last executing test programs: 14.686325132s ago: executing program 4 (id=596): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 13.367732513s ago: executing program 4 (id=603): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 11.600148447s ago: executing program 4 (id=606): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160"}, 0xe2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB], 0x34}}, 0x2004c000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 9.511267388s ago: executing program 2 (id=613): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRESDEC], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) 9.379384801s ago: executing program 4 (id=614): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x8242, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x81899, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x4) 8.316813057s ago: executing program 2 (id=616): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 8.115893592s ago: executing program 2 (id=618): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0xffffffff}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x53, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x0, 0x0, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f00000000c0), 0x4, 0x2, &(0x7f0000000200), &(0x7f0000000240), 0x1) syz_emit_ethernet(0x56, &(0x7f00000008c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000380)="00f589e0be8c68984368c18cb1a51792edfc64ebcd10f08d4ad201ca72131f9de2adbe7c0ee658d73b468667e360af95484d7e09b9003e882e6ca383ef0eebd756ead670a8c525", 0xfceb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r6 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r6, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) 7.997892225s ago: executing program 3 (id=619): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.620057853s ago: executing program 1 (id=621): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xfffffffffffffde4, &(0x7f00000002c0)=0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r3, &(0x7f0000000140)=""/117, 0x75) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') 7.550497866s ago: executing program 3 (id=622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 7.401286269s ago: executing program 2 (id=623): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, 0x0, 0x20000010) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10162, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x2000000d}) read$FUSE(r4, &(0x7f00000019c0)={0x2020}, 0xfffffdda) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x20000, 0x1, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0x20) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010027bd70010000d3a05ffa0000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c001a800800028004000180"], 0x34}}, 0x0) 6.672381747s ago: executing program 3 (id=624): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160"}, 0xe2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB], 0x34}}, 0x2004c000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 6.630988498s ago: executing program 0 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x30) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x32400, 0x0) fcntl$notify(r4, 0x402, 0x8000000e) 6.068016282s ago: executing program 3 (id=626): syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x400400c) 5.29711794s ago: executing program 0 (id=627): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0000, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002100)=0x40) socket$netlink(0x10, 0x3, 0x4) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x2000, 0x24000, 0x10000e}}) 4.823246092s ago: executing program 2 (id=628): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs(0x0, &(0x7f0000003100)='fdinfo\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3eb, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e25, @empty}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.459854721s ago: executing program 1 (id=629): eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000001240), 0x80000) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000100) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) 4.130163869s ago: executing program 3 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000280)=[@free_buffer, @acquire], 0x3, 0x0, &(0x7f0000000580)='\x00\x00\x00'}) 3.990352092s ago: executing program 0 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r2, @ANYBLOB="05002f"], 0x2c}}, 0x18) 3.929870544s ago: executing program 1 (id=632): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000a28000000000a010100010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000e00010073797a30000000000900030073797a32000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xc3}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl(r2, 0x1000, &(0x7f0000000000)="868a51fb1d642017deca96830d950cc3f0bb1fa03e63152d9bce13444fc8e670d251849c7c803ddae073718b01466dfe55babf796ca3f99839") r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) fcntl$setlease(r0, 0x400, 0x1) socket$l2tp6(0xa, 0x2, 0x73) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000640), 0x7, 0x2) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="eb0d0501072000ff52e72b058a318f147f9378624eb9ac768b8a3ab4a3cf"], 0x8) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x5, 0x10000, 0x80000000, 0x400}, 0x9, 0x3, 0x0, 0xfffffff5, &(0x7f0000000340)="f9055cf3f8891b495ccc28d7aa408fb2298fa6f4029b7f244c654695cd91853c8e8c2b42c21b2318e006f2ac40596dd729bbc86d6ff011cfcb77c2f9b4faba014cdd4252d781c66f19bd7c249ee38982dcc5958883ac063ce10cd6528d880c67b05d05d1ac6f0cb5d30af46f7ea1000d145ad237f75d33d866f7e179b496c1d741dc20f16afb8ba72958d1add1aa2bb03e0a27085d4ac444cd10fb13d5ead773ae6bc8ff1c16e1e4e4fd56649121ae65d9f65997294e0d126c9402d58efe85f919dd38f36b0773ce0b560cf9dedccd923c5c57655fc110e3"}}) 3.788063007s ago: executing program 0 (id=633): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) syz_open_dev$ptys(0xc, 0x3, 0x1) clock_getres(0xe2249e36e7addc67, 0x0) r4 = gettid() openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x358f, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) 3.040399506s ago: executing program 1 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 2.921613019s ago: executing program 1 (id=635): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x80000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) write(r0, &(0x7f0000000180), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0xfe}) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000340)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000092870076000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount$pvfs2(&(0x7f0000000600), &(0x7f0000000280)='./proc\x00', &(0x7f0000000140), 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="7d7db73470e13d4da84fc4b2ff5c305df72d4b3b3f2201a28dc097cdc8013f83d4c96d6e9e602dda338f390cb69696f3e20c2e16be9f42c6e6dcc60b5c62776cb2b69f1155048d96c5611d22f7b6b791862f8ef4c2a356e594a328a0e6a096dd191db6672e1ef5f1fb822101095d05771d64eb75fa254d4ef04b6f60b824da9af082f9a58036c2053b00a79df6caae38e845e12d3335ce323df0397754ee4158baf3adec659b77765c292c4e04b8010cca116353eeb544506d400c5075dace28e5431e79ab238433ca6f8d1febaf1800d6bdbf7f701a952b0c0dd1b4010cde7e298762e5e2548fe9a72ce7d724357afd5dcf4607fe54b2"]) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 2.824148641s ago: executing program 4 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000003bc0)={0x0, 0xf, "bc0193", 0x19, 0xc}) 255.882574ms ago: executing program 4 (id=637): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 255.464054ms ago: executing program 0 (id=638): socket$inet6_sctp(0xa, 0x1, 0x84) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x164e, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 215.807165ms ago: executing program 3 (id=639): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r7, @ANYBLOB="05002f"], 0x2c}}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r1, 0x400, 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000800)={0x1, 0x0, 0x1b, 0x16, 0xc6, &(0x7f0000000400)}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x230, 0x230, 0x0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x3b, 0xdd, 0x1, 0xf9, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, @private0, @mcast1, [0x0, 0x5fc17d2d4981e1dd, 0xffffffff], [0xff000000, 0xff, 0xff, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff], 0x0, 0x1000}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x160}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x1234}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x230}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0xf7, 0x1, 0x1, 0x0, 0x6, @local}, 0x14) 199.043475ms ago: executing program 1 (id=640): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x800000000000006, 0xffffffff) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r6, &(0x7f0000000200)="89", 0xffe3) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) 158.247526ms ago: executing program 0 (id=641): mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000250)='/dev/zram0,0', 0xb3) 0s ago: executing program 2 (id=642): eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f0000001240), 0x80000) socket$l2tp(0x2, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000100) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = gettid() tkill(r3, 0x21) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 45.418643][ T4169] cgroup: Unknown subsys name 'net' [ 45.554814][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.725881][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.524595][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 48.574076][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 48.617946][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 48.633976][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 48.658873][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.666237][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.674655][ T4198] device bridge_slave_0 entered promiscuous mode [ 48.687574][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.694979][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.702841][ T4198] device bridge_slave_1 entered promiscuous mode [ 48.714071][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 48.747459][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.754608][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.762790][ T4185] device bridge_slave_0 entered promiscuous mode [ 48.798432][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.805720][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.813968][ T4185] device bridge_slave_1 entered promiscuous mode [ 48.847270][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.875694][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.886562][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.921347][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.930551][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.937627][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.945662][ T4190] device bridge_slave_0 entered promiscuous mode [ 48.981150][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.988233][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.996088][ T4190] device bridge_slave_1 entered promiscuous mode [ 49.029927][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.043080][ T4198] team0: Port device team_slave_0 added [ 49.051372][ T4185] team0: Port device team_slave_0 added [ 49.058766][ T4198] team0: Port device team_slave_1 added [ 49.065950][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.075797][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.083030][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.091220][ T4189] device bridge_slave_0 entered promiscuous mode [ 49.098305][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.105688][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.113406][ T4195] device bridge_slave_0 entered promiscuous mode [ 49.127154][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.134581][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.142422][ T4195] device bridge_slave_1 entered promiscuous mode [ 49.150617][ T4185] team0: Port device team_slave_1 added [ 49.168567][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.175835][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.184282][ T4189] device bridge_slave_1 entered promiscuous mode [ 49.222437][ T4190] team0: Port device team_slave_0 added [ 49.229006][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.236004][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.262159][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.280197][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.297667][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.308277][ T4190] team0: Port device team_slave_1 added [ 49.314437][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.321774][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.347862][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.360580][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.370350][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.377295][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.403612][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.439027][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.448702][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.455780][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.482012][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.504527][ T4195] team0: Port device team_slave_0 added [ 49.513096][ T4195] team0: Port device team_slave_1 added [ 49.538101][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.545337][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.572210][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.613166][ T4198] device hsr_slave_0 entered promiscuous mode [ 49.620431][ T4198] device hsr_slave_1 entered promiscuous mode [ 49.634419][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.641712][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.667668][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.679177][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.686316][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.713159][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.726595][ T4189] team0: Port device team_slave_0 added [ 49.748390][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.755387][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.781434][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.793853][ T4189] team0: Port device team_slave_1 added [ 49.813383][ T4185] device hsr_slave_0 entered promiscuous mode [ 49.820503][ T4185] device hsr_slave_1 entered promiscuous mode [ 49.827131][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.835249][ T4185] Cannot create hsr debugfs directory [ 49.864310][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.871365][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.897577][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.918513][ T4190] device hsr_slave_0 entered promiscuous mode [ 49.925205][ T4190] device hsr_slave_1 entered promiscuous mode [ 49.931904][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.939502][ T4190] Cannot create hsr debugfs directory [ 49.966904][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.973998][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.000359][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.098683][ T4195] device hsr_slave_0 entered promiscuous mode [ 50.105710][ T4195] device hsr_slave_1 entered promiscuous mode [ 50.112991][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.120931][ T4195] Cannot create hsr debugfs directory [ 50.165983][ T4189] device hsr_slave_0 entered promiscuous mode [ 50.173351][ T4189] device hsr_slave_1 entered promiscuous mode [ 50.179964][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.187520][ T4189] Cannot create hsr debugfs directory [ 50.280103][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 50.289591][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 50.295676][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 50.302612][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 50.308678][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 50.408291][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.423514][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.438147][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.448519][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.481086][ T4198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.494947][ T4198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.503953][ T4198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.530401][ T4198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.579643][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.599379][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.611191][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.621054][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.638142][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.653829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.664805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.674537][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.709217][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.721117][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.749151][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.759068][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.768518][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.775795][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.788218][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.800113][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.822684][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.831825][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.840905][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.849348][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.856434][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.864786][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.896667][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.911460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.931428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.941005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.950383][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.959227][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.973889][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.990337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.998456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.008721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.018210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.026841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.035858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.044865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.057260][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.068095][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.087064][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.107036][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.136728][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.144811][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.180802][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.189099][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.201728][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.211457][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.218504][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.227124][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.237339][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.246603][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.253689][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.262129][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.271209][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.279300][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.307886][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.317530][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.332286][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.345312][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.352430][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.360918][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.398922][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.408086][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.416569][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.423648][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.432087][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.441050][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.452527][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.461738][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.470441][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.478731][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.487943][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.496731][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.505236][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.513517][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.522358][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.534081][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.549147][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.558229][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.566531][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.580670][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.590253][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.607051][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.616427][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.628909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.636591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.645369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.653745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.669248][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.692243][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.710076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.718312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.732782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.742512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.751280][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.758345][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.766798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.775728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.784679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.794096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.802729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.811726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.820415][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.827462][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.835775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.844250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.852783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.862226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.880724][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.921763][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.931595][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.943581][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.950702][ T498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.960367][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.969109][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.980506][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.988811][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.995903][ T498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.004655][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.013562][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.022600][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.032033][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.041271][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.049386][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.058502][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.067155][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.075852][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.084470][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.093199][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.102126][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.112052][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.121355][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.129832][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.138287][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.146894][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.155610][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.164483][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.172878][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.181459][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.189182][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.197140][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.207284][ T4190] device veth0_vlan entered promiscuous mode [ 52.226621][ T4190] device veth1_vlan entered promiscuous mode [ 52.237251][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.245566][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.254751][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.264183][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.286904][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.303916][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.323201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.340746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.348270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.360723][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 52.366018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.367400][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 52.381635][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 52.403421][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.405289][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 52.430059][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 52.450387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.458463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.475975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.493037][ T4190] device veth0_macvtap entered promiscuous mode [ 52.517877][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.528674][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.538517][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.551021][ T4190] device veth1_macvtap entered promiscuous mode [ 52.582181][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.598493][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.610976][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.626068][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.634136][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.652405][ T4189] device veth0_vlan entered promiscuous mode [ 52.685588][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.694770][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.720835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.728254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.736305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.744641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.755507][ T4189] device veth1_vlan entered promiscuous mode [ 52.770833][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.783959][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.798678][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.808221][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.820790][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.860891][ T4189] device veth0_macvtap entered promiscuous mode [ 52.868581][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.877624][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.886807][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.895867][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.905185][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.915260][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.924454][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.933508][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.942698][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.960281][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.969912][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.978610][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.987743][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.004243][ T4189] device veth1_macvtap entered promiscuous mode [ 53.021874][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.030846][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.040941][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.068453][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.080069][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.092301][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.111807][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.122097][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.135374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.144036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.160545][ T4195] device veth0_vlan entered promiscuous mode [ 53.172270][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.187606][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.208932][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.220122][ T4198] device veth0_vlan entered promiscuous mode [ 53.235442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.243893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.251979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.260930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.269255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.278000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.316398][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.326008][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.335640][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.344511][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.357598][ T4198] device veth1_vlan entered promiscuous mode [ 53.367415][ T4195] device veth1_vlan entered promiscuous mode [ 53.374669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.382765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.393355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.401915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.410246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.418766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.427599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.436582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.453183][ T4185] device veth0_vlan entered promiscuous mode [ 53.495458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.503681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.512512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.526982][ T4185] device veth1_vlan entered promiscuous mode [ 53.544413][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.569857][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.589208][ T4195] device veth0_macvtap entered promiscuous mode [ 53.604733][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.613634][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.623390][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.632095][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.640755][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.649123][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.657913][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.666701][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.677346][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.692756][ T4198] device veth0_macvtap entered promiscuous mode [ 53.721495][ T4195] device veth1_macvtap entered promiscuous mode [ 53.746153][ T4198] device veth1_macvtap entered promiscuous mode [ 53.756404][ T4185] device veth0_macvtap entered promiscuous mode [ 53.768968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.778957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.788253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.799341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.809021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.823655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.838735][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.850132][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.860387][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.871020][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.882496][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.892719][ T498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.900937][ T4185] device veth1_macvtap entered promiscuous mode [ 53.915859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.928007][ T498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.930627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.944304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.957471][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.969315][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.983456][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.994156][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.004264][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.015325][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.026516][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.041081][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.051850][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.062914][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.073809][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.084886][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.094695][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.110638][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.121314][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.131819][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.141654][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.152639][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.164625][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.172378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.182931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.192399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.202668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.212414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.221873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.250731][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.259729][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.261730][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.279212][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.280800][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.290138][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.309350][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.324473][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.334449][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.348990][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.364358][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.381640][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.393512][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.404292][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.415204][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.425766][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.435651][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.446784][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 54.452612][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.453034][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 54.466996][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.469063][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 54.483422][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 54.490301][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 54.499225][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.507620][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.516583][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.546831][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.557491][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.568250][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.579038][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.589234][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.601783][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.611644][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.622260][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.633698][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.645496][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.654716][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.663599][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.673364][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.687380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.701556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.712957][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.721588][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.761406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.857844][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.882335][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.894240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.909285][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.926975][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.940273][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.956848][ T498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.966619][ T498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.978451][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.992154][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.008250][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.017229][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.038761][ T498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.062885][ T498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.063244][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.075443][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.100737][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.123538][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.205021][ T4279] loop5: detected capacity change from 0 to 7 [ 55.219960][ T4178] Dev loop5: unable to read RDB block 7 [ 55.225688][ T4178] loop5: AHDI p1 p2 p3 [ 55.230550][ T4178] loop5: partition table partially beyond EOD, truncated [ 55.239222][ T4178] loop5: p1 start 1818582900 is beyond EOD, truncated [ 55.247896][ T4178] loop5: p3 start 335544320 is beyond EOD, truncated [ 55.262139][ T4279] Dev loop5: unable to read RDB block 7 [ 55.275219][ T146] Bluetooth: Frame is too long (len 16, expected len 4) [ 55.285680][ T4279] loop5: AHDI p1 p2 p3 [ 55.290870][ T4279] loop5: partition table partially beyond EOD, truncated [ 55.298701][ T4279] loop5: p1 start 1818582900 is beyond EOD, truncated [ 55.302112][ T4284] Zero length message leads to an empty skb [ 55.305834][ T4279] loop5: p3 start 335544320 is beyond EOD, truncated [ 55.356229][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.739464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 55.759469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 56.199449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.209447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.219447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.229449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.239445][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.249451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.259459][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.269457][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.637779][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 56.656672][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 56.671357][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 56.677407][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 56.727254][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 59.533592][ T4324] fuse: Bad value for 'fd' [ 59.549857][ T4269] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.561912][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.820386][ T4269] usb 2-1: Using ep0 maxpacket: 8 [ 60.082274][ T4227] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.090051][ T4269] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 60.536020][ T4269] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 61.047456][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.064137][ T4269] usb 2-1: Product: syz [ 61.068406][ T4269] usb 2-1: Manufacturer: syz [ 61.075476][ T4269] usb 2-1: SerialNumber: syz [ 61.080984][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 61.100268][ T4269] usb 2-1: config 0 descriptor?? [ 61.139773][ T4269] usb 2-1: can't set config #0, error -71 [ 61.172105][ T4269] usb 2-1: USB disconnect, device number 2 [ 61.219863][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.240002][ T4227] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 61.299109][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.337832][ T4227] usb 5-1: config 0 descriptor?? [ 62.060598][ T4227] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 63.371029][ T4227] usb 5-1: USB disconnect, device number 2 [ 63.459963][ T4372] FAULT_INJECTION: forcing a failure. [ 63.459963][ T4372] name failslab, interval 1, probability 0, space 0, times 1 [ 63.587669][ T4377] netlink: 580 bytes leftover after parsing attributes in process `syz.0.38'. [ 63.597061][ T4377] netlink: 108 bytes leftover after parsing attributes in process `syz.0.38'. [ 63.607889][ T4377] netlink: 39 bytes leftover after parsing attributes in process `syz.0.38'. [ 63.643314][ T4372] CPU: 1 PID: 4372 Comm: syz.4.37 Not tainted syzkaller #0 [ 63.650550][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.660635][ T4372] Call Trace: [ 63.663920][ T4372] [ 63.666852][ T4372] dump_stack_lvl+0x188/0x250 [ 63.671548][ T4372] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 63.677197][ T4372] ? show_regs_print_info+0x20/0x20 [ 63.682399][ T4372] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 63.688052][ T4372] should_fail+0x383/0x4b0 [ 63.692479][ T4372] should_failslab+0x5/0x20 [ 63.696984][ T4372] slab_pre_alloc_hook+0x51/0xc0 [ 63.701928][ T4372] ? fcntl_dirnotify+0x1e5/0x8a0 [ 63.706875][ T4372] kmem_cache_alloc+0x3d/0x280 [ 63.711638][ T4372] ? bpf_lsm_path_notify+0x5/0x10 [ 63.716677][ T4372] fcntl_dirnotify+0x1e5/0x8a0 [ 63.721457][ T4372] do_fcntl+0x5be/0x1360 [ 63.725699][ T4372] ? __context_tracking_exit+0x4c/0x80 [ 63.731159][ T4372] ? rcu_lock_release+0x20/0x20 [ 63.736016][ T4372] ? __fget_files+0x402/0x470 [ 63.740696][ T4372] ? tomoyo_file_fcntl+0x77/0x210 [ 63.745727][ T4372] ? bpf_lsm_file_fcntl+0x5/0x10 [ 63.750667][ T4372] ? security_file_fcntl+0x7c/0xa0 [ 63.755789][ T4372] __se_sys_fcntl+0xcc/0x190 [ 63.760387][ T4372] do_syscall_64+0x4c/0xa0 [ 63.764803][ T4372] ? clear_bhb_loop+0x30/0x80 [ 63.769481][ T4372] ? clear_bhb_loop+0x30/0x80 [ 63.774155][ T4372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.780056][ T4372] RIP: 0033:0x7fc9e2ffb159 [ 63.784476][ T4372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.804081][ T4372] RSP: 002b:00007fc9e1253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 63.812506][ T4372] RAX: ffffffffffffffda RBX: 00007fc9e3282fa0 RCX: 00007fc9e2ffb159 [ 63.820485][ T4372] RDX: 0000000000000017 RSI: 0000000000000402 RDI: 0000000000000006 [ 63.828458][ T4372] RBP: 00007fc9e309206b R08: 0000000000000000 R09: 0000000000000000 [ 63.836426][ T4372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.844395][ T4372] R13: 00007fc9e3283038 R14: 00007fc9e3282fa0 R15: 00007ffe93d47e28 [ 63.852389][ T4372] [ 64.806347][ T4389] overlayfs: unrecognized mount option "verity=on" or missing value [ 64.853686][ T4398] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.641482][ T4405] ip_tables: iptables: counters copy to user failed while replacing table [ 65.680610][ T4409] capability: warning: `syz.2.34' uses 32-bit capabilities (legacy support in use) [ 65.682478][ T4408] fuse: Bad value for 'fd' [ 65.737784][ T4408] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.659017][ T4421] sctp: failed to load transform for md5: -2 [ 67.099565][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.619622][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 67.638953][ T25] audit: type=1326 audit(1791088133.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 67.682693][ T25] audit: type=1326 audit(1791088133.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 67.708768][ T25] audit: type=1326 audit(1791088133.570:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 67.739059][ T25] audit: type=1326 audit(1791088133.570:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 67.769231][ T25] audit: type=1326 audit(1791088133.570:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 67.800116][ T25] audit: type=1326 audit(1791088133.570:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 67.832253][ T25] audit: type=1326 audit(1791088133.570:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 67.848757][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.863033][ T25] audit: type=1326 audit(1791088133.570:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 67.866352][ T21] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.898744][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.910857][ T21] usb 1-1: config 0 descriptor?? [ 67.921497][ T25] audit: type=1326 audit(1791088133.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 68.280019][ T21] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 68.295118][ T25] audit: type=1326 audit(1791088133.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4442 comm="syz.1.55" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c16341159 code=0x7ffc0000 [ 68.353148][ T7] usb 1-1: USB disconnect, device number 2 [ 68.472225][ T4462] netlink: 56 bytes leftover after parsing attributes in process `syz.4.62'. [ 68.891604][ T4479] overlayfs: missing 'lowerdir' [ 69.871153][ T4489] fuse: Bad value for 'fd' [ 69.891479][ T4489] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.179551][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.356989][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.363575][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.472252][ T4230] usb 2-1: Using ep0 maxpacket: 8 [ 71.589810][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.404722][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 72.415539][ T4230] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.425431][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.442104][ T4230] usb 2-1: config 0 descriptor?? [ 72.711447][ T4230] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 72.906843][ T4489] iowarrior 2-1:0.0: Error -90 while submitting URB [ 72.937465][ T4230] usb 2-1: USB disconnect, device number 3 [ 73.211222][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 74.048560][ T4545] comedi comedi2: comedi_config --init_data is deprecated [ 75.855994][ T4559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.96'. [ 75.934516][ T4559] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 76.510890][ T1324] cfg80211: failed to load regulatory.db [ 76.585785][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 76.585800][ T25] audit: type=1800 audit(1791088142.510:16): pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.95" name=80 dev="sda1" ino=2047 res=0 errno=0 [ 77.242491][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 77.253813][ T4569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.98'. [ 78.194747][ T4574] fuse: Bad value for 'fd' [ 78.509658][ T1324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.857775][ T4585] loop5: detected capacity change from 0 to 7 [ 78.868248][ T4585] Dev loop5: unable to read RDB block 7 [ 78.869794][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 78.879904][ T4585] loop5: unable to read partition table [ 78.886859][ T4585] loop5: partition table beyond EOD, truncated [ 78.997878][ T4585] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 79.008324][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.429947][ T7] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 79.480602][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.521709][ T7] usb 4-1: config 0 descriptor?? [ 79.588370][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.604726][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.614564][ T1324] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.628869][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.653363][ T1324] usb 5-1: config 0 descriptor?? [ 79.913587][ T1324] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 80.538595][ T1324] usb 5-1: USB disconnect, device number 3 [ 80.540177][ T7] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 80.563060][ T7] [drm] Initialized udl on minor 2 [ 81.062642][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 81.073672][ T7] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 81.087357][ T7] usb 4-1: USB disconnect, device number 2 [ 81.095966][ T4269] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 81.107893][ T4269] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 81.117421][ T4269] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 81.807902][ T4622] FAULT_INJECTION: forcing a failure. [ 81.807902][ T4622] name failslab, interval 1, probability 0, space 0, times 0 [ 81.844686][ T4622] CPU: 1 PID: 4622 Comm: syz.3.114 Not tainted syzkaller #0 [ 81.852018][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.862075][ T4622] Call Trace: [ 81.865342][ T4622] [ 81.868272][ T4622] dump_stack_lvl+0x188/0x250 [ 81.872933][ T4622] ? show_regs_print_info+0x20/0x20 [ 81.878113][ T4622] ? load_image+0x410/0x410 [ 81.882602][ T4622] ? __might_sleep+0xf0/0xf0 [ 81.887173][ T4622] ? __lock_acquire+0x7d40/0x7d40 [ 81.892181][ T4622] should_fail+0x383/0x4b0 [ 81.896582][ T4622] should_failslab+0x5/0x20 [ 81.901065][ T4622] slab_pre_alloc_hook+0x51/0xc0 [ 81.905980][ T4622] ? ptlock_alloc+0x1c/0x60 [ 81.910479][ T4622] kmem_cache_alloc+0x3d/0x280 [ 81.915221][ T4622] ptlock_alloc+0x1c/0x60 [ 81.919525][ T4622] pte_alloc_one+0xc0/0x310 [ 81.924003][ T4622] ? rcu_lock_release+0x20/0x20 [ 81.928827][ T4622] ? __lock_acquire+0x13b3/0x7d40 [ 81.933848][ T4622] handle_mm_fault+0x2553/0x4440 [ 81.938790][ T4622] ? get_page+0xe0/0xe0 [ 81.942948][ T4622] ? vmacache_find+0x4f0/0x590 [ 81.947722][ T4622] ? vmacache_update+0xa0/0x100 [ 81.952581][ T4622] ? find_vma+0x1df/0x230 [ 81.956912][ T4622] do_user_addr_fault+0x494/0xc90 [ 81.961926][ T4622] exc_page_fault+0x60/0x100 [ 81.966497][ T4622] asm_exc_page_fault+0x22/0x30 [ 81.971328][ T4622] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 81.977636][ T4622] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 81.997222][ T4622] RSP: 0018:ffffc9000333fd40 EFLAGS: 00050202 [ 82.003275][ T4622] RAX: ffffffff83e93a01 RBX: 0000000000000020 RCX: 0000000000000004 [ 82.011249][ T4622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000333fe40 [ 82.019203][ T4622] RBP: 0000000000000000 R08: ffffc9000333fe5f R09: 1ffff92000667fcb [ 82.027155][ T4622] R10: dffffc0000000000 R11: fffff52000667fcc R12: 00007ffffffff000 [ 82.035108][ T4622] R13: 0000000000000020 R14: ffffc9000333fe40 R15: 0000000000000000 [ 82.043078][ T4622] ? _copy_from_user+0x71/0x170 [ 82.047939][ T4622] _copy_from_user+0xfa/0x170 [ 82.052602][ T4622] do_fcntl+0x4f9/0x1360 [ 82.056827][ T4622] ? __context_tracking_exit+0x4c/0x80 [ 82.062268][ T4622] ? rcu_lock_release+0x20/0x20 [ 82.067101][ T4622] ? __fget_files+0x402/0x470 [ 82.071754][ T4622] ? tomoyo_file_fcntl+0x77/0x210 [ 82.076760][ T4622] ? bpf_lsm_file_fcntl+0x5/0x10 [ 82.081674][ T4622] ? security_file_fcntl+0x7c/0xa0 [ 82.086772][ T4622] __se_sys_fcntl+0xcc/0x190 [ 82.091346][ T4622] do_syscall_64+0x4c/0xa0 [ 82.095743][ T4622] ? clear_bhb_loop+0x30/0x80 [ 82.100401][ T4622] ? clear_bhb_loop+0x30/0x80 [ 82.105063][ T4622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.110936][ T4622] RIP: 0033:0x7f371b808159 [ 82.115333][ T4622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.134914][ T4622] RSP: 002b:00007f3719a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 82.143312][ T4622] RAX: ffffffffffffffda RBX: 00007f371ba8ffa0 RCX: 00007f371b808159 [ 82.151270][ T4622] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000004 [ 82.159221][ T4622] RBP: 00007f371b89f06b R08: 0000000000000000 R09: 0000000000000000 [ 82.167172][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.175120][ T4622] R13: 00007f371ba90038 R14: 00007f371ba8ffa0 R15: 00007ffc3ef9b548 [ 82.183078][ T4622] [ 82.186106][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.199941][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 83.810464][ T4649] fuse: Bad value for 'fd' [ 84.109574][ T4228] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.550706][ T4651] kernel profiling enabled (shift: 7) [ 84.879550][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 85.660098][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.700729][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.813615][ T4228] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.839234][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.940060][ T4228] usb 5-1: config 0 descriptor?? [ 86.816488][ T4228] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 87.014067][ T1324] usb 5-1: USB disconnect, device number 4 [ 89.229286][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.248965][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.329259][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.882221][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 91.793943][ T4719] fuse: Bad value for 'fd' [ 93.239624][ T4228] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.587630][ T4756] FAULT_INJECTION: forcing a failure. [ 93.587630][ T4756] name failslab, interval 1, probability 0, space 0, times 0 [ 93.599486][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 93.610602][ T4756] CPU: 1 PID: 4756 Comm: syz.0.154 Not tainted syzkaller #0 [ 93.617917][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.627987][ T4756] Call Trace: [ 93.631278][ T4756] [ 93.634213][ T4756] dump_stack_lvl+0x188/0x250 [ 93.638907][ T4756] ? show_regs_print_info+0x20/0x20 [ 93.644114][ T4756] ? load_image+0x410/0x410 [ 93.648629][ T4756] ? __might_sleep+0xf0/0xf0 [ 93.653227][ T4756] ? __lock_acquire+0x7d40/0x7d40 [ 93.658260][ T4756] ? __vma_adjust+0x1da9/0x1e30 [ 93.663123][ T4756] should_fail+0x383/0x4b0 [ 93.667550][ T4756] should_failslab+0x5/0x20 [ 93.672059][ T4756] slab_pre_alloc_hook+0x51/0xc0 [ 93.677002][ T4756] ? __mpol_dup+0x76/0x320 [ 93.681421][ T4756] kmem_cache_alloc+0x3d/0x280 [ 93.686197][ T4756] __mpol_dup+0x76/0x320 [ 93.690452][ T4756] ? vma_dup_policy+0xa0/0xa0 [ 93.695135][ T4756] ? __split_vma+0x39c/0x410 [ 93.699732][ T4756] mbind_range+0x5ea/0x9b0 [ 93.704166][ T4756] __se_sys_mbind+0x51c/0x770 [ 93.708863][ T4756] ? __x64_sys_mbind+0xf0/0xf0 [ 93.713631][ T4756] ? lock_chain_count+0x20/0x20 [ 93.718497][ T4756] ? __x64_sys_mbind+0x1d/0xf0 [ 93.723268][ T4756] do_syscall_64+0x4c/0xa0 [ 93.727687][ T4756] ? clear_bhb_loop+0x30/0x80 [ 93.732367][ T4756] ? clear_bhb_loop+0x30/0x80 [ 93.737051][ T4756] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.742962][ T4756] RIP: 0033:0x7fa782fdf159 [ 93.747382][ T4756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.766990][ T4756] RSP: 002b:00007fa781237028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 93.775412][ T4756] RAX: ffffffffffffffda RBX: 00007fa783266fa0 RCX: 00007fa782fdf159 [ 93.783392][ T4756] RDX: 0000000000000003 RSI: 0000000000005000 RDI: 0000200000ff9000 [ 93.791369][ T4756] RBP: 00007fa78307606b R08: 000000000000000c R09: 0000000000000000 [ 93.799346][ T4756] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 93.807322][ T4756] R13: 00007fa783267038 R14: 00007fa783266fa0 R15: 00007fff06c0d358 [ 93.815316][ T4756] [ 95.397837][ T4231] Bluetooth: hci0: command 0x0401 tx timeout [ 95.696095][ T4228] usb 5-1: unable to read config index 0 descriptor/all [ 95.703327][ T4228] usb 5-1: can't read configurations, error -71 [ 96.976022][ T4777] binder: 4776:4777 ioctl c0306201 0 returned -14 [ 97.119823][ T4783] FAULT_INJECTION: forcing a failure. [ 97.119823][ T4783] name failslab, interval 1, probability 0, space 0, times 0 [ 97.197368][ T4783] CPU: 0 PID: 4783 Comm: syz.2.164 Not tainted syzkaller #0 [ 97.204690][ T4783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.214750][ T4783] Call Trace: [ 97.218034][ T4783] [ 97.220984][ T4783] dump_stack_lvl+0x188/0x250 [ 97.225672][ T4783] ? show_regs_print_info+0x20/0x20 [ 97.230877][ T4783] ? load_image+0x410/0x410 [ 97.235388][ T4783] ? __might_sleep+0xf0/0xf0 [ 97.239984][ T4783] ? __lock_acquire+0x7d40/0x7d40 [ 97.245020][ T4783] should_fail+0x383/0x4b0 [ 97.249446][ T4783] should_failslab+0x5/0x20 [ 97.253949][ T4783] slab_pre_alloc_hook+0x51/0xc0 [ 97.258899][ T4783] ? __d_alloc+0x27/0x6d0 [ 97.263235][ T4783] kmem_cache_alloc+0x3d/0x280 [ 97.268012][ T4783] __d_alloc+0x27/0x6d0 [ 97.272168][ T4783] ? d_alloc_pseudo+0xe/0x70 [ 97.276766][ T4783] d_alloc_pseudo+0x19/0x70 [ 97.281279][ T4783] alloc_file_pseudo+0xe0/0x200 [ 97.286148][ T4783] ? alloc_empty_file_noaccount+0x80/0x80 [ 97.291880][ T4783] ? _raw_spin_unlock+0x24/0x40 [ 97.296741][ T4783] ? alloc_fd+0x59e/0x650 [ 97.301088][ T4783] __anon_inode_getfd+0x26b/0x3d0 [ 97.306129][ T4783] ? anon_inode_getfd+0x40/0x40 [ 97.310993][ T4783] ? bpf_lsm_bpf_map+0x5/0x10 [ 97.315696][ T4783] map_create+0x1a62/0x2330 [ 97.320228][ T4783] ? bpf_lsm_bpf+0x5/0x10 [ 97.324577][ T4783] __sys_bpf+0x30a/0x6f0 [ 97.328836][ T4783] ? bpf_link_show_fdinfo+0x380/0x380 [ 97.334244][ T4783] __x64_sys_bpf+0x78/0x90 [ 97.338673][ T4783] do_syscall_64+0x4c/0xa0 [ 97.343097][ T4783] ? clear_bhb_loop+0x30/0x80 [ 97.347776][ T4783] ? clear_bhb_loop+0x30/0x80 [ 97.352461][ T4783] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.358362][ T4783] RIP: 0033:0x7efc965cd159 [ 97.362780][ T4783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.382382][ T4783] RSP: 002b:00007efc94825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.390805][ T4783] RAX: ffffffffffffffda RBX: 00007efc96854fa0 RCX: 00007efc965cd159 [ 97.398779][ T4783] RDX: 0000000000000048 RSI: 0000200000000740 RDI: 0000000000000000 [ 97.406756][ T4783] RBP: 00007efc9666406b R08: 0000000000000000 R09: 0000000000000000 [ 97.414735][ T4783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.422808][ T4783] R13: 00007efc96855038 R14: 00007efc96854fa0 R15: 00007ffe0cc25458 [ 97.430801][ T4783] [ 98.099038][ T4230] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.190048][ T146] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 98.609454][ T4230] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 98.681473][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.151004][ T4230] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 100.456949][ T4228] usb 2-1: USB disconnect, device number 4 [ 100.486789][ T4805] syz.4.170 uses obsolete (PF_INET,SOCK_PACKET) [ 101.299654][ T4816] fuse: Bad value for 'fd' [ 101.308207][ T4816] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.649792][ T4231] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.109680][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 102.659682][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.710458][ T4231] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.723884][ T4831] FAULT_INJECTION: forcing a failure. [ 102.723884][ T4831] name failslab, interval 1, probability 0, space 0, times 0 [ 102.752032][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.759630][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.767272][ T4833] FAULT_INJECTION: forcing a failure. [ 102.767272][ T4833] name failslab, interval 1, probability 0, space 0, times 0 [ 102.767578][ T4831] CPU: 0 PID: 4831 Comm: syz.0.178 Not tainted syzkaller #0 [ 102.787540][ T4831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.797592][ T4831] Call Trace: [ 102.800866][ T4831] [ 102.803796][ T4831] dump_stack_lvl+0x188/0x250 [ 102.808471][ T4831] ? show_regs_print_info+0x20/0x20 [ 102.813666][ T4831] ? load_image+0x410/0x410 [ 102.818167][ T4831] ? __might_sleep+0xf0/0xf0 [ 102.822753][ T4831] ? __lock_acquire+0x7d40/0x7d40 [ 102.825374][ T4231] usb 3-1: config 0 descriptor?? [ 102.827785][ T4831] should_fail+0x383/0x4b0 [ 102.827815][ T4831] should_failslab+0x5/0x20 [ 102.841601][ T4831] slab_pre_alloc_hook+0x51/0xc0 [ 102.846540][ T4831] kmem_cache_alloc_node+0x47/0x2c0 [ 102.851727][ T4831] ? dup_task_struct+0x57/0xbc0 [ 102.856572][ T4831] dup_task_struct+0x57/0xbc0 [ 102.861241][ T4831] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.866431][ T4831] ? lockdep_hardirqs_on+0x94/0x140 [ 102.871629][ T4831] copy_process+0x61f/0x3e70 [ 102.876248][ T4831] ? __pidfd_prepare+0x140/0x140 [ 102.881189][ T4831] ? verify_lock_unused+0x140/0x140 [ 102.886476][ T4831] kernel_clone+0x23f/0x990 [ 102.890977][ T4831] ? create_io_thread+0x180/0x180 [ 102.896004][ T4831] __x64_sys_clone+0x19a/0x210 [ 102.900756][ T4831] ? __ia32_sys_vfork+0x130/0x130 [ 102.905788][ T4831] ? lockdep_hardirqs_on+0x94/0x140 [ 102.910982][ T4831] do_syscall_64+0x4c/0xa0 [ 102.915387][ T4831] ? clear_bhb_loop+0x30/0x80 [ 102.920054][ T4831] ? clear_bhb_loop+0x30/0x80 [ 102.924733][ T4831] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.930638][ T4831] RIP: 0033:0x7fa782fdf159 [ 102.935055][ T4831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.954753][ T4831] RSP: 002b:00007fa781236fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 102.963169][ T4831] RAX: ffffffffffffffda RBX: 00007fa783266fa0 RCX: 00007fa782fdf159 [ 102.971141][ T4831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 102.979112][ T4831] RBP: 00007fa78307606b R08: 0000000000000000 R09: 0000000000000000 [ 102.987084][ T4831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.995047][ T4831] R13: 00007fa783267038 R14: 00007fa783266fa0 R15: 00007fff06c0d358 [ 103.003025][ T4831] [ 103.006037][ T4833] CPU: 1 PID: 4833 Comm: syz.4.179 Not tainted syzkaller #0 [ 103.013324][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.023382][ T4833] Call Trace: [ 103.026661][ T4833] [ 103.029590][ T4833] dump_stack_lvl+0x188/0x250 [ 103.034279][ T4833] ? show_regs_print_info+0x20/0x20 [ 103.039480][ T4833] ? load_image+0x410/0x410 [ 103.043992][ T4833] ? __might_sleep+0xf0/0xf0 [ 103.048584][ T4833] ? __lock_acquire+0x7d40/0x7d40 [ 103.053618][ T4833] should_fail+0x383/0x4b0 [ 103.058043][ T4833] should_failslab+0x5/0x20 [ 103.062547][ T4833] slab_pre_alloc_hook+0x51/0xc0 [ 103.067491][ T4833] kmem_cache_alloc_trace+0x47/0x290 [ 103.072773][ T4833] ? create_filter_start+0x144/0x2c0 [ 103.078065][ T4833] create_filter_start+0x144/0x2c0 [ 103.083183][ T4833] apply_subsystem_event_filter+0x1c2/0x16b0 [ 103.089172][ T4833] ? __lock_acquire+0x7d40/0x7d40 [ 103.094208][ T4833] ? apply_event_filter+0x590/0x590 [ 103.099415][ T4833] ? _copy_from_user+0x111/0x170 [ 103.104367][ T4833] subsystem_filter_write+0x95/0xf0 [ 103.109568][ T4833] ? subsystem_filter_read+0x1e0/0x1e0 [ 103.115030][ T4833] vfs_write+0x304/0xd70 [ 103.119284][ T4833] ? file_end_write+0x250/0x250 [ 103.124151][ T4833] ? mutex_lock_nested+0x17/0x20 [ 103.129093][ T4833] ? __fdget_pos+0x2bf/0x370 [ 103.133685][ T4833] ? ksys_write+0x70/0x260 [ 103.138112][ T4833] ksys_write+0x153/0x260 [ 103.142453][ T4833] ? __ia32_sys_read+0x80/0x80 [ 103.147226][ T4833] ? lockdep_hardirqs_on+0x94/0x140 [ 103.152433][ T4833] do_syscall_64+0x4c/0xa0 [ 103.156843][ T4833] ? clear_bhb_loop+0x30/0x80 [ 103.161536][ T4833] ? clear_bhb_loop+0x30/0x80 [ 103.166206][ T4833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.172096][ T4833] RIP: 0033:0x7fc9e2ffb159 [ 103.176497][ T4833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.196083][ T4833] RSP: 002b:00007fc9e1253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.204482][ T4833] RAX: ffffffffffffffda RBX: 00007fc9e3282fa0 RCX: 00007fc9e2ffb159 [ 103.212436][ T4833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 103.220390][ T4833] RBP: 00007fc9e309206b R08: 0000000000000000 R09: 0000000000000000 [ 103.228344][ T4833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.236299][ T4833] R13: 00007fc9e3283038 R14: 00007fc9e3282fa0 R15: 00007ffe93d47e28 [ 103.244275][ T4833] [ 103.278057][ T4231] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 104.835572][ T4231] usb 3-1: USB disconnect, device number 2 [ 104.866896][ T4230] Bluetooth: hci0: command 0x0401 tx timeout [ 104.944849][ T4847] FAULT_INJECTION: forcing a failure. [ 104.944849][ T4847] name failslab, interval 1, probability 0, space 0, times 0 [ 104.964059][ T4847] CPU: 0 PID: 4847 Comm: syz.2.184 Not tainted syzkaller #0 [ 104.971370][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.981428][ T4847] Call Trace: [ 104.984708][ T4847] [ 104.987642][ T4847] dump_stack_lvl+0x188/0x250 [ 104.992332][ T4847] ? verify_lock_unused+0x140/0x140 [ 104.997536][ T4847] ? show_regs_print_info+0x20/0x20 [ 105.002740][ T4847] ? load_image+0x410/0x410 [ 105.007262][ T4847] should_fail+0x383/0x4b0 [ 105.011693][ T4847] should_failslab+0x5/0x20 [ 105.016203][ T4847] slab_pre_alloc_hook+0x51/0xc0 [ 105.021157][ T4847] ? skb_clone+0x1bd/0x350 [ 105.025582][ T4847] kmem_cache_alloc+0x3d/0x280 [ 105.030354][ T4847] skb_clone+0x1bd/0x350 [ 105.034612][ T4847] __netlink_deliver_tap+0x3cb/0x7c0 [ 105.039915][ T4847] netlink_deliver_tap+0x16c/0x180 [ 105.045037][ T4847] netlink_sendskb+0x64/0x130 [ 105.049727][ T4847] netlink_ack+0x856/0xb10 [ 105.054156][ T4847] ? netlink_dump+0xdd0/0xdd0 [ 105.058841][ T4847] netlink_rcv_skb+0x267/0x430 [ 105.063610][ T4847] ? genl_bind+0x370/0x370 [ 105.068033][ T4847] ? netlink_ack+0xb10/0xb10 [ 105.072633][ T4847] ? down_read+0x1aa/0x2e0 [ 105.077054][ T4847] genl_rcv+0x24/0x40 [ 105.081039][ T4847] netlink_unicast+0x78f/0x940 [ 105.085826][ T4847] netlink_sendmsg+0x8ba/0xbe0 [ 105.090600][ T4847] ? netlink_getsockopt+0x570/0x570 [ 105.095798][ T4847] ? aa_sock_msg_perm+0x94/0x150 [ 105.100751][ T4847] ? apparmor_socket_sendmsg+0x88/0x230 [ 105.106300][ T4847] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 105.111592][ T4847] ? security_socket_sendmsg+0x7c/0xa0 [ 105.117064][ T4847] __sys_sendto+0x46d/0x620 [ 105.121576][ T4847] ? __ia32_sys_getpeername+0x80/0x80 [ 105.126980][ T4847] ? lock_chain_count+0x20/0x20 [ 105.131839][ T4847] __x64_sys_sendto+0xda/0xf0 [ 105.136526][ T4847] do_syscall_64+0x4c/0xa0 [ 105.140942][ T4847] ? clear_bhb_loop+0x30/0x80 [ 105.145618][ T4847] ? clear_bhb_loop+0x30/0x80 [ 105.150297][ T4847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.156200][ T4847] RIP: 0033:0x7efc9658d98e [ 105.160617][ T4847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.180227][ T4847] RSP: 002b:00007efc94823e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 105.188645][ T4847] RAX: ffffffffffffffda RBX: 00007efc948256c0 RCX: 00007efc9658d98e [ 105.196633][ T4847] RDX: 0000000000000024 RSI: 00007efc94824000 RDI: 0000000000000005 [ 105.204596][ T4847] RBP: 0000000000000000 R08: 00007efc94823f04 R09: 000000000000000c [ 105.212556][ T4847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 105.220528][ T4847] R13: 00007efc94823f58 R14: 00007efc94824000 R15: 0000000000000000 [ 105.228494][ T4847] [ 111.001402][ T4232] Bluetooth: hci0: command 0x0401 tx timeout [ 114.159153][ T4956] fuse: Bad value for 'fd' [ 119.106787][ T7] Bluetooth: hci0: command 0x0401 tx timeout [ 120.118399][ T5020] FAULT_INJECTION: forcing a failure. [ 120.118399][ T5020] name failslab, interval 1, probability 0, space 0, times 0 [ 120.202689][ T5020] CPU: 0 PID: 5020 Comm: syz.0.219 Not tainted syzkaller #0 [ 120.210011][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.220066][ T5020] Call Trace: [ 120.223340][ T5020] [ 120.226268][ T5020] dump_stack_lvl+0x188/0x250 [ 120.230943][ T5020] ? show_regs_print_info+0x20/0x20 [ 120.236138][ T5020] ? load_image+0x410/0x410 [ 120.240640][ T5020] ? __might_sleep+0xf0/0xf0 [ 120.245220][ T5020] ? __lock_acquire+0x7d40/0x7d40 [ 120.250233][ T5020] should_fail+0x383/0x4b0 [ 120.254644][ T5020] should_failslab+0x5/0x20 [ 120.259134][ T5020] slab_pre_alloc_hook+0x51/0xc0 [ 120.264068][ T5020] ? fscache_alloc_cookie+0x38/0x690 [ 120.269354][ T5020] kmem_cache_alloc+0x3d/0x280 [ 120.274114][ T5020] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.280176][ T5020] fscache_alloc_cookie+0x38/0x690 [ 120.285289][ T5020] __fscache_acquire_cookie+0x180/0x530 [ 120.290825][ T5020] ? __fscache_acquire_cookie+0x15f/0x530 [ 120.296535][ T5020] nfs_fscache_get_client_cookie+0x278/0x3c0 [ 120.302510][ T5020] ? nfs_unregister_sysctl+0x20/0x20 [ 120.307789][ T5020] ? kstrdup+0x4d/0x70 [ 120.311843][ T5020] ? memcpy+0x3c/0x60 [ 120.315814][ T5020] nfs_alloc_client+0x4c1/0x660 [ 120.320656][ T5020] nfs4_alloc_client+0xd0/0xa00 [ 120.325502][ T5020] ? nfs40_shutdown_client+0x80/0x80 [ 120.330774][ T5020] ? rcu_lock_release+0x5/0x20 [ 120.335523][ T5020] ? nfs_get_client+0x9db/0xd80 [ 120.340362][ T5020] ? __lock_acquire+0x7d40/0x7d40 [ 120.345374][ T5020] ? do_raw_spin_lock+0x128/0x2f0 [ 120.350388][ T5020] ? do_raw_spin_unlock+0x11d/0x230 [ 120.355581][ T5020] nfs_get_client+0x9f4/0xd80 [ 120.360259][ T5020] ? __debug_object_init+0x253/0xc80 [ 120.365549][ T5020] nfs4_set_client+0x364/0x4e0 [ 120.370306][ T5020] ? nfs4_create_referral_server+0x5b0/0x5b0 [ 120.376287][ T5020] nfs4_create_server+0x4c0/0xe50 [ 120.381308][ T5020] ? nfs4_set_ds_client+0x490/0x490 [ 120.386501][ T5020] ? get_nfs_version+0x1e7/0x200 [ 120.391430][ T5020] ? nfs_get_tree+0x10ae/0x1510 [ 120.396272][ T5020] nfs4_try_get_tree+0x45/0x110 [ 120.401114][ T5020] vfs_get_tree+0x88/0x270 [ 120.405519][ T5020] do_new_mount+0x247/0xa40 [ 120.410012][ T5020] __se_sys_mount+0x2e3/0x3d0 [ 120.414678][ T5020] ? __x64_sys_mount+0xc0/0xc0 [ 120.419429][ T5020] ? lockdep_hardirqs_on+0x94/0x140 [ 120.424619][ T5020] ? __x64_sys_mount+0x1c/0xc0 [ 120.429366][ T5020] do_syscall_64+0x4c/0xa0 [ 120.433775][ T5020] ? clear_bhb_loop+0x30/0x80 [ 120.438436][ T5020] ? clear_bhb_loop+0x30/0x80 [ 120.443104][ T5020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.449007][ T5020] RIP: 0033:0x7fa782fdf159 [ 120.453417][ T5020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.473024][ T5020] RSP: 002b:00007fa781237028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.481434][ T5020] RAX: ffffffffffffffda RBX: 00007fa783266fa0 RCX: 00007fa782fdf159 [ 120.489398][ T5020] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 120.497358][ T5020] RBP: 00007fa78307606b R08: 0000200000000140 R09: 0000000000000000 [ 120.505315][ T5020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.513271][ T5020] R13: 00007fa783267038 R14: 00007fa783266fa0 R15: 00007fff06c0d358 [ 120.521242][ T5020] [ 121.854574][ T5051] syz.2.226 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.415938][ T5076] FAULT_INJECTION: forcing a failure. [ 123.415938][ T5076] name failslab, interval 1, probability 0, space 0, times 0 [ 123.489602][ T5076] CPU: 0 PID: 5076 Comm: syz.1.232 Not tainted syzkaller #0 [ 123.496935][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.506994][ T5076] Call Trace: [ 123.510279][ T5076] [ 123.513218][ T5076] dump_stack_lvl+0x188/0x250 [ 123.517919][ T5076] ? show_regs_print_info+0x20/0x20 [ 123.523129][ T5076] ? load_image+0x410/0x410 [ 123.527656][ T5076] ? __lock_acquire+0x7d40/0x7d40 [ 123.532695][ T5076] ? __might_fault+0xb7/0x110 [ 123.537381][ T5076] should_fail+0x383/0x4b0 [ 123.541809][ T5076] should_failslab+0x5/0x20 [ 123.546320][ T5076] slab_pre_alloc_hook+0x51/0xc0 [ 123.551263][ T5076] ? keyctl_pkey_verify+0x393/0x430 [ 123.556476][ T5076] __kmalloc_track_caller+0x69/0x330 [ 123.561771][ T5076] ? keyctl_pkey_verify+0x393/0x430 [ 123.566987][ T5076] memdup_user+0x22/0xb0 [ 123.571235][ T5076] keyctl_pkey_verify+0x393/0x430 [ 123.576268][ T5076] ? keyctl_pkey_params_get_2+0x490/0x490 [ 123.581997][ T5076] ? verify_lock_unused+0x140/0x140 [ 123.587220][ T5076] __se_sys_keyctl+0x684/0xa20 [ 123.592000][ T5076] ? __x64_sys_keyctl+0xc0/0xc0 [ 123.596860][ T5076] ? __context_tracking_exit+0x4c/0x80 [ 123.602324][ T5076] ? __lock_acquire+0x7d40/0x7d40 [ 123.607362][ T5076] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.613359][ T5076] ? lock_chain_count+0x20/0x20 [ 123.618226][ T5076] ? lockdep_hardirqs_on+0x94/0x140 [ 123.623427][ T5076] ? __x64_sys_keyctl+0x1c/0xc0 [ 123.628283][ T5076] do_syscall_64+0x4c/0xa0 [ 123.632704][ T5076] ? clear_bhb_loop+0x30/0x80 [ 123.637392][ T5076] ? clear_bhb_loop+0x30/0x80 [ 123.642075][ T5076] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.647976][ T5076] RIP: 0033:0x7f1c16341159 [ 123.652396][ T5076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.672007][ T5076] RSP: 002b:00007f1c14599028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 123.680428][ T5076] RAX: ffffffffffffffda RBX: 00007f1c165c8fa0 RCX: 00007f1c16341159 [ 123.688400][ T5076] RDX: 0000200000000780 RSI: 0000200000000000 RDI: 000000000000001c [ 123.696371][ T5076] RBP: 00007f1c163d806b R08: 0000000000000000 R09: 0000000000000000 [ 123.704341][ T5076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.712321][ T5076] R13: 00007f1c165c9038 R14: 00007f1c165c8fa0 R15: 00007ffd9f3f89d8 [ 123.720307][ T5076] [ 127.019432][ T5105] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 127.801011][ T4232] Bluetooth: hci0: command 0x0401 tx timeout [ 129.540204][ T5132] xt_ecn: cannot match TCP bits for non-tcp packets [ 129.641760][ T5132] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 129.683990][ T5132] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 129.737289][ T5132] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 129.754015][ T5136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.926598][ T5141] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 131.233894][ T5155] comedi comedi2: comedi_config --init_data is deprecated [ 131.269656][ T4228] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.601891][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.608264][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.359728][ T4228] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 133.405853][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.426472][ T4228] usb 1-1: config 0 descriptor?? [ 134.529774][ T4228] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 134.705719][ T4228] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 134.729544][ T4228] [drm:udl_init] *ERROR* Selecting channel failed [ 134.771817][ T4228] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 134.791699][ T25] audit: type=1326 audit(1791088200.720:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc965cd159 code=0x7ffc0000 [ 134.812210][ T4228] [drm] Initialized udl on minor 2 [ 134.889608][ T4228] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 134.912436][ T4228] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 134.933309][ T25] audit: type=1326 audit(1791088200.720:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc965cd159 code=0x7ffc0000 [ 134.994066][ T4228] usb 1-1: USB disconnect, device number 3 [ 135.018210][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 135.039004][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 135.068787][ T25] audit: type=1326 audit(1791088200.760:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc9658d98e code=0x7ffc0000 [ 135.094534][ T7] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 135.126576][ T25] audit: type=1326 audit(1791088200.780:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc9658d98e code=0x7ffc0000 [ 135.174296][ T25] audit: type=1326 audit(1791088200.790:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc9658d98e code=0x7ffc0000 [ 135.253113][ T25] audit: type=1326 audit(1791088200.790:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc9658d98e code=0x7ffc0000 [ 135.735244][ T25] audit: type=1326 audit(1791088200.790:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc9658d98e code=0x7ffc0000 [ 135.759348][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.096115][ T25] audit: type=1326 audit(1791088200.790:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc9658d98e code=0x7ffc0000 [ 137.268936][ T4262] Bluetooth: hci0: command 0x0401 tx timeout [ 137.420723][ T25] audit: type=1326 audit(1791088200.790:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc9658d98e code=0x7ffc0000 [ 137.752521][ T25] audit: type=1326 audit(1791088200.790:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5175 comm="syz.2.258" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efc9658d98e code=0x7ffc0000 [ 137.776731][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.992165][ T5219] FAULT_INJECTION: forcing a failure. [ 138.992165][ T5219] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.108212][ T5219] CPU: 0 PID: 5219 Comm: syz.4.275 Not tainted syzkaller #0 [ 139.115540][ T5219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.125604][ T5219] Call Trace: [ 139.128886][ T5219] [ 139.131821][ T5219] dump_stack_lvl+0x188/0x250 [ 139.136519][ T5219] ? show_regs_print_info+0x20/0x20 [ 139.141729][ T5219] ? load_image+0x410/0x410 [ 139.146250][ T5219] ? __lock_acquire+0x7d40/0x7d40 [ 139.151294][ T5219] should_fail+0x383/0x4b0 [ 139.155728][ T5219] _copy_from_user+0x2e/0x170 [ 139.160415][ T5219] memdup_user+0x5b/0xb0 [ 139.164664][ T5219] keyctl_pkey_verify+0x35b/0x430 [ 139.169698][ T5219] ? keyctl_pkey_params_get_2+0x490/0x490 [ 139.175433][ T5219] ? verify_lock_unused+0x140/0x140 [ 139.176741][ T5221] scsi_nl_rcv_msg: discarding partial message [ 139.180665][ T5219] __se_sys_keyctl+0x684/0xa20 [ 139.180693][ T5219] ? __x64_sys_keyctl+0xc0/0xc0 [ 139.180719][ T5219] ? __context_tracking_exit+0x4c/0x80 [ 139.201766][ T5219] ? __lock_acquire+0x7d40/0x7d40 [ 139.206776][ T5219] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.212742][ T5219] ? lock_chain_count+0x20/0x20 [ 139.217600][ T5219] ? lockdep_hardirqs_on+0x94/0x140 [ 139.222780][ T5219] ? __x64_sys_keyctl+0x1c/0xc0 [ 139.227613][ T5219] do_syscall_64+0x4c/0xa0 [ 139.232011][ T5219] ? clear_bhb_loop+0x30/0x80 [ 139.236666][ T5219] ? clear_bhb_loop+0x30/0x80 [ 139.241324][ T5219] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.247199][ T5219] RIP: 0033:0x7fc9e2ffb159 [ 139.251595][ T5219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.271180][ T5219] RSP: 002b:00007fc9e1253028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 139.279575][ T5219] RAX: ffffffffffffffda RBX: 00007fc9e3282fa0 RCX: 00007fc9e2ffb159 [ 139.287526][ T5219] RDX: 0000200000000780 RSI: 0000200000000000 RDI: 000000000000001c [ 139.295480][ T5219] RBP: 00007fc9e309206b R08: 0000000000000000 R09: 0000000000000000 [ 139.303434][ T5219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.311392][ T5219] R13: 00007fc9e3283038 R14: 00007fc9e3282fa0 R15: 00007ffe93d47e28 [ 139.319355][ T5219] [ 139.350934][ T5221] scsi_nl_rcv_msg: discarding partial skb [ 139.377773][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.386190][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.013413][ T5201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.075744][ T5201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.873386][ T25] kauditd_printk_skb: 59 callbacks suppressed [ 142.873399][ T25] audit: type=1326 audit(1791088208.800:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.0.283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa782fdf159 code=0x7ffc0000 [ 143.280381][ T5201] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.294900][ T5201] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.315164][ T5201] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.324420][ T5201] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.049596][ T5201] syz.3.267 (5201) used greatest stack depth: 20496 bytes left [ 146.617495][ T5303] device-mapper: ioctl: name not supplied when creating device [ 147.210167][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.039533][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 148.989644][ T4228] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 148.999320][ T4228] usb 4-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 149.027297][ T4228] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.124358][ T5324] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 149.219704][ T4228] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 149.259413][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.267433][ T4228] usb 4-1: Product: syz [ 149.309444][ T4228] usb 4-1: Manufacturer: syz [ 149.314426][ T4228] usb 4-1: SerialNumber: syz [ 149.381035][ T4228] usb 4-1: config 0 descriptor?? [ 149.410120][ T5309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 149.663711][ T5309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.120292][ T4262] usb 4-1: USB disconnect, device number 3 [ 151.225071][ T5347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.313'. [ 151.329373][ C0] sched: RT throttling activated [ 155.407077][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 155.658672][ T5396] fuse: blksize only supported for fuseblk [ 157.858543][ T5410] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 158.590980][ T5425] FAULT_INJECTION: forcing a failure. [ 158.590980][ T5425] name failslab, interval 1, probability 0, space 0, times 0 [ 158.715796][ T5431] netdevsim netdevsim3: Direct firmware load for ¹ failed with error -2 [ 160.306326][ T5425] CPU: 0 PID: 5425 Comm: syz.1.335 Not tainted syzkaller #0 [ 160.313646][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.323707][ T5425] Call Trace: [ 160.326983][ T5425] [ 160.329926][ T5425] dump_stack_lvl+0x188/0x250 [ 160.334614][ T5425] ? show_regs_print_info+0x20/0x20 [ 160.339822][ T5425] ? load_image+0x410/0x410 [ 160.344337][ T5425] ? __might_sleep+0xf0/0xf0 [ 160.348928][ T5425] ? __lock_acquire+0x7d40/0x7d40 [ 160.353962][ T5425] should_fail+0x383/0x4b0 [ 160.358395][ T5425] should_failslab+0x5/0x20 [ 160.362899][ T5425] slab_pre_alloc_hook+0x51/0xc0 [ 160.367841][ T5425] __kmalloc+0x6b/0x340 [ 160.372000][ T5425] ? xprt_alloc+0x2d/0x770 [ 160.376433][ T5425] xprt_alloc+0x2d/0x770 [ 160.380678][ T5425] ? __lock_acquire+0x7d40/0x7d40 [ 160.385685][ T5425] ? __rwlock_init+0x140/0x140 [ 160.390426][ T5425] xs_setup_tcp+0x105/0x970 [ 160.394915][ T5425] xprt_create_transport+0x14e/0x5b0 [ 160.400180][ T5425] rpc_create+0x413/0x7e0 [ 160.404488][ T5425] ? rpc_cleanup_clids+0x20/0x20 [ 160.409409][ T5425] ? __lock_acquire+0x7d40/0x7d40 [ 160.414437][ T5425] nfs_create_rpc_client+0x4cc/0x6d0 [ 160.419703][ T5425] ? nfs_init_timeout_values+0x410/0x410 [ 160.425321][ T5425] ? __init_waitqueue_head+0xa4/0x140 [ 160.430671][ T5425] nfs4_alloc_client+0x6ea/0xa00 [ 160.435588][ T5425] ? nfs40_shutdown_client+0x80/0x80 [ 160.440848][ T5425] ? rcu_lock_acquire+0x10/0x30 [ 160.445676][ T5425] ? nfs_get_client+0x9db/0xd80 [ 160.450502][ T5425] ? __lock_acquire+0x7d40/0x7d40 [ 160.455503][ T5425] ? do_raw_spin_lock+0x128/0x2f0 [ 160.460519][ T5425] ? do_raw_spin_unlock+0x11d/0x230 [ 160.465725][ T5425] nfs_get_client+0x9f4/0xd80 [ 160.466537][ T5431] netdevsim netdevsim3: Falling back to sysfs fallback for: ¹ [ 160.470423][ T5425] ? __debug_object_init+0x253/0xc80 [ 160.470457][ T5425] nfs4_set_client+0x364/0x4e0 [ 160.470480][ T5425] ? nfs4_create_referral_server+0x5b0/0x5b0 [ 160.493886][ T5425] nfs4_create_server+0x4c0/0xe50 [ 160.498903][ T5425] ? nfs4_set_ds_client+0x490/0x490 [ 160.504082][ T5425] ? get_nfs_version+0x1e7/0x200 [ 160.508999][ T5425] ? nfs_get_tree+0x10ae/0x1510 [ 160.513837][ T5425] nfs4_try_get_tree+0x45/0x110 [ 160.518698][ T5425] vfs_get_tree+0x88/0x270 [ 160.523121][ T5425] do_new_mount+0x247/0xa40 [ 160.527608][ T5425] __se_sys_mount+0x2e3/0x3d0 [ 160.532264][ T5425] ? __x64_sys_mount+0xc0/0xc0 [ 160.537006][ T5425] ? lockdep_hardirqs_on+0x94/0x140 [ 160.542178][ T5425] ? __x64_sys_mount+0x1c/0xc0 [ 160.546918][ T5425] do_syscall_64+0x4c/0xa0 [ 160.551326][ T5425] ? clear_bhb_loop+0x30/0x80 [ 160.555995][ T5425] ? clear_bhb_loop+0x30/0x80 [ 160.560656][ T5425] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.566557][ T5425] RIP: 0033:0x7f1c16341159 [ 160.570952][ T5425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.590538][ T5425] RSP: 002b:00007f1c14599028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.598936][ T5425] RAX: ffffffffffffffda RBX: 00007f1c165c8fa0 RCX: 00007f1c16341159 [ 160.606894][ T5425] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 160.614882][ T5425] RBP: 00007f1c163d806b R08: 0000200000000140 R09: 0000000000000000 [ 160.622833][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.630781][ T5425] R13: 00007f1c165c9038 R14: 00007f1c165c8fa0 R15: 00007ffd9f3f89d8 [ 160.638738][ T5425] [ 162.160560][ T5443] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.840136][ T5453] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 164.302116][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.258535][ T5474] binder: 5472:5474 ioctl c0306201 0 returned -14 [ 166.105556][ T4232] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 166.148804][ T4232] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.193012][ T4232] usb 2-1: config 0 interface 0 has no altsetting 0 [ 166.212507][ T4232] usb 2-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 166.238125][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.282827][ T4232] usb 2-1: config 0 descriptor?? [ 166.790875][ T5486] input: syz0 as /devices/virtual/input/input6 [ 166.839514][ T4228] Bluetooth: hci0: command 0x0401 tx timeout [ 166.995994][ T5490] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.017793][ T4232] hid-generic 0003:17EF:61AE.0001: ignoring exceeding usage max [ 167.055017][ T4232] hid-generic 0003:17EF:61AE.0001: No inputs registered, leaving [ 167.097436][ T4232] hid-generic 0003:17EF:61AE.0001: hidraw0: USB HID v0.10 Joystick [HID 17ef:61ae] on usb-dummy_hcd.1-1/input0 [ 167.247702][ T4232] usb 2-1: USB disconnect, device number 6 [ 167.745059][ T5511] binder: 5507:5511 ioctl c0306201 0 returned -14 [ 168.517691][ T5504] fido_id[5504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 169.268815][ T5518] netdevsim netdevsim4: Direct firmware load for ¹ failed with error -2 [ 169.277287][ T5518] netdevsim netdevsim4: Falling back to sysfs fallback for: ¹ [ 169.334379][ T5521] device syzkaller0 entered promiscuous mode [ 169.348256][ T5521] tipc: Started in network mode [ 169.354130][ T5521] tipc: Node identity 4e15a66f7314, cluster identity 4711 [ 169.363498][ T5521] tipc: Enabled bearer , priority 0 [ 169.381617][ T5521] tipc: Resetting bearer [ 169.474536][ T5519] tipc: Resetting bearer [ 169.501879][ T5519] tipc: Disabling bearer [ 169.560820][ T4232] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 169.625019][ T5525] netem: incorrect gi model size [ 169.628115][ T5526] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.651145][ T5525] netem: change failed [ 170.626318][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 170.634523][ T26] Bluetooth: hci2: command 0x0406 tx timeout [ 170.661894][ T26] Bluetooth: hci1: command 0x0406 tx timeout [ 170.869550][ T4232] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 170.973666][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.982363][ T4232] usb 2-1: Product: syz [ 170.986617][ T4232] usb 2-1: Manufacturer: syz [ 170.995057][ T4232] usb 2-1: SerialNumber: syz [ 171.001761][ T4232] usb 2-1: config 0 descriptor?? [ 171.465859][ T5550] binder: 5544:5550 ioctl c0306201 0 returned -14 [ 172.199690][ T4232] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 172.210420][ T4232] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71 [ 172.277335][ T4232] usb 2-1: USB disconnect, device number 7 [ 172.296404][ T5559] netdevsim netdevsim4: Direct firmware load for ¹ failed with error -2 [ 172.304804][ T5559] netdevsim netdevsim4: Falling back to sysfs fallback for: ¹ [ 174.141063][ T5583] Invalid option length (65058) for dns_resolver key [ 174.569310][ T5588] tipc: Started in network mode [ 174.574365][ T5588] tipc: Node identity 4, cluster identity 4711 [ 174.580615][ T5588] tipc: Node number set to 4 [ 178.009935][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.051112][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.074843][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.220708][ T5638] file system registered [ 180.226399][ T4194] Bluetooth: hci4: unknown advertising packet type: 0xf3 [ 180.240364][ T5638] unloading [ 180.329617][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 180.574858][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 180.701751][ T5638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.405'. [ 180.704941][ T21] usb 4-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 180.727668][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.738366][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.746300][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.785571][ T5639] ffs_data_put(): freeing [ 181.043589][ T4269] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.309524][ T4269] usb 2-1: Using ep0 maxpacket: 16 [ 181.460043][ T4269] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 181.561015][ T4269] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.591237][ T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.602519][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.610587][ T21] usb 4-1: Product: syz [ 181.615471][ T21] usb 4-1: Manufacturer: syz [ 181.620110][ T21] usb 4-1: SerialNumber: syz [ 181.684427][ T21] usb 4-1: can't set config #1, error -71 [ 181.735470][ T4228] Bluetooth: hci4: command 0x0406 tx timeout [ 181.853638][ T21] usb 4-1: USB disconnect, device number 4 [ 181.920222][ T4269] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.976450][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.143772][ T4269] usb 2-1: Product: syz [ 182.237538][ T4269] usb 2-1: Manufacturer: syz [ 182.336583][ T4269] usb 2-1: SerialNumber: syz [ 182.467292][ T4228] Bluetooth: hci0: command 0x0401 tx timeout [ 183.689752][ T4269] usb 2-1: 0:2 : does not exist [ 183.846554][ T4269] usb 2-1: USB disconnect, device number 8 [ 186.921638][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.439788][ T5714] fuse: Unknown parameter '0x0000000000000003' [ 193.667957][ T4194] Bluetooth: hci0: unexpected event for opcode 0x0035 [ 194.321598][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.327920][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.335938][ T5787] netdevsim netdevsim3: Direct firmware load for ¹ failed with error -2 [ 195.346717][ T5787] netdevsim netdevsim3: Falling back to sysfs fallback for: ¹ [ 197.176514][ T5780] fuse: Unknown parameter '0x0000000000000003' [ 202.955182][ T4235] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 203.223570][ T5855] program syz.0.472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.489608][ T4235] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 203.501922][ T4235] usb 5-1: config 0 has no interface number 0 [ 203.516518][ T4235] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 203.537126][ T4235] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 203.558457][ T4235] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.578805][ T4235] usb 5-1: config 0 interface 2 has no altsetting 0 [ 203.800004][ T4235] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 203.809319][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.833455][ T4235] usb 5-1: Product: syz [ 203.838788][ T4235] usb 5-1: Manufacturer: syz [ 203.844206][ T4235] usb 5-1: SerialNumber: syz [ 203.861030][ T4235] usb 5-1: config 0 descriptor?? [ 203.889777][ T5846] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 207.216330][ T5897] tipc: Started in network mode [ 207.221367][ T5897] tipc: Node identity 4, cluster identity 4711 [ 207.227600][ T5897] tipc: Node number set to 4 [ 207.591807][ T4235] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 207.758997][ T4235] usb 5-1: USB disconnect, device number 7 [ 209.489224][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.221716][ T4235] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.179559][ T4235] usb 5-1: Using ep0 maxpacket: 32 [ 212.214818][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'. [ 212.329598][ T4235] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 212.337645][ T4235] usb 5-1: config 0 has no interface number 0 [ 212.348094][ T5937] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.362524][ T4235] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.379481][ T4235] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 212.388533][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.458598][ T4235] usb 5-1: config 0 descriptor?? [ 212.463127][ T5939] ODEBUG: Out of memory. ODEBUG disabled [ 212.501710][ T4235] usbhid 5-1:0.3: couldn't find an input interrupt endpoint [ 213.278205][ T5949] 9pnet: Insufficient options for proto=fd [ 214.831187][ T4269] usb 5-1: USB disconnect, device number 8 [ 218.150528][ T6001] comedi comedi2: comedi_config --init_data is deprecated [ 220.453218][ T6036] FAULT_INJECTION: forcing a failure. [ 220.453218][ T6036] name failslab, interval 1, probability 0, space 0, times 0 [ 220.495898][ T6036] CPU: 0 PID: 6036 Comm: syz.1.529 Not tainted syzkaller #0 [ 220.503222][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.513282][ T6036] Call Trace: [ 220.516578][ T6036] [ 220.519522][ T6036] dump_stack_lvl+0x188/0x250 [ 220.524238][ T6036] ? show_regs_print_info+0x20/0x20 [ 220.529448][ T6036] ? load_image+0x410/0x410 [ 220.533960][ T6036] ? __lock_acquire+0x7d40/0x7d40 [ 220.539118][ T6036] should_fail+0x383/0x4b0 [ 220.543554][ T6036] should_failslab+0x5/0x20 [ 220.548068][ T6036] slab_pre_alloc_hook+0x51/0xc0 [ 220.553014][ T6036] kmem_cache_alloc_trace+0x47/0x290 [ 220.558308][ T6036] ? flow_indr_dev_setup_offload+0x247/0x620 [ 220.564308][ T6036] flow_indr_dev_setup_offload+0x247/0x620 [ 220.570127][ T6036] ? tcf_block_setup+0x840/0x840 [ 220.575105][ T6036] tcf_block_offload_cmd+0x284/0x3a0 [ 220.580418][ T6036] ? local_lock_release+0x170/0x170 [ 220.585631][ T6036] ? clear_nonspinnable+0x60/0x60 [ 220.590683][ T6036] tcf_block_get_ext+0xd55/0x1290 [ 220.595734][ T6036] tcf_block_get+0x64/0x90 [ 220.600166][ T6036] ? tcf_block_get+0x90/0x90 [ 220.604782][ T6036] hfsc_init_qdisc+0x11a/0x380 [ 220.609566][ T6036] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 220.614863][ T6036] qdisc_create+0x7e4/0x11a0 [ 220.619478][ T6036] ? qdisc_notify+0x360/0x360 [ 220.624197][ T6036] ? lockdep_rtnl_is_held+0x22/0x30 [ 220.629409][ T6036] tc_modify_qdisc+0xae1/0x17d0 [ 220.634282][ T6036] ? rcu_lock_release+0x20/0x20 [ 220.639166][ T6036] ? rcu_lock_release+0x20/0x20 [ 220.644032][ T6036] rtnetlink_rcv_msg+0x7f1/0xf10 [ 220.648993][ T6036] ? lock_chain_count+0x20/0x20 [ 220.653851][ T6036] ? rtnetlink_bind+0x80/0x80 [ 220.658541][ T6036] ? __local_bh_enable_ip+0x136/0x1c0 [ 220.663918][ T6036] ? lockdep_hardirqs_on+0x94/0x140 [ 220.669129][ T6036] ? __local_bh_enable_ip+0x136/0x1c0 [ 220.674513][ T6036] ? _local_bh_enable+0xa0/0xa0 [ 220.679380][ T6036] ? __dev_queue_xmit+0x1b64/0x2e50 [ 220.684602][ T6036] ? dev_queue_xmit+0x20/0x20 [ 220.689288][ T6036] ? memcpy+0x3c/0x60 [ 220.693281][ T6036] ? __copy_skb_header+0x3ba/0x4f0 [ 220.698415][ T6036] netlink_rcv_skb+0x1e9/0x430 [ 220.703184][ T6036] ? rtnetlink_bind+0x80/0x80 [ 220.707873][ T6036] ? netlink_ack+0xb10/0xb10 [ 220.712493][ T6036] netlink_unicast+0x78f/0x940 [ 220.717275][ T6036] netlink_sendmsg+0x8ba/0xbe0 [ 220.722050][ T6036] ? netlink_getsockopt+0x570/0x570 [ 220.727252][ T6036] ? aa_sock_msg_perm+0x94/0x150 [ 220.732198][ T6036] ? apparmor_socket_sendmsg+0x173/0x230 [ 220.737840][ T6036] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 220.743128][ T6036] ? security_socket_sendmsg+0x7c/0xa0 [ 220.748595][ T6036] ? netlink_getsockopt+0x570/0x570 [ 220.753822][ T6036] ____sys_sendmsg+0x5be/0x8f0 [ 220.758610][ T6036] ? __sys_sendmsg_sock+0x30/0x30 [ 220.763657][ T6036] ? import_iovec+0x6f/0xa0 [ 220.768392][ T6036] ___sys_sendmsg+0x236/0x2e0 [ 220.773097][ T6036] ? __sys_sendmsg+0x290/0x290 [ 220.777883][ T6036] ? sock_do_ioctl+0x29d/0x320 [ 220.782678][ T6036] __se_sys_sendmsg+0x1b7/0x2a0 [ 220.787547][ T6036] ? __x64_sys_sendmsg+0x80/0x80 [ 220.792495][ T6036] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 220.798501][ T6036] ? lockdep_hardirqs_on+0x94/0x140 [ 220.803713][ T6036] do_syscall_64+0x4c/0xa0 [ 220.808136][ T6036] ? clear_bhb_loop+0x30/0x80 [ 220.812821][ T6036] ? clear_bhb_loop+0x30/0x80 [ 220.817514][ T6036] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.823424][ T6036] RIP: 0033:0x7f1c16341159 [ 220.827850][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.847458][ T6036] RSP: 002b:00007f1c14599028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.855897][ T6036] RAX: ffffffffffffffda RBX: 00007f1c165c8fa0 RCX: 00007f1c16341159 [ 220.863874][ T6036] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000003 [ 220.871850][ T6036] RBP: 00007f1c163d806b R08: 0000000000000000 R09: 0000000000000000 [ 220.879834][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.881737][ T6032] fuse: Unknown parameter 'fd0x0000000000000003' [ 220.887802][ T6036] R13: 00007f1c165c9038 R14: 00007f1c165c8fa0 R15: 00007ffd9f3f89d8 [ 220.887875][ T6036] [ 220.905214][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.042880][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.532'. [ 221.183838][ T6051] tipc: Enabled bearer , priority 0 [ 221.191965][ T6051] device syzkaller0 entered promiscuous mode [ 221.209208][ T6051] tipc: Resetting bearer [ 221.221494][ T6050] tipc: Resetting bearer [ 221.245269][ T6050] tipc: Disabling bearer [ 221.508354][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 222.821272][ T6041] orangefs_mount: mount request failed with -4 [ 222.887805][ C1] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 223.259478][ T26] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 223.789591][ T26] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 223.829424][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.837434][ T26] usb 2-1: Product: syz [ 223.860790][ T26] usb 2-1: Manufacturer: syz [ 223.865416][ T26] usb 2-1: SerialNumber: syz [ 224.776743][ T26] usb 2-1: MIDIStreaming interface descriptor not found [ 225.717006][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 225.787045][ T26] usb 2-1: USB disconnect, device number 9 [ 226.078721][ T6088] fuse: Unknown parameter 'fd0x0000000000000003' [ 226.925016][ T6108] orangefs_mount: mount request failed with -4 [ 226.956757][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.021207][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.132423][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.224809][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 228.971868][ T6154] fuse: Unknown parameter 'fd0x0000000000000003' [ 229.225528][ T6170] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 229.382610][ T6150] orangefs_mount: mount request failed with -4 [ 230.539500][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 232.120426][ T6208] tmpfs: Unknown parameter 'grpquota' [ 232.216833][ T6217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.259913][ T6217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.269563][ T6217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.575737][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.615594][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.649151][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.978054][ T6302] tipc: Started in network mode [ 239.983008][ T6302] tipc: Node identity 4, cluster identity 4711 [ 239.989167][ T6302] tipc: Node number set to 4 [ 243.400142][ T6334] orangefs_mount: mount request failed with -4 [ 243.459311][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.772570][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.963404][ T6347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.014443][ T6390] orangefs_mount: mount request failed with -4 [ 248.037387][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060392800: rx timeout, send abort [ 248.682298][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060392800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 249.977725][ T6406] tipc: Started in network mode [ 249.982655][ T6406] tipc: Node identity 4, cluster identity 4711 [ 249.988858][ T6406] tipc: Node number set to 4 [ 250.306351][ T6405] divide error: 0000 [#1] PREEMPT SMP KASAN [ 250.312288][ T6405] CPU: 1 PID: 6405 Comm: syz.0.641 Not tainted syzkaller #0 [ 250.319575][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.329629][ T6405] RIP: 0010:block2mtd_setup2+0x5b0/0xd90 [ 250.335280][ T6405] Code: 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 f7 e8 58 d8 90 fc 49 8b 06 49 63 cf 48 99 <48> f7 f9 49 89 d6 31 ff 48 89 d6 e8 10 97 4b fc 4d 85 f6 0f 85 98 [ 250.354989][ T6405] RSP: 0018:ffffc900032979e0 EFLAGS: 00010246 [ 250.361066][ T6405] RAX: 0000000000000000 RBX: 1ffff1100f2aac02 RCX: 0000000000000000 [ 250.369036][ T6405] RDX: 0000000000000000 RSI: 000000000fc00000 RDI: 0000000001f00000 [ 250.377011][ T6405] RBP: ffffc90003297bd0 R08: ffff88802083a8af R09: 1ffff11004107515 [ 250.384987][ T6405] R10: dffffc0000000000 R11: ffffed1004107516 R12: ffffc90003297a60 [ 250.392967][ T6405] R13: dffffc0000000000 R14: ffff888145f7c1a0 R15: 0000000000000000 [ 250.400942][ T6405] FS: 00007fa7812376c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 250.409875][ T6405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.416459][ T6405] CR2: 00007efc94804d58 CR3: 00000000480a9000 CR4: 00000000003506e0 [ 250.424437][ T6405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.432411][ T6405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.440379][ T6405] Call Trace: [ 250.443658][ T6405] [ 250.446585][ T6405] ? block2mtd_setup+0x40/0x40 [ 250.451350][ T6405] ? __mutex_lock_common+0x44c/0x2400 [ 250.456729][ T6405] ? read_lock_is_recursive+0x10/0x10 [ 250.462110][ T6405] block2mtd_setup+0x1f/0x40 [ 250.466704][ T6405] param_attr_store+0x20a/0x300 [ 250.471558][ T6405] ? param_attr_show+0x170/0x170 [ 250.476500][ T6405] ? sysfs_kf_read+0x350/0x350 [ 250.481293][ T6405] module_attr_store+0x5b/0x80 [ 250.486138][ T6405] kernfs_fop_write_iter+0x3a8/0x500 [ 250.491436][ T6405] vfs_write+0x748/0xd70 [ 250.495688][ T6405] ? file_end_write+0x250/0x250 [ 250.500551][ T6405] ? mutex_lock_nested+0x17/0x20 [ 250.505495][ T6405] ? __fdget_pos+0x2bf/0x370 [ 250.510087][ T6405] ? ksys_write+0x70/0x260 [ 250.514512][ T6405] ksys_write+0x153/0x260 [ 250.518848][ T6405] ? __ia32_sys_read+0x80/0x80 [ 250.523708][ T6405] ? lockdep_hardirqs_on+0x94/0x140 [ 250.528912][ T6405] do_syscall_64+0x4c/0xa0 [ 250.533341][ T6405] ? clear_bhb_loop+0x30/0x80 [ 250.538028][ T6405] ? clear_bhb_loop+0x30/0x80 [ 250.542717][ T6405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.548619][ T6405] RIP: 0033:0x7fa782fdf159 [ 250.553031][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.572641][ T6405] RSP: 002b:00007fa781237028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.581068][ T6405] RAX: ffffffffffffffda RBX: 00007fa783266fa0 RCX: 00007fa782fdf159 [ 250.589042][ T6405] RDX: 00000000000000b3 RSI: 0000200000000250 RDI: 0000000000000003 [ 250.597016][ T6405] RBP: 00007fa78307606b R08: 0000000000000000 R09: 0000000000000000 [ 250.604990][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.612962][ T6405] R13: 00007fa783267038 R14: 00007fa783266fa0 R15: 00007fff06c0d358 [ 250.620939][ T6405] [ 250.623969][ T6405] Modules linked in: [ 250.639199][ T6405] ---[ end trace 499316a757c3fc52 ]--- [ 250.644799][ T6405] RIP: 0010:block2mtd_setup2+0x5b0/0xd90 [ 250.650876][ T6405] Code: 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 f7 e8 58 d8 90 fc 49 8b 06 49 63 cf 48 99 <48> f7 f9 49 89 d6 31 ff 48 89 d6 e8 10 97 4b fc 4d 85 f6 0f 85 98 [ 250.673201][ T6405] RSP: 0018:ffffc900032979e0 EFLAGS: 00010246 [ 250.679886][ T6405] RAX: 0000000000000000 RBX: 1ffff1100f2aac02 RCX: 0000000000000000 [ 250.688104][ T6405] RDX: 0000000000000000 RSI: 000000000fc00000 RDI: 0000000001f00000 [ 250.705874][ T6405] RBP: ffffc90003297bd0 R08: ffff88802083a8af R09: 1ffff11004107515 [ 250.714306][ T6405] R10: dffffc0000000000 R11: ffffed1004107516 R12: ffffc90003297a60 [ 250.727407][ T6405] R13: dffffc0000000000 R14: ffff888145f7c1a0 R15: 0000000000000000 [ 250.735669][ T6405] FS: 00007fa7812376c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 250.746651][ T6405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.755446][ T6405] CR2: 00007f1c165922f8 CR3: 00000000480a9000 CR4: 00000000003506e0 [ 250.763952][ T6405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.773793][ T6405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.782046][ T6405] Kernel panic - not syncing: Fatal exception [ 250.788335][ T6405] Kernel Offset: disabled [ 250.792658][ T6405] Rebooting in 86400 seconds..