last executing test programs: 3m16.942553052s ago: executing program 3 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x2, 0xfffffffffffffffd, 0x3, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x0, 0x2, 0x2, 0x700000000000000, 0x91, 0x4, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x8000000000002, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x401, 0x1fd, 0x6, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x46, 0xfffffffffffffff5, 0x4, 0x7ffffffe, 0x7d, 0x0, 0x4, 0x20008, 0x2e2, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0x4, 0x8000000000000000, 0x2, 0x94f, 0xea1, 0x7fffffffffffffff, 0xd, 0xfffffffffffffffe, 0x9, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0xfffffffffffffffc, 0xa, 0x20000000, 0x4000008, 0xdac, 0x50, 0x4007, 0x4c5d, 0xa7, 0xba00, 0x3, 0x7ff, 0x8, 0x1, 0x100, 0x4, 0xf, 0xfffffffffffffffc, 0x80000001, 0x5, 0x21, 0x8, 0xfffffffffffffffd, 0x401, 0x3, 0x7, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x10000000002, 0x200, 0x3, 0xfffffffffffffffb, 0x4000, 0x4, 0xa, 0x6518, 0x9, 0x2, 0x100000001, 0x80, 0x3, 0xd, 0x4, 0xf, 0x9, 0x0, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1ffffffffffffffe]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x80000008}]}) 3m16.786447428s ago: executing program 3 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) pread64(0xffffffffffffffff, &(0x7f0000002140)=""/17, 0x11, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000073c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x44000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000002040), 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYBLOB="b71f5adf1f", @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='ext4_journal_start_reserved\x00', r4, 0x0, 0xc}, 0x18) fchmod(r3, 0xc2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) 3m15.896346853s ago: executing program 3 (id=157): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x108242, 0x78e22799f4a46eab) io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000002840)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x38, r2, 0x0, 0x0, 0x1000000000008}]) 3m15.642697042s ago: executing program 3 (id=158): socket$inet6(0xa, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) write(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 3m14.499898853s ago: executing program 3 (id=159): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000036000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xc, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x5, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x0, 0x70}, {0xffff1000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0xfffffffffffffffb, 0x1, 0x60, 0xff]}) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r12 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0xee01, r12}}, './file0\x00'}) 3m13.194398258s ago: executing program 3 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000004000000040000000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ba82921c767819fd8bddbb68af5844395e5569ab4eabb64952629b7c3535b6aba4d57bee116e3790846be6481c5ae0ffa40e32667659e9c52827f87499692b3bd0963acca15139cb5f27044fe0389f9e3509f4b0b1f382b47922de23d64c4482befa90fae75d747f3db1b6bc0f884a194b465b063d396e646ca60b9023f4403636f6455a38ed2aaa017b42fb417cd8692b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0, 0x1000000}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0x1, 0x500) ioctl$FICLONE(r1, 0x40049409, r2) r3 = fanotify_init(0x200, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(r5, 0x0) setpgid(0x0, r5) open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f00000076c0)={0x2020}, 0x2020) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffb, 0x21, 0x8, @buffer={0x0, 0x1f, &(0x7f0000000040)=""/31}, &(0x7f0000000080)="c5a019ee027f5f635f18ead43b49017101a5a66a5d0b347baa0b0123e12ad0f4dd", &(0x7f0000000100)=""/130, 0x909d, 0x4, 0x0, &(0x7f00000001c0)}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m57.867833114s ago: executing program 32 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000004000000040000000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ba82921c767819fd8bddbb68af5844395e5569ab4eabb64952629b7c3535b6aba4d57bee116e3790846be6481c5ae0ffa40e32667659e9c52827f87499692b3bd0963acca15139cb5f27044fe0389f9e3509f4b0b1f382b47922de23d64c4482befa90fae75d747f3db1b6bc0f884a194b465b063d396e646ca60b9023f4403636f6455a38ed2aaa017b42fb417cd8692b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0, 0x1000000}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0x1, 0x500) ioctl$FICLONE(r1, 0x40049409, r2) r3 = fanotify_init(0x200, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(r5, 0x0) setpgid(0x0, r5) open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f00000076c0)={0x2020}, 0x2020) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffb, 0x21, 0x8, @buffer={0x0, 0x1f, &(0x7f0000000040)=""/31}, &(0x7f0000000080)="c5a019ee027f5f635f18ead43b49017101a5a66a5d0b347baa0b0123e12ad0f4dd", &(0x7f0000000100)=""/130, 0x909d, 0x4, 0x0, &(0x7f00000001c0)}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) 34.68905575s ago: executing program 2 (id=387): syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) getitimer(0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x6, 0xa16, {{0x8, 0x4, 0x0, 0x1e, 0x20, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x70, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}]}}}}}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x2000402) lseek(r4, 0x0, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x29, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0x8, 0xa923, 0x800, r2, 0x1, '\x00', r3, r4, 0x2, 0x3, 0x9, 0xb}, 0x50) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 31.553422098s ago: executing program 2 (id=391): chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x8200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02010002080000000000000000000000030005000000000002000000000000000000000000000000030006000020000002000000e000000100000000690e6b2a"], 0x40}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x60, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x5ab, 0x3, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 21.266663217s ago: executing program 2 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) r3 = getpgid(r2) tkill(r3, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8, 0x0, 0x8, 0x1000, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x4, 0x1, 0x1, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fadvise64(r9, 0x1000, 0xaad5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100600, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x8001, 0x2, 0x1, 0x0, 0x1, 0x1, 0x8, 0x7, 0x5c, 0x100, 0x1002, 0x8, 0xb, 0x4, 0x6, 0xffffffff, 0x3, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x8, 0x10, 0x5, 0x4, 0xfffe, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r10, 0x6411) 16.838320476s ago: executing program 4 (id=414): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfbfffff2, 0x800005f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x23, 0x7fff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x2, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432df, 0xcb, 0xf9, 0x5, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000001, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x10002, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x9, 0x6d01, 0x5, 0x7fffffff, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x9, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0xaa9]}}, {0x0, 0x8, 0x28, 0x0, @time={0xffff4af7, 0x6}, {0x6, 0x4}, {0x6, 0x8}, @connect={{0x4a, 0x9}, {0x65, 0x5}}}], 0x38) read$snapshot(r3, 0x0, 0xffffffbf) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14d556a62676"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xe2bf268aaf6847d0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x3, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0x8000f9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x6, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xb935, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000006, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x4, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x75, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x5, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 13.488086508s ago: executing program 1 (id=418): socket$nl_xfrm(0x10, 0x3, 0x6) mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000580)={0x0, 0x2, 0x2, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x3, 0x0}}}) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000580)={0x0, 0x937, 0x400, 0x0, 0x41000333}, &(0x7f0000000080)=0x0, &(0x7f00000003c0)=0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x100, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r2, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 13.010078994s ago: executing program 2 (id=420): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000180)=[{{&(0x7f0000000280)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x60, 0x0, 0x0) 12.908481686s ago: executing program 1 (id=421): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$tmpfs(0x0, 0x0, 0x0, 0x2084022, &(0x7f00000001c0)=ANY=[@ANYBLOB="5aa9b34941833df8122c4d84b3731f37d34922e6ce9a78b319eb9f65a3227f9e1400a3bcba5a0f29f67ec33684f9b1bc9f7d227d025fd3d471531bbe1e706825efaec60408afd58e8e10d0bd3ca05f89f8955b777a6f3df271962f04", @ANYRES32=r4, @ANYRES8=r4, @ANYBLOB="f89ff0049091a67623ea847b64ce787e6b0938b62389e19252446edd8e2540a9086f221d126b79a2507e4a29b8d3966ed87caaac9039ab4c43f05dd76d115e1de54082fb26317cb38edecfcf02503527d180ac42ac8f475cea3ce3b7d7c568a483354e288febd19d6e34d95ee989922c1cee0ea1375145426a8455651775e520393055fc83f314e3efa89bbf65cdfe24c91c27a7b0368cf70a646210f96921a30b3b1182d0507e5c3954c11048809c5705b6aa"]) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCOUTQ(r4, 0x4bfb, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x173000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x18}}, 0xc055) openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 10.275033651s ago: executing program 2 (id=423): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x6, 0x0, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x4048000) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.996809731s ago: executing program 4 (id=424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000140)={0x0, 0xffffffdb, 0x2}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x9a, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x9, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x4, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x80, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x6, 0x46, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x5, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0xfffe, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xda05}, 0x1c) 9.996496079s ago: executing program 5 (id=425): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rt_tgsigqueueinfo(r1, r0, 0x1f, &(0x7f0000000200)={0x2b, 0xde, 0xffffffff}) 8.813172678s ago: executing program 0 (id=426): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000000408010327bd7000ffdadf25000000002900a1800800f300", @ANYRES32=0x0, @ANYBLOB="0800e500ac1414bb533d7a6835853469d0a4e91dd329b004012bf62d85000000"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) 8.646156595s ago: executing program 0 (id=427): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) write(r1, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x866c31cf264708e2, &(0x7f00000002c0)=0x9, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x0, 0x6, 0x4, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x66, 0x0, 0xd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x17}, 0xff3}, {@broadcast, 0x6}, {@multicast2, 0x5}]}, @rr={0x7, 0xf, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @end]}}}}}) chdir(&(0x7f0000000240)='./file0\x00') setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x4, 0x4, 0x6, @vifc_lcl_ifindex=r9, @multicast2}, 0x10) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r10 = fsopen(&(0x7f0000000000)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) close(r4) 8.645608429s ago: executing program 5 (id=428): r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) r1 = geteuid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001cc0)="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", 0x268}], 0x1}}], 0x1, 0x60c5895) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000240)=@md0, r1, &(0x7f0000000280)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000700)={'syztnl0\x00', r6, 0x8, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x0, 0x0, 0x2, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@end]}}}}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000aa07000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000a5000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000680)="d2dcaafb519c2ec1800000002047", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syslog(0x3, 0xfffffffffffffffc, 0x61) ioctl$HCIINQUIRY(r11, 0x400448ca, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000380)={0x10000000000000e3, 0x0, [{0x298, 0x0, 0x100}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000200)=0xc) setregid(r12, r12) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x240000, 0x0) recvmsg$kcm(r13, &(0x7f00000006c0)={&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000003c0)=[{0xfffffffffffffffd}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000500)=""/102, 0x66}], 0x3, &(0x7f0000000580)=""/88, 0x58}, 0x40000000) 8.404083756s ago: executing program 4 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) syz_emit_ethernet(0x1f, 0x0, 0x0) statx(r6, &(0x7f0000000180)='./file1\x00', 0x1000, 0x200, &(0x7f0000000400)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f0000000440), &(0x7f0000000040)=@udp}, 0x20) 8.319868362s ago: executing program 0 (id=430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgid(r0) tkill(r1, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8, 0x0, 0x8, 0x1000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fadvise64(r7, 0x1000, 0xaad5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100600, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x8001, 0x2, 0x1, 0x0, 0x1, 0x1, 0x8, 0x7, 0x5c, 0x100, 0x1002, 0x8, 0xb, 0x4, 0x6, 0xffffffff, 0x3, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x8, 0x10, 0x5, 0x4, 0xfffe, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r8, 0x6411) 6.460490172s ago: executing program 0 (id=431): r0 = getpgrp(0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x256603, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r6, 0x2}}, 0x18) 6.433812382s ago: executing program 4 (id=432): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r4 = socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)='+\fER', 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@prinfo={0x18, 0x84, 0x5, {0xff8331ec38304bbc, 0x2}}], 0x18, 0x300c4081}, 0x4000041) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.475607946s ago: executing program 1 (id=433): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e22, @loopback}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2d, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x10}, @broadcast, @device_b, @initial, {0x9, 0x80}}, @sp_mp_confirm={0xf, 0x2, {0x400, @default, {0x1, 0x1, [{0x16}]}, @val={0x72, 0x6}, @void}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x1, @sdr={0x20363159, 0xa}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000480), 0x85000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000004c0)={0xa00, 0x960, 0x280, 0x20, 0xf7, 0x1, 0x0, 0x1, {0x1000, 0x100, 0x1}, {0xe45, 0x0, 0x1}, {0x7, 0x1, 0x1}, {0x3, 0x10000}, 0x1, 0x0, 0x10, 0x0, 0x1, 0x5, 0x6, 0x94e, 0x1, 0x4, 0x6, 0x3, 0x0, 0x4, 0x2, 0x9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000005c0)={0x1, [0x3]}, &(0x7f0000000600)=0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x6, 0x5, 0x7, 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000840)={0x9, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000008c0)={r6, r7, r8, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0]}) getdents(r2, &(0x7f0000000900)=""/4096, 0x1000) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0xa69b54347274e848}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x110, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x16}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x765}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc6}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa87e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x61}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9e3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000001b00)={0xffffffffffffffff, r0, 0x80000}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000001b40)=[r9], 0x1) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000001cc0)={&(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[{}, {}, {}, {}, {}, {}], r8, 0x0, '\x00', 0x6, 0x6}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r10, 0x10e, 0x8, &(0x7f0000001d00)=0x100, 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) openat$vmci(0xffffffffffffff9c, &(0x7f0000001d40), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000001d80)=0x10) preadv(r1, &(0x7f0000001f00)=[{&(0x7f0000001dc0)=""/7, 0x7}, {&(0x7f0000001e00)=""/162, 0xa2}, {&(0x7f0000001ec0)=""/16, 0x10}], 0x3, 0x0, 0x3) 4.168085864s ago: executing program 1 (id=434): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x20008000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r3, &(0x7f00000003c0), 0x100000000000022d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) shutdown(r6, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRES16=r0]) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) openat(0xffffffffffffffff, 0x0, 0x313d80, 0x10d) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRESHEX=r2, @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400021e2e07011dde8823e2c40c086bf107566bd9c8baf995de6fdaf94937c54a7aa1babe0bda817747646475c3591aaf3083d3c95e444bdfd13811b4ef6c2ac08c790e2065cf1f7a95997daf1089e2980c2423865361a18d82671068111377d1c1ffd5066c22915cbda6ef0c3e4170bd533351c943e6f3cfc45527990e6d5139ad20fb982d3e6fb693878b1d9cdaa232dc5f878daed903ad34b7e714412488b53b8a146c40c91d5d44bba9"], 0x4c}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1) syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49) io_setup(0x9, 0x0) 4.156867538s ago: executing program 0 (id=435): unshare(0x400) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x280) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x97d, 0x26, 0x1, 'queue0\x00', 0xd2}) (fail_nth: 10) 4.098302319s ago: executing program 5 (id=436): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0xf4c, 0xffffffffffffffff, 'id1\x00'}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000001c0)={0xe, {0x9, 0x5, 0x6, 0x16, "df3d055aa4d9e785c97c18f13f31652464f4bfb86f76"}}, 0x22) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x10, 0x6, 0x2a85, 0x1, 0x15, "c88d4894900e58f3"}) mount(0x0, 0x0, 0x0, 0x1802420, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x6, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000080)={0x1ff, 0x380, 0x1c0, 0x0}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x0, 0xfffffffffffffffc, 0x2}) mknodat(r6, &(0x7f0000000000)='./file0\x00', 0x8000, 0x1) 3.528075427s ago: executing program 5 (id=437): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000000)=0xfffffffe, 0x4) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @default}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f0000003800)={0x3, 0x6, 0x8, 0x1, 0x4, 0x3, 0x5, 0x7}, 0x0, &(0x7f0000003880)={0x9, 0x4, 0xfffffffffffffffe, 0x8, 0xfffffffffffffc00, 0x8000000000000000, 0x0, 0x5}, &(0x7f00000038c0)={0x0, 0x989680}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') write$binfmt_aout(r2, &(0x7f00000007c0)=ANY=[], 0x120) 3.163270159s ago: executing program 1 (id=438): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rt_tgsigqueueinfo(r1, r0, 0x1f, &(0x7f0000000200)={0x2b, 0xde, 0xffffffff}) 3.116326384s ago: executing program 4 (id=439): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r0 = getpgrp(0x0) sched_setaffinity(0x0, 0x4, &(0x7f0000000080)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000400)=""/102400, 0x19000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) getpgrp(0x0) 2.006605673s ago: executing program 5 (id=440): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) close(0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000001080)=0x3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r4) 585.495614ms ago: executing program 4 (id=441): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgid(r0) tkill(r1, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8, 0x0, 0x8, 0x1000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fadvise64(r7, 0x1000, 0xaad5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100600, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x8001, 0x2, 0x1, 0x0, 0x1, 0x1, 0x8, 0x7, 0x5c, 0x100, 0x1002, 0x8, 0xb, 0x4, 0x6, 0xffffffff, 0x3, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x8, 0x10, 0x5, 0x4, 0xfffe, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r8, 0x6411) 504.210831ms ago: executing program 1 (id=442): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, 0x0, 0x52000775) getdents64(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r5) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 385.905189ms ago: executing program 5 (id=443): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$tmpfs(0x0, 0x0, 0x0, 0x2084022, &(0x7f00000001c0)=ANY=[@ANYBLOB="5aa9b34941833df8122c4d84b3731f37d34922e6ce9a78b319eb9f65a3227f9e1400a3bcba5a0f29f67ec33684f9b1bc9f7d227d025fd3d471531bbe1e706825efaec60408afd58e8e10d0bd3ca05f89f8955b777a6f3df271962f04", @ANYRES32=r4, @ANYRES8=r4, @ANYBLOB="f89ff0049091a67623ea847b64ce787e6b0938b62389e19252446edd8e2540a9086f221d126b79a2507e4a29b8d3966ed87caaac9039ab4c43f05dd76d115e1de54082fb26317cb38edecfcf02503527d180ac42ac8f475cea3ce3b7d7c568a483354e288febd19d6e34d95ee989922c1cee0ea1375145426a8455651775e520393055fc83f314e3efa89bbf65cdfe24c91c27a7b0368cf70a646210f96921a30b3b1182d0507e5c3954c11048809c5705b6aa"]) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCOUTQ(r4, 0x4bfb, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x173000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x18}}, 0xc055) openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 267.397185ms ago: executing program 2 (id=444): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000400)=[{0x401, 0x9a11, 0x0, 0x0}, {0x1900, 0xd811, 0x0, 0x0}], 0x2}) 0s ago: executing program 0 (id=445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x24040, 0x0) sendmsg$nl_generic(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa00"], 0x110}, 0x1, 0x0, 0x0, 0x4042845}, 0x804) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6, 0x6, 0x0, 0x6}]}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0], 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRES8=r3], 0x44}}, 0x0) sendmmsg$sock(r1, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1dd08ef45459594513e0c6565e2483096135fb3183af9c03", 0x18}, {&(0x7f0000000600)="dda498b3c805a619517ec37a987be2643d989165a2c269161ad6d2477388195b2b8a74dc4a85c53e3cda0e7c69bbd917e0a0a9cd01bd48b837dd576707063a4899f286c720a1c3e98f1d71a54b52cb016b9023b8bda789222f7604d7814cdbc04c121fbbd631cfc8acdddff6584d9fcec1ac23c5550320e07762e65c1b4409cc6cc4ba99af8fb7452a7ed9d17ba9560a82231048d36f588d2a128a2a021bc334bdcc85494cd060b762c124ed279fe228a9d27a1afdce6749358005bd8e388936508e2b1575fd8466256ad41794d1e1ca07826d987bd9c2887a984c9c6277334b0716f1b2ea3e0a57a36ab516d636ac461e5c3e6683", 0xf5}, {&(0x7f0000000700)="2882ab84930a626bfae9f20428318280484ede7dbca1d211f7a559691daa1361b826e53f8842618c7ea02627f11e1d127c210775a191680db50029587560c10c985612806ad3d7ccaa122bb91431ac519be4ff578d3ca543ec6c6d57ea5ff80821b954845bf4b6d047682b895bc5bccca728d16df280947d48cd2d01c02590f58c4cb12022da03c112d7fdd207c1ee2442636a52e7593c55a59161eb5f7cfc05be2f9e4529849f55ba1956952f468d17f287b85b764dafcea0656b6a5b2d366821aae4da79c9b8020e14a0bcab10878090ca31ae407461298ecbcfb285e0de", 0xdf}, {&(0x7f0000000800)="b8c6a23334fe3fabf76439e83071caf1c52b253a86f77906496d3ab08f52b50bcc01377a6e12a47f210511bf27eeda748f0d7499098f4b8d80182c4e61c13f09c7351c06c8889bd74e4f2c6a38be94489f83f3d3a03e133ec5cdcb9bb5b816e05a906ad7730c587d22417546efb661f1af58934a992d2acf95341b4a2cded54b81039eb03183e8851f355c91794986e533edff3d58f469d8cdce4cc5dcd7a37a6f45f60cdbc007bda978878663cdcf9bc91adbfbf2e461bca5ff8f507a250299ca725822a2d5472b59818d22668c232fd5ea97f5850ae5ded1143cb969bd8df65f39a8520efc", 0xe6}], 0x4}}, {{&(0x7f0000000280)=@xdp={0x2c, 0x6, r7, 0xa}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000900)="64a7c453fee080b5ac2f9cfa1d2d1636148f5f0760cb586a887687f7220eb18924ca7441279d92649af23e38991e0472ebb2cd43627fed45e6c753381de4f0b04b7a800902cda10420295cab2f8e7dd1b228fad1b04a0a2f79270f4520eb11d809db5ce1107bd9bbe6e1272f223ebe7b36aa035e4ea98974e97f2f4f0c5890b94f6a4cfd16dff6e26e20205e3dcc085b01cfdf7990259edf160a488def4ada6570699ebe12390019a1b99e1cef8d7749b735292c", 0xb4}, {&(0x7f0000000140)="11fd93", 0x3}], 0x2}}, {{&(0x7f0000000440)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000009c0)="c1517a8c4b0aa97b2fcaaf1586917bd62267756e9f493d6949616437df24c1ec95897e339a22f2d08fcb41e544a5226d74d1e4bb13d3fb2c1142c85fbd839de48870bd3eac7097c8b98a358f48c0149189bdc9e21ae22c31cbf03fb02a64895f3809", 0x62}, {&(0x7f0000000a40)="6ed378073363ac2c99f4b41cd2ade0669037f2173b65689191f5c82a4b44360660a87aad4c3b0968b6753b584d6f6c47712c5871f394aa2f93021a675e9d6a4cadb0888cfafced066143620d80c6b9973584be02b88a03691603a23ebee03ab8c9986fec5968593356cbceaa92eaeea285998c8b1a85f9b0506d293a5410f2cb363a69fa39700f3ef79baba3083d1e9e9777d07d0710895fe2dd6bcc", 0x9c}, {&(0x7f00000003c0)="26156a51e5d9e69665cdd22a235ec6c1ea5ea0f94f4f37b12c7476", 0x1b}, {&(0x7f0000000b00)="d46637e308b81c506a34a5d841d1ef5508f4303baca53cdcb4b0b3c502dbf427eeef1ec9bb072f2280513584818f8e0b385ecc1477999b8aa308ffd35a957f1d62c512e6a208cfa7ec64cd6ac475200823ebb204e1583a63f1792c6c7b04000494d3", 0x62}, {&(0x7f0000000b80)="fc3ab832c6ba45f69d8d7e4925b7bb0c", 0x10}, {&(0x7f0000000bc0)="6a681f9eca059b60ae3bc4b1faa2e06915a35cb8b8cc8ea8863afdb147a2c6c5941af2794cf52f51e345a7dc1c4c113ad66ef419617d2248c0aedbbde9c2cc9788f7d60509f4c87c4235f8d1fec19cd03b700a895949861b648bcb871d1c912a5bafceba2e46af0156e7a81381f7ffcd136919193247b7ca3a051109848b714316b39fc1cea10a9defeb60ca75ab42dd3e818b92e4e018d3740e675185c257393ff7acef8f76fa", 0xa7}], 0x6}}, {{&(0x7f0000000d00)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000d80)="e643e0089883687690a6644aa02a9a7ba97dfcf48c020f4f50ec6a34decc898f5759fe9f3bbe0da4d570247c49361e4ed9", 0x31}, {&(0x7f0000000dc0)="c0a7a760ac223e0317f04958297e0d4bbcf6954e84c6624c37b329333053c26442c91ef0e2c6921f1a3f08e518f1d6956d22a9d02a4ed62a72c1b3e72d69c7dd324ad6dfce338877a36800e9e28cc9677ec70f8438960e07a0f0ad4b41624238e989a6242a70b4307b6a040da4c0a82386b1387b0faa178d176210111c3cc775bbee1d2dd183b08ad07c7f1cbb70059804f2cea97970e4da9d4a0a6b8f7933f48b9271f95601c6c8d6efd2f9bb1e3428c64045a2ba7ffcc8497eef489a337e383aeca47012b748571eed72de8b3f85f4b7b16016f31e2ce43abcaca05c0aa1a7ca83e209", 0xe4}, {&(0x7f0000000ec0)="9bfccc9e10f5bfdfd15bc3e617086d3cd46984a4ca6046af07936bfaba4a124cd82cfcfc2129ce17c4d4df716267dc44be554c75cbe7b88a45aa890b0de81f500655368684c9af71242954b0c1f9b26d7f84e7aacc5b39f9fa8020278a2864b2c7a39e2d2feb2e6e5cb197cae7db09ebbb3e5eadf686700b138c35821b5c4f3e7970c08f7851dcc2f174ad3aa1c70bd9cad4d723bdd932692e5d83637f1ed66faba80adb5d064b8daabb63ca3a79e3be87f9c596e09adeb8c647dfafb86b45086cd1734f135f58f6762983646fbaf2d20139e1782b43413a99b392c762be4ba9577717381d8e4935d520e3ff266712845bc03806a4", 0xf5}, {&(0x7f0000000fc0)="bff9c9bbe4a2646242", 0x9}, {&(0x7f0000001000)="7b4266a791932b4d57b4b3bd341d885f83f10d9353dfc2146bda60a77ccc157334405b62fc148cae33fa91a7da672e1c6e83f86aa20e8181a9b5657f9b9e237e5c0ec8c122c913009bb34c69f130efb23001c6a4fd2739a400ad63e74b4c0d7601255ad834b88dc4fcfb4ce1fbfdc2ed071fc0132f0358f876091a0c03ac", 0x7e}, {&(0x7f0000001080)="7494bbc709228406e2bf9b752c99f4bfcc134105ba929e1d675a2bf30adcbd3baeb0c7d65007548dcef500e16c5cf108c7ce29bff49142996e025b61effaae786d6346378d5664e74f7a4da95c7fbf9076a291dfffd0a88fe06f234d6b3eee1ceceb64c04aeb0ed70dd5d9c1ba8828545955bff0c33d10d0a9179c55d83f54c2152bdc0db2c8733455863fff8da1450df4765b33230424a4587a7b9423f0811aa125365a932464cfead628f0fbbb5d0e67be939de8b9fcc0ea42e8c6c8d90ca8ad08ec22536e9874c8e149b9584bc3da67b0708ca5ac1d", 0xd7}, {&(0x7f0000001180)="e866bece00a7f0e097ffc10d50ac6dea3850cff0d7d748d4616ca0b2470f0f48250ef8f9e317d53684e70f74ba60524dd8614f21529e8fffda665114306c2532c5f0acb21dbd6e3d386b596a5398d0d4d9afdbb4a81874a7aa48f678917df280bca4809a8bdc37352ada57bf781da359bd99bf9cf035e87876d36d1072c0368ef3bd69ecf7116d3893058c3a726f9ab939f7258efbc84f5519c244ad6b2dae7c8181cb95e52fa0e600", 0xa9}], 0x7}}, {{&(0x7f00000012c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x2}, 0x4}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="ea30a6dda7c0afef358f713d8e", 0xd}, {&(0x7f0000002380)='5', 0x1}], 0x3, &(0x7f0000002400)=[@mark={{0x14, 0x1, 0x24, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x78}}, {{&(0x7f0000002480)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x4, 0x2, {0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1ff80000}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="512c60c7bb7204a9dc78e084240a514a9a4e922e480adeeb46d23e49d4ba6e23d5898111eddbcc5f4b596544a465db71372fd52cd5b6e92728f6d4dfaacd9cfd536fd73d9583ec22dda03e45e196d0b788e26b5260d6b4a743cccbd6e2d8a6546f7c0bb37903c2a9390688e8f977bd36fe874b4b431d24995c4595e8d497974ccf44e04618802fdc4267703adcc319b23823798bac1ac9a22f7928ff00a120fdf1b157fd16", 0xa5}, {&(0x7f00000035c0)="f804b583d8eeea41aeb9bfc35fb3b3b5ab10c1899f3be4f9f241500e6fdb99f7f8567cde6308d1b751436da3d39a92d23b48afd7c85a27d04ea87100963e6761a74265c2579f8c192ddc1845470b190e03608b5aaefec846711a54cfab0b8d7dc69ba25fb0aa8e477c2b02c91962b768240229a2420d8d9eac53e587ed5f952053962975b480d6eb2797a6b344f1b52dd15912106101296bae1d347165f9715de09780cd804d8bbf5adf9da2f7f33fc96db3947de45daeddbbbd7143fc668b7874a694f4bd5280b8cc", 0xc9}, {&(0x7f00000036c0)="8894a936ffec1345f8c5a48b011ece951f2e019374c433224b26d0e0daeef621aae6faf92464367d69fbae0b32334313a822e2e3fdc2bfb43acd4ca859da516665e1eba2ab9fa3fd2a20e8c7aa8e20ba3015244db416cd", 0x57}, {&(0x7f0000003740)="f76ba2b3b6aa988045ecab7d4f82348775988e063fed325157a4614fb5a5ef09ba7a43f854f3afe2c1e515da8d089245511bf2fad796d91fb8162ccc8576576c19ebcfcc714037f8970ebb7fc1d48a1f65d2", 0x52}, {&(0x7f00000037c0)="2e4b835d5eac87c5106b1d13bca7e540eab8efbdf0c5754709907555221a28353aa837", 0x23}, {&(0x7f0000003800)="61dba88213bf928f705a0aad319577e219c5f05cebf2dcebbba65815fc9d1c414d38b98736a7482c4eecba4ddb51d24ab2f068af2b7555424d35033355f4f48f6531b7abd437dbbad64aa34c09552a8a48a4ddf0e724234fb12b8ca49708d79963a9171439b336ed9e85a4e95dc926b0c998a28de122bc24648dcb69278a25a933879c74e856e74ef5d963d754af80934afea12aa79ec7af82f9cf2ac75c88531bb82b454d39aebb0792ec08fbf4861d894eb5461007ac2b9bf66a05f9abb9eacb5e65f77c87ffd5b1be36498cd46326ed5525b23b650c2c1fdae11bd0f08f64385d25dd5bd7b615", 0xe8}, {&(0x7f0000003900)="c9dd5598a65b5e8e6a93ed616519e6d7291f5165322a389ea81d8f82fe336d7d45c1456ebc73bc89a74a5931ace34006163bae5c138478759aea326e08ed85c0bbcc65c11f6af07bc715d5549c11d5d91ae3fba5687427a4e886169dece9017af5e983c54ea27592b8d440e6f8ee48af9dbe6636c10a15242a7ba67e02ec54237fe460758a2ee08d74c2176ef45fe2820a75d53dcc44be56f40d99eedf3bbc165f125e8a12bc798062187357051d8bf892d9e82344c66c4ac8fa8779b5a6a3a4b524c081ec8a992127f4596ce1ff1a3a0eeadff149dd3e898392b861867d015b4cf19b56588dc88885e044318df66cee4c6dda897af3", 0xf6}], 0x8, &(0x7f0000003a80)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xf82c}}, @txtime={{0x18}}], 0x60}}, {{&(0x7f0000003b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x2, {0xa, 0x4e23, 0x400, @private0, 0x2c}}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003b80)="5c98dbd27c39ddfc8dc9d7d3c11aaf7db71a3da931c52223a9b15f456b26294af8a57866cf5653f9f6e13335485087fb72101c58913aa9456a1f1d00a1c3c3e767c31c0a43bde1192f5d5b481ff0bcad6e816a63dc3b153ff06b5307edf0437324559af42d2e50c1d802e803736ce9a45c31ec1dd62be032473b", 0x7a}, {&(0x7f0000003c00)="e496a1ad5bda2b460b67a30497d8118fbae27fcc6ba54fddc614486b83d716448ae0293c71dcc7932766594343fbee6dd37895aa0d16715589b9b3f539bee911b7c5df00dfe600ae6c4e41031d3ca79f413610485ea0d139cc", 0x59}, {&(0x7f0000003c80)="8e65a4ef329d252b476bf80e333c0c13d370", 0x12}, {&(0x7f0000003cc0)="90679c4e5acd6248d7ff4048ef3eafa238fa365e6cb6d2dea922e6ad99b1d06da773e5f0863d37961fb425ad1b3c06ec534e25d5a9c0a765339f686af6cd02dee3b3f142ffaa13b3975a10318f8f49ccc8fd955d438b607fbf69003684df20", 0x5f}, {&(0x7f0000003d40)="af7c9970a75592bb33125900b093176196f498074fc53c8f34daee19569065d62cf89580ed1c76005e96681ec57e820dced8d86b20c37f03b22c9c338788", 0x3e}, {&(0x7f0000003d80)="6f72491fa6ede9ad7a6d16ddd4793874da05942e1882", 0x16}], 0x6, &(0x7f0000003e40)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xc09b}}, @mark={{0x14, 0x1, 0x24, 0x401}}], 0xa8}}], 0x7, 0x400c014) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x2000c000, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @private1, 0x10000}, 0x1c) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) kernel console output (not intermixed with test programs): active interface with an up link [ 168.097291][ T6288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.133579][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.133596][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.133622][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.527352][ T6288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.566837][ T6354] team0: Port device team_slave_0 added [ 168.616068][ T6354] team0: Port device team_slave_1 added [ 168.712362][ T6079] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 168.872347][ T6079] usb 4-1: Using ep0 maxpacket: 8 [ 168.901849][ T6079] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.903591][ T6079] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 32 [ 168.903620][ T6079] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1023 [ 168.903642][ T6079] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.906470][ T6079] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.906494][ T6079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.906512][ T6079] usb 4-1: Product: syz [ 168.906525][ T6079] usb 4-1: Manufacturer: syz [ 168.906538][ T6079] usb 4-1: SerialNumber: syz [ 168.919582][ T6483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.919749][ T6483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.036819][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.202630][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.203418][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.344935][ T6288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.411189][ T6483] hsr0: entered promiscuous mode [ 169.415944][ T6483] macvtap2: entered promiscuous mode [ 169.651503][ T6328] hsr_slave_0: entered promiscuous mode [ 169.663775][ T6328] hsr_slave_1: entered promiscuous mode [ 169.664754][ T6328] debugfs: 'hsr0' already exists in 'hsr' [ 169.664771][ T6328] Cannot create hsr debugfs directory [ 169.668724][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.668767][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.668781][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.817944][ T6079] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 169.833849][ T6079] usb 4-1: USB disconnect, device number 4 [ 169.879871][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.925949][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.925961][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.925973][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.184630][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.409033][ T6488] trusted_key: encrypted_key: keylen parameter is missing [ 171.625541][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.665966][ T6354] hsr_slave_0: entered promiscuous mode [ 171.667657][ T6354] hsr_slave_1: entered promiscuous mode [ 171.670071][ T6354] debugfs: 'hsr0' already exists in 'hsr' [ 171.670096][ T6354] Cannot create hsr debugfs directory [ 174.459781][ T43] bridge_slave_1: left allmulticast mode [ 174.459815][ T43] bridge_slave_1: left promiscuous mode [ 174.460072][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.533175][ T43] bridge_slave_0: left allmulticast mode [ 174.533193][ T43] bridge_slave_0: left promiscuous mode [ 174.533881][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.762472][ T6509] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 175.762820][ T6509] VFS: Can't find a romfs filesystem on dev nullb0. [ 175.762820][ T6509] [ 175.936743][ T43] bridge_slave_1: left allmulticast mode [ 175.936765][ T43] bridge_slave_1: left promiscuous mode [ 175.936913][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.033557][ T43] bridge_slave_0: left allmulticast mode [ 176.033586][ T43] bridge_slave_0: left promiscuous mode [ 176.033833][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.124870][ T43] bridge_slave_1: left allmulticast mode [ 176.124891][ T43] bridge_slave_1: left promiscuous mode [ 176.125035][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.203211][ T43] bridge_slave_0: left allmulticast mode [ 176.203231][ T43] bridge_slave_0: left promiscuous mode [ 176.203381][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.799250][ T6518] loop2: detected capacity change from 0 to 7 [ 177.229459][ T6518] Dev loop2: unable to read RDB block 7 [ 177.229489][ T6518] loop2: AHDI p1 [ 177.229517][ T6518] loop2: partition table partially beyond EOD, truncated [ 178.947083][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.982605][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.024231][ T43] bond0 (unregistering): Released all slaves [ 180.253408][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.319368][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.354769][ T43] bond0 (unregistering): Released all slaves [ 181.582817][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.623117][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.664616][ T43] bond0 (unregistering): Released all slaves [ 183.224448][ T6288] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.309551][ T6288] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.512910][ T6288] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.083746][ T6288] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.184914][ T6078] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.332405][ T6078] usb 4-1: Using ep0 maxpacket: 16 [ 184.337206][ T6078] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 184.337231][ T6078] usb 4-1: config 0 has no interface number 0 [ 184.341626][ T6078] usb 4-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice=62.70 [ 184.341652][ T6078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.341669][ T6078] usb 4-1: Product: syz [ 184.341682][ T6078] usb 4-1: Manufacturer: syz [ 184.341695][ T6078] usb 4-1: SerialNumber: syz [ 184.397635][ T6078] usb 4-1: config 0 descriptor?? [ 184.417402][ T6078] HFC-S_USB 4-1:0.11: probe with driver HFC-S_USB failed with error -5 [ 184.611031][ T5820] usb 4-1: USB disconnect, device number 5 [ 185.286116][ T6558] netlink: 'syz.3.154': attribute type 11 has an invalid length. [ 187.194428][ T6264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.335881][ T6264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.534198][ T6264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.604154][ T6264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.614987][ T6581] random: crng reseeded on system resumption [ 188.872311][ T43] hsr_slave_0: left promiscuous mode [ 188.892248][ T43] hsr_slave_1: left promiscuous mode [ 188.893203][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.893226][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.925816][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.925842][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.242370][ T43] hsr_slave_0: left promiscuous mode [ 189.376955][ T6589] kAFS: unable to lookup cell '.,' [ 189.803299][ T43] hsr_slave_1: left promiscuous mode [ 189.807927][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.807958][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.855152][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.855180][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.043841][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.047239][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.048738][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.051922][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.070862][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.172486][ T43] hsr_slave_0: left promiscuous mode [ 190.212406][ T43] hsr_slave_1: left promiscuous mode [ 190.213162][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.213182][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.256028][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.256049][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.410320][ T43] veth1_macvtap: left promiscuous mode [ 190.410438][ T43] veth0_macvtap: left promiscuous mode [ 190.410662][ T43] veth1_vlan: left promiscuous mode [ 190.410756][ T43] veth0_vlan: left promiscuous mode [ 190.542472][ T43] veth1_macvtap: left promiscuous mode [ 190.542531][ T43] veth0_macvtap: left promiscuous mode [ 190.542671][ T43] veth1_vlan: left promiscuous mode [ 190.542761][ T43] veth0_vlan: left promiscuous mode [ 190.682517][ T43] veth1_macvtap: left promiscuous mode [ 190.682577][ T43] veth0_macvtap: left promiscuous mode [ 190.682716][ T43] veth1_vlan: left promiscuous mode [ 190.682809][ T43] veth0_vlan: left promiscuous mode [ 192.134144][ T61] Bluetooth: hci5: command tx timeout [ 193.022665][ T43] team0 (unregistering): Port device team_slave_1 removed [ 193.232927][ T43] team0 (unregistering): Port device team_slave_0 removed [ 193.559985][ T5819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.563540][ T5819] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.571073][ T5819] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.573445][ T5819] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.574469][ T5819] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.212319][ T61] Bluetooth: hci5: command tx timeout [ 194.470947][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.470997][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.662242][ T61] Bluetooth: hci6: command tx timeout [ 196.292296][ T61] Bluetooth: hci5: command tx timeout [ 197.732977][ T61] Bluetooth: hci6: command tx timeout [ 197.872990][ T43] team0 (unregistering): Port device team_slave_1 removed [ 198.152762][ T43] team0 (unregistering): Port device team_slave_0 removed [ 198.377630][ T61] Bluetooth: hci5: command tx timeout [ 198.518763][ T5819] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 198.541563][ T5819] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 198.547044][ T5819] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 198.548568][ T5819] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.549803][ T5819] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.822205][ T61] Bluetooth: hci6: command tx timeout [ 200.612824][ T61] Bluetooth: hci7: command tx timeout [ 201.892326][ T61] Bluetooth: hci6: command tx timeout [ 202.262768][ T43] team0 (unregistering): Port device team_slave_1 removed [ 202.462858][ T43] team0 (unregistering): Port device team_slave_0 removed [ 202.692351][ T61] Bluetooth: hci7: command tx timeout [ 204.654543][ T6264] kthread_run failed with err -4 [ 204.772264][ T61] Bluetooth: hci7: command tx timeout [ 205.375216][ T5819] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 205.388678][ T5819] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 205.393834][ T5819] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 205.442935][ T5819] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 205.444113][ T5819] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 205.834169][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.854716][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.894007][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.896397][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.897194][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.852212][ T61] Bluetooth: hci7: command tx timeout [ 207.496615][ T61] Bluetooth: hci8: command tx timeout [ 207.972325][ T61] Bluetooth: hci1: command tx timeout [ 208.238582][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 208.251236][ T6600] chnl_net:caif_netlink_parms(): no params data found [ 208.286660][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 208.315307][ T6614] chnl_net:caif_netlink_parms(): no params data found [ 208.982493][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 209.572421][ T61] Bluetooth: hci8: command tx timeout [ 209.602908][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.603096][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.603298][ T6605] bridge_slave_0: entered allmulticast mode [ 209.605775][ T6605] bridge_slave_0: entered promiscuous mode [ 209.873226][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.873320][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.873442][ T6600] bridge_slave_0: entered allmulticast mode [ 209.874811][ T6600] bridge_slave_0: entered promiscuous mode [ 209.877310][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.877496][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.877678][ T6605] bridge_slave_1: entered allmulticast mode [ 209.879254][ T6605] bridge_slave_1: entered promiscuous mode [ 209.989672][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.989786][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.989929][ T6592] bridge_slave_0: entered allmulticast mode [ 209.991410][ T6592] bridge_slave_0: entered promiscuous mode [ 209.993636][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.993767][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.993949][ T6600] bridge_slave_1: entered allmulticast mode [ 209.996505][ T6600] bridge_slave_1: entered promiscuous mode [ 210.062267][ T61] Bluetooth: hci1: command tx timeout [ 210.079216][ T6614] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.079340][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.079530][ T6614] bridge_slave_0: entered allmulticast mode [ 210.096574][ T6614] bridge_slave_0: entered promiscuous mode [ 210.133226][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.133382][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.133574][ T6592] bridge_slave_1: entered allmulticast mode [ 210.136098][ T6592] bridge_slave_1: entered promiscuous mode [ 210.264924][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.265043][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.265261][ T6614] bridge_slave_1: entered allmulticast mode [ 210.266697][ T6614] bridge_slave_1: entered promiscuous mode [ 210.436947][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.666829][ T6600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.669584][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.817352][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.821886][ T6600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.895730][ T6614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.897877][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.898001][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.898137][ T6622] bridge_slave_0: entered allmulticast mode [ 210.899498][ T6622] bridge_slave_0: entered promiscuous mode [ 210.905824][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.070635][ T6614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.133013][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.133131][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.133254][ T6622] bridge_slave_1: entered allmulticast mode [ 211.134682][ T6622] bridge_slave_1: entered promiscuous mode [ 211.405778][ T6605] team0: Port device team_slave_0 added [ 211.652457][ T61] Bluetooth: hci8: command tx timeout [ 211.665816][ T6600] team0: Port device team_slave_0 added [ 211.668213][ T6605] team0: Port device team_slave_1 added [ 211.834024][ T6592] team0: Port device team_slave_0 added [ 211.906250][ T6600] team0: Port device team_slave_1 added [ 211.985375][ T6614] team0: Port device team_slave_0 added [ 211.987459][ T6592] team0: Port device team_slave_1 added [ 212.132294][ T61] Bluetooth: hci1: command tx timeout [ 212.256752][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.418607][ T6614] team0: Port device team_slave_1 added [ 212.695870][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.783745][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.783761][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.783783][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.084479][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.084491][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.084504][ T6600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.085565][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.085579][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.085602][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.180665][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.180681][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.180705][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.253955][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.253973][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.253996][ T6600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.260789][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.260805][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.260825][ T6614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.266448][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.266463][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.266487][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.391332][ T6622] team0: Port device team_slave_0 added [ 213.410963][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.410982][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.410995][ T6614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.416138][ T6622] team0: Port device team_slave_1 added [ 213.732330][ T61] Bluetooth: hci8: command tx timeout [ 213.997478][ T6605] hsr_slave_0: entered promiscuous mode [ 213.998318][ T6605] hsr_slave_1: entered promiscuous mode [ 213.998879][ T6605] debugfs: 'hsr0' already exists in 'hsr' [ 213.998897][ T6605] Cannot create hsr debugfs directory [ 213.999822][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.999835][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.999850][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.194773][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.194787][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.194800][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.200736][ T6592] hsr_slave_0: entered promiscuous mode [ 214.201595][ T6592] hsr_slave_1: entered promiscuous mode [ 214.203556][ T6592] debugfs: 'hsr0' already exists in 'hsr' [ 214.203584][ T6592] Cannot create hsr debugfs directory [ 214.208781][ T6600] hsr_slave_0: entered promiscuous mode [ 214.209544][ T6600] hsr_slave_1: entered promiscuous mode [ 214.210069][ T6600] debugfs: 'hsr0' already exists in 'hsr' [ 214.210084][ T6600] Cannot create hsr debugfs directory [ 214.212219][ T61] Bluetooth: hci1: command tx timeout [ 214.449368][ T6614] hsr_slave_0: entered promiscuous mode [ 214.450201][ T6614] hsr_slave_1: entered promiscuous mode [ 214.450807][ T6614] debugfs: 'hsr0' already exists in 'hsr' [ 214.450823][ T6614] Cannot create hsr debugfs directory [ 215.221092][ T6622] hsr_slave_0: entered promiscuous mode [ 215.221909][ T6622] hsr_slave_1: entered promiscuous mode [ 215.223247][ T6622] debugfs: 'hsr0' already exists in 'hsr' [ 215.223271][ T6622] Cannot create hsr debugfs directory [ 216.341491][ T43] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.658815][ T43] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.907642][ T43] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.146227][ T43] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.565414][ T43] bridge_slave_1: left allmulticast mode [ 219.565442][ T43] bridge_slave_1: left promiscuous mode [ 219.565669][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.643637][ T43] bridge_slave_0: left allmulticast mode [ 219.643665][ T43] bridge_slave_0: left promiscuous mode [ 219.643929][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.744459][ T43] bridge_slave_1: left allmulticast mode [ 219.744479][ T43] bridge_slave_1: left promiscuous mode [ 219.744624][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.813324][ T43] bridge_slave_0: left allmulticast mode [ 219.813348][ T43] bridge_slave_0: left promiscuous mode [ 219.813560][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.904971][ T43] bridge_slave_1: left allmulticast mode [ 219.904992][ T43] bridge_slave_1: left promiscuous mode [ 219.905145][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.974926][ T43] bridge_slave_0: left allmulticast mode [ 219.974956][ T43] bridge_slave_0: left promiscuous mode [ 219.975183][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.074342][ T43] bridge_slave_1: left allmulticast mode [ 220.074364][ T43] bridge_slave_1: left promiscuous mode [ 220.074514][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.133058][ T43] bridge_slave_0: left allmulticast mode [ 220.133078][ T43] bridge_slave_0: left promiscuous mode [ 220.133267][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.204492][ T43] bridge_slave_1: left allmulticast mode [ 220.204513][ T43] bridge_slave_1: left promiscuous mode [ 220.204662][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.273730][ T43] bridge_slave_0: left allmulticast mode [ 220.273752][ T43] bridge_slave_0: left promiscuous mode [ 220.273905][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.774364][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.853148][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.934754][ T43] bond0 (unregistering): Released all slaves [ 221.122933][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.202832][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.264403][ T43] bond0 (unregistering): Released all slaves [ 222.003518][ T43] team0: Port device bridge0 removed [ 222.792691][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.852903][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.874160][ T43] bond0 (unregistering): Released all slaves [ 223.442740][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.522746][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.584911][ T43] bond0 (unregistering): Released all slaves [ 223.762792][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.843028][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.904116][ T43] bond0 (unregistering): Released all slaves [ 225.114071][ T6605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.452227][ T6605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.577811][ T6605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.762220][ T43] hsr_slave_0: left promiscuous mode [ 225.782282][ T43] hsr_slave_1: left promiscuous mode [ 225.783248][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.805961][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.942297][ T43] hsr_slave_0: left promiscuous mode [ 225.982237][ T43] hsr_slave_1: left promiscuous mode [ 225.983209][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.032964][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.252178][ T43] hsr_slave_0: left promiscuous mode [ 226.302259][ T43] hsr_slave_1: left promiscuous mode [ 226.303289][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.303315][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.343189][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.343217][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.502233][ T43] hsr_slave_0: left promiscuous mode [ 226.542234][ T43] hsr_slave_1: left promiscuous mode [ 226.543149][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.593021][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.773313][ T43] hsr_slave_0: left promiscuous mode [ 226.792135][ T43] hsr_slave_1: left promiscuous mode [ 226.792761][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.832645][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.928913][ T43] veth1_macvtap: left promiscuous mode [ 226.929016][ T43] veth0_macvtap: left promiscuous mode [ 226.929250][ T43] veth1_vlan: left promiscuous mode [ 226.929417][ T43] veth0_vlan: left promiscuous mode [ 227.713223][ T43] team0 (unregistering): Port device team_slave_1 removed [ 227.813034][ T43] team0 (unregistering): Port device team_slave_0 removed [ 228.832901][ T43] team0 (unregistering): Port device team_slave_1 removed [ 228.963044][ T43] team0 (unregistering): Port device team_slave_0 removed [ 231.442947][ T43] team0 (unregistering): Port device team_slave_1 removed [ 231.695833][ T43] team0 (unregistering): Port device team_slave_0 removed [ 234.762961][ T43] team0 (unregistering): Port device team_slave_1 removed [ 234.932994][ T43] team0 (unregistering): Port device team_slave_0 removed [ 236.053862][ T43] team0 (unregistering): Port device team_slave_1 removed [ 236.213394][ T43] team0 (unregistering): Port device team_slave_0 removed [ 236.717653][ T6605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.842847][ T6592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.902682][ T6592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.005525][ T6592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.064940][ T6592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.255502][ T6600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.303168][ T6600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.355730][ T6600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.409587][ T6600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.668429][ T6614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.714448][ T6614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.771402][ T6614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.811513][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.839219][ T6614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.019003][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.035304][ T6622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.088324][ T6622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.141007][ T6622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.179704][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.179858][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.181069][ T6622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.277638][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.277781][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.326298][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.448014][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.478121][ T6600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.498235][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.498385][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.569295][ T1485] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.569483][ T1485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.680412][ T6600] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.726696][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.727075][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.768472][ T6614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.814855][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.814964][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.974659][ T6614] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.066147][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.072950][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.144517][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.168103][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.168228][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.303102][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.315575][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.383600][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.383688][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.438237][ T1416] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.438373][ T1416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.683277][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.780704][ T6605] veth0_vlan: entered promiscuous mode [ 239.860513][ T6605] veth1_vlan: entered promiscuous mode [ 239.902682][ T6600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.085968][ T6614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.104749][ T6592] veth0_vlan: entered promiscuous mode [ 240.157797][ T6592] veth1_vlan: entered promiscuous mode [ 240.223970][ T6605] veth0_macvtap: entered promiscuous mode [ 240.283188][ T6605] veth1_macvtap: entered promiscuous mode [ 240.400002][ T6600] veth0_vlan: entered promiscuous mode [ 240.515588][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.565608][ T6600] veth1_vlan: entered promiscuous mode [ 240.645674][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.669268][ T6592] veth0_macvtap: entered promiscuous mode [ 240.699069][ T4558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.707025][ T4558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.735857][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.736164][ T4558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.752636][ T6592] veth1_macvtap: entered promiscuous mode [ 240.768870][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.126369][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.218551][ T6600] veth0_macvtap: entered promiscuous mode [ 241.278329][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.308562][ T6600] veth1_macvtap: entered promiscuous mode [ 241.331336][ T4558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.352643][ T4558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.353886][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.353903][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.368927][ T4558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.382876][ T6614] veth0_vlan: entered promiscuous mode [ 241.387764][ T4558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.524422][ T6614] veth1_vlan: entered promiscuous mode [ 241.539539][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.656795][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.656816][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.663328][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.815872][ T1485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.849376][ T1485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.884204][ T6622] veth0_vlan: entered promiscuous mode [ 241.884685][ T1485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.903702][ T1485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.930135][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.930156][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.995316][ T6622] veth1_vlan: entered promiscuous mode [ 242.086976][ T6614] veth0_macvtap: entered promiscuous mode [ 242.229522][ T6614] veth1_macvtap: entered promiscuous mode [ 242.382859][ T1400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.382879][ T1400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.418083][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.445678][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.472451][ T6622] veth0_macvtap: entered promiscuous mode [ 242.498991][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.509793][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.511859][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.511919][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.521240][ T6622] veth1_macvtap: entered promiscuous mode [ 242.727759][ T6955] loop2: detected capacity change from 0 to 7 [ 242.955932][ T6955] Dev loop2: unable to read RDB block 7 [ 242.956287][ T6955] loop2: unable to read partition table [ 242.958604][ T6955] loop2: partition table beyond EOD, truncated [ 242.958688][ T6955] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.498111][ T4558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.498131][ T4558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.683667][ T6964] FAULT_INJECTION: forcing a failure. [ 243.683667][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 243.683701][ T6964] CPU: 1 UID: 0 PID: 6964 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 243.683720][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.683738][ T6964] Call Trace: [ 243.683746][ T6964] [ 243.683754][ T6964] dump_stack_lvl+0xe8/0x150 [ 243.683786][ T6964] should_fail_ex+0x46c/0x600 [ 243.683812][ T6964] should_failslab+0xa8/0x100 [ 243.683831][ T6964] __kvmalloc_node_noprof+0x181/0x940 [ 243.683857][ T6964] ? hash_ipportnet_create+0x3a9/0xff0 [ 243.683887][ T6964] hash_ipportnet_create+0x3a9/0xff0 [ 243.683910][ T6964] ? __nla_parse+0x40/0x60 [ 243.683935][ T6964] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 243.683955][ T6964] ip_set_create+0xa9c/0x19c0 [ 243.683975][ T6964] ? ip_set_create+0x4a7/0x19c0 [ 243.684003][ T6964] ? __pfx_ip_set_create+0x10/0x10 [ 243.684119][ T6964] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 243.684158][ T6964] ? lockdep_hardirqs_on+0x7b/0x110 [ 243.684186][ T6964] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 243.684219][ T6964] nfnetlink_rcv_msg+0xb69/0x1150 [ 243.684238][ T6964] ? arch_stack_walk+0xfc/0x150 [ 243.684260][ T6964] ? nfnetlink_rcv_msg+0x212/0x1150 [ 243.684295][ T6964] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 243.684355][ T6964] netlink_rcv_skb+0x208/0x470 [ 243.684379][ T6964] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 243.684401][ T6964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.684420][ T6964] ? rcu_is_watching+0x15/0xb0 [ 243.684447][ T6964] ? bpf_lsm_capable+0x9/0x20 [ 243.684464][ T6964] ? security_capable+0x7e/0x2e0 [ 243.684488][ T6964] nfnetlink_rcv+0x282/0x2590 [ 243.684512][ T6964] ? __local_bh_enable_ip+0x1af/0x2c0 [ 243.684535][ T6964] ? lockdep_hardirqs_on+0x7b/0x110 [ 243.684555][ T6964] ? __dev_queue_xmit+0x259/0x31d0 [ 243.684586][ T6964] ? __dev_queue_xmit+0x1936/0x31d0 [ 243.684607][ T6964] ? netlink_unicast+0x811/0xa10 [ 243.684626][ T6964] ? netlink_sendmsg+0x805/0xb30 [ 243.684648][ T6964] ? __sock_sendmsg+0x21c/0x270 [ 243.684684][ T6964] ? __dev_queue_xmit+0x259/0x31d0 [ 243.684711][ T6964] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 243.684735][ T6964] ? __pfx___dev_queue_xmit+0x10/0x10 [ 243.684766][ T6964] ? ref_tracker_free+0x61e/0x7c0 [ 243.684793][ T6964] ? __asan_memcpy+0x40/0x70 [ 243.684817][ T6964] ? __pfx_ref_tracker_free+0x10/0x10 [ 243.684837][ T6964] ? __skb_clone+0x63/0x7a0 [ 243.684864][ T6964] ? __skb_clone+0x483/0x7a0 [ 243.684892][ T6964] ? skb_clone+0x246/0x3a0 [ 243.684916][ T6964] ? __netlink_deliver_tap+0x807/0x850 [ 243.684939][ T6964] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.684967][ T6964] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.684996][ T6964] netlink_unicast+0x846/0xa10 [ 243.685026][ T6964] ? __pfx_netlink_unicast+0x10/0x10 [ 243.685046][ T6964] ? __alloc_skb+0x198/0x3a0 [ 243.685063][ T6964] ? netlink_sendmsg+0x642/0xb30 [ 243.685084][ T6964] ? skb_put+0x11b/0x210 [ 243.685107][ T6964] netlink_sendmsg+0x805/0xb30 [ 243.685141][ T6964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.685170][ T6964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.685199][ T6964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.685222][ T6964] __sock_sendmsg+0x21c/0x270 [ 243.685250][ T6964] ____sys_sendmsg+0x508/0x810 [ 243.685277][ T6964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.685305][ T6964] ? import_iovec+0x74/0xa0 [ 243.685394][ T6964] ___sys_sendmsg+0x21f/0x2a0 [ 243.685426][ T6964] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.685480][ T6964] ? __fget_files+0x2a/0x420 [ 243.685499][ T6964] ? __fget_files+0x3a6/0x420 [ 243.685523][ T6964] __x64_sys_sendmsg+0x1a1/0x260 [ 243.685547][ T6964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.685625][ T6964] ? __pfx_ksys_write+0x10/0x10 [ 243.685698][ T6964] do_syscall_64+0xec/0xf80 [ 243.685718][ T6964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.685735][ T6964] ? trace_irq_disable+0x37/0x100 [ 243.685753][ T6964] ? clear_bhb_loop+0x60/0xb0 [ 243.685773][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.685788][ T6964] RIP: 0033:0x7fe4c761f749 [ 243.685805][ T6964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.685818][ T6964] RSP: 002b:00007fe4c5886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.685836][ T6964] RAX: ffffffffffffffda RBX: 00007fe4c7875fa0 RCX: 00007fe4c761f749 [ 243.685847][ T6964] RDX: 0000000024002800 RSI: 0000200000000040 RDI: 0000000000000003 [ 243.685857][ T6964] RBP: 00007fe4c5886090 R08: 0000000000000000 R09: 0000000000000000 [ 243.685866][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.685876][ T6964] R13: 00007fe4c7876038 R14: 00007fe4c7875fa0 R15: 00007ffec50c27b8 [ 243.685900][ T6964] [ 243.915757][ T5893] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 243.995054][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.054764][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.054784][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.093301][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.132989][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 244.142360][ T5893] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 244.142388][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.142406][ T5893] usb 3-1: Product: syz [ 244.142419][ T5893] usb 3-1: Manufacturer: syz [ 244.142432][ T5893] usb 3-1: SerialNumber: syz [ 244.181798][ T5893] usb 3-1: config 0 descriptor?? [ 244.200358][ T1416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.440898][ T5893] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 244.579198][ T1416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.583780][ T1416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.583825][ T1416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.899783][ T6977] FAULT_INJECTION: forcing a failure. [ 244.899783][ T6977] name failslab, interval 1, probability 0, space 0, times 0 [ 244.899815][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.899836][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.899847][ T6977] Call Trace: [ 244.899855][ T6977] [ 244.899863][ T6977] dump_stack_lvl+0xe8/0x150 [ 244.899894][ T6977] should_fail_ex+0x46c/0x600 [ 244.899925][ T6977] should_failslab+0xa8/0x100 [ 244.899945][ T6977] __kmalloc_noprof+0xe0/0x7e0 [ 244.899972][ T6977] ? kfree+0x4d/0x900 [ 244.899993][ T6977] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 244.900011][ T6977] ? rcu_is_watching+0x15/0xb0 [ 244.900036][ T6977] tomoyo_realpath_from_path+0xe3/0x5d0 [ 244.900065][ T6977] ? tomoyo_mount_permission+0x27a/0x970 [ 244.900094][ T6977] tomoyo_mount_permission+0x377/0x970 [ 244.900123][ T6977] ? tomoyo_mount_permission+0x27a/0x970 [ 244.900150][ T6977] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 244.900232][ T6977] security_sb_mount+0xec/0x350 [ 244.900257][ T6977] path_mount+0xbc/0xff0 [ 244.900276][ T6977] ? user_path_at+0x44/0x60 [ 244.900307][ T6977] __se_sys_mount+0x313/0x410 [ 244.900332][ T6977] ? __pfx___se_sys_mount+0x10/0x10 [ 244.900366][ T6977] ? __x64_sys_mount+0x20/0xc0 [ 244.900387][ T6977] do_syscall_64+0xec/0xf80 [ 244.900408][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.900427][ T6977] ? trace_irq_disable+0x37/0x100 [ 244.900448][ T6977] ? clear_bhb_loop+0x60/0xb0 [ 244.900470][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.900489][ T6977] RIP: 0033:0x7f8643bdf749 [ 244.900506][ T6977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.900521][ T6977] RSP: 002b:00007f8641e3e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.900542][ T6977] RAX: ffffffffffffffda RBX: 00007f8643e35fa0 RCX: 00007f8643bdf749 [ 244.900556][ T6977] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 244.900569][ T6977] RBP: 00007f8641e3e090 R08: 00002000000004c0 R09: 0000000000000000 [ 244.900582][ T6977] R10: 000000000000089a R11: 0000000000000246 R12: 0000000000000001 [ 244.900593][ T6977] R13: 00007f8643e36038 R14: 00007f8643e35fa0 R15: 00007fffcd5442c8 [ 244.900624][ T6977] [ 244.900632][ T6977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.934505][ T1416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.934529][ T1416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.874584][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.874605][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.032255][ T5893] gspca_sunplus: reg_r err -110 [ 247.033193][ T5893] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 247.402718][ T1400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.402741][ T1400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.652163][ T1400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.652179][ T1400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.675401][ T6998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 249.134260][ T6229] usb 3-1: USB disconnect, device number 2 [ 249.817056][ T7014] loop2: detected capacity change from 0 to 7 [ 250.642281][ T7014] Dev loop2: unable to read RDB block 7 [ 250.642340][ T7014] loop2: unable to read partition table [ 250.642561][ T7014] loop2: partition table beyond EOD, truncated [ 250.642579][ T7014] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.477085][ T7025] sctp: [Deprecated]: syz.2.174 (pid 7025) Use of int in max_burst socket option. [ 251.477085][ T7025] Use struct sctp_assoc_value instead [ 253.754583][ T7035] 9p: Bad value for 'rfdno' [ 254.660546][ T7052] FAULT_INJECTION: forcing a failure. [ 254.660546][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 254.660602][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.0.169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 254.660626][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.660644][ T7052] Call Trace: [ 254.660652][ T7052] [ 254.660660][ T7052] dump_stack_lvl+0xe8/0x150 [ 254.660679][ T7052] should_fail_ex+0x46c/0x600 [ 254.660697][ T7052] should_failslab+0xa8/0x100 [ 254.660708][ T7052] __kvmalloc_node_noprof+0x181/0x940 [ 254.660724][ T7052] ? alloc_fdtable+0x169/0x2c0 [ 254.660738][ T7052] alloc_fdtable+0x169/0x2c0 [ 254.660748][ T7052] dup_fd+0x879/0xb70 [ 254.660763][ T7052] copy_files+0xc9/0x120 [ 254.660777][ T7052] copy_process+0x151b/0x3960 [ 254.660794][ T7052] ? copy_process+0x915/0x3960 [ 254.660810][ T7052] ? __pfx_copy_process+0x10/0x10 [ 254.660827][ T7052] kernel_clone+0x21d/0x7a0 [ 254.660841][ T7052] ? __pfx_kernel_clone+0x10/0x10 [ 254.660852][ T7052] ? do_raw_spin_lock+0x121/0x290 [ 254.660873][ T7052] __x64_sys_clone+0x18b/0x1e0 [ 254.660888][ T7052] ? __pfx___x64_sys_clone+0x10/0x10 [ 254.660908][ T7052] ? __pfx_ksys_write+0x10/0x10 [ 254.660928][ T7052] do_syscall_64+0xec/0xf80 [ 254.660939][ T7052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.660949][ T7052] ? clear_bhb_loop+0x60/0xb0 [ 254.660961][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.660970][ T7052] RIP: 0033:0x7fe4c761f749 [ 254.660981][ T7052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.660989][ T7052] RSP: 002b:00007fe4c5864fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 254.661001][ T7052] RAX: ffffffffffffffda RBX: 00007fe4c7876090 RCX: 00007fe4c761f749 [ 254.661008][ T7052] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000a0001000 [ 254.661015][ T7052] RBP: 00007fe4c5865090 R08: 0000000000000000 R09: 0000000000000000 [ 254.661021][ T7052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 254.661027][ T7052] R13: 00007fe4c7876128 R14: 00007fe4c7876090 R15: 00007ffec50c27b8 [ 254.661042][ T7052] [ 255.898139][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898207][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.889998][ T7075] loop2: detected capacity change from 0 to 7 [ 260.511374][ T7075] Dev loop2: unable to read RDB block 7 [ 260.511431][ T7075] loop2: unable to read partition table [ 260.511644][ T7075] loop2: partition table beyond EOD, truncated [ 260.511681][ T7075] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 260.899930][ T7081] FAULT_INJECTION: forcing a failure. [ 260.899930][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 260.899961][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 260.899982][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.899993][ T7081] Call Trace: [ 260.900000][ T7081] [ 260.900007][ T7081] dump_stack_lvl+0xe8/0x150 [ 260.900035][ T7081] should_fail_ex+0x46c/0x600 [ 260.900063][ T7081] should_failslab+0xa8/0x100 [ 260.900083][ T7081] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 260.900111][ T7081] ? smk_import_entry+0x178/0x1f0 [ 260.900142][ T7081] kstrndup+0x80/0x160 [ 260.900161][ T7081] smk_import_entry+0x178/0x1f0 [ 260.900183][ T7081] smk_fill_rule+0x52/0x630 [ 260.900207][ T7081] smk_parse_long_rule+0xbc3/0xee0 [ 260.900233][ T7081] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 260.900265][ T7081] smk_write_rules_list+0x239/0x370 [ 260.900308][ T7081] ? __pfx_smk_write_change_rule+0x10/0x10 [ 260.900335][ T7081] vfs_write+0x287/0xb40 [ 260.900366][ T7081] ? __pfx_vfs_write+0x10/0x10 [ 260.900391][ T7081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.900411][ T7081] ? lockdep_hardirqs_on+0x7b/0x110 [ 260.900428][ T7081] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 260.900446][ T7081] ? mutex_lock_nested+0x154/0x1d0 [ 260.900467][ T7081] ? fdget_pos+0x253/0x320 [ 260.900495][ T7081] ksys_write+0x14b/0x260 [ 260.900522][ T7081] ? __pfx_ksys_write+0x10/0x10 [ 260.900559][ T7081] do_syscall_64+0xec/0xf80 [ 260.900577][ T7081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.900595][ T7081] ? trace_irq_disable+0x37/0x100 [ 260.900614][ T7081] ? clear_bhb_loop+0x60/0xb0 [ 260.900636][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.900654][ T7081] RIP: 0033:0x7f2ba71df749 [ 260.900671][ T7081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.900686][ T7081] RSP: 002b:00007f2ba5446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.900706][ T7081] RAX: ffffffffffffffda RBX: 00007f2ba7435fa0 RCX: 00007f2ba71df749 [ 260.900720][ T7081] RDX: 0000000000000053 RSI: 0000200000000240 RDI: 0000000000000003 [ 260.900732][ T7081] RBP: 00007f2ba5446090 R08: 0000000000000000 R09: 0000000000000000 [ 260.900743][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.900754][ T7081] R13: 00007f2ba7436038 R14: 00007f2ba7435fa0 R15: 00007ffcc5c0b848 [ 260.900785][ T7081] [ 262.997961][ T37] audit: type=1326 audit(1766753508.462:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 262.998011][ T37] audit: type=1326 audit(1766753508.472:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 263.005473][ T37] audit: type=1326 audit(1766753508.472:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4c75bb829 code=0x7ffc0000 [ 263.008570][ T37] audit: type=1326 audit(1766753508.482:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4c75bb829 code=0x7ffc0000 [ 263.018322][ T37] audit: type=1326 audit(1766753508.482:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4c75bb829 code=0x7ffc0000 [ 263.037062][ T37] audit: type=1326 audit(1766753508.492:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4c75bb829 code=0x7ffc0000 [ 263.037115][ T37] audit: type=1326 audit(1766753508.512:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4c75bb829 code=0x7ffc0000 [ 263.086718][ T37] audit: type=1326 audit(1766753508.522:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4c75bb829 code=0x7ffc0000 [ 263.106476][ T37] audit: type=1326 audit(1766753508.562:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4c75bb829 code=0x7ffc0000 [ 263.114847][ T37] audit: type=1326 audit(1766753508.592:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7102 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4c75bb829 code=0x7ffc0000 [ 263.275021][ T7109] binder: 7105:7109 ioctl 4018620d 0 returned -22 [ 263.275771][ T7109] binder: 7105:7109 ioctl f501 0 returned -22 [ 263.324754][ T7109] binder: 7105:7109 ioctl 400c620e 200000000240 returned -22 [ 263.451712][ T7112] FAULT_INJECTION: forcing a failure. [ 263.451712][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.451746][ T7112] CPU: 0 UID: 0 PID: 7112 Comm: syz.2.191 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.451767][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.451779][ T7112] Call Trace: [ 263.451787][ T7112] [ 263.451795][ T7112] dump_stack_lvl+0xe8/0x150 [ 263.451826][ T7112] should_fail_ex+0x46c/0x600 [ 263.451856][ T7112] _copy_from_iter+0x1cd/0x1630 [ 263.451891][ T7112] ? kmalloc_reserve+0xbd/0x290 [ 263.451914][ T7112] ? rcu_is_watching+0x15/0xb0 [ 263.451938][ T7112] ? __pfx__copy_from_iter+0x10/0x10 [ 263.451977][ T7112] ? __build_skb_around+0x22d/0x3c0 [ 263.451995][ T7112] ? __alloc_skb+0x198/0x3a0 [ 263.452014][ T7112] ? netlink_sendmsg+0x642/0xb30 [ 263.452040][ T7112] ? skb_put+0x11b/0x210 [ 263.452062][ T7112] netlink_sendmsg+0x6b2/0xb30 [ 263.452090][ T7112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.452122][ T7112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.452147][ T7112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.452173][ T7112] __sock_sendmsg+0x21c/0x270 [ 263.452206][ T7112] ____sys_sendmsg+0x508/0x810 [ 263.452235][ T7112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.452266][ T7112] ? import_iovec+0x74/0xa0 [ 263.452287][ T7112] ___sys_sendmsg+0x21f/0x2a0 [ 263.452312][ T7112] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.452367][ T7112] ? __fget_files+0x2a/0x420 [ 263.452387][ T7112] ? __fget_files+0x3a6/0x420 [ 263.452415][ T7112] __x64_sys_sendmsg+0x1a1/0x260 [ 263.452441][ T7112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.452473][ T7112] ? __pfx_ksys_write+0x10/0x10 [ 263.452510][ T7112] do_syscall_64+0xec/0xf80 [ 263.452529][ T7112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.452547][ T7112] ? trace_irq_disable+0x37/0x100 [ 263.452567][ T7112] ? clear_bhb_loop+0x60/0xb0 [ 263.452590][ T7112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.452608][ T7112] RIP: 0033:0x7f2ba71df749 [ 263.452625][ T7112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.452642][ T7112] RSP: 002b:00007f2ba5446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.452663][ T7112] RAX: ffffffffffffffda RBX: 00007f2ba7435fa0 RCX: 00007f2ba71df749 [ 263.452677][ T7112] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 263.452688][ T7112] RBP: 00007f2ba5446090 R08: 0000000000000000 R09: 0000000000000000 [ 263.452700][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.452711][ T7112] R13: 00007f2ba7436038 R14: 00007f2ba7435fa0 R15: 00007ffcc5c0b848 [ 263.452740][ T7112] [ 264.057004][ T6229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 264.502104][ T6229] usb 3-1: Using ep0 maxpacket: 16 [ 264.503950][ T6229] usb 3-1: config 1 has an invalid interface number: 233 but max is 0 [ 264.503975][ T6229] usb 3-1: config 1 has no interface number 0 [ 264.504005][ T6229] usb 3-1: config 1 interface 233 has no altsetting 0 [ 264.507206][ T6229] usb 3-1: New USB device found, idVendor=148f, idProduct=3070, bcdDevice=ab.42 [ 264.507232][ T6229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.507251][ T6229] usb 3-1: Product: syz [ 264.507264][ T6229] usb 3-1: Manufacturer: syz [ 264.507277][ T6229] usb 3-1: SerialNumber: syz [ 264.650698][ T7133] loop2: detected capacity change from 0 to 7 [ 265.309377][ T7133] Dev loop2: unable to read RDB block 7 [ 265.309433][ T7133] loop2: unable to read partition table [ 265.309664][ T7133] loop2: partition table beyond EOD, truncated [ 265.309684][ T7133] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 265.554092][ T7116] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 265.560037][ T7138] 9p: Bad value for 'wfdno' [ 265.893853][ T7135] 9p: Bad value for 'wfdno' [ 265.947680][ T7144] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 265.947711][ T7144] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.963855][ T7144] vhci_hcd vhci_hcd.0: Device attached [ 266.203551][ T6229] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 266.432747][ T7145] vhci_hcd: connection reset by peer [ 266.436987][ T4544] vhci_hcd vhci_hcd.5: stop threads [ 266.437012][ T4544] vhci_hcd vhci_hcd.5: release socket [ 266.474209][ T4544] vhci_hcd vhci_hcd.5: disconnect device [ 267.321390][ T7155] kAFS: unable to lookup cell '.,' [ 268.099134][ T7088] usb 3-1: USB disconnect, device number 3 [ 268.126674][ T7159] FAULT_INJECTION: forcing a failure. [ 268.126674][ T7159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.126707][ T7159] CPU: 1 UID: 0 PID: 7159 Comm: syz.5.203 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.126729][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.126741][ T7159] Call Trace: [ 268.126749][ T7159] [ 268.126757][ T7159] dump_stack_lvl+0xe8/0x150 [ 268.126787][ T7159] should_fail_ex+0x46c/0x600 [ 268.126818][ T7159] _copy_from_user+0x2d/0xb0 [ 268.126838][ T7159] copy_from_bpfptr+0x5c/0x90 [ 268.126862][ T7159] bpf_prog_load+0xa83/0x1a10 [ 268.126894][ T7159] ? __pfx_bpf_prog_load+0x10/0x10 [ 268.126915][ T7159] ? __might_fault+0xb0/0x130 [ 268.126961][ T7159] ? bpf_lsm_bpf+0x9/0x20 [ 268.126978][ T7159] ? security_bpf+0x7e/0x300 [ 268.127007][ T7159] __sys_bpf+0x507/0x860 [ 268.127029][ T7159] ? __pfx___sys_bpf+0x10/0x10 [ 268.127047][ T7159] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 268.127088][ T7159] ? ksys_write+0x230/0x260 [ 268.127116][ T7159] ? __pfx_ksys_write+0x10/0x10 [ 268.127146][ T7159] __x64_sys_bpf+0x7c/0x90 [ 268.127164][ T7159] do_syscall_64+0xec/0xf80 [ 268.127182][ T7159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.127199][ T7159] ? trace_irq_disable+0x37/0x100 [ 268.127218][ T7159] ? clear_bhb_loop+0x60/0xb0 [ 268.127240][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.127258][ T7159] RIP: 0033:0x7fd8810cf749 [ 268.127276][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.127293][ T7159] RSP: 002b:00007fd87f32e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.127320][ T7159] RAX: ffffffffffffffda RBX: 00007fd881325fa0 RCX: 00007fd8810cf749 [ 268.127333][ T7159] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 268.127345][ T7159] RBP: 00007fd87f32e090 R08: 0000000000000000 R09: 0000000000000000 [ 268.127357][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.127368][ T7159] R13: 00007fd881326038 R14: 00007fd881325fa0 R15: 00007ffe353d5808 [ 268.127397][ T7159] [ 269.110934][ T7181] netlink: 'syz.0.202': attribute type 2 has an invalid length. [ 269.110958][ T7181] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 269.615523][ T7187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.182504][ T7200] loop2: detected capacity change from 0 to 7 [ 270.679251][ T7200] Dev loop2: unable to read RDB block 7 [ 270.679310][ T7200] loop2: unable to read partition table [ 270.679535][ T7200] loop2: partition table beyond EOD, truncated [ 270.679553][ T7200] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.103065][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 271.322268][ T6229] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 271.488877][ T7210] 9p: Bad value for 'wfdno' [ 271.712017][ T7212] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 271.712792][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.713248][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 272.132465][ T6376] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 272.445610][ T7214] vhci_hcd: connection reset by peer [ 272.453534][ T1219] vhci_hcd vhci_hcd.1: stop threads [ 272.453621][ T1219] vhci_hcd vhci_hcd.1: release socket [ 272.505596][ T1219] vhci_hcd vhci_hcd.1: disconnect device [ 273.692195][ T5921] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 273.844778][ T5921] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 273.844815][ T5921] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.844842][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 273.844874][ T5921] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 273.844897][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.955359][ T5921] usb 1-1: config 0 descriptor?? [ 274.194637][ T5921] usbhid 1-1:0.0: can't add hid device: -71 [ 274.194757][ T5921] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 274.226467][ T5921] usb 1-1: USB disconnect, device number 5 [ 274.258234][ T7245] netlink: 88 bytes leftover after parsing attributes in process `syz.4.224'. [ 274.482176][ T7249] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 274.767252][ T7252] loop2: detected capacity change from 0 to 7 [ 274.831949][ T7252] Dev loop2: unable to read RDB block 7 [ 274.832345][ T7252] loop2: unable to read partition table [ 274.834650][ T7252] loop2: partition table beyond EOD, truncated [ 274.834735][ T7252] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 276.028301][ T7253] ======================================================= [ 276.028301][ T7253] WARNING: The mand mount option has been deprecated and [ 276.028301][ T7253] and is ignored by this kernel. Remove the mand [ 276.028301][ T7253] option from the mount to silence this warning. [ 276.028301][ T7253] ======================================================= [ 276.355600][ T7274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 276.355673][ T7274] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.362402][ T7274] vhci_hcd vhci_hcd.0: Device attached [ 276.494634][ T7278] FAULT_INJECTION: forcing a failure. [ 276.494634][ T7278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.494669][ T7278] CPU: 0 UID: 0 PID: 7278 Comm: syz.4.228 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 276.494693][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.494706][ T7278] Call Trace: [ 276.494713][ T7278] [ 276.494721][ T7278] dump_stack_lvl+0xe8/0x150 [ 276.494755][ T7278] should_fail_ex+0x46c/0x600 [ 276.494785][ T7278] _copy_from_user+0x2d/0xb0 [ 276.494806][ T7278] do_sock_getsockopt+0x15c/0x3d0 [ 276.494833][ T7278] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 276.494857][ T7278] ? __fget_files+0x3a6/0x420 [ 276.494876][ T7278] ? __fget_files+0x2a/0x420 [ 276.494903][ T7278] __x64_sys_getsockopt+0x1ab/0x250 [ 276.494934][ T7278] do_syscall_64+0xec/0xf80 [ 276.494953][ T7278] ? rcu_is_watching+0x15/0xb0 [ 276.494970][ T7278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.494990][ T7278] ? clear_bhb_loop+0x60/0xb0 [ 276.495019][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.495038][ T7278] RIP: 0033:0x7f9ad595f749 [ 276.495054][ T7278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.495071][ T7278] RSP: 002b:00007f9ad3bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 276.495092][ T7278] RAX: ffffffffffffffda RBX: 00007f9ad5bb5fa0 RCX: 00007f9ad595f749 [ 276.495107][ T7278] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 276.495119][ T7278] RBP: 00007f9ad3bc6090 R08: 00002000000002c0 R09: 0000000000000000 [ 276.495132][ T7278] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 276.495145][ T7278] R13: 00007f9ad5bb6038 R14: 00007f9ad5bb5fa0 R15: 00007ffe0db26588 [ 276.495175][ T7278] [ 276.919639][ T37] kauditd_printk_skb: 119 callbacks suppressed [ 276.919662][ T37] audit: type=1326 audit(1766753522.302:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ad59565e7 code=0x7ffc0000 [ 277.291564][ T37] audit: type=1326 audit(1766753522.392:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ad58fb829 code=0x7ffc0000 [ 277.291623][ T37] audit: type=1326 audit(1766753522.442:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ad59565e7 code=0x7ffc0000 [ 277.291665][ T37] audit: type=1326 audit(1766753522.762:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ad58fb829 code=0x7ffc0000 [ 277.291706][ T37] audit: type=1326 audit(1766753522.762:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ad59565e7 code=0x7ffc0000 [ 277.291746][ T37] audit: type=1326 audit(1766753522.762:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ad58fb829 code=0x7ffc0000 [ 277.291788][ T37] audit: type=1326 audit(1766753522.762:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ad59565e7 code=0x7ffc0000 [ 277.300375][ T37] audit: type=1326 audit(1766753522.762:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ad58fb829 code=0x7ffc0000 [ 277.300763][ T37] audit: type=1326 audit(1766753522.772:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ad59565e7 code=0x7ffc0000 [ 277.301029][ T37] audit: type=1326 audit(1766753522.772:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7282 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ad58fb829 code=0x7ffc0000 [ 277.353125][ T7275] vhci_hcd: connection reset by peer [ 277.361338][ T3244] vhci_hcd vhci_hcd.1: stop threads [ 277.361364][ T3244] vhci_hcd vhci_hcd.1: release socket [ 277.379418][ T3244] vhci_hcd vhci_hcd.1: disconnect device [ 277.452195][ T6376] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 277.897374][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037022c00: rx timeout, send abort [ 278.401378][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037020400: rx timeout, send abort [ 278.406360][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037022c00: abort rx timeout. Force session deactivation [ 278.903230][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037020400: abort rx timeout. Force session deactivation [ 280.762373][ T7310] netlink: 'syz.5.239': attribute type 21 has an invalid length. [ 281.331011][ T7323] kAFS: unable to lookup cell '.,' [ 284.094731][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.246'. [ 284.552461][ T7346] netlink: 'syz.0.247': attribute type 3 has an invalid length. [ 284.552487][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 284.640051][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 284.640071][ T37] audit: type=1326 audit(1766753530.112:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7350 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 284.642690][ T37] audit: type=1326 audit(1766753530.122:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7350 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 284.643120][ T37] audit: type=1326 audit(1766753530.122:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7350 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 284.643631][ T37] audit: type=1326 audit(1766753530.122:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7350 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 285.408680][ T7354] libceph: resolve 'c=' (ret=-3): failed [ 287.723271][ T7368] FAULT_INJECTION: forcing a failure. [ 287.723271][ T7368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.723302][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.4.252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 287.723322][ T7368] Tainted: [L]=SOFTLOCKUP [ 287.723327][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.723336][ T7368] Call Trace: [ 287.723342][ T7368] [ 287.723348][ T7368] dump_stack_lvl+0xe8/0x150 [ 287.723373][ T7368] should_fail_ex+0x46c/0x600 [ 287.723397][ T7368] _copy_from_user+0x2d/0xb0 [ 287.723412][ T7368] memdup_user+0x5e/0xd0 [ 287.723428][ T7368] strndup_user+0x68/0xd0 [ 287.723445][ T7368] __se_sys_mount+0x9d/0x410 [ 287.723461][ T7368] ? ksys_write+0x230/0x260 [ 287.723481][ T7368] ? __pfx___se_sys_mount+0x10/0x10 [ 287.723500][ T7368] ? __x64_sys_mount+0x20/0xc0 [ 287.723515][ T7368] do_syscall_64+0xec/0xf80 [ 287.723530][ T7368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.723544][ T7368] ? trace_irq_disable+0x37/0x100 [ 287.723559][ T7368] ? clear_bhb_loop+0x60/0xb0 [ 287.723576][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.723589][ T7368] RIP: 0033:0x7f9ad595f749 [ 287.723603][ T7368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.723616][ T7368] RSP: 002b:00007f9ad3bc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 287.723633][ T7368] RAX: ffffffffffffffda RBX: 00007f9ad5bb5fa0 RCX: 00007f9ad595f749 [ 287.723645][ T7368] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 287.723655][ T7368] RBP: 00007f9ad3bc6090 R08: 0000200000000180 R09: 0000000000000000 [ 287.723665][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.723674][ T7368] R13: 00007f9ad5bb6038 R14: 00007f9ad5bb5fa0 R15: 00007ffe0db26588 [ 287.723697][ T7368] [ 289.737284][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'. [ 290.050962][ T7387] kAFS: unable to lookup cell '.,' [ 291.273166][ T37] audit: type=1326 audit(1766753536.752:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 291.273442][ T37] audit: type=1326 audit(1766753536.752:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 291.337719][ T37] audit: type=1326 audit(1766753536.752:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 291.337776][ T37] audit: type=1326 audit(1766753536.752:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 291.337813][ T37] audit: type=1326 audit(1766753536.752:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 291.337849][ T37] audit: type=1326 audit(1766753536.752:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 291.337888][ T37] audit: type=1326 audit(1766753536.752:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 291.337925][ T37] audit: type=1326 audit(1766753536.752:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 292.353700][ T7415] kAFS: unable to lookup cell '.,' [ 295.718744][ T7430] FAULT_INJECTION: forcing a failure. [ 295.718744][ T7430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.718781][ T7430] CPU: 1 UID: 0 PID: 7430 Comm: syz.0.268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.718807][ T7430] Tainted: [L]=SOFTLOCKUP [ 295.718813][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.718826][ T7430] Call Trace: [ 295.718833][ T7430] [ 295.718841][ T7430] dump_stack_lvl+0xe8/0x150 [ 295.718871][ T7430] should_fail_ex+0x46c/0x600 [ 295.718901][ T7430] _copy_to_user+0x31/0xb0 [ 295.718923][ T7430] video_usercopy+0xd93/0x13f0 [ 295.718955][ T7430] ? __pfx___video_do_ioctl+0x10/0x10 [ 295.718975][ T7430] ? __pfx_video_usercopy+0x10/0x10 [ 295.718993][ T7430] ? smack_file_ioctl+0x2ac/0x340 [ 295.719033][ T7430] ? __fget_files+0x2a/0x420 [ 295.719053][ T7430] ? __fget_files+0x3a6/0x420 [ 295.719076][ T7430] v4l2_ioctl+0x190/0x1e0 [ 295.719096][ T7430] ? __pfx_v4l2_ioctl+0x10/0x10 [ 295.719116][ T7430] __se_sys_ioctl+0xff/0x170 [ 295.719144][ T7430] do_syscall_64+0xec/0xf80 [ 295.719163][ T7430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.719181][ T7430] ? trace_irq_disable+0x37/0x100 [ 295.719201][ T7430] ? clear_bhb_loop+0x60/0xb0 [ 295.719224][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.719242][ T7430] RIP: 0033:0x7fe4c761f749 [ 295.719264][ T7430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.719281][ T7430] RSP: 002b:00007fe4c5886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.719301][ T7430] RAX: ffffffffffffffda RBX: 00007fe4c7875fa0 RCX: 00007fe4c761f749 [ 295.719315][ T7430] RDX: 0000200000000040 RSI: 00000000c02c5638 RDI: 0000000000000003 [ 295.719328][ T7430] RBP: 00007fe4c5886090 R08: 0000000000000000 R09: 0000000000000000 [ 295.719341][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.719352][ T7430] R13: 00007fe4c7876038 R14: 00007fe4c7875fa0 R15: 00007ffec50c27b8 [ 295.719383][ T7430] [ 298.466045][ T37] audit: type=1326 audit(1766753543.942:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 298.497058][ T37] audit: type=1326 audit(1766753543.942:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 298.497378][ T37] audit: type=1326 audit(1766753543.972:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 298.497779][ T37] audit: type=1326 audit(1766753543.972:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 298.498325][ T37] audit: type=1326 audit(1766753543.972:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 298.498932][ T37] audit: type=1326 audit(1766753543.972:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7443 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 299.087787][ T7464] kAFS: unable to lookup cell '.,' [ 299.920482][ T5815] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 300.072158][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 300.074660][ T5815] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.077143][ T5815] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 300.077168][ T5815] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 300.077196][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.077953][ T5815] usb 1-1: language id specifier not provided by device, defaulting to English [ 300.082459][ T5815] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.082488][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.082510][ T5815] usb 1-1: Product: syz [ 300.082523][ T5815] usb 1-1: Manufacturer: 킉 [ 300.082538][ T5815] usb 1-1: SerialNumber: syz [ 300.473813][ T5815] usb 1-1: 0:2 : does not exist [ 301.275789][ T5815] usb 1-1: USB disconnect, device number 6 [ 301.575976][ T61] Bluetooth: Unexpected continuation frame (len 56) [ 301.582169][ T7450] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 301.882153][ T7450] usb 3-1: Using ep0 maxpacket: 8 [ 301.890206][ T7450] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 301.890232][ T7450] usb 3-1: config 0 has no interface number 0 [ 301.926652][ T7450] usb 3-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=d3.dd [ 301.926683][ T7450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.926701][ T7450] usb 3-1: Product: syz [ 301.926716][ T7450] usb 3-1: Manufacturer: syz [ 301.926729][ T7450] usb 3-1: SerialNumber: syz [ 301.974998][ T7450] usb 3-1: config 0 descriptor?? [ 302.252197][ T7450] usb 3-1: USB disconnect, device number 4 [ 303.156978][ T7503] FAULT_INJECTION: forcing a failure. [ 303.156978][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.157013][ T7503] CPU: 0 UID: 0 PID: 7503 Comm: syz.4.282 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.157040][ T7503] Tainted: [L]=SOFTLOCKUP [ 303.157047][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.157059][ T7503] Call Trace: [ 303.157066][ T7503] [ 303.157074][ T7503] dump_stack_lvl+0xe8/0x150 [ 303.157104][ T7503] should_fail_ex+0x46c/0x600 [ 303.157132][ T7503] _copy_from_user+0x2d/0xb0 [ 303.157152][ T7503] video_usercopy+0x349/0x13f0 [ 303.157178][ T7503] ? smk_tskacc+0x2fc/0x370 [ 303.157200][ T7503] ? __pfx___video_do_ioctl+0x10/0x10 [ 303.157219][ T7503] ? __pfx_video_usercopy+0x10/0x10 [ 303.157236][ T7503] ? smack_file_ioctl+0x2ac/0x340 [ 303.157273][ T7503] ? __fget_files+0x2a/0x420 [ 303.157292][ T7503] ? __fget_files+0x3a6/0x420 [ 303.157320][ T7503] v4l2_ioctl+0x190/0x1e0 [ 303.157339][ T7503] ? __pfx_v4l2_ioctl+0x10/0x10 [ 303.157358][ T7503] __se_sys_ioctl+0xff/0x170 [ 303.157385][ T7503] do_syscall_64+0xec/0xf80 [ 303.157403][ T7503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.157420][ T7503] ? trace_irq_disable+0x37/0x100 [ 303.157440][ T7503] ? clear_bhb_loop+0x60/0xb0 [ 303.157462][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.157481][ T7503] RIP: 0033:0x7f9ad595f749 [ 303.157498][ T7503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.157515][ T7503] RSP: 002b:00007f9ad3bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.157535][ T7503] RAX: ffffffffffffffda RBX: 00007f9ad5bb5fa0 RCX: 00007f9ad595f749 [ 303.157549][ T7503] RDX: 00002000000001c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 303.157563][ T7503] RBP: 00007f9ad3bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 303.157574][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.157584][ T7503] R13: 00007f9ad5bb6038 R14: 00007f9ad5bb5fa0 R15: 00007ffe0db26588 [ 303.157615][ T7503] [ 305.056516][ T7514] kAFS: unable to lookup cell '.,' [ 306.321478][ T7518] loop2: detected capacity change from 0 to 7 [ 306.649870][ T7518] Dev loop2: unable to read RDB block 7 [ 306.650207][ T7518] loop2: unable to read partition table [ 306.652600][ T7518] loop2: partition table beyond EOD, truncated [ 306.652688][ T7518] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 307.422944][ T7079] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 307.582050][ T7079] usb 5-1: Using ep0 maxpacket: 32 [ 307.583973][ T7079] usb 5-1: config 0 has no interfaces? [ 307.584007][ T7079] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 307.584030][ T7079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.588946][ T7079] usb 5-1: config 0 descriptor?? [ 307.800928][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.804464][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.905318][ T31] usb 5-1: USB disconnect, device number 10 [ 308.757622][ T7537] loop2: detected capacity change from 0 to 7 [ 309.168808][ T7537] Dev loop2: unable to read RDB block 7 [ 309.168861][ T7537] loop2: unable to read partition table [ 309.169092][ T7537] loop2: partition table beyond EOD, truncated [ 309.169109][ T7537] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 309.688499][ T37] audit: type=1326 audit(1766753555.162:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 309.689026][ T37] audit: type=1326 audit(1766753555.162:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 309.689336][ T37] audit: type=1326 audit(1766753555.162:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 309.689690][ T37] audit: type=1326 audit(1766753555.162:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 309.690171][ T37] audit: type=1326 audit(1766753555.162:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 309.690767][ T37] audit: type=1326 audit(1766753555.162:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 309.742750][ T7543] FAULT_INJECTION: forcing a failure. [ 309.742750][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 309.742787][ T7543] CPU: 0 UID: 0 PID: 7543 Comm: syz.5.291 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 309.742812][ T7543] Tainted: [L]=SOFTLOCKUP [ 309.742819][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.742831][ T7543] Call Trace: [ 309.742838][ T7543] [ 309.742845][ T7543] dump_stack_lvl+0xe8/0x150 [ 309.742875][ T7543] should_fail_ex+0x46c/0x600 [ 309.742903][ T7543] should_failslab+0xa8/0x100 [ 309.742923][ T7543] __kmalloc_noprof+0xe0/0x7e0 [ 309.742949][ T7543] ? kfree+0x4d/0x900 [ 309.742969][ T7543] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 309.742994][ T7543] tomoyo_realpath_from_path+0xe3/0x5d0 [ 309.743014][ T7543] ? tomoyo_domain+0xd9/0x130 [ 309.743039][ T7543] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 309.743064][ T7543] tomoyo_path_number_perm+0x1e8/0x5a0 [ 309.743091][ T7543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 309.743115][ T7543] ? __lock_acquire+0x6b6/0x2cf0 [ 309.743153][ T7543] ? __pfx___seccomp_filter+0x10/0x10 [ 309.743205][ T7543] ? __fget_files+0x2a/0x420 [ 309.743227][ T7543] ? __fget_files+0x2a/0x420 [ 309.743245][ T7543] ? __fget_files+0x3a6/0x420 [ 309.743263][ T7543] ? __fget_files+0x2a/0x420 [ 309.743285][ T7543] security_file_ioctl+0xcb/0x2d0 [ 309.743313][ T7543] __se_sys_ioctl+0x47/0x170 [ 309.743339][ T7543] do_syscall_64+0xec/0xf80 [ 309.743358][ T7543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.743376][ T7543] ? trace_irq_disable+0x37/0x100 [ 309.743395][ T7543] ? clear_bhb_loop+0x60/0xb0 [ 309.743418][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.743435][ T7543] RIP: 0033:0x7fd8810cf749 [ 309.743452][ T7543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.743469][ T7543] RSP: 002b:00007fd87f32e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.743489][ T7543] RAX: ffffffffffffffda RBX: 00007fd881325fa0 RCX: 00007fd8810cf749 [ 309.743503][ T7543] RDX: 00002000000001c0 RSI: 0000000040086203 RDI: 0000000000000004 [ 309.743515][ T7543] RBP: 00007fd87f32e090 R08: 0000000000000000 R09: 0000000000000000 [ 309.743528][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.743538][ T7543] R13: 00007fd881326038 R14: 00007fd881325fa0 R15: 00007ffe353d5808 [ 309.743569][ T7543] [ 309.743576][ T7543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.182045][ T37] audit: type=1326 audit(1766753555.652:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 310.189770][ T37] audit: type=1326 audit(1766753555.662:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 310.189807][ T37] audit: type=1326 audit(1766753555.662:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 310.189832][ T37] audit: type=1326 audit(1766753555.662:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fe4c761f749 code=0x7ffc0000 [ 312.067074][ T7569] kAFS: unable to lookup cell '.,' [ 312.541567][ T7531] input: syz0 as /devices/virtual/input/input6 [ 314.670469][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 315.863839][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 315.863857][ T37] audit: type=1326 audit(1766753561.332:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 315.863900][ T37] audit: type=1326 audit(1766753561.342:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 315.863938][ T37] audit: type=1326 audit(1766753561.342:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 315.863978][ T37] audit: type=1326 audit(1766753561.342:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 315.864017][ T37] audit: type=1326 audit(1766753561.342:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 315.864057][ T37] audit: type=1326 audit(1766753561.342:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 315.864568][ T37] audit: type=1326 audit(1766753561.342:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 315.865644][ T37] audit: type=1326 audit(1766753561.342:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7606 comm="syz.2.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba71df749 code=0x7ffc0000 [ 316.224548][ T7619] 9p: Bad value for 'wfdno' [ 316.764559][ T7620] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 316.764601][ T7620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 316.768186][ T7620] vhci_hcd vhci_hcd.0: Device attached [ 317.159067][ T7621] vhci_hcd: connection closed [ 317.175793][ T5820] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 317.263037][ T1485] vhci_hcd vhci_hcd.2: stop threads [ 317.263069][ T1485] vhci_hcd vhci_hcd.2: release socket [ 317.263238][ T1485] vhci_hcd vhci_hcd.2: disconnect device [ 317.453747][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.455900][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.679315][ T5820] usb 37-1: enqueue for inactive port 0 [ 317.892138][ T5820] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 318.342095][ T7635] kAFS: unable to lookup cell '.,' [ 319.084506][ T7638] FAULT_INJECTION: forcing a failure. [ 319.084506][ T7638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.084542][ T7638] CPU: 1 UID: 0 PID: 7638 Comm: syz.0.310 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.084569][ T7638] Tainted: [L]=SOFTLOCKUP [ 319.084576][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.084588][ T7638] Call Trace: [ 319.084595][ T7638] [ 319.084603][ T7638] dump_stack_lvl+0xe8/0x150 [ 319.084634][ T7638] should_fail_ex+0x46c/0x600 [ 319.084665][ T7638] _copy_to_user+0x31/0xb0 [ 319.084686][ T7638] simple_read_from_buffer+0xe1/0x170 [ 319.084715][ T7638] proc_fail_nth_read+0x1b6/0x220 [ 319.084744][ T7638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.084778][ T7638] ? rw_verify_area+0x2ac/0x4e0 [ 319.084801][ T7638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.084829][ T7638] vfs_read+0x206/0xa30 [ 319.084861][ T7638] ? __pfx_vfs_read+0x10/0x10 [ 319.084887][ T7638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 319.084907][ T7638] ? lockdep_hardirqs_on+0x7b/0x110 [ 319.084925][ T7638] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 319.084942][ T7638] ? mutex_lock_nested+0x154/0x1d0 [ 319.084965][ T7638] ? fdget_pos+0x253/0x320 [ 319.084994][ T7638] ksys_read+0x14b/0x260 [ 319.085021][ T7638] ? __pfx_ksys_read+0x10/0x10 [ 319.085058][ T7638] do_syscall_64+0xec/0xf80 [ 319.085077][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.085095][ T7638] ? trace_irq_disable+0x37/0x100 [ 319.085116][ T7638] ? clear_bhb_loop+0x60/0xb0 [ 319.085139][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.085157][ T7638] RIP: 0033:0x7fe4c761e15c [ 319.085174][ T7638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.085191][ T7638] RSP: 002b:00007fe4c5886030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.085211][ T7638] RAX: ffffffffffffffda RBX: 00007fe4c7875fa0 RCX: 00007fe4c761e15c [ 319.085224][ T7638] RDX: 000000000000000f RSI: 00007fe4c58860a0 RDI: 0000000000000003 [ 319.085237][ T7638] RBP: 00007fe4c5886090 R08: 0000000000000000 R09: 0000000000000000 [ 319.085249][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.085260][ T7638] R13: 00007fe4c7876038 R14: 00007fe4c7875fa0 R15: 00007ffec50c27b8 [ 319.085293][ T7638] [ 319.429025][ T5819] Bluetooth: hci6: command 0x0406 tx timeout [ 319.930098][ T7649] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 319.930098][ T7649] The task syz.1.313 (7649) triggered the difference, watch for misbehavior. [ 320.092234][ T7654] binder: 7653:7654 ioctl c0306201 200000000300 returned -22 [ 320.467569][ T5872] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 320.501994][ T7658] syz.2.317 uses obsolete (PF_INET,SOCK_PACKET) [ 320.626580][ T5872] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.626626][ T5872] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.626664][ T5872] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 320.626686][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.682485][ T7659] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 320.691754][ T5872] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.742885][ T6229] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 320.872106][ T6229] usb 3-1: device descriptor read/64, error -71 [ 321.294241][ T6229] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 321.433593][ T6229] usb 3-1: device descriptor read/64, error -71 [ 321.551701][ T6229] usb usb3-port1: attempt power cycle [ 321.920101][ T6229] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 321.932898][ T6229] usb 3-1: device descriptor read/8, error -71 [ 322.189894][ T6229] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 322.257265][ T7688] FAULT_INJECTION: forcing a failure. [ 322.257265][ T7688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.257333][ T7688] CPU: 0 UID: 0 PID: 7688 Comm: syz.4.322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.257362][ T7688] Tainted: [L]=SOFTLOCKUP [ 322.257370][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.257382][ T7688] Call Trace: [ 322.257387][ T7688] [ 322.257393][ T7688] dump_stack_lvl+0xe8/0x150 [ 322.257414][ T7688] should_fail_ex+0x46c/0x600 [ 322.257434][ T7688] strncpy_from_user+0x36/0x2c0 [ 322.257449][ T7688] bpf_prog_load+0xc23/0x1a10 [ 322.257469][ T7688] ? __pfx_bpf_prog_load+0x10/0x10 [ 322.257481][ T7688] ? __might_fault+0xb0/0x130 [ 322.257506][ T7688] ? bpf_lsm_bpf+0x9/0x20 [ 322.257516][ T7688] ? security_bpf+0x7e/0x300 [ 322.257533][ T7688] __sys_bpf+0x507/0x860 [ 322.257546][ T7688] ? __pfx___sys_bpf+0x10/0x10 [ 322.257555][ T7688] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 322.257581][ T7688] ? ksys_write+0x230/0x260 [ 322.257597][ T7688] ? __pfx_ksys_write+0x10/0x10 [ 322.257615][ T7688] __x64_sys_bpf+0x7c/0x90 [ 322.257625][ T7688] do_syscall_64+0xec/0xf80 [ 322.257636][ T7688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.257647][ T7688] ? clear_bhb_loop+0x60/0xb0 [ 322.257660][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.257670][ T7688] RIP: 0033:0x7f9ad595f749 [ 322.257681][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.257690][ T7688] RSP: 002b:00007f9ad3ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.257703][ T7688] RAX: ffffffffffffffda RBX: 00007f9ad5bb6090 RCX: 00007f9ad595f749 [ 322.257711][ T7688] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 322.257718][ T7688] RBP: 00007f9ad3ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 322.257724][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.257730][ T7688] R13: 00007f9ad5bb6128 R14: 00007f9ad5bb6090 R15: 00007ffe0db26588 [ 322.257746][ T7688] [ 322.768015][ T6229] usb 3-1: device descriptor read/8, error -71 [ 322.881170][ T6229] usb usb3-port1: unable to enumerate USB device [ 323.322595][ T7701] kAFS: unable to lookup cell '.,' [ 324.323957][ T6376] usb 1-1: USB disconnect, device number 7 [ 324.570391][ T7715] FAULT_INJECTION: forcing a failure. [ 324.570391][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.570458][ T7715] CPU: 0 UID: 0 PID: 7715 Comm: syz.0.325 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 324.570474][ T7715] Tainted: [L]=SOFTLOCKUP [ 324.570478][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.570487][ T7715] Call Trace: [ 324.570493][ T7715] [ 324.570498][ T7715] dump_stack_lvl+0xe8/0x150 [ 324.570520][ T7715] should_fail_ex+0x46c/0x600 [ 324.570539][ T7715] strncpy_from_user+0x36/0x2c0 [ 324.570555][ T7715] bpf_prog_load+0xc23/0x1a10 [ 324.570575][ T7715] ? __pfx_bpf_prog_load+0x10/0x10 [ 324.570586][ T7715] ? __might_fault+0xb0/0x130 [ 324.570612][ T7715] ? bpf_lsm_bpf+0x9/0x20 [ 324.570621][ T7715] ? security_bpf+0x7e/0x300 [ 324.570639][ T7715] __sys_bpf+0x507/0x860 [ 324.570651][ T7715] ? __pfx___sys_bpf+0x10/0x10 [ 324.570660][ T7715] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 324.570684][ T7715] ? ksys_write+0x230/0x260 [ 324.570700][ T7715] ? __pfx_ksys_write+0x10/0x10 [ 324.570718][ T7715] __x64_sys_bpf+0x7c/0x90 [ 324.570728][ T7715] do_syscall_64+0xec/0xf80 [ 324.570739][ T7715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.570749][ T7715] ? trace_irq_disable+0x37/0x100 [ 324.570760][ T7715] ? clear_bhb_loop+0x60/0xb0 [ 324.570773][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.570783][ T7715] RIP: 0033:0x7fe4c761f749 [ 324.570793][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.570803][ T7715] RSP: 002b:00007fe4c5886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.570815][ T7715] RAX: ffffffffffffffda RBX: 00007fe4c7875fa0 RCX: 00007fe4c761f749 [ 324.570823][ T7715] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 324.570830][ T7715] RBP: 00007fe4c5886090 R08: 0000000000000000 R09: 0000000000000000 [ 324.570836][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.570842][ T7715] R13: 00007fe4c7876038 R14: 00007fe4c7875fa0 R15: 00007ffec50c27b8 [ 324.570858][ T7715] [ 324.852124][ T5819] Bluetooth: hci7: command 0x0406 tx timeout [ 326.530059][ T7739] tipc: Started in network mode [ 326.530088][ T7739] tipc: Node identity ac14140f, cluster identity 4711 [ 326.531776][ T7739] tipc: New replicast peer: 10.1.1.0 [ 326.563025][ T7739] tipc: Enabled bearer , priority 10 [ 326.873107][ T7746] kAFS: unable to lookup cell '.,' [ 327.687499][ T7450] tipc: Node number set to 2886997007 [ 327.823357][ T7753] kAFS: unable to lookup cell '.,' [ 328.768511][ T7760] FAULT_INJECTION: forcing a failure. [ 328.768511][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 328.768549][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.4.337 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.768577][ T7760] Tainted: [L]=SOFTLOCKUP [ 328.768583][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.768595][ T7760] Call Trace: [ 328.768603][ T7760] [ 328.768612][ T7760] dump_stack_lvl+0xe8/0x150 [ 328.768644][ T7760] should_fail_ex+0x46c/0x600 [ 328.768675][ T7760] ? __alloc_skb+0x1dc/0x3a0 [ 328.768695][ T7760] should_failslab+0xa8/0x100 [ 328.768715][ T7760] ? __alloc_skb+0x1dc/0x3a0 [ 328.768733][ T7760] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 328.768760][ T7760] ? lockdep_hardirqs_on+0x7b/0x110 [ 328.768782][ T7760] ? __alloc_skb+0x198/0x3a0 [ 328.768803][ T7760] __alloc_skb+0x1dc/0x3a0 [ 328.768827][ T7760] netlink_sendmsg+0x5c6/0xb30 [ 328.768862][ T7760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.768895][ T7760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.768921][ T7760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.768953][ T7760] __sock_sendmsg+0x21c/0x270 [ 328.768984][ T7760] __sys_sendto+0x3c7/0x520 [ 328.769009][ T7760] ? __pfx___sys_sendto+0x10/0x10 [ 328.769053][ T7760] ? exc_page_fault+0x71/0xd0 [ 328.769075][ T7760] ? do_user_addr_fault+0xc85/0x1380 [ 328.769102][ T7760] __x64_sys_sendto+0xde/0x100 [ 328.769127][ T7760] do_syscall_64+0xec/0xf80 [ 328.769146][ T7760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.769165][ T7760] ? trace_irq_disable+0x37/0x100 [ 328.769185][ T7760] ? clear_bhb_loop+0x60/0xb0 [ 328.769208][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.769227][ T7760] RIP: 0033:0x7f9ad59615dc [ 328.769244][ T7760] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 328.769261][ T7760] RSP: 002b:00007f9ad3b82ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 328.769282][ T7760] RAX: ffffffffffffffda RBX: 00007f9ad3b82fc0 RCX: 00007f9ad59615dc [ 328.769296][ T7760] RDX: 0000000000000020 RSI: 00007f9ad3b83010 RDI: 0000000000000007 [ 328.769309][ T7760] RBP: 0000000000000000 R08: 00007f9ad3b82f14 R09: 000000000000000c [ 328.769321][ T7760] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 328.769332][ T7760] R13: 00007f9ad3b82f68 R14: 00007f9ad3b83010 R15: 0000000000000000 [ 328.769362][ T7760] [ 329.732121][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 329.732173][ T5123] Bluetooth: hci8: command 0x0406 tx timeout [ 332.081122][ T7781] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 336.047280][ T7809] input: syz1 as /devices/virtual/input/input7 [ 336.538373][ T7813] kAFS: unable to lookup cell '.,' [ 338.677523][ T7824] capability: warning: `syz.2.356' uses deprecated v2 capabilities in a way that may be insecure [ 339.622094][ T5872] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 339.889581][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.889615][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.889637][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.889679][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.889701][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.863737][ T5872] usb 5-1: config 0 descriptor?? [ 341.775415][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 341.775544][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 341.832208][ T7863] kAFS: unable to lookup cell '.,' [ 342.351388][ T5872] usb 5-1: USB disconnect, device number 11 [ 342.777133][ T7871] loop2: detected capacity change from 0 to 7 [ 342.778624][ T7871] Dev loop2: unable to read RDB block 7 [ 342.778674][ T7871] loop2: unable to read partition table [ 342.778883][ T7871] loop2: partition table beyond EOD, truncated [ 342.778901][ T7871] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 343.012083][ T7079] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 343.164135][ T7079] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 343.164165][ T7079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.167197][ T7079] usb 3-1: config 0 descriptor?? [ 343.576688][ T7079] logitech 0003:046D:C298.0002: unknown main item tag 0x0 [ 343.576722][ T7079] logitech 0003:046D:C298.0002: item fetching failed at offset 3/5 [ 343.577173][ T7079] logitech 0003:046D:C298.0002: parse failed [ 343.577233][ T7079] logitech 0003:046D:C298.0002: probe with driver logitech failed with error -22 [ 343.778467][ T7079] usb 3-1: USB disconnect, device number 9 [ 344.477710][ T7883] netlink: 108 bytes leftover after parsing attributes in process `syz.4.374'. [ 344.760095][ T1400] Bluetooth: (null): Too short H5 packet [ 344.761199][ T1400] Bluetooth: (null): Invalid header checksum [ 345.032127][ T7088] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 346.038703][ T7088] usb 2-1: too many configurations: 121, using maximum allowed: 8 [ 346.045964][ T7088] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 346.046008][ T7088] usb 2-1: can't read configurations, error -61 [ 346.332478][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 346.378305][ T7088] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 346.480512][ T7913] kAFS: unable to lookup cell '.,' [ 347.224590][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.224623][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.224644][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.224762][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.224784][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.307683][ T31] usb 1-1: config 0 descriptor?? [ 347.772284][ T7919] loop2: detected capacity change from 0 to 7 [ 347.790725][ T7919] Dev loop2: unable to read RDB block 7 [ 347.790782][ T7919] loop2: unable to read partition table [ 347.791011][ T7919] loop2: partition table beyond EOD, truncated [ 347.791030][ T7919] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 348.519390][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 348.527547][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 348.549418][ T31] usb 1-1: USB disconnect, device number 8 [ 348.562100][ T5815] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 348.861344][ T5815] usb 5-1: device descriptor read/64, error -71 [ 351.645719][ T5815] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 352.092133][ T805] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 352.395269][ T805] usb 2-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 352.395333][ T805] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 352.395388][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.418583][ T805] usb 2-1: config 0 descriptor?? [ 352.484762][ T7949] kAFS: unable to lookup cell '.,' [ 353.280291][ T805] usb 2-1: bad CDC descriptors [ 355.727670][ T7088] usb 2-1: USB disconnect, device number 5 [ 356.559333][ T805] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 356.717855][ T805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.717893][ T805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.717916][ T805] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.717960][ T805] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.717983][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.726157][ T805] usb 6-1: config 0 descriptor?? [ 357.300055][ T805] usbhid 6-1:0.0: can't add hid device: -71 [ 357.300193][ T805] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 358.624065][ T805] usb 6-1: USB disconnect, device number 2 [ 358.921359][ T7983] sit0: entered promiscuous mode [ 358.985073][ T7983] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 358.985090][ T7983] netlink: 1 bytes leftover after parsing attributes in process `syz.0.402'. [ 362.439262][ T8002] loop2: detected capacity change from 0 to 7 [ 362.944391][ T8002] Dev loop2: unable to read RDB block 7 [ 362.944450][ T8002] loop2: unable to read partition table [ 362.944664][ T8002] loop2: partition table beyond EOD, truncated [ 362.944682][ T8002] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 363.284231][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'. [ 363.338337][ T8004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.494386][ T8006] input: syz1 as /devices/virtual/input/input8 [ 365.444757][ T8021] FAULT_INJECTION: forcing a failure. [ 365.444757][ T8021] name failslab, interval 1, probability 0, space 0, times 0 [ 365.444836][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.4.411 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 365.444865][ T8021] Tainted: [L]=SOFTLOCKUP [ 365.444872][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.444888][ T8021] Call Trace: [ 365.444895][ T8021] [ 365.444900][ T8021] dump_stack_lvl+0xe8/0x150 [ 365.444921][ T8021] should_fail_ex+0x46c/0x600 [ 365.444938][ T8021] ? __alloc_skb+0x1dc/0x3a0 [ 365.444949][ T8021] should_failslab+0xa8/0x100 [ 365.444960][ T8021] ? __alloc_skb+0x1dc/0x3a0 [ 365.444970][ T8021] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 365.444985][ T8021] ? __local_bh_enable_ip+0x1c3/0x2c0 [ 365.445000][ T8021] ? __alloc_skb+0x198/0x3a0 [ 365.445011][ T8021] __alloc_skb+0x1dc/0x3a0 [ 365.445024][ T8021] __ip_append_data+0x2dae/0x40c0 [ 365.445046][ T8021] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 365.445068][ T8021] ? __pfx___ip_append_data+0x10/0x10 [ 365.445084][ T8021] ip_append_data+0x10e/0x190 [ 365.445096][ T8021] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 365.445107][ T8021] udp_sendmsg+0x541/0x2170 [ 365.445121][ T8021] ? trace_sched_exit_tp+0x36/0xf0 [ 365.445142][ T8021] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 365.445153][ T8021] ? __pfx_udp_sendmsg+0x10/0x10 [ 365.445167][ T8021] ? rcu_is_watching+0x15/0xb0 [ 365.445178][ T8021] ? smack_socket_sendmsg+0x1a7/0x520 [ 365.445206][ T8021] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 365.445218][ T8021] ? __fget_files+0x2a/0x420 [ 365.445229][ T8021] ? sock_rps_record_flow+0x19/0x410 [ 365.445243][ T8021] ? inet_sendmsg+0x29c/0x370 [ 365.445254][ T8021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.445270][ T8021] __sock_sendmsg+0x19c/0x270 [ 365.445287][ T8021] __sys_sendto+0x3c7/0x520 [ 365.445300][ T8021] ? __pfx___sys_sendto+0x10/0x10 [ 365.445323][ T8021] ? ksys_write+0x230/0x260 [ 365.445340][ T8021] ? __pfx_ksys_write+0x10/0x10 [ 365.445356][ T8021] __x64_sys_sendto+0xde/0x100 [ 365.445369][ T8021] do_syscall_64+0xec/0xf80 [ 365.445380][ T8021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.445390][ T8021] ? clear_bhb_loop+0x60/0xb0 [ 365.445402][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.445412][ T8021] RIP: 0033:0x7f9ad595f749 [ 365.445423][ T8021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.445431][ T8021] RSP: 002b:00007f9ad3ba5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 365.445443][ T8021] RAX: ffffffffffffffda RBX: 00007f9ad5bb6090 RCX: 00007f9ad595f749 [ 365.445451][ T8021] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000005 [ 365.445457][ T8021] RBP: 00007f9ad3ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 365.445464][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.445470][ T8021] R13: 00007f9ad5bb6128 R14: 00007f9ad5bb6090 R15: 00007ffe0db26588 [ 365.445487][ T8021] [ 366.533725][ T804] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 366.694122][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.694148][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.694161][ T804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.694202][ T804] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.694214][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.697392][ T804] usb 2-1: config 0 descriptor?? [ 367.159005][ T804] usbhid 2-1:0.0: can't add hid device: -71 [ 367.159124][ T804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 367.162862][ T804] usb 2-1: USB disconnect, device number 6 [ 368.998775][ T8030] FAULT_INJECTION: forcing a failure. [ 368.998775][ T8030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.998801][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.0.415 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 368.998817][ T8030] Tainted: [L]=SOFTLOCKUP [ 368.998821][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.998828][ T8030] Call Trace: [ 368.998833][ T8030] [ 368.998838][ T8030] dump_stack_lvl+0xe8/0x150 [ 368.998858][ T8030] should_fail_ex+0x46c/0x600 [ 368.998877][ T8030] _copy_to_user+0x31/0xb0 [ 368.998890][ T8030] simple_read_from_buffer+0xe1/0x170 [ 368.998904][ T8030] proc_fail_nth_read+0x1b6/0x220 [ 368.998922][ T8030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.998938][ T8030] ? rw_verify_area+0x2ac/0x4e0 [ 368.998952][ T8030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.998967][ T8030] vfs_read+0x206/0xa30 [ 368.998988][ T8030] ? __pfx_vfs_read+0x10/0x10 [ 368.999002][ T8030] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.999015][ T8030] ? lockdep_hardirqs_on+0x7b/0x110 [ 368.999025][ T8030] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.999036][ T8030] ? mutex_lock_nested+0x154/0x1d0 [ 368.999049][ T8030] ? fdget_pos+0x253/0x320 [ 368.999065][ T8030] ksys_read+0x14b/0x260 [ 368.999080][ T8030] ? __pfx_ksys_read+0x10/0x10 [ 368.999099][ T8030] do_syscall_64+0xec/0xf80 [ 368.999109][ T8030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.999120][ T8030] ? trace_irq_disable+0x37/0x100 [ 368.999132][ T8030] ? clear_bhb_loop+0x60/0xb0 [ 368.999145][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.999154][ T8030] RIP: 0033:0x7fe4c761e15c [ 368.999164][ T8030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 368.999174][ T8030] RSP: 002b:00007fe4c5886030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.999186][ T8030] RAX: ffffffffffffffda RBX: 00007fe4c7875fa0 RCX: 00007fe4c761e15c [ 368.999194][ T8030] RDX: 000000000000000f RSI: 00007fe4c58860a0 RDI: 0000000000000007 [ 368.999201][ T8030] RBP: 00007fe4c5886090 R08: 0000000000000000 R09: 0000000000000000 [ 368.999207][ T8030] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 368.999213][ T8030] R13: 00007fe4c7876038 R14: 00007fe4c7875fa0 R15: 00007ffec50c27b8 [ 368.999230][ T8030] [ 371.348758][ T8048] loop2: detected capacity change from 0 to 7 [ 372.640152][ T8048] Dev loop2: unable to read RDB block 7 [ 372.640207][ T8048] loop2: unable to read partition table [ 372.640408][ T8048] loop2: partition table beyond EOD, truncated [ 372.640427][ T8048] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 373.160566][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 374.375381][ T8068] kvm: apic: phys broadcast and lowest prio [ 377.159752][ T8092] loop2: detected capacity change from 0 to 7 [ 377.162698][ T8092] Dev loop2: unable to read RDB block 7 [ 377.162742][ T8092] loop2: unable to read partition table [ 377.162954][ T8092] loop2: partition table beyond EOD, truncated [ 377.162971][ T8092] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 378.810464][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.810530][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.740521][ T8111] netlink: 132 bytes leftover after parsing attributes in process `syz.5.437'. [ 379.848233][ T8111] bridge0: port 3(syz_tun) entered blocking state [ 379.871733][ T8111] bridge0: port 3(syz_tun) entered disabled state [ 379.880538][ T8111] syz_tun: entered allmulticast mode [ 379.896963][ T8111] syz_tun: entered promiscuous mode [ 379.898580][ T8111] bridge0: port 3(syz_tun) entered blocking state [ 379.899252][ T8111] bridge0: port 3(syz_tun) entered forwarding state [ 383.143606][ T8134] FAULT_INJECTION: forcing a failure. [ 383.143606][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 383.143632][ T8134] CPU: 0 UID: 0 PID: 8134 Comm: syz.0.435 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.143647][ T8134] Tainted: [L]=SOFTLOCKUP [ 383.143651][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.143657][ T8134] Call Trace: [ 383.143662][ T8134] [ 383.143667][ T8134] dump_stack_lvl+0xe8/0x150 [ 383.143710][ T8134] should_fail_ex+0x46c/0x600 [ 383.143738][ T8134] should_failslab+0xa8/0x100 [ 383.143758][ T8134] __kmalloc_cache_noprof+0x84/0x6d0 [ 383.143782][ T8134] ? lockdep_hardirqs_on+0x7b/0x110 [ 383.143801][ T8134] ? snd_hrtimer_open+0x4f/0xd0 [ 383.143825][ T8134] snd_hrtimer_open+0x4f/0xd0 [ 383.143840][ T8134] snd_timer_open+0xdcc/0x10e0 [ 383.143862][ T8134] snd_seq_timer_open+0x2d9/0x640 [ 383.143877][ T8134] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 383.143892][ T8134] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 383.143907][ T8134] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 383.143925][ T8134] ? rt_spin_unlock+0x161/0x200 [ 383.143940][ T8134] snd_seq_queue_alloc+0x3ec/0x7a0 [ 383.143957][ T8134] snd_seq_ioctl_create_queue+0x7f/0x3d0 [ 383.143976][ T8134] snd_seq_ioctl+0x263/0x450 [ 383.143985][ T8134] ? smk_tskacc+0x2fc/0x370 [ 383.143999][ T8134] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 383.144007][ T8134] ? smack_file_ioctl+0x2ac/0x340 [ 383.144032][ T8134] ? bpf_lsm_file_ioctl+0x9/0x20 [ 383.144049][ T8134] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 383.144058][ T8134] __se_sys_ioctl+0xff/0x170 [ 383.144073][ T8134] do_syscall_64+0xec/0xf80 [ 383.144084][ T8134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.144095][ T8134] ? trace_irq_disable+0x37/0x100 [ 383.144107][ T8134] ? clear_bhb_loop+0x60/0xb0 [ 383.144120][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.144130][ T8134] RIP: 0033:0x7fe4c761f749 [ 383.144141][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.144150][ T8134] RSP: 002b:00007fe4c5886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.144162][ T8134] RAX: ffffffffffffffda RBX: 00007fe4c7875fa0 RCX: 00007fe4c761f749 [ 383.144170][ T8134] RDX: 00002000000003c0 RSI: 00000000c08c5332 RDI: 0000000000000003 [ 383.144176][ T8134] RBP: 00007fe4c5886090 R08: 0000000000000000 R09: 0000000000000000 [ 383.144183][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.144189][ T8134] R13: 00007fe4c7876038 R14: 00007fe4c7875fa0 R15: 00007ffec50c27b8 [ 383.144205][ T8134] [ 383.362230][ T5815] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 383.433903][ T8140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.445'. [ 383.532778][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 383.550535][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.555291][ T5815] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 383.555317][ T5815] usb 3-1: config 4 has no interface number 0 [ 383.555348][ T5815] usb 3-1: config 4 interface 30 has no altsetting 0 [ 383.591362][ T5815] usb 3-1: string descriptor 0 read error: -22 [ 383.591693][ T5815] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 383.591718][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.639307][ T5815] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 383.639360][ T5815] dw2102: su3000_power_ctrl: 1, initialized 0 [ 383.639381][ T5815] dvb-usb: bulk message failed: -22 (2/0) [ 383.679015][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 383.693295][ T5815] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 383.693436][ T5815] usb 3-1: media controller created [ 383.694301][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 383.694319][ T5815] dw2102: i2c transfer failed. [ 383.694343][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 383.694357][ T5815] dw2102: i2c transfer failed. [ 383.694371][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 383.694384][ T5815] dw2102: i2c transfer failed. [ 383.694398][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 383.694408][ T5815] dw2102: i2c transfer failed. [ 383.694423][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 383.694435][ T5815] dw2102: i2c transfer failed. [ 383.694449][ T5815] dvb-usb: bulk message failed: -22 (6/0) [ 383.694462][ T5815] dw2102: i2c transfer failed. [ 383.694479][ T5815] dvb-usb: MAC address: 02:02:02:02:02:02 [ 383.831227][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.865306][ T8136] dvb-usb: bulk message failed: -22 (4/0) [ 383.865330][ T8136] dw2102: i[ 383.865330][ T8136] dw2102: i2c transfer failed. [ 383.865411][ T8136] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 383.865432][ T8136] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 383.865456][ T8136] CPU: 1 UID: 0 PID: 8136 Comm: syz.2.444 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 383.865484][ T8136] Tainted: [L]=SOFTLOCKUP [ 383.865493][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.865506][ T8136] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 383.865538][ T8136] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 6d d9 ea fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 383.865558][ T8136] RSP: 0018:ffffc9000ebd7bb0 EFLAGS: 00010202 [ 383.865579][ T8136] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 383.865600][ T8136] RDX: ffffffff873706b5 RSI: ffffffff8e4503f0 RDI: 0000000000001900 [ 383.865615][ T8136] RBP: 0000000000000001 R08: ffff88803d213c80 R09: 0000000000000002 [ 383.865628][ T8136] R10: 0000000000000100 R11: 0000000000001a00 R12: dffffc0000000000 [ 383.865643][ T8136] R13: 1ffff1100b3a2eaa R14: 0000000000000002 R15: ffff888059d17558 [ 383.865659][ T8136] FS: 00007f2ba54466c0(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 383.865678][ T8136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.865692][ T8136] CR2: 0000000000000000 CR3: 0000000033136000 CR4: 00000000003526f0 [ 383.865710][ T8136] Call Trace: [ 383.865718][ T8136] [ 383.865737][ T8136] __i2c_transfer+0x79a/0x1f00 [ 383.865765][ T8136] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 383.865788][ T8136] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 383.865810][ T8136] ? i2c_transfer+0xc8/0x2d0 [ 383.865831][ T8136] i2c_transfer+0x1cc/0x2d0 [ 383.865856][ T8136] i2cdev_ioctl_rdwr+0x460/0x740 [ 383.865885][ T8136] i2cdev_ioctl+0x64e/0x820 [ 383.865909][ T8136] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 383.865933][ T8136] ? __fget_files+0x3a6/0x420 [ 383.865954][ T8136] ? __fget_files+0x2a/0x420 [ 383.865975][ T8136] ? bpf_lsm_file_ioctl+0x9/0x20 [ 383.866006][ T8136] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 383.866026][ T8136] __se_sys_ioctl+0xff/0x170 [ 383.866053][ T8136] do_syscall_64+0xec/0xf80 [ 383.866072][ T8136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.866091][ T8136] ? trace_irq_disable+0x37/0x100 [ 383.866112][ T8136] ? clear_bhb_loop+0x60/0xb0 [ 383.866133][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.866152][ T8136] RIP: 0033:0x7f2ba71df749 [ 383.866169][ T8136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.866185][ T8136] RSP: 002b:00007f2ba5446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.866205][ T8136] RAX: ffffffffffffffda RBX: 00007f2ba7435fa0 RCX: 00007f2ba71df749 [ 383.866220][ T8136] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 383.866233][ T8136] RBP: 00007f2ba7263f91 R08: 0000000000000000 R09: 0000000000000000 [ 383.866246][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.866259][ T8136] R13: 00007f2ba7436038 R14: 00007f2ba7435fa0 R15: 00007ffcc5c0b848 [ 383.866283][ T8136] [ 383.866297][ T8136] Modules linked in: [ 383.866336][ T8136] ---[ end trace 0000000000000000 ]--- [ 383.879348][ T8136] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 383.879395][ T8136] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 6d d9 ea fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 383.879415][ T8136] RSP: 0018:ffffc9000ebd7bb0 EFLAGS: 00010202 [ 383.879437][ T8136] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 383.879451][ T8136] RDX: ffffffff873706b5 RSI: ffffffff8e4503f0 RDI: 0000000000001900 [ 383.879467][ T8136] RBP: 0000000000000001 R08: ffff88803d213c80 R09: 0000000000000002 [ 383.879481][ T8136] R10: 0000000000000100 R11: 0000000000001a00 R12: dffffc0000000000 [ 383.879496][ T8136] R13: 1ffff1100b3a2eaa R14: 0000000000000002 R15: ffff888059d17558 [ 383.879512][ T8136] FS: 00007f2ba54466c0(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 383.879531][ T8136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.879561][ T8136] CR2: 0000000000000000 CR3: 0000000033136000 CR4: 00000000003526f0 [ 383.879592][ T8136] Kernel panic - not syncing: Fatal exception [ 383.879979][ T8136] Kernel Offset: disabled