514.839791][ T8472] hsr_slave_0: entered promiscuous mode [ 514.859937][ T8472] hsr_slave_1: entered promiscuous mode [ 514.867668][ T8472] debugfs: 'hsr0' already exists in 'hsr' [ 514.867695][ T8472] Cannot create hsr debugfs directory [ 520.440797][ T8823] netlink: 43 bytes leftover after parsing attributes in process `syz.4.640'. [ 521.035027][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.036759][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.036938][ T8631] bridge_slave_0: entered allmulticast mode [ 521.040057][ T8631] bridge_slave_0: entered promiscuous mode [ 522.747844][ T6017] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 522.780187][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.782207][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.784247][ T8631] bridge_slave_1: entered allmulticast mode [ 522.787546][ T8631] bridge_slave_1: entered promiscuous mode [ 522.893519][ T1239] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 522.903113][ T8631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.927039][ T6017] usb 3-1: Using ep0 maxpacket: 16 [ 522.933977][ T6017] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 522.941456][ T6017] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 522.941529][ T6017] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 522.941578][ T6017] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 522.941643][ T6017] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 522.941691][ T6017] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 522.941733][ T6017] usb 3-1: config 0 has no interface number 0 [ 522.944141][ T6017] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 522.944224][ T6017] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 522.944325][ T6017] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.944416][ T6017] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 522.944489][ T6017] usb 3-1: config 0 interface 125 has no altsetting 0 [ 522.944539][ T6017] usb 3-1: config 0 interface 125 has no altsetting 2 [ 522.996003][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.996075][ T6017] usb 3-1: Product: syz [ 522.996110][ T6017] usb 3-1: Manufacturer: syz [ 522.996151][ T6017] usb 3-1: SerialNumber: syz [ 523.052904][ T6017] usb 3-1: config 0 descriptor?? [ 523.065266][ T1239] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 523.092939][ T1239] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 523.092966][ T1239] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.092987][ T1239] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 523.093008][ T1239] usb 5-1: config 1 has no interface number 2 [ 523.093073][ T1239] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 523.093097][ T1239] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.093124][ T1239] usb 5-1: config 1 interface 1 has no altsetting 0 [ 523.095177][ T8631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.100711][ T1239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.100739][ T1239] usb 5-1: Product: syz [ 523.100756][ T1239] usb 5-1: Manufacturer: syz [ 523.100786][ T1239] usb 5-1: SerialNumber: syz [ 523.220231][ T6017] usb 3-1: selecting invalid altsetting 2 [ 523.482946][ T8631] team0: Port device team_slave_0 added [ 523.607386][ T8631] team0: Port device team_slave_1 added [ 523.634998][ T8832] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 525.572751][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.587956][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.588329][ T6017] get_1284_register timeout [ 525.606735][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.608086][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.609315][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.610432][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.612018][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.612479][ T1239] ATM dev 0: failed to start ADSL synchronisation: -32 [ 525.620014][ C0] usb 3-1: async_complete: urb error -104 [ 525.620425][ C0] usb 3-1: async_complete: urb error -104 [ 525.620545][ C0] usb 3-1: async_complete: urb error -104 [ 525.620707][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 525.660706][ C0] usbatm_complete: 23 callbacks suppressed [ 525.660730][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783c800 failed (-71)! [ 525.662937][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783c300 failed (-71)! [ 525.679654][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783c700 failed (-71)! [ 525.679850][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783cf00 failed (-71)! [ 525.723893][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.724701][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.726900][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.727976][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.728788][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.730429][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 525.730780][ T1239] speedtch 5-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 525.730839][ T1239] speedtch 5-1:1.27: usbatm_usb_probe: bind failed: -16! [ 525.730978][ T1239] speedtch 5-1:1.27: probe with driver speedtch failed with error -16 [ 525.788793][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783c800 failed (-71)! [ 525.788885][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783c300 failed (-71)! [ 525.788954][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783c700 failed (-71)! [ 525.789010][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783cf00 failed (-71)! [ 525.893128][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783c800 failed (-71)! [ 525.893205][ C0] ATM dev 0: usbatm_complete: urb 0xffff88803783c300 failed (-71)! [ 525.895218][ T1239] usb 5-1: USB disconnect, device number 20 [ 526.040842][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.040861][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.040901][ T8631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.131169][ T8844] netlink: 60 bytes leftover after parsing attributes in process `syz.4.646'. [ 526.214770][ T6017] usb 3-1: USB disconnect, device number 27 [ 527.922200][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.922220][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.922251][ T8631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.013220][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 529.745674][ T8631] hsr_slave_0: entered promiscuous mode [ 529.752611][ T8631] hsr_slave_1: entered promiscuous mode [ 529.756185][ T8631] debugfs: 'hsr0' already exists in 'hsr' [ 529.756214][ T8631] Cannot create hsr debugfs directory [ 531.845044][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 531.991988][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 531.992913][ T5887] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 531.994533][ T5887] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 531.994560][ T5887] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 531.994583][ T5887] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 531.994605][ T5887] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 531.994627][ T5887] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 531.994650][ T5887] usb 1-1: config 0 has no interface number 0 [ 531.994705][ T5887] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 531.994737][ T5887] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 531.994763][ T5887] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 531.994802][ T5887] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.994833][ T5887] usb 1-1: config 0 interface 125 has no altsetting 0 [ 531.994854][ T5887] usb 1-1: config 0 interface 125 has no altsetting 2 [ 531.998248][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.998275][ T5887] usb 1-1: Product: syz [ 531.998292][ T5887] usb 1-1: Manufacturer: syz [ 531.998308][ T5887] usb 1-1: SerialNumber: syz [ 533.412745][ T5887] usb 1-1: config 0 descriptor?? [ 533.442279][ T154] bridge_slave_1: left allmulticast mode [ 533.442313][ T154] bridge_slave_1: left promiscuous mode [ 533.442810][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.771536][ T5887] usb 1-1: can't set config #0, error -71 [ 533.830566][ T5887] usb 1-1: USB disconnect, device number 12 [ 533.936189][ T8892] netlink: 60 bytes leftover after parsing attributes in process `syz.2.662'. [ 534.106452][ T154] bridge_slave_0: left allmulticast mode [ 534.106494][ T154] bridge_slave_0: left promiscuous mode [ 534.106780][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.210364][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.661'. [ 535.522845][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.625517][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.670103][ T154] bond0 (unregistering): Released all slaves [ 536.372786][ T8908] Attempt to restore checkpoint with obsolete wellknown handles [ 536.672567][ T154] hsr_slave_0: left promiscuous mode [ 536.683093][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.753023][ T154] hsr_slave_1: left promiscuous mode [ 536.754137][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.757283][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.758716][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.759828][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.761051][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.807108][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.987036][ T154] team0 (unregistering): Port device team_slave_1 removed [ 538.987345][ T8931] Attempt to restore checkpoint with obsolete wellknown handles [ 539.002063][ T61] Bluetooth: hci4: command tx timeout [ 539.042727][ T154] team0 (unregistering): Port device team_slave_0 removed [ 539.291999][ T999] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 539.452038][ T999] usb 3-1: Using ep0 maxpacket: 16 [ 539.453727][ T999] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 539.478556][ T999] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 539.478586][ T999] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 539.478609][ T999] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 539.478631][ T999] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 539.478653][ T999] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 539.478676][ T999] usb 3-1: config 0 has no interface number 0 [ 539.478726][ T999] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 539.478757][ T999] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 539.478781][ T999] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 539.478820][ T999] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.478851][ T999] usb 3-1: config 0 interface 125 has no altsetting 0 [ 539.478872][ T999] usb 3-1: config 0 interface 125 has no altsetting 2 [ 539.538224][ T999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.538253][ T999] usb 3-1: Product: syz [ 539.538270][ T999] usb 3-1: Manufacturer: syz [ 539.538286][ T999] usb 3-1: SerialNumber: syz [ 539.671340][ T999] usb 3-1: config 0 descriptor?? [ 539.705701][ T999] usb 3-1: selecting invalid altsetting 2 [ 540.954425][ T999] get_1284_register timeout [ 540.954594][ C1] usb 3-1: async_complete: urb error -104 [ 540.954712][ C1] usb 3-1: async_complete: urb error -104 [ 540.954805][ C1] usb 3-1: async_complete: urb error -104 [ 540.954899][ C1] usb 3-1: async_complete: urb error -104 [ 541.073238][ T61] Bluetooth: hci4: command tx timeout [ 541.976479][ T8909] lo speed is unknown, defaulting to 1000 [ 542.209857][ T8965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.675'. [ 542.887214][ T999] usb 3-1: USB disconnect, device number 28 [ 543.941428][ T61] Bluetooth: hci4: command tx timeout [ 544.146575][ T8986] nvme_fabrics: missing parameter 'traddr=%s' [ 544.227969][ T154] bridge_slave_1: left allmulticast mode [ 544.228012][ T154] bridge_slave_1: left promiscuous mode [ 544.228290][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.473199][ T154] bridge_slave_0: left allmulticast mode [ 544.473235][ T154] bridge_slave_0: left promiscuous mode [ 544.477403][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.252820][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.395747][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.745614][ T154] bond0 (unregistering): Released all slaves [ 546.117907][ T61] Bluetooth: hci4: command tx timeout [ 547.111283][ T9013] FAULT_INJECTION: forcing a failure. [ 547.111283][ T9013] name failslab, interval 1, probability 0, space 0, times 0 [ 547.111339][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.0.686 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 547.111377][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 547.111391][ T9013] Call Trace: [ 547.111400][ T9013] [ 547.111411][ T9013] dump_stack_lvl+0xe8/0x150 [ 547.111451][ T9013] should_fail_ex+0x46b/0x600 [ 547.111489][ T9013] should_failslab+0xa8/0x100 [ 547.111528][ T9013] __kmalloc_noprof+0xfb/0x790 [ 547.111560][ T9013] ? vb2_core_reqbufs+0x931/0x1470 [ 547.111637][ T9013] ? vb2_core_reqbufs+0x931/0x1470 [ 547.111666][ T9013] ? vb2_core_reqbufs+0x8c4/0x1470 [ 547.111697][ T9013] vb2_core_reqbufs+0x931/0x1470 [ 547.111741][ T9013] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 547.111774][ T9013] ? unwind_get_return_address+0x4d/0x90 [ 547.111803][ T9013] ? __vb2_init_fileio+0x1e2/0x1040 [ 547.111830][ T9013] ? __vb2_init_fileio+0x1e2/0x1040 [ 547.111867][ T9013] __vb2_init_fileio+0x310/0x1040 [ 547.111913][ T9013] __vb2_perform_fileio+0x287/0x1660 [ 547.111945][ T9013] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 547.111972][ T9013] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 547.111997][ T9013] ? vb2_fop_read+0xfb/0x370 [ 547.112065][ T9013] vb2_fop_read+0x28b/0x370 [ 547.112102][ T9013] v4l2_read+0x19f/0x2c0 [ 547.112184][ T9013] vfs_readv+0x588/0x850 [ 547.112222][ T9013] ? __pfx_v4l2_read+0x10/0x10 [ 547.112256][ T9013] ? __pfx_vfs_readv+0x10/0x10 [ 547.112321][ T9013] ? __fget_files+0x2a/0x420 [ 547.112352][ T9013] ? __fget_files+0x3a8/0x420 [ 547.112375][ T9013] ? __fget_files+0x2a/0x420 [ 547.112410][ T9013] __x64_sys_preadv+0x19f/0x2c0 [ 547.112445][ T9013] ? __pfx___x64_sys_preadv+0x10/0x10 [ 547.112489][ T9013] do_syscall_64+0x166/0x520 [ 547.112512][ T9013] ? trace_irq_disable+0x3b/0x140 [ 547.112542][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.112567][ T9013] ? clear_bhb_loop+0x70/0xc0 [ 547.112596][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.112620][ T9013] RIP: 0033:0x7f367485e159 [ 547.112642][ T9013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.112663][ T9013] RSP: 002b:00007f3672ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 547.112689][ T9013] RAX: ffffffffffffffda RBX: 00007f3674ae5fa0 RCX: 00007f367485e159 [ 547.112707][ T9013] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 547.112722][ T9013] RBP: 00007f3672ab6090 R08: 000000000000c84d R09: 0000000000000000 [ 547.112758][ T9013] R10: 00000000fffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 547.112774][ T9013] R13: 00007f3674ae6038 R14: 00007f3674ae5fa0 R15: 00007ffc13ba1c28 [ 547.112810][ T9013] [ 547.584974][ T9019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.688'. [ 547.882241][ T61] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 548.127728][ T61] Bluetooth: hci2: Injecting HCI hardware error event [ 548.204738][ T5597] Bluetooth: hci2: hardware error 0x00 [ 551.752260][ T6017] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 552.653520][ T154] hsr_slave_0: left promiscuous mode [ 552.672077][ T6017] usb 3-1: Using ep0 maxpacket: 16 [ 552.672901][ T6017] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 552.674044][ T6017] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 552.674068][ T6017] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.674088][ T6017] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.674106][ T6017] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.674124][ T6017] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 552.674144][ T6017] usb 3-1: config 0 has no interface number 0 [ 552.674204][ T6017] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 552.674239][ T6017] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 552.674262][ T6017] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 552.674290][ T6017] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 552.674316][ T6017] usb 3-1: config 0 interface 125 has no altsetting 0 [ 552.674334][ T6017] usb 3-1: config 0 interface 125 has no altsetting 2 [ 552.674729][ T154] hsr_slave_1: left promiscuous mode [ 552.675900][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.679890][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.679918][ T6017] usb 3-1: Product: syz [ 552.679935][ T6017] usb 3-1: Manufacturer: syz [ 552.679952][ T6017] usb 3-1: SerialNumber: syz [ 552.705091][ T6017] usb 3-1: config 0 descriptor?? [ 552.858120][ T6017] usb 3-1: selecting invalid altsetting 2 [ 552.872934][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.233025][ T5597] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 553.363512][ T154] team0 (unregistering): Port device team_slave_1 removed [ 553.432785][ T154] team0 (unregistering): Port device team_slave_0 removed [ 553.887206][ T6017] get_1284_register timeout [ 553.887354][ C0] usb 3-1: async_complete: urb error -104 [ 553.887460][ C0] usb 3-1: async_complete: urb error -104 [ 553.887556][ C0] usb 3-1: async_complete: urb error -104 [ 554.030059][ T9] usb 3-1: USB disconnect, device number 29 [ 554.489251][ T9050] netlink: 43 bytes leftover after parsing attributes in process `syz.0.694'. [ 555.118228][ T9058] netlink: 60 bytes leftover after parsing attributes in process `syz.4.695'. [ 555.158530][ T9058] netlink: 60 bytes leftover after parsing attributes in process `syz.4.695'. [ 555.194704][ T8631] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 555.283774][ T9055] netlink: 'syz.2.696': attribute type 15 has an invalid length. [ 555.323729][ T8631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 555.626237][ T9055] vxlan0: entered promiscuous mode [ 555.660818][ T9055] vxlan0: entered allmulticast mode [ 555.709088][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.709223][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.709421][ T8909] bridge_slave_0: entered allmulticast mode [ 555.731162][ T8909] bridge_slave_0: entered promiscuous mode [ 555.752415][ T145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0 [ 555.752477][ T145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0 [ 555.752519][ T145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0 [ 555.758328][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.759286][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.759486][ T8909] bridge_slave_1: entered allmulticast mode [ 555.772559][ T8909] bridge_slave_1: entered promiscuous mode [ 555.910818][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.912795][ T3325] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 31488 - 0 [ 555.962849][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.098767][ T8909] team0: Port device team_slave_0 added [ 556.111438][ T8909] team0: Port device team_slave_1 added [ 556.167925][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 556.654204][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.694237][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.715425][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.718547][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 556.719606][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 559.667561][ T5597] Bluetooth: hci3: command tx timeout [ 561.364551][ T9100] FAULT_INJECTION: forcing a failure. [ 561.364551][ T9100] name failslab, interval 1, probability 0, space 0, times 0 [ 561.364590][ T9100] CPU: 1 UID: 0 PID: 9100 Comm: syz.4.704 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 561.364616][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 561.364631][ T9100] Call Trace: [ 561.364640][ T9100] [ 561.364650][ T9100] dump_stack_lvl+0xe8/0x150 [ 561.364688][ T9100] should_fail_ex+0x46b/0x600 [ 561.364725][ T9100] should_failslab+0xa8/0x100 [ 561.364774][ T9100] __kmalloc_cache_noprof+0xa1/0x680 [ 561.364804][ T9100] ? ip6_setup_cork+0x6f1/0xfb0 [ 561.364907][ T9100] ? ip6_setup_cork+0x6f1/0xfb0 [ 561.364937][ T9100] ip6_setup_cork+0x6f1/0xfb0 [ 561.364969][ T9100] ip6_append_data+0x175/0x270 [ 561.364994][ T9100] ? __pfx_raw6_getfrag+0x10/0x10 [ 561.365071][ T9100] rawv6_sendmsg+0x1298/0x18c0 [ 561.365113][ T9100] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 561.365147][ T9100] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 561.365180][ T9100] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 561.365228][ T9100] ? sock_rps_record_flow+0x19/0x350 [ 561.365296][ T9100] ? inet_sendmsg+0x298/0x320 [ 561.365318][ T9100] ? __fget_files+0x2a/0x420 [ 561.365342][ T9100] ? __pfx_inet_sendmsg+0x10/0x10 [ 561.365366][ T9100] sock_sendmsg_nosec+0x10e/0x180 [ 561.365399][ T9100] __sys_sendto+0x41e/0x5d0 [ 561.365425][ T9100] ? __pfx___sys_sendto+0x10/0x10 [ 561.365473][ T9100] ? __pfx_ksys_write+0x10/0x10 [ 561.365504][ T9100] __x64_sys_sendto+0xde/0x100 [ 561.365528][ T9100] do_syscall_64+0x166/0x520 [ 561.365549][ T9100] ? trace_irq_disable+0x3b/0x140 [ 561.365576][ T9100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.365598][ T9100] ? clear_bhb_loop+0x70/0xc0 [ 561.365624][ T9100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.365645][ T9100] RIP: 0033:0x7f8a15dfe159 [ 561.365665][ T9100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.365683][ T9100] RSP: 002b:00007f8a14056028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 561.365707][ T9100] RAX: ffffffffffffffda RBX: 00007f8a16085fa0 RCX: 00007f8a15dfe159 [ 561.365722][ T9100] RDX: 000000000000003c RSI: 0000200000000000 RDI: 0000000000000003 [ 561.365736][ T9100] RBP: 00007f8a14056090 R08: 0000000000000000 R09: fffffffffffffec8 [ 561.365751][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.365764][ T9100] R13: 00007f8a16086038 R14: 00007f8a16085fa0 R15: 00007fff46074198 [ 561.365797][ T9100] [ 561.618639][ T154] bridge_slave_1: left allmulticast mode [ 561.618675][ T154] bridge_slave_1: left promiscuous mode [ 561.618942][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.711889][ T5597] Bluetooth: hci3: command tx timeout [ 561.837762][ T154] bridge_slave_0: left allmulticast mode [ 561.837958][ T154] bridge_slave_0: left promiscuous mode [ 561.838789][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.861822][ T9107] netlink: 43 bytes leftover after parsing attributes in process `syz.4.705'. [ 562.671597][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 562.702458][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.766470][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.803485][ T154] bond0 (unregistering): Released all slaves [ 562.837514][ T9113] tmpfs: Unknown parameter 'nr_in' [ 562.848543][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.848613][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.957357][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.957377][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.957407][ T8909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.027976][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.027998][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.028027][ T8909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.201545][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 563.372796][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 563.376318][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 563.379725][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.411228][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.411260][ T9] usb 3-1: Product: syz [ 563.411277][ T9] usb 3-1: Manufacturer: syz [ 563.411294][ T9] usb 3-1: SerialNumber: syz [ 563.454973][ T9] usb 3-1: config 0 descriptor?? [ 563.461438][ T8909] hsr_slave_0: entered promiscuous mode [ 563.479331][ T8909] hsr_slave_1: entered promiscuous mode [ 563.490972][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 563.491085][ T9] usb 3-1: selecting invalid altsetting 1 [ 563.629571][ T9122] Attempt to restore checkpoint with obsolete wellknown handles [ 563.795591][ T5597] Bluetooth: hci3: command tx timeout [ 563.912012][ T154] hsr_slave_0: left promiscuous mode [ 563.952985][ T154] hsr_slave_1: left promiscuous mode [ 563.958775][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.002263][ T9] gspca_stk014: reg_r err -110 [ 564.002420][ T9] stk014 3-1:0.0: probe with driver stk014 failed with error -110 [ 564.014805][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.574216][ T154] team0 (unregistering): Port device team_slave_1 removed [ 564.632897][ T154] team0 (unregistering): Port device team_slave_0 removed [ 565.346008][ T9142] netlink: 43 bytes leftover after parsing attributes in process `syz.0.717'. [ 565.872858][ T5597] Bluetooth: hci3: command tx timeout [ 565.878504][ T9] usb 3-1: USB disconnect, device number 30 [ 568.043241][ T9152] FAULT_INJECTION: forcing a failure. [ 568.043241][ T9152] name failslab, interval 1, probability 0, space 0, times 0 [ 568.043280][ T9152] CPU: 0 UID: 0 PID: 9152 Comm: syz.4.719 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 568.043311][ T9152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 568.043324][ T9152] Call Trace: [ 568.043333][ T9152] [ 568.043342][ T9152] dump_stack_lvl+0xe8/0x150 [ 568.043379][ T9152] should_fail_ex+0x46b/0x600 [ 568.043419][ T9152] should_failslab+0xa8/0x100 [ 568.043453][ T9152] ? vm_area_alloc+0x24/0x140 [ 568.043484][ T9152] kmem_cache_alloc_noprof+0x9e/0x690 [ 568.043514][ T9152] ? vm_area_alloc+0x24/0x140 [ 568.043550][ T9152] vm_area_alloc+0x24/0x140 [ 568.043582][ T9152] mmap_region+0x12e1/0x2220 [ 568.043615][ T9152] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 568.043640][ T9152] ? __pfx_mmap_region+0x10/0x10 [ 568.043665][ T9152] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 568.043691][ T9152] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 568.043723][ T9152] ? __lock_acquire+0x747/0x2de0 [ 568.043758][ T9152] ? __lock_acquire+0x747/0x2de0 [ 568.043833][ T9152] ? __lock_acquire+0x747/0x2de0 [ 568.043894][ T9152] ? __lock_acquire+0x747/0x2de0 [ 568.043922][ T9152] ? cap_mmap_addr+0xaf/0x100 [ 568.043951][ T9152] ? bpf_lsm_mmap_addr+0x9/0x50 [ 568.043972][ T9152] ? security_mmap_addr+0x71/0x240 [ 568.044002][ T9152] ? shmem_mapping+0xd/0x50 [ 568.044024][ T9152] ? memfd_check_seals_mmap+0xcb/0x230 [ 568.044048][ T9152] do_mmap+0xe0e/0x1310 [ 568.044081][ T9152] ? __pfx_do_mmap+0x10/0x10 [ 568.044114][ T9152] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 568.044139][ T9152] ? rwbase_write_lock+0x550/0x720 [ 568.044175][ T9152] vm_mmap_pgoff+0x275/0x4e0 [ 568.044206][ T9152] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 568.044236][ T9152] ? __fget_files+0x2a/0x420 [ 568.044257][ T9152] ? __fget_files+0x3a8/0x420 [ 568.044278][ T9152] ? __fget_files+0x2a/0x420 [ 568.044311][ T9152] ksys_mmap_pgoff+0x4a6/0x720 [ 568.044338][ T9152] ? __x64_sys_mmap+0x7f/0x140 [ 568.044364][ T9152] do_syscall_64+0x166/0x520 [ 568.044385][ T9152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.044406][ T9152] ? clear_bhb_loop+0x70/0xc0 [ 568.044432][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.044454][ T9152] RIP: 0033:0x7f8a15dfe159 [ 568.044474][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.044491][ T9152] RSP: 002b:00007f8a14014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 568.044524][ T9152] RAX: ffffffffffffffda RBX: 00007f8a16086180 RCX: 00007f8a15dfe159 [ 568.044539][ T9152] RDX: 0000000000000002 RSI: 0000000000002000 RDI: 0000200000000000 [ 568.044552][ T9152] RBP: 00007f8a14014090 R08: 0000000000000006 R09: 0000000000000000 [ 568.044565][ T9152] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 568.044577][ T9152] R13: 00007f8a16086218 R14: 00007f8a16086180 R15: 00007fff46074198 [ 568.044608][ T9152] [ 568.432694][ T9078] lo speed is unknown, defaulting to 1000 [ 569.094917][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 569.094944][ C0] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 569.094966][ C0] preempt_count: 0, expected: 0 [ 569.094978][ C0] RCU nest depth: 2, expected: 0 [ 569.095004][ C0] locks held by ktimers/0/16: 4, last CPU#0: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 569.095023][ C0] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 569.095102][ C0] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 569.095172][ C0] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 569.095327][ C0] #3: ffff888034a5a358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 569.095433][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 569.095462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 569.095478][ C0] Call Trace: [ 569.095487][ C0] [ 569.095498][ C0] dump_stack_lvl+0xe8/0x150 [ 569.095537][ C0] __might_resched+0x31b/0x470 [ 569.095579][ C0] lock_sock_nested+0x56/0x130 [ 569.095616][ C0] x25_kill_by_neigh+0x134/0x2a0 [ 569.095650][ C0] ? x25_kill_by_neigh+0x2b/0x2a0 [ 569.095689][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 569.095732][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 569.095763][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 569.095793][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 569.095838][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 569.095897][ C0] lapbeth_napi_poll+0x45/0x90 [ 569.095956][ C0] __napi_poll+0xae/0x550 [ 569.096018][ C0] net_rx_action+0x621/0xd70 [ 569.096069][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 569.096103][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 569.096154][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 569.096210][ C0] handle_softirqs+0x1da/0x6d0 [ 569.096256][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 569.096299][ C0] run_ktimerd+0x6a/0x100 [ 569.096336][ C0] smpboot_thread_fn+0x565/0xa70 [ 569.096377][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 569.096423][ C0] kthread+0x38b/0x470 [ 569.096450][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 569.096486][ C0] ? __pfx_kthread+0x10/0x10 [ 569.096514][ C0] ret_from_fork+0x514/0xb70 [ 569.096543][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 569.096569][ C0] ? __switch_to+0xc89/0x1420 [ 569.096609][ C0] ? __pfx_kthread+0x10/0x10 [ 569.096637][ C0] ret_from_fork_asm+0x1a/0x30 [ 569.096680][ C0] [ 569.959960][ T9148] Attempt to restore checkpoint with obsolete wellknown handles [ 573.612208][ T1416] bridge_slave_1: left allmulticast mode [ 573.612244][ T1416] bridge_slave_1: left promiscuous mode [ 573.612531][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.783034][ T1416] bridge_slave_0: left allmulticast mode [ 573.783060][ T1416] bridge_slave_0: left promiscuous mode [ 573.783235][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.232540][ T1416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.302814][ T1416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.364304][ T1416] bond0 (unregistering): Released all slaves [ 574.387705][ T5248] 8021q: adding VLAN 0 to HW filter on device eth9 [ 574.754846][ T1416] hsr_slave_0: left promiscuous mode [ 574.791924][ T1416] hsr_slave_1: left promiscuous mode [ 574.793165][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.832871][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.242528][ T1416] team0 (unregistering): Port device team_slave_1 removed [ 575.292362][ T1416] team0 (unregistering): Port device team_slave_0 removed [ 575.474563][ T5248] 8021q: adding VLAN 0 to HW filter on device eth10 [ 576.556827][ T5248] 8021q: adding VLAN 0 to HW filter on device eth11 [ 577.055656][ T5248] 8021q: adding VLAN 0 to HW filter on device eth12 [ 577.690237][ T1416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.036937][ T1416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.093736][ T5248] 8021q: adding VLAN 0 to HW filter on device eth13 [ 578.379388][ T1416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.742012][ T1416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.794726][ T5248] 8021q: adding VLAN 0 to HW filter on device eth14 [ 579.641412][ T1416] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0