last executing test programs: 28m43.0841155s ago: executing program 0 (id=706): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100af6060000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a09001009"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 28m39.01552791s ago: executing program 0 (id=715): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x10, 0x8, 0x1000, 0x1000, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x5}, 0x0}) 28m34.724921702s ago: executing program 0 (id=719): socket$inet6(0xa, 0x805, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x40000088}, 0x0) r1 = gettid() getpgid(r1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000012c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001300)=""/102392, 0x18ff8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r6, &(0x7f000001a3c0)='l', 0x1, 0x20000010, &(0x7f000001a400)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 28m33.612461704s ago: executing program 0 (id=721): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0xa4e96d38234f64e2, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 28m30.097926758s ago: executing program 0 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) 28m29.418846526s ago: executing program 0 (id=728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000080)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000c40), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9b, 0xa0, 0x5, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x13e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x5, 0x5}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x200, 0x3, 0x3, 0x3, 0x20, 0x9}, 0xf, &(0x7f0000000ec0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xd, 0x7, 0xa}]}, 0x3, [{0x2, &(0x7f0000000f00)=@string={0x2}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x455}}, {0xd9, &(0x7f0000001000)=@string={0xd9, 0x3, "45d0825e1c6a78a36688aa669f321bd80c469fdc8cd06020c67ee83f9760b8c9e77a1a341e15b8cd41709c32d751bed67dd7a9f43c40ff2a0eed1c4a7f2ca59ea7c708e4f80cd3125a719bd0828510c70929b3deb468f4ae6b3fa7936761ef7e988add7eb35ac97fd27e447ced34e1f3be1a43551598bfebb5d862c134abfb3ec35de29123e9fe14e828ceade02818945e7ce6b56da3ddd9762edf34f1b4b031601ea32c004224d4c6e17e697eb6f44a080c6fd48eb3eb90d4f5ab86d1a0792040c2ab3ceace5d1c9d5ffd50b0b29d2fa6b21cad26cd6f"}}]}) write$UHID_INPUT2(r6, &(0x7f0000000e00)=ANY=[@ANYBLOB="0c000000ebff20"], 0x9) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000001c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000440)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0x1, 0x1f00, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000940)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000009c0)={[0x5, 0x4, 0xfffffffffffffff2, 0x7, 0x0, 0xe78, 0x0, 0x1, 0x10001, 0x3, 0x3, 0x9, 0x9, 0x10, 0x912, 0x3ff], 0x8000000, 0xd840}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x590, 0x5) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val={0x3, 0x6, 0x4, 0x9, 0x31, 0x8016}, @ipv6=@tcp={0x7, 0x6, "a02660", 0x5c, 0x6, 0x0, @remote, @empty, {[], {{0x4e22, 0x4e20, r11, r10, 0x0, 0x0, 0xd, 0x20, 0xe, 0x0, 0xfffd, {[@mptcp=@mp_fclose={0x1e, 0xc, 0xe, 0x0, 0x8}, @md5sig={0x13, 0x12, "68077354b873f7e982f9b311dee75084"}]}}, {"95e16a4825c8af42f8d62c33034cdf5a7960199b5321c1a31a4e54645f6d4e0510564ba3001c6f2d"}}}}}, 0x8e) syz_extract_tcp_res(0x0, 0x9, 0x9) syz_usb_connect(0x3, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x8c, 0xf0, 0x16, 0x10, 0x4b4, 0x861f, 0xdb82, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2b, 0x90, 0xd0, 0x40, "", [{{0x9, 0x4, 0x0, 0xc1, 0x0, 0xfe, 0x54, 0x2d, 0x7}}]}}]}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000c40000000040329078ac1e0101ac1414aa000004d20000ffff0000000061636fce004a2f01fc020000000000000000000000000000ff0100000000000000000000000000010c21880b0000000105000800000086ddd3ef6e5774f3080088be000000041707487f0100000000000007080022eb000000022403020102000000000080000400130b08006558000000044717003000680000fd0690780a0101010a01010286080000000107024e234e21", @ANYRES32=r10, @ANYRES32=0x41424344], 0x0) 28m13.323414055s ago: executing program 32 (id=728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000080)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000c40), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9b, 0xa0, 0x5, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x13e}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x5, 0x5}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x200, 0x3, 0x3, 0x3, 0x20, 0x9}, 0xf, &(0x7f0000000ec0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xd, 0x7, 0xa}]}, 0x3, [{0x2, &(0x7f0000000f00)=@string={0x2}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x455}}, {0xd9, &(0x7f0000001000)=@string={0xd9, 0x3, "45d0825e1c6a78a36688aa669f321bd80c469fdc8cd06020c67ee83f9760b8c9e77a1a341e15b8cd41709c32d751bed67dd7a9f43c40ff2a0eed1c4a7f2ca59ea7c708e4f80cd3125a719bd0828510c70929b3deb468f4ae6b3fa7936761ef7e988add7eb35ac97fd27e447ced34e1f3be1a43551598bfebb5d862c134abfb3ec35de29123e9fe14e828ceade02818945e7ce6b56da3ddd9762edf34f1b4b031601ea32c004224d4c6e17e697eb6f44a080c6fd48eb3eb90d4f5ab86d1a0792040c2ab3ceace5d1c9d5ffd50b0b29d2fa6b21cad26cd6f"}}]}) write$UHID_INPUT2(r6, &(0x7f0000000e00)=ANY=[@ANYBLOB="0c000000ebff20"], 0x9) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000001c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000440)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000480)={0x0, 0x1, 0x1f00, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000940)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000009c0)={[0x5, 0x4, 0xfffffffffffffff2, 0x7, 0x0, 0xe78, 0x0, 0x1, 0x10001, 0x3, 0x3, 0x9, 0x9, 0x10, 0x912, 0x3ff], 0x8000000, 0xd840}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x590, 0x5) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @val={0x3, 0x6, 0x4, 0x9, 0x31, 0x8016}, @ipv6=@tcp={0x7, 0x6, "a02660", 0x5c, 0x6, 0x0, @remote, @empty, {[], {{0x4e22, 0x4e20, r11, r10, 0x0, 0x0, 0xd, 0x20, 0xe, 0x0, 0xfffd, {[@mptcp=@mp_fclose={0x1e, 0xc, 0xe, 0x0, 0x8}, @md5sig={0x13, 0x12, "68077354b873f7e982f9b311dee75084"}]}}, {"95e16a4825c8af42f8d62c33034cdf5a7960199b5321c1a31a4e54645f6d4e0510564ba3001c6f2d"}}}}}, 0x8e) syz_extract_tcp_res(0x0, 0x9, 0x9) syz_usb_connect(0x3, 0x24, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x8c, 0xf0, 0x16, 0x10, 0x4b4, 0x861f, 0xdb82, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2b, 0x90, 0xd0, 0x40, "", [{{0x9, 0x4, 0x0, 0xc1, 0x0, 0xfe, 0x54, 0x2d, 0x7}}]}}]}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000c40000000040329078ac1e0101ac1414aa000004d20000ffff0000000061636fce004a2f01fc020000000000000000000000000000ff0100000000000000000000000000010c21880b0000000105000800000086ddd3ef6e5774f3080088be000000041707487f0100000000000007080022eb000000022403020102000000000080000400130b08006558000000044717003000680000fd0690780a0101010a01010286080000000107024e234e21", @ANYRES32=r10, @ANYRES32=0x41424344], 0x0) 27.882925619s ago: executing program 2 (id=2760): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000300)=0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), 0x0, &(0x7f0000001440), 0x1008840, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) munmap$KVM_VCPU(0x0, 0x10000) r5 = syz_open_dev$sndctrl(0x0, 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f00000000c0)=""/50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r6, 0x0, {0x2, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000500)={&(0x7f0000000440)="be64333fdc445b0168e515863f95de762b294848aee550ff9a6bdea1572ad06e221f6676c1cfa7aa371d903d19121167c2d7a530cd18eacb4af4c10a4bee2c51765815f02b1d4778d8504fbccd35f0cab11d197492c15c4de181768dba25cac95a3522b24aff7fb81d057ee566e5a57a33a84dcff5837408da4878aff8030abd8502d0a1b880270ba767f684265c654c6b78564ca886f2b37ff6c2", 0x9b}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000580)) sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 26.128514397s ago: executing program 2 (id=2762): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000300)=0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f0000000180), 0x0, &(0x7f0000001440), 0x1008840, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) munmap$KVM_VCPU(0x0, 0x10000) r5 = syz_open_dev$sndctrl(0x0, 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f00000000c0)=""/50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r6, 0x0, {0x2, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000500)={&(0x7f0000000440)="be64333fdc445b0168e515863f95de762b294848aee550ff9a6bdea1572ad06e221f6676c1cfa7aa371d903d19121167c2d7a530cd18eacb4af4c10a4bee2c51765815f02b1d4778d8504fbccd35f0cab11d197492c15c4de181768dba25cac95a3522b24aff7fb81d057ee566e5a57a33a84dcff5837408da4878aff8030abd8502d0a1b880270ba767f684265c654c6b78564ca886f2b37ff6c2", 0x9b}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000580)) sendmsg$NFT_BATCH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 25.340682646s ago: executing program 3 (id=2763): mlockall(0x2) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8c00, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8) r5 = io_uring_setup(0x136a, &(0x7f0000019600)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) connect$unix(0xffffffffffffffff, &(0x7f00000196c0)=@file={0x0, './file0\x00'}, 0x6e) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x20, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.470443464s ago: executing program 2 (id=2764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 23.138613888s ago: executing program 3 (id=2765): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xb3b2}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f000001a2c0), 0x0, &(0x7f000001a300)=ANY=[@ANYBLOB='mpol=prefer=st']) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000000240)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000019240)={0x0, 0x0, &(0x7f0000019280)={&(0x7f00000192c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8}, {}, {}, {}, {0x10}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x8, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f000001a180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r7, &(0x7f000001a1c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000001a200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff004) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000002140100000000000000000008000100", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 20.753284088s ago: executing program 4 (id=2766): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1004, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x20, 0x8000, 0x1, 0x3, {{0xd, 0x4, 0x3, 0x14, 0x34, 0x65, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr=0x64010100, {[@lsrr={0x83, 0xf, 0x6d, [@rand_addr=0x64010101, @remote, @multicast1]}, @end, @generic={0x86, 0x10, "5da4b6ad515baca2184721ee49c0"}]}}}}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x1100, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x200) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000009c0)) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000004e80)=""/102368, 0x18fe0) io_uring_setup(0x6a92, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f000001df00)=0x474c, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f000001df40)=0x5, 0x4) bind$inet(r3, &(0x7f000001df80)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f000001dfc0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f000001e000), 0x800001d, 0x300) 20.613715272s ago: executing program 1 (id=2767): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracefs\x00', &(0x7f00000002c0)='tracefs\x00', 0x2000010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./tracefs/instances/foo\x00', 0x200) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xd, 0x10000000, 0xfffffffc, 0x13}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 19.63548924s ago: executing program 4 (id=2768): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1004, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x20, 0x8000, 0x1, 0x3, {{0xc, 0x4, 0x3, 0x14, 0x30, 0x65, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0x6d, [@rand_addr=0x64010101, @remote]}, @end, @generic={0x86, 0x10, "5da4b6ad515baca2184721ee49c0"}]}}}}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x1100, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000980), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f00000009c0)) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r4, &(0x7f0000004e80)=""/102368, 0x18fe0) io_uring_setup(0x6a92, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f000001df00)=0x474c, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f000001df40)=0x5, 0x4) bind$inet(r5, &(0x7f000001df80)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f000001dfc0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f000001e000), 0x800001d, 0x300) 19.633925041s ago: executing program 2 (id=2769): mlockall(0x2) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8c00, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) 18.201550245s ago: executing program 2 (id=2770): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000019240)='./proc\x00', &(0x7f0000019280)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019300)='./proc/1/root/var/run\x00', 0x1ff) bind$unix(0xffffffffffffffff, &(0x7f0000019340)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(0xffffffffffffffff, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000193c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0) ppoll(&(0x7f0000019400)=[{0xffffffffffffffff, 0x400}, {r4, 0x100}, {0xffffffffffffffff, 0x406}, {r5, 0x1040}, {0xffffffffffffffff, 0x212}, {0xffffffffffffffff, 0x1138}, {r4, 0xa80}], 0x7, &(0x7f0000019180)={0x77359400}, &(0x7f0000019540), 0x8) write(r4, &(0x7f0000019580)='1', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff2b) close(0x3) syz_open_procfs(0x0, &(0x7f0000019200)='fd/3\x00') 16.586580278s ago: executing program 2 (id=2771): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x33b, 0x0, @default, @val, @void}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, 0x0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 16.585066918s ago: executing program 1 (id=2779): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000019240)='./proc\x00', &(0x7f0000019280)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019300)='./proc/1/root/var/run\x00', 0x1ff) bind$unix(0xffffffffffffffff, &(0x7f0000019340)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(0xffffffffffffffff, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000193c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0) ppoll(&(0x7f0000019400)=[{0xffffffffffffffff, 0x400}, {r4, 0x100}, {0xffffffffffffffff, 0x406}, {r5, 0x1040}, {0xffffffffffffffff, 0x212}, {0xffffffffffffffff, 0x1138}, {r4, 0xa80}], 0x7, &(0x7f0000019180)={0x77359400}, &(0x7f0000019540), 0x8) write(r4, &(0x7f0000019580)='1', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff2b) close(0x3) syz_open_procfs(0x0, &(0x7f0000019200)='fd/3\x00') 14.643652554s ago: executing program 1 (id=2772): mlockall(0x2) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8c00, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8) r5 = io_uring_setup(0x136a, &(0x7f0000019600)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) connect$unix(0xffffffffffffffff, &(0x7f00000196c0)=@file={0x0, './file0\x00'}, 0x6e) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x20, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.448222943s ago: executing program 3 (id=2773): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000015c0), 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001680)='xfrm0\x00', 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r5, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x2, 0x80805, 0x0) 11.721789758s ago: executing program 4 (id=2774): mlockall(0x2) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8c00, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8) r5 = io_uring_setup(0x136a, &(0x7f0000019600)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) connect$unix(0xffffffffffffffff, &(0x7f00000196c0)=@file={0x0, './file0\x00'}, 0x6e) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x20, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.721521988s ago: executing program 3 (id=2775): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000015c0)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea96287", 0x51) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001680)='xfrm0\x00', 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r5, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x2, 0x80805, 0x0) 9.091413643s ago: executing program 3 (id=2776): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1004, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x20, 0x8000, 0x1, 0x3, {{0xd, 0x4, 0x3, 0x14, 0x34, 0x65, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr=0x64010100, {[@lsrr={0x83, 0xf, 0x6d, [@rand_addr=0x64010101, @remote, @multicast1]}, @end, @generic={0x86, 0x10, "5da4b6ad515baca2184721ee49c0"}]}}}}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x1100, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x200) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000009c0)) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000004e80)=""/102368, 0x18fe0) io_uring_setup(0x6a92, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f000001df00)=0x474c, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f000001df40)=0x5, 0x4) bind$inet(r3, &(0x7f000001df80)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f000001dfc0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f000001e000), 0x800001d, 0x300) 8.13668663s ago: executing program 3 (id=2777): socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x40000088}, 0x0) r1 = gettid() getpgid(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000001200)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000012c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001300)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f000001a300)=0x80000000000003) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f000001a380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r6, &(0x7f000001a3c0)='l', 0x1, 0x20000010, &(0x7f000001a400)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 6.770426327s ago: executing program 1 (id=2778): mlockall(0x2) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8c00, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) 4.719375504s ago: executing program 4 (id=2780): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000085000093da0087000000180100002020702507000000002020207b1af8ff00000000bfa10000000000000701009913279ec541212ad8e953fb104b3d7f00f8ffff0000b7030000200000008500000070"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x31}, 0xf8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xc, 0x0, &(0x7f0000000400)="e097566f5bec644e6cf09257", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x1) r5 = io_uring_setup(0x4053, &(0x7f0000000480)={0x0, 0x2063, 0x0, 0x2, 0x94}) syz_mount_image$erofs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2800091, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYBLOB="333ed5fca4fdc9da41dc5525a31e2eabcdf2226f58d7bbdaa080715a87526444f694c24bc9dcde8d7b23b254e1004ece8b8da13ab3013dd83f54c309d8aa225fc6f134488184e57f6d604e614457290fd1b8133e36ecff45f77a818df131c24d37d26a6d12c3debf91a303efb00be5c781ee1406efd10000000000e0ff03f8c019f54bcb0fc4d3b629670d76e9512f4a630436da7310", @ANYRES32, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32=r5], 0x55, 0x1be, &(0x7f0000000640)="$eJzsmDFv2lAUhc+zjS1XlejaLq1UJOhQY5u2KkMH1LFDK7Vq1Q1UXERrSgUegKn9A107d+6QGWXhfyRDkilDki1TpDh69jN+ITgRAiGk3G+4Pva7PB9f4CABgiBuLQf7p3tbxYLJ9V0UYIjrh2rao0j94/zZk5322+2/9snuePKmOrOdvuj9NQCTmopAnIdhGMrrBXH8ACXROdTT9U9gsISuQ8FHoT0wfBb6m6S7vN+yvrZ9z/rS9Ztc2Lw4vLi8VGb9Hf9maEr+mLTeH46+N3zf6y0vXnPb85ayZmck/moKXkn+5PcrmY2dzg8OFDhCV8DwXuiXMJLZxCORnv+Blu6vLvn8fH4rm9rGi/v5G3py2BSrGyvMNFnWeXfxRf+10KsYuDgy12t1VeK/CaxmwzQ/w38MRSmfNCk/ykHnZ7k/HD1tdxotr+X9cN3KC/uZbT93y1EQxTUrAqHBjPLpznR/Ncxl9OpMx6ARBD0nrtNzd2Ag6LnzEleP8k9B6XHsms35kYs+JvfYI34oqcB5GJNh40/mwxAEQRAEQRAEQRAEQRAEQVzLQzP+l/US1SuX3HdR90UAAAD//2C6a2w=") bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={r6, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000a00), 0x0, 0x0) read$msr(r7, &(0x7f0000000a40)=""/102392, 0x18ff8) r8 = bpf$MAP_CREATE(0x0, &(0x7f000001a1c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="940e00"/20, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019ac0)={0x11, 0xc, &(0x7f0000019b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x84000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000019c80)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000019dc0)) 2.841080933s ago: executing program 1 (id=2781): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000019240)='./proc\x00', &(0x7f0000019280)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019300)='./proc/1/root/var/run\x00', 0x1ff) bind$unix(0xffffffffffffffff, &(0x7f0000019340)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(0xffffffffffffffff, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000193c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0) ppoll(&(0x7f0000019400)=[{0xffffffffffffffff, 0x400}, {r4, 0x100}, {0xffffffffffffffff, 0x406}, {r5, 0x1040}, {0xffffffffffffffff, 0x212}, {0xffffffffffffffff, 0x1138}, {r4, 0xa80}], 0x7, &(0x7f0000019180)={0x77359400}, &(0x7f0000019540), 0x8) write(r4, &(0x7f0000019580)='1', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff2b) close(0x3) syz_open_procfs(0x0, &(0x7f0000019200)='fd/3\x00') 1.248222174s ago: executing program 33 (id=2771): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x33b, 0x0, @default, @val, @void}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, 0x0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.178328571s ago: executing program 1 (id=2783): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1004, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x20, 0x8000, 0x1, 0x3, {{0xc, 0x4, 0x3, 0x14, 0x30, 0x65, 0x0, 0x0, 0x2, 0x0, @multicast2, @rand_addr=0x64010100, {[@lsrr={0x83, 0xb, 0x6d, [@rand_addr=0x64010101, @remote]}, @end, @generic={0x86, 0x10, "5da4b6ad515baca2184721ee49c0"}]}}}}}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x1100, 0x2}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000980), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f00000009c0)) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r4, &(0x7f0000004e80)=""/102368, 0x18fe0) io_uring_setup(0x6a92, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f000001df00)=0x474c, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f000001df40)=0x5, 0x4) bind$inet(r5, &(0x7f000001df80)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f000001dfc0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f000001e000), 0x800001d, 0x300) 397.013819ms ago: executing program 4 (id=2784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=2785): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000015c0)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea96287", 0x51) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001680)='xfrm0\x00', 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r5, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x2, 0x80805, 0x0) kernel console output (not intermixed with test programs): , probability 0, space 0, times 0 [ 1118.199549][T12830] CPU: 0 PID: 12830 Comm: syz.2.1763 Not tainted syzkaller #0 [ 1118.207080][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1118.217176][T12830] Call Trace: [ 1118.220470][T12830] [ 1118.223435][T12830] dump_stack_lvl+0x18c/0x250 [ 1118.228146][T12830] ? show_regs_print_info+0x20/0x20 [ 1118.233372][T12830] ? load_image+0x420/0x420 [ 1118.237905][T12830] ? __lock_acquire+0x7eb0/0x7eb0 [ 1118.242965][T12830] should_fail_ex+0x394/0x4c0 [ 1118.247676][T12830] should_failslab+0x9/0x20 [ 1118.252201][T12830] slab_pre_alloc_hook+0x59/0x300 [ 1118.257244][T12830] ? string+0x257/0x290 [ 1118.261393][T12830] ? kasprintf+0xe3/0x140 [ 1118.265717][T12830] ? kasprintf+0xe3/0x140 [ 1118.270033][T12830] __kmem_cache_alloc_node+0x53/0x260 [ 1118.275400][T12830] ? kasprintf+0xe3/0x140 [ 1118.279719][T12830] __kmalloc_node_track_caller+0xa4/0x230 [ 1118.285448][T12830] kvasprintf+0xec/0x1a0 [ 1118.289698][T12830] ? bust_spinlocks+0xd0/0xd0 [ 1118.294386][T12830] ? lockdep_lock+0xf5/0x230 [ 1118.298972][T12830] ? lockdep_unlock+0x146/0x2e0 [ 1118.303817][T12830] kasprintf+0xe3/0x140 [ 1118.307967][T12830] ? kvasprintf_const+0x240/0x240 [ 1118.312985][T12830] ? __raw_spin_lock_init+0x45/0x100 [ 1118.318266][T12830] alloc_workqueue+0x57f/0x1380 [ 1118.323123][T12830] ? apply_workqueue_attrs+0x180/0x180 [ 1118.328577][T12830] ? mempool_alloc_pages+0x20/0x20 [ 1118.333686][T12830] ? mempool_kfree+0x20/0x20 [ 1118.338284][T12830] ? mempool_init+0x3a/0x50 [ 1118.342805][T12830] dm_integrity_ctr+0x1e08/0x4bb0 [ 1118.347851][T12830] ? sb_check+0x310/0x310 [ 1118.352172][T12830] ? dm_split_args+0x92/0x5b0 [ 1118.356835][T12830] ? rcu_is_watching+0x15/0xb0 [ 1118.361612][T12830] ? dm_split_args+0x505/0x5b0 [ 1118.366363][T12830] dm_table_add_target+0x575/0xbc0 [ 1118.371473][T12830] table_load+0x2eb/0x7e0 [ 1118.375794][T12830] ? dev_wait+0x2f0/0x2f0 [ 1118.380109][T12830] ? __might_fault+0xaa/0x120 [ 1118.384785][T12830] ? __might_fault+0xc6/0x120 [ 1118.389449][T12830] ? __might_fault+0xaa/0x120 [ 1118.394135][T12830] ? dev_wait+0x2f0/0x2f0 [ 1118.398489][T12830] dm_ctl_ioctl+0x975/0xd00 [ 1118.403050][T12830] ? dev_wait+0x2f0/0x2f0 [ 1118.407405][T12830] ? dm_poll+0x120/0x120 [ 1118.411710][T12830] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1118.416670][T12830] ? security_file_ioctl+0x80/0xa0 [ 1118.421805][T12830] ? dm_poll+0x120/0x120 [ 1118.426071][T12830] __se_sys_ioctl+0xfd/0x170 [ 1118.430694][T12830] do_syscall_64+0x55/0xb0 [ 1118.435138][T12830] ? clear_bhb_loop+0x40/0x90 [ 1118.439841][T12830] ? clear_bhb_loop+0x40/0x90 [ 1118.444543][T12830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.450463][T12830] RIP: 0033:0x7f5f2359fb19 [ 1118.454916][T12830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.474520][T12830] RSP: 002b:00007f5f24419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.482943][T12830] RAX: ffffffffffffffda RBX: 00007f5f23825fa0 RCX: 00007f5f2359fb19 [ 1118.490923][T12830] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 1118.498896][T12830] RBP: 00007f5f23637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1118.506899][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.514864][T12830] R13: 00007f5f23826038 R14: 00007f5f23825fa0 R15: 00007ffd2b9826f8 [ 1118.522839][T12830] [ 1118.606008][T12840] CIFS: Attempting to mount //127.0.0.1/share [ 1119.409738][T12840] CIFS: VFS: error -4 create cifsd thread [ 1119.552750][T12830] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-offload": -EINTR [ 1119.573470][T12840] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1119.639837][T12830] device-mapper: table: 248:0: integrity: Cannot allocate workqueue (-ENOMEM) [ 1119.678168][T12830] device-mapper: ioctl: error adding target to table [ 1121.628501][T12859] loop1: detected capacity change from 0 to 16 [ 1121.672148][T12859] erofs: (device loop1): mounted with root inode @ nid 36. [ 1121.793077][T12861] CIFS: Attempting to mount //127.0.0.1/share [ 1123.445365][T12861] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1124.327772][T12871] CIFS: Attempting to mount //127.0.0.1/share [ 1125.163814][T12871] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1125.749575][T12882] CIFS: Attempting to mount //127.0.0.1/share [ 1126.502374][T12882] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1126.525963][T12886] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-offload": -EINTR [ 1126.565410][T12886] device-mapper: table: 248:1: integrity: Cannot allocate workqueue (-ENOMEM) [ 1126.678220][T12886] device-mapper: ioctl: error adding target to table [ 1128.828514][T12898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1128.972886][T12898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.133101][T12930] CIFS: Attempting to mount //127.0.0.1/share [ 1133.940153][T12930] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1134.015436][T12929] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-offload": -EINTR [ 1134.060525][T12929] device-mapper: table: 248:0: integrity: Cannot allocate workqueue (-ENOMEM) [ 1134.109518][T12929] device-mapper: ioctl: error adding target to table [ 1138.940190][T12968] CIFS: Attempting to mount //127.0.0.1/share [ 1139.986316][T12968] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1140.803404][T12981] CIFS: Attempting to mount //127.0.0.1/share [ 1141.553100][T12981] CIFS: VFS: error -4 create cifsd thread [ 1141.700609][T12981] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1143.079609][T13003] tmpfs: Bad value for 'mpol' [ 1145.602913][T13016] CIFS: Attempting to mount //127.0.0.1/share [ 1146.353855][T13016] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1148.583089][T13036] CIFS: Attempting to mount //127.0.0.1/share [ 1149.530011][T13036] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1151.048389][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1151.267647][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1151.383861][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.394230][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.421239][ T27] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1151.468170][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.476404][ T27] usb 2-1: Product: syz [ 1151.482948][ T27] usb 2-1: Manufacturer: syz [ 1151.487666][ T27] usb 2-1: SerialNumber: syz [ 1151.791995][ T27] usb 2-1: selecting invalid altsetting 1 [ 1151.868525][ T27] usb 2-1: unit 3 not found! [ 1151.896487][ T27] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 1151.914584][ T27] usb 2-1: invalid MIXER UNIT descriptor 6 [ 1151.998708][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 1152.034827][ T27] usb 2-1: USB disconnect, device number 18 [ 1152.096822][T12959] udevd[12959]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1152.820879][T13061] tmpfs: Bad value for 'mpol' [ 1156.318257][ T27] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1156.560267][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1156.598811][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.641930][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1156.663267][ T27] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1156.691778][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.701459][ T27] usb 2-1: Product: syz [ 1156.705655][ T27] usb 2-1: Manufacturer: syz [ 1156.713999][ T27] usb 2-1: SerialNumber: syz [ 1156.881986][T13078] CIFS: Attempting to mount //127.0.0.1/share [ 1156.961600][ T27] usb 2-1: selecting invalid altsetting 1 [ 1156.978859][ T27] usb 2-1: unit 3 not found! [ 1156.983914][ T27] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 1156.997301][ T27] usb 2-1: invalid MIXER UNIT descriptor 6 [ 1157.047895][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 1157.068020][ T27] usb 2-1: USB disconnect, device number 19 [ 1157.103201][T12959] udevd[12959]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1157.284914][T13082] loop4: detected capacity change from 0 to 16 [ 1157.316166][T13082] erofs: (device loop4): mounted with root inode @ nid 36. [ 1157.737951][T13078] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1159.108176][ T27] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1159.354309][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1159.370107][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.604338][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1159.628837][ T27] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1159.657441][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.704561][ T27] usb 2-1: Product: syz [ 1159.716984][ T27] usb 2-1: Manufacturer: syz [ 1159.722009][ T27] usb 2-1: SerialNumber: syz [ 1160.011022][ T27] usb 2-1: selecting invalid altsetting 1 [ 1160.142756][ T27] usb 2-1: unit 3 not found! [ 1160.147922][ T27] usb 2-1: cannot request logical cluster ID: 0 (err: -71) [ 1160.168240][ T27] usb 2-1: invalid MIXER UNIT descriptor 6 [ 1160.187576][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 1160.197354][ T27] usb 2-1: USB disconnect, device number 20 [ 1160.285887][T13105] udevd[13105]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1161.121183][T13107] loop2: detected capacity change from 0 to 16 [ 1161.207157][T13107] erofs: (device loop2): mounted with root inode @ nid 36. [ 1164.484348][T13124] CIFS: Attempting to mount //127.0.0.1/share [ 1164.600669][T13129] loop3: detected capacity change from 0 to 16 [ 1164.638583][T13129] erofs: (device loop3): mounted with root inode @ nid 36. [ 1165.257758][T13124] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1166.578119][ T5899] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1166.777212][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1166.794183][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.868763][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.890457][ T5899] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1166.899718][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.907849][ T5899] usb 4-1: Product: syz [ 1166.923022][ T5899] usb 4-1: Manufacturer: syz [ 1166.927795][ T5899] usb 4-1: SerialNumber: syz [ 1167.255607][ T5899] usb 4-1: selecting invalid altsetting 1 [ 1167.262051][ T5899] usb 4-1: unit 3 not found! [ 1167.267138][ T5899] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 1167.274524][ T5899] usb 4-1: invalid MIXER UNIT descriptor 6 [ 1167.295039][ T5899] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1167.358683][ T5899] usb 4-1: USB disconnect, device number 19 [ 1167.391871][T13105] udevd[13105]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1173.938611][T13171] CIFS: Attempting to mount //127.0.0.1/share [ 1176.719546][T13171] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1177.082769][T13187] loop2: detected capacity change from 0 to 16 [ 1177.160029][T13187] erofs: (device loop2): mounted with root inode @ nid 36. [ 1177.662037][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.668957][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.501726][T13211] CIFS: Attempting to mount //127.0.0.1/share [ 1182.097567][T13211] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1188.788491][T13248] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-wait": -EINTR [ 1188.819268][T13248] device-mapper: table: 248:2: integrity: Cannot allocate workqueue (-ENOMEM) [ 1188.858245][ T27] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1188.889972][T13248] device-mapper: ioctl: error adding target to table [ 1189.086483][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1189.144074][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.178211][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1189.199318][ T27] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1189.218173][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.236447][ T27] usb 3-1: Product: syz [ 1189.248217][ T27] usb 3-1: Manufacturer: syz [ 1189.252867][ T27] usb 3-1: SerialNumber: syz [ 1190.869504][ T27] usb 3-1: selecting invalid altsetting 1 [ 1190.970142][ T27] usb 3-1: unit 3 not found! [ 1191.028669][ T27] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 1192.033305][ T27] usb 3-1: invalid MIXER UNIT descriptor 6 [ 1193.178718][ T27] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 1194.441596][ T27] usb 3-1: USB disconnect, device number 35 [ 1194.467432][T13261] udevd[13261]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.324998][T13282] CIFS: Attempting to mount //127.0.0.1/share [ 1198.147618][T13282] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1198.219211][T13291] binder: BINDER_SET_CONTEXT_MGR already set [ 1198.225663][T13291] binder: 13290:13291 ioctl 4018620d 200000000540 returned -16 [ 1202.130907][T13310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.239800][T13310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.307981][T13312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.828282][T13316] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-metadata": -EINTR [ 1203.829606][T13316] device-mapper: table: 248:2: integrity: Cannot allocate workqueue (-ENOMEM) [ 1203.975734][T13316] device-mapper: ioctl: error adding target to table [ 1210.855778][T13354] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-wait": -EINTR [ 1210.863369][T13354] device-mapper: table: 248:2: integrity: Cannot allocate workqueue (-ENOMEM) [ 1211.023798][T13354] device-mapper: ioctl: error adding target to table [ 1215.461674][T13382] tmpfs: Bad value for 'mpol' [ 1218.536732][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.624888][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.652280][T13391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.023824][T13411] CIFS: Attempting to mount //127.0.0.1/share [ 1221.668493][T13411] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1225.430452][T13445] CIFS: Attempting to mount //127.0.0.1/share [ 1227.980559][T13445] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1230.510521][T13466] tmpfs: Bad value for 'mpol' [ 1233.778158][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1902'. [ 1239.313500][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.320075][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.799331][T13528] CIFS: Attempting to mount //127.0.0.1/share [ 1243.988492][ T5890] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1244.149106][ T5890] usb 4-1: device descriptor read/64, error -71 [ 1244.460653][ T5890] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1244.612220][T13528] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1244.638232][ T5890] usb 4-1: device descriptor read/64, error -71 [ 1244.820694][ T5890] usb usb4-port1: attempt power cycle [ 1253.860962][T13578] CIFS: Attempting to mount //127.0.0.1/share [ 1254.163315][T13578] CIFS: VFS: error -4 create cifsd thread [ 1254.318317][T13578] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1259.684161][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1259.705338][T13610] loop1: detected capacity change from 0 to 16 [ 1259.738511][T13610] erofs: (device loop1): mounted with root inode @ nid 36. [ 1259.862261][ T8] usb 3-1: device descriptor read/64, error -71 [ 1260.418202][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1260.598229][ T8] usb 3-1: device descriptor read/64, error -71 [ 1261.847058][ T8] usb usb3-port1: attempt power cycle [ 1262.651299][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1262.699373][ T8] usb 3-1: device descriptor read/8, error -71 [ 1266.350230][ T8] IPVS: starting estimator thread 0... [ 1266.473277][T13643] IPVS: using max 35 ests per chain, 84000 per kthread [ 1268.868222][T11849] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1270.398004][T11849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.428716][T11849] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1270.458181][T11849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.483409][T11849] usb 5-1: config 0 descriptor?? [ 1270.745169][T11849] usbhid 5-1:0.0: can't add hid device: -71 [ 1270.752010][T11849] usbhid: probe of 5-1:0.0 failed with error -71 [ 1270.773295][T11849] usb 5-1: USB disconnect, device number 63 [ 1271.998253][T11849] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1273.616755][T13690] CIFS: Attempting to mount //127.0.0.1/share [ 1274.588128][T13690] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1275.548987][T13700] loop3: detected capacity change from 0 to 16 [ 1275.593867][T13700] erofs: (device loop3): mounted with root inode @ nid 36. [ 1279.718332][T13710] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-commit": -EINTR [ 1279.740279][T13710] device-mapper: table: 248:0: integrity: Cannot allocate workqueue (-ENOMEM) [ 1279.808868][T13710] device-mapper: ioctl: error adding target to table [ 1281.665953][T11849] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1282.219720][T11849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.330419][T11849] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1282.411443][T11849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.551477][T11849] usb 5-1: config 0 descriptor?? [ 1284.440029][T11849] usbhid 5-1:0.0: can't add hid device: -71 [ 1284.446125][T11849] usbhid: probe of 5-1:0.0 failed with error -71 [ 1284.581028][T11849] usb 5-1: USB disconnect, device number 65 [ 1288.654635][T13763] CIFS: Attempting to mount //127.0.0.1/share [ 1289.129133][T11849] IPVS: starting estimator thread 0... [ 1289.238450][T13767] IPVS: using max 18 ests per chain, 43200 per kthread [ 1289.498491][T13763] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1291.199031][ T9742] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1291.425927][ T9742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.451558][ T9742] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1291.481545][ T9742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.519654][ T9742] usb 2-1: config 0 descriptor?? [ 1291.875041][ T9742] usbhid 2-1:0.0: can't add hid device: -71 [ 1291.906536][ T9742] usbhid: probe of 2-1:0.0 failed with error -71 [ 1291.923573][ T9742] usb 2-1: USB disconnect, device number 21 [ 1292.481755][T13786] FAULT_INJECTION: forcing a failure. [ 1292.481755][T13786] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.524458][T13786] CPU: 1 PID: 13786 Comm: syz.2.1971 Not tainted syzkaller #0 [ 1292.531957][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1292.542011][T13786] Call Trace: [ 1292.545285][T13786] [ 1292.548215][T13786] dump_stack_lvl+0x18c/0x250 [ 1292.552902][T13786] ? show_regs_print_info+0x20/0x20 [ 1292.558094][T13786] ? load_image+0x420/0x420 [ 1292.562601][T13786] ? __might_sleep+0xe0/0xe0 [ 1292.567175][T13786] ? __lock_acquire+0x7eb0/0x7eb0 [ 1292.572192][T13786] should_fail_ex+0x394/0x4c0 [ 1292.576863][T13786] should_failslab+0x9/0x20 [ 1292.581353][T13786] slab_pre_alloc_hook+0x59/0x300 [ 1292.586367][T13786] kmem_cache_alloc+0x5a/0x2d0 [ 1292.591145][T13786] ? alloc_vfsmnt+0x24/0x450 [ 1292.595771][T13786] alloc_vfsmnt+0x24/0x450 [ 1292.600201][T13786] clone_mnt+0x65/0xc60 [ 1292.604360][T13786] ? do_raw_spin_unlock+0x121/0x230 [ 1292.609568][T13786] copy_tree+0x3d2/0x7e0 [ 1292.613829][T13786] ? copy_mnt_ns+0x16a/0x8f0 [ 1292.618413][T13786] copy_mnt_ns+0x16a/0x8f0 [ 1292.622830][T13786] ? create_new_namespaces+0x34/0x700 [ 1292.628207][T13786] create_new_namespaces+0xd3/0x700 [ 1292.633416][T13786] ? bpf_lsm_capable+0x9/0x10 [ 1292.638091][T13786] ? security_capable+0x89/0xb0 [ 1292.642951][T13786] unshare_nsproxy_namespaces+0x11a/0x160 [ 1292.648666][T13786] ksys_unshare+0x4fa/0x8f0 [ 1292.653162][T13786] ? sighand_ctor+0x50/0x50 [ 1292.657651][T13786] ? lock_chain_count+0x20/0x20 [ 1292.662490][T13786] ? syscall_enter_from_user_mode+0x25/0x80 [ 1292.668376][T13786] __x64_sys_unshare+0x38/0x40 [ 1292.673149][T13786] do_syscall_64+0x55/0xb0 [ 1292.677574][T13786] ? clear_bhb_loop+0x40/0x90 [ 1292.682243][T13786] ? clear_bhb_loop+0x40/0x90 [ 1292.686913][T13786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.692831][T13786] RIP: 0033:0x7f5f2359fb19 [ 1292.697235][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.716856][T13786] RSP: 002b:00007f5f24419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1292.725263][T13786] RAX: ffffffffffffffda RBX: 00007f5f23825fa0 RCX: 00007f5f2359fb19 [ 1292.733243][T13786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1292.741230][T13786] RBP: 00007f5f23637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1292.749212][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1292.757258][T13786] R13: 00007f5f23826038 R14: 00007f5f23825fa0 R15: 00007ffd2b9826f8 [ 1292.765226][T13786] [ 1296.764850][T13810] tmpfs: Bad value for 'mpol' [ 1300.258205][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1300.358555][T11849] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1300.478813][T13837] FAULT_INJECTION: forcing a failure. [ 1300.478813][T13837] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.493807][T13837] CPU: 0 PID: 13837 Comm: syz.2.1988 Not tainted syzkaller #0 [ 1300.501295][T13837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1300.511353][T13837] Call Trace: [ 1300.514635][T13837] [ 1300.517569][T13837] dump_stack_lvl+0x18c/0x250 [ 1300.522250][T13837] ? show_regs_print_info+0x20/0x20 [ 1300.527444][T13837] ? load_image+0x420/0x420 [ 1300.531945][T13837] ? __might_sleep+0xe0/0xe0 [ 1300.536536][T13837] ? __lock_acquire+0x7eb0/0x7eb0 [ 1300.541565][T13837] should_fail_ex+0x394/0x4c0 [ 1300.546244][T13837] should_failslab+0x9/0x20 [ 1300.550749][T13837] slab_pre_alloc_hook+0x59/0x300 [ 1300.555801][T13837] kmem_cache_alloc+0x5a/0x2d0 [ 1300.560585][T13837] ? alloc_vfsmnt+0x24/0x450 [ 1300.565214][T13837] alloc_vfsmnt+0x24/0x450 [ 1300.569680][T13837] clone_mnt+0x65/0xc60 [ 1300.573836][T13837] ? do_raw_spin_unlock+0x121/0x230 [ 1300.579055][T13837] copy_tree+0x3d2/0x7e0 [ 1300.583321][T13837] ? copy_mnt_ns+0x16a/0x8f0 [ 1300.587907][T13837] copy_mnt_ns+0x16a/0x8f0 [ 1300.592320][T13837] ? create_new_namespaces+0x34/0x700 [ 1300.597691][T13837] create_new_namespaces+0xd3/0x700 [ 1300.600158][T11849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.602917][T13837] ? bpf_lsm_capable+0x9/0x10 [ 1300.618452][T13837] ? security_capable+0x89/0xb0 [ 1300.623302][T13837] unshare_nsproxy_namespaces+0x11a/0x160 [ 1300.629042][T13837] ksys_unshare+0x4fa/0x8f0 [ 1300.633544][T13837] ? sighand_ctor+0x50/0x50 [ 1300.638042][T13837] ? lock_chain_count+0x20/0x20 [ 1300.642902][T13837] ? syscall_enter_from_user_mode+0x25/0x80 [ 1300.648820][T13837] __x64_sys_unshare+0x38/0x40 [ 1300.653592][T13837] do_syscall_64+0x55/0xb0 [ 1300.658012][T13837] ? clear_bhb_loop+0x40/0x90 [ 1300.662680][T13837] ? clear_bhb_loop+0x40/0x90 [ 1300.667351][T13837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.673365][T13837] RIP: 0033:0x7f5f2359fb19 [ 1300.677783][T13837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.697395][T13837] RSP: 002b:00007f5f24419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1300.705811][T13837] RAX: ffffffffffffffda RBX: 00007f5f23825fa0 RCX: 00007f5f2359fb19 [ 1300.713790][T13837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1300.721766][T13837] RBP: 00007f5f23637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1300.729734][T13837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.737704][T13837] R13: 00007f5f23826038 R14: 00007f5f23825fa0 R15: 00007ffd2b9826f8 [ 1300.745685][T13837] [ 1300.756986][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.763483][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.793374][T11849] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1300.800666][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1300.811541][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.850349][T11849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.868187][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1300.889490][ T8] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1300.894906][T11849] usb 5-1: config 0 descriptor?? [ 1300.913911][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.947160][ T8] usb 4-1: Product: syz [ 1300.951596][ T8] usb 4-1: Manufacturer: syz [ 1300.956306][ T8] usb 4-1: SerialNumber: syz [ 1301.209588][ T8] usb 4-1: selecting invalid altsetting 1 [ 1301.254106][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1301.280617][ T8] usb 4-1: USB disconnect, device number 23 [ 1301.359773][T11849] usbhid 5-1:0.0: can't add hid device: -71 [ 1301.378582][T11849] usbhid: probe of 5-1:0.0 failed with error -71 [ 1301.419047][T11849] usb 5-1: USB disconnect, device number 66 [ 1301.420085][T13823] udevd[13823]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.351253][ T8] IPVS: starting estimator thread 0... [ 1307.448386][T13884] IPVS: using max 23 ests per chain, 55200 per kthread [ 1307.529274][T13886] FAULT_INJECTION: forcing a failure. [ 1307.529274][T13886] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.561635][T13886] CPU: 0 PID: 13886 Comm: syz.3.1998 Not tainted syzkaller #0 [ 1307.569173][T13886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1307.579256][T13886] Call Trace: [ 1307.582572][T13886] [ 1307.585530][T13886] dump_stack_lvl+0x18c/0x250 [ 1307.590255][T13886] ? show_regs_print_info+0x20/0x20 [ 1307.595487][T13886] ? load_image+0x420/0x420 [ 1307.600021][T13886] ? __lock_acquire+0x7eb0/0x7eb0 [ 1307.605080][T13886] ? ida_alloc_range+0x7d0/0x860 [ 1307.610058][T13886] should_fail_ex+0x394/0x4c0 [ 1307.614769][T13886] should_failslab+0x9/0x20 [ 1307.619336][T13886] slab_pre_alloc_hook+0x59/0x300 [ 1307.624395][T13886] ? alloc_vfsmnt+0x9d/0x450 [ 1307.629004][T13886] ? alloc_vfsmnt+0x9d/0x450 [ 1307.633602][T13886] __kmem_cache_alloc_node+0x53/0x260 [ 1307.638992][T13886] ? alloc_vfsmnt+0x9d/0x450 [ 1307.643718][T13886] __kmalloc_node_track_caller+0xa4/0x230 [ 1307.649474][T13886] kstrdup+0x3b/0x80 [ 1307.653398][T13886] alloc_vfsmnt+0x9d/0x450 [ 1307.657842][T13886] clone_mnt+0x65/0xc60 [ 1307.662002][T13886] ? do_raw_spin_unlock+0x121/0x230 [ 1307.667209][T13886] copy_tree+0x3d2/0x7e0 [ 1307.671460][T13886] ? copy_mnt_ns+0x16a/0x8f0 [ 1307.676061][T13886] copy_mnt_ns+0x16a/0x8f0 [ 1307.680484][T13886] ? create_new_namespaces+0x34/0x700 [ 1307.685863][T13886] create_new_namespaces+0xd3/0x700 [ 1307.691063][T13886] ? bpf_lsm_capable+0x9/0x10 [ 1307.695749][T13886] ? security_capable+0x89/0xb0 [ 1307.700601][T13886] unshare_nsproxy_namespaces+0x11a/0x160 [ 1307.706326][T13886] ksys_unshare+0x4fa/0x8f0 [ 1307.710837][T13886] ? sighand_ctor+0x50/0x50 [ 1307.715362][T13886] ? lock_chain_count+0x20/0x20 [ 1307.720233][T13886] ? syscall_enter_from_user_mode+0x25/0x80 [ 1307.726135][T13886] __x64_sys_unshare+0x38/0x40 [ 1307.730903][T13886] do_syscall_64+0x55/0xb0 [ 1307.735353][T13886] ? clear_bhb_loop+0x40/0x90 [ 1307.740039][T13886] ? clear_bhb_loop+0x40/0x90 [ 1307.744723][T13886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.750616][T13886] RIP: 0033:0x7fd64fd9fb19 [ 1307.755125][T13886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.774907][T13886] RSP: 002b:00007fd650d34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1307.783323][T13886] RAX: ffffffffffffffda RBX: 00007fd650025fa0 RCX: 00007fd64fd9fb19 [ 1307.791296][T13886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1307.799356][T13886] RBP: 00007fd64fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1307.807339][T13886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.815314][T13886] R13: 00007fd650026038 R14: 00007fd650025fa0 R15: 00007ffda2b03438 [ 1307.823303][T13886] [ 1307.910418][T13893] CIFS: Attempting to mount //127.0.0.1/share [ 1309.178788][T13893] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1309.748171][ T788] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1311.203074][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.240553][ T788] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1311.270411][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.295660][ T788] usb 4-1: config 0 descriptor?? [ 1311.551841][ T788] usbhid 4-1:0.0: can't add hid device: -71 [ 1311.557924][ T788] usbhid: probe of 4-1:0.0 failed with error -71 [ 1311.599023][ T788] usb 4-1: USB disconnect, device number 24 [ 1314.298725][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1314.535092][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1314.565721][ T8] usb 2-1: config 0 has no interfaces? [ 1314.585855][ T8] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1314.613246][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.628524][ T8] usb 2-1: Product: syz [ 1314.638208][ T8] usb 2-1: Manufacturer: syz [ 1314.647556][ T8] usb 2-1: SerialNumber: syz [ 1314.675021][ T8] usb 2-1: config 0 descriptor?? [ 1314.915013][ T8] usb 2-1: USB disconnect, device number 23 [ 1315.841067][T13941] FAULT_INJECTION: forcing a failure. [ 1315.841067][T13941] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.024880][T13941] CPU: 0 PID: 13941 Comm: syz.3.2009 Not tainted syzkaller #0 [ 1316.032421][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1316.042479][T13941] Call Trace: [ 1316.045757][T13941] [ 1316.048712][T13941] dump_stack_lvl+0x18c/0x250 [ 1316.053407][T13941] ? show_regs_print_info+0x20/0x20 [ 1316.058624][T13941] ? load_image+0x420/0x420 [ 1316.063131][T13941] ? __might_sleep+0xe0/0xe0 [ 1316.067739][T13941] ? __lock_acquire+0x7eb0/0x7eb0 [ 1316.072782][T13941] should_fail_ex+0x394/0x4c0 [ 1316.077498][T13941] should_failslab+0x9/0x20 [ 1316.082046][T13941] slab_pre_alloc_hook+0x59/0x300 [ 1316.087067][T13941] ? stack_trace_snprint+0xf0/0xf0 [ 1316.092206][T13941] ? __kthread_create_on_node+0x116/0x3d0 [ 1316.097922][T13941] __kmem_cache_alloc_node+0x53/0x260 [ 1316.103290][T13941] ? __kthread_create_on_node+0x116/0x3d0 [ 1316.109003][T13941] kmalloc_trace+0x2a/0xe0 [ 1316.113415][T13941] ? install_unbound_pwq+0x480/0x480 [ 1316.118708][T13941] __kthread_create_on_node+0x116/0x3d0 [ 1316.124271][T13941] ? __se_sys_ioctl+0xfd/0x170 [ 1316.129035][T13941] ? kthread_create_on_node+0x140/0x140 [ 1316.134585][T13941] ? install_unbound_pwq+0x480/0x480 [ 1316.139868][T13941] ? install_unbound_pwq+0x480/0x480 [ 1316.145147][T13941] kthread_create_on_node+0xec/0x140 [ 1316.150436][T13941] ? tsk_fork_get_node+0x70/0x70 [ 1316.155918][T13941] ? rcu_is_watching+0x15/0xb0 [ 1316.160702][T13941] init_rescuer+0x1a9/0x2d0 [ 1316.165225][T13941] alloc_workqueue+0xcf0/0x1380 [ 1316.170085][T13941] ? apply_workqueue_attrs+0x180/0x180 [ 1316.175550][T13941] ? mempool_alloc_pages+0x20/0x20 [ 1316.180662][T13941] ? mempool_kfree+0x20/0x20 [ 1316.185266][T13941] ? mempool_init+0x3a/0x50 [ 1316.189785][T13941] dm_integrity_ctr+0x1e58/0x4bb0 [ 1316.194835][T13941] ? sb_check+0x310/0x310 [ 1316.199182][T13941] ? dm_split_args+0x92/0x5b0 [ 1316.203859][T13941] ? rcu_is_watching+0x15/0xb0 [ 1316.208623][T13941] ? dm_split_args+0x505/0x5b0 [ 1316.213393][T13941] dm_table_add_target+0x575/0xbc0 [ 1316.218523][T13941] table_load+0x2eb/0x7e0 [ 1316.222886][T13941] ? dev_wait+0x2f0/0x2f0 [ 1316.227223][T13941] ? __might_fault+0xaa/0x120 [ 1316.231921][T13941] ? __might_fault+0xc6/0x120 [ 1316.236605][T13941] ? __might_fault+0xaa/0x120 [ 1316.241298][T13941] ? dev_wait+0x2f0/0x2f0 [ 1316.245630][T13941] dm_ctl_ioctl+0x975/0xd00 [ 1316.250162][T13941] ? dev_wait+0x2f0/0x2f0 [ 1316.254491][T13941] ? dm_poll+0x120/0x120 [ 1316.258754][T13941] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1316.263689][T13941] ? security_file_ioctl+0x80/0xa0 [ 1316.268809][T13941] ? dm_poll+0x120/0x120 [ 1316.273083][T13941] __se_sys_ioctl+0xfd/0x170 [ 1316.277673][T13941] do_syscall_64+0x55/0xb0 [ 1316.282085][T13941] ? clear_bhb_loop+0x40/0x90 [ 1316.286761][T13941] ? clear_bhb_loop+0x40/0x90 [ 1316.291438][T13941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1316.297335][T13941] RIP: 0033:0x7fd64fd9fb19 [ 1316.301763][T13941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.321386][T13941] RSP: 002b:00007fd650d34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1316.329831][T13941] RAX: ffffffffffffffda RBX: 00007fd650025fa0 RCX: 00007fd64fd9fb19 [ 1316.337827][T13941] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 1316.345823][T13941] RBP: 00007fd64fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1316.353819][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.361816][T13941] R13: 00007fd650026038 R14: 00007fd650025fa0 R15: 00007ffda2b03438 [ 1316.369837][T13941] [ 1316.400989][T13941] workqueue: Failed to create a rescuer kthread for wq "dm-integrity-commit": -ENOMEM [ 1316.444626][T13941] device-mapper: table: 248:3: integrity: Cannot allocate workqueue (-ENOMEM) [ 1316.474787][T13941] device-mapper: ioctl: error adding target to table [ 1317.004478][T13952] CIFS: Attempting to mount //127.0.0.1/share [ 1317.682947][T13952] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1321.632378][T13978] FAULT_INJECTION: forcing a failure. [ 1321.632378][T13978] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1321.646309][ T5775] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1321.678591][T13978] CPU: 1 PID: 13978 Comm: syz.3.2018 Not tainted syzkaller #0 [ 1321.686128][T13978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1321.696211][T13978] Call Trace: [ 1321.699508][T13978] [ 1321.702446][T13978] dump_stack_lvl+0x18c/0x250 [ 1321.707163][T13978] ? show_regs_print_info+0x20/0x20 [ 1321.712392][T13978] ? load_image+0x420/0x420 [ 1321.716923][T13978] ? __lock_acquire+0x7eb0/0x7eb0 [ 1321.722002][T13978] should_fail_ex+0x394/0x4c0 [ 1321.726695][T13978] prepare_alloc_pages+0x1e1/0x5b0 [ 1321.731818][T13978] __alloc_pages+0x134/0x460 [ 1321.736416][T13978] ? zone_statistics+0x170/0x170 [ 1321.741357][T13978] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1321.747255][T13978] ? lockdep_softirqs_off+0x440/0x440 [ 1321.752627][T13978] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1321.758535][T13978] alloc_pages_exact+0x39/0x70 [ 1321.763329][T13978] dm_integrity_ctr+0x223b/0x4bb0 [ 1321.768382][T13978] ? sb_check+0x310/0x310 [ 1321.772716][T13978] ? dm_split_args+0x92/0x5b0 [ 1321.777392][T13978] ? rcu_is_watching+0x15/0xb0 [ 1321.782165][T13978] ? dm_split_args+0x505/0x5b0 [ 1321.786956][T13978] dm_table_add_target+0x575/0xbc0 [ 1321.792081][T13978] table_load+0x2eb/0x7e0 [ 1321.796430][T13978] ? dev_wait+0x2f0/0x2f0 [ 1321.800764][T13978] ? __might_fault+0xaa/0x120 [ 1321.805473][T13978] ? __might_fault+0xc6/0x120 [ 1321.810152][T13978] ? __might_fault+0xaa/0x120 [ 1321.814829][T13978] ? dev_wait+0x2f0/0x2f0 [ 1321.819169][T13978] dm_ctl_ioctl+0x975/0xd00 [ 1321.823704][T13978] ? dev_wait+0x2f0/0x2f0 [ 1321.828034][T13978] ? dm_poll+0x120/0x120 [ 1321.832312][T13978] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1321.837249][T13978] ? security_file_ioctl+0x80/0xa0 [ 1321.842360][T13978] ? dm_poll+0x120/0x120 [ 1321.846606][T13978] __se_sys_ioctl+0xfd/0x170 [ 1321.851213][T13978] do_syscall_64+0x55/0xb0 [ 1321.855629][T13978] ? clear_bhb_loop+0x40/0x90 [ 1321.860309][T13978] ? clear_bhb_loop+0x40/0x90 [ 1321.864992][T13978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.870885][T13978] RIP: 0033:0x7fd64fd9fb19 [ 1321.875317][T13978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.894947][T13978] RSP: 002b:00007fd650d34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1321.903365][T13978] RAX: ffffffffffffffda RBX: 00007fd650025fa0 RCX: 00007fd64fd9fb19 [ 1321.911340][T13978] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 1321.919331][T13978] RBP: 00007fd64fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1321.927328][T13978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.935297][T13978] R13: 00007fd650026038 R14: 00007fd650025fa0 R15: 00007ffda2b03438 [ 1321.943284][T13978] [ 1321.990117][T13978] device-mapper: table: 248:3: integrity: Cannot allocate superblock area (-ENOMEM) [ 1322.009477][T13978] device-mapper: ioctl: error adding target to table [ 1322.083808][ T5775] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1322.136790][ T5775] usb 5-1: config 0 has no interfaces? [ 1322.152938][T13991] CIFS: Attempting to mount //127.0.0.1/share [ 1322.209374][ T5775] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1322.253009][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.296717][ T5775] usb 5-1: Product: syz [ 1322.320393][ T5775] usb 5-1: Manufacturer: syz [ 1322.347928][ T5775] usb 5-1: SerialNumber: syz [ 1322.433702][ T5775] usb 5-1: config 0 descriptor?? [ 1322.699518][ T5775] usb 5-1: USB disconnect, device number 67 [ 1322.869574][T13991] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1332.316962][T14039] CIFS: Attempting to mount //127.0.0.1/share [ 1333.102759][T14039] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1334.903950][ T5775] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1336.351782][ T5775] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1336.378511][ T5775] usb 4-1: no configurations [ 1336.396656][ T5775] usb 4-1: can't read configurations, error -22 [ 1342.092406][T14087] FAULT_INJECTION: forcing a failure. [ 1342.092406][T14087] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.108325][T14087] CPU: 1 PID: 14087 Comm: syz.2.2037 Not tainted syzkaller #0 [ 1342.115846][T14087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1342.125934][T14087] Call Trace: [ 1342.129231][T14087] [ 1342.132196][T14087] dump_stack_lvl+0x18c/0x250 [ 1342.136915][T14087] ? show_regs_print_info+0x20/0x20 [ 1342.142158][T14087] ? load_image+0x420/0x420 [ 1342.146695][T14087] ? __might_sleep+0xe0/0xe0 [ 1342.151317][T14087] ? __lock_acquire+0x7eb0/0x7eb0 [ 1342.156376][T14087] ? __lock_acquire+0x7eb0/0x7eb0 [ 1342.161426][T14087] should_fail_ex+0x394/0x4c0 [ 1342.166112][T14087] should_failslab+0x9/0x20 [ 1342.170651][T14087] slab_pre_alloc_hook+0x59/0x300 [ 1342.175700][T14087] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1342.181344][T14087] ? init_rescuer+0x91/0x2d0 [ 1342.185935][T14087] __kmem_cache_alloc_node+0x53/0x260 [ 1342.191349][T14087] ? init_rescuer+0x91/0x2d0 [ 1342.196027][T14087] kmalloc_node_trace+0x26/0xe0 [ 1342.200888][T14087] init_rescuer+0x91/0x2d0 [ 1342.205307][T14087] alloc_workqueue+0xcf0/0x1380 [ 1342.210181][T14087] ? apply_workqueue_attrs+0x180/0x180 [ 1342.215645][T14087] ? mempool_alloc_pages+0x20/0x20 [ 1342.220760][T14087] ? mempool_kfree+0x20/0x20 [ 1342.225349][T14087] ? mempool_init+0x3a/0x50 [ 1342.229853][T14087] dm_integrity_ctr+0x1e08/0x4bb0 [ 1342.234902][T14087] ? sb_check+0x310/0x310 [ 1342.239271][T14087] ? dm_split_args+0x92/0x5b0 [ 1342.243947][T14087] ? rcu_is_watching+0x15/0xb0 [ 1342.248715][T14087] ? dm_split_args+0x505/0x5b0 [ 1342.253483][T14087] dm_table_add_target+0x575/0xbc0 [ 1342.258628][T14087] table_load+0x2eb/0x7e0 [ 1342.262976][T14087] ? dev_wait+0x2f0/0x2f0 [ 1342.267304][T14087] ? __might_fault+0xaa/0x120 [ 1342.271978][T14087] ? __might_fault+0xc6/0x120 [ 1342.276650][T14087] ? __might_fault+0xaa/0x120 [ 1342.281333][T14087] ? dev_wait+0x2f0/0x2f0 [ 1342.285659][T14087] dm_ctl_ioctl+0x975/0xd00 [ 1342.290177][T14087] ? dev_wait+0x2f0/0x2f0 [ 1342.294508][T14087] ? dm_poll+0x120/0x120 [ 1342.298786][T14087] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1342.303726][T14087] ? security_file_ioctl+0x80/0xa0 [ 1342.308850][T14087] ? dm_poll+0x120/0x120 [ 1342.313095][T14087] __se_sys_ioctl+0xfd/0x170 [ 1342.317689][T14087] do_syscall_64+0x55/0xb0 [ 1342.322109][T14087] ? clear_bhb_loop+0x40/0x90 [ 1342.326788][T14087] ? clear_bhb_loop+0x40/0x90 [ 1342.331469][T14087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1342.337366][T14087] RIP: 0033:0x7f5f2359fb19 [ 1342.341778][T14087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.361394][T14087] RSP: 002b:00007f5f24419028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.369810][T14087] RAX: ffffffffffffffda RBX: 00007f5f23825fa0 RCX: 00007f5f2359fb19 [ 1342.377784][T14087] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 1342.385759][T14087] RBP: 00007f5f23637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1342.393730][T14087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.401696][T14087] R13: 00007f5f23826038 R14: 00007f5f23825fa0 R15: 00007ffd2b9826f8 [ 1342.409684][T14087] [ 1342.442436][T14087] workqueue: Failed to allocate a rescuer for wq "dm-integrity-offload" [ 1342.494377][T14087] device-mapper: table: 248:0: integrity: Cannot allocate workqueue (-ENOMEM) [ 1342.533906][T14087] device-mapper: ioctl: error adding target to table [ 1346.981183][ T970] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1347.240468][ T970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1347.254749][ T970] usb 2-1: no configurations [ 1347.264576][ T970] usb 2-1: can't read configurations, error -22 [ 1347.428459][ T970] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1347.438333][T11849] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1347.545603][T14122] tmpfs: Bad value for 'mpol' [ 1347.633385][ T970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1347.648480][ T970] usb 2-1: no configurations [ 1347.653247][ T970] usb 2-1: can't read configurations, error -22 [ 1347.657692][T11849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.683709][ T970] usb usb2-port1: attempt power cycle [ 1347.692202][T11849] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1347.728515][T11849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.748722][T11849] usb 4-1: config 0 descriptor?? [ 1348.034369][T11849] usbhid 4-1:0.0: can't add hid device: -71 [ 1348.042671][T11849] usbhid: probe of 4-1:0.0 failed with error -71 [ 1348.069706][T11849] usb 4-1: USB disconnect, device number 28 [ 1348.648548][T11849] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1348.673659][T14129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2044'. [ 1350.080523][T11849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.108307][T11849] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1350.137786][T11849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.166204][T11849] usb 4-1: config 0 descriptor?? [ 1350.206248][T11849] usb 4-1: can't set config #0, error -71 [ 1350.217839][T11849] usb 4-1: USB disconnect, device number 29 [ 1352.741562][T14148] FAULT_INJECTION: forcing a failure. [ 1352.741562][T14148] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.874360][T14148] CPU: 1 PID: 14148 Comm: syz.1.2051 Not tainted syzkaller #0 [ 1352.881872][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1352.891956][T14148] Call Trace: [ 1352.895256][T14148] [ 1352.898198][T14148] dump_stack_lvl+0x18c/0x250 [ 1352.902873][T14148] ? show_regs_print_info+0x20/0x20 [ 1352.908086][T14148] ? load_image+0x420/0x420 [ 1352.912611][T14148] ? __lock_acquire+0x7eb0/0x7eb0 [ 1352.917679][T14148] should_fail_ex+0x394/0x4c0 [ 1352.922394][T14148] should_failslab+0x9/0x20 [ 1352.926917][T14148] slab_pre_alloc_hook+0x59/0x300 [ 1352.931951][T14148] ? string+0x257/0x290 [ 1352.936098][T14148] ? kasprintf+0xe3/0x140 [ 1352.940414][T14148] ? kasprintf+0xe3/0x140 [ 1352.944726][T14148] __kmem_cache_alloc_node+0x53/0x260 [ 1352.950111][T14148] ? kasprintf+0xe3/0x140 [ 1352.954457][T14148] __kmalloc_node_track_caller+0xa4/0x230 [ 1352.960208][T14148] kvasprintf+0xec/0x1a0 [ 1352.964567][T14148] ? bust_spinlocks+0xd0/0xd0 [ 1352.969281][T14148] ? lockdep_lock+0xf5/0x230 [ 1352.973893][T14148] ? lockdep_unlock+0x146/0x2e0 [ 1352.978769][T14148] kasprintf+0xe3/0x140 [ 1352.982953][T14148] ? kvasprintf_const+0x240/0x240 [ 1352.988007][T14148] ? __raw_spin_lock_init+0x45/0x100 [ 1352.993331][T14148] alloc_workqueue+0x57f/0x1380 [ 1352.998225][T14148] ? apply_workqueue_attrs+0x180/0x180 [ 1353.003706][T14148] ? mempool_alloc_pages+0x20/0x20 [ 1353.008838][T14148] ? mempool_kfree+0x20/0x20 [ 1353.013452][T14148] ? mempool_init+0x3a/0x50 [ 1353.017981][T14148] dm_integrity_ctr+0x1e58/0x4bb0 [ 1353.023036][T14148] ? sb_check+0x310/0x310 [ 1353.027353][T14148] ? dm_split_args+0x92/0x5b0 [ 1353.032029][T14148] ? rcu_is_watching+0x15/0xb0 [ 1353.036817][T14148] ? dm_split_args+0x505/0x5b0 [ 1353.041618][T14148] dm_table_add_target+0x575/0xbc0 [ 1353.046770][T14148] table_load+0x2eb/0x7e0 [ 1353.051138][T14148] ? dev_wait+0x2f0/0x2f0 [ 1353.055492][T14148] ? __might_fault+0xaa/0x120 [ 1353.060194][T14148] ? __might_fault+0xc6/0x120 [ 1353.064888][T14148] ? __might_fault+0xaa/0x120 [ 1353.069593][T14148] ? dev_wait+0x2f0/0x2f0 [ 1353.074036][T14148] dm_ctl_ioctl+0x975/0xd00 [ 1353.078573][T14148] ? dev_wait+0x2f0/0x2f0 [ 1353.082945][T14148] ? dm_poll+0x120/0x120 [ 1353.087271][T14148] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1353.092240][T14148] ? security_file_ioctl+0x80/0xa0 [ 1353.097385][T14148] ? dm_poll+0x120/0x120 [ 1353.101656][T14148] __se_sys_ioctl+0xfd/0x170 [ 1353.106275][T14148] do_syscall_64+0x55/0xb0 [ 1353.110718][T14148] ? clear_bhb_loop+0x40/0x90 [ 1353.115417][T14148] ? clear_bhb_loop+0x40/0x90 [ 1353.120122][T14148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1353.126038][T14148] RIP: 0033:0x7f908a59fb19 [ 1353.130491][T14148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.150127][T14148] RSP: 002b:00007f908b433028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.158575][T14148] RAX: ffffffffffffffda RBX: 00007f908a825fa0 RCX: 00007f908a59fb19 [ 1353.166575][T14148] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 1353.174578][T14148] RBP: 00007f908a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1353.182575][T14148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.190577][T14148] R13: 00007f908a826038 R14: 00007f908a825fa0 R15: 00007ffe94a305c8 [ 1353.198604][T14148] [ 1359.128208][ T788] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1359.370762][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.392376][ T788] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1359.438218][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.472267][ T788] usb 2-1: config 0 descriptor?? [ 1360.063938][ T788] usbhid 2-1:0.0: can't add hid device: -71 [ 1360.097595][ T788] usbhid: probe of 2-1:0.0 failed with error -71 [ 1360.145167][ T788] usb 2-1: USB disconnect, device number 27 [ 1361.682849][T14199] FAULT_INJECTION: forcing a failure. [ 1361.682849][T14199] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.708592][T14199] CPU: 0 PID: 14199 Comm: syz.3.2061 Not tainted syzkaller #0 [ 1361.716176][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1361.726261][T14199] Call Trace: [ 1361.729558][T14199] [ 1361.732506][T14199] dump_stack_lvl+0x18c/0x250 [ 1361.737217][T14199] ? show_regs_print_info+0x20/0x20 [ 1361.742454][T14199] ? load_image+0x420/0x420 [ 1361.746950][T14199] ? __might_sleep+0xe0/0xe0 [ 1361.751533][T14199] ? __lock_acquire+0x7eb0/0x7eb0 [ 1361.756590][T14199] should_fail_ex+0x394/0x4c0 [ 1361.761264][T14199] should_failslab+0x9/0x20 [ 1361.765754][T14199] slab_pre_alloc_hook+0x59/0x300 [ 1361.770766][T14199] kmem_cache_alloc+0x5a/0x2d0 [ 1361.775536][T14199] ? mempool_init_node+0x1e9/0x480 [ 1361.780669][T14199] ? mempool_free+0x320/0x320 [ 1361.785354][T14199] mempool_init_node+0x1e9/0x480 [ 1361.790294][T14199] ? mempool_alloc_slab+0x60/0x60 [ 1361.795312][T14199] ? mempool_free+0x320/0x320 [ 1361.799984][T14199] mempool_init+0x3a/0x50 [ 1361.804323][T14199] dm_io_client_create+0x78/0xf0 [ 1361.809255][T14199] dm_bufio_client_create+0x6b3/0x1400 [ 1361.814711][T14199] ? dm_bufio_get_client+0x40/0x40 [ 1361.819810][T14199] ? calculate_device_limits+0x954/0xf10 [ 1361.825440][T14199] dm_integrity_ctr+0x38ea/0x4bb0 [ 1361.830474][T14199] ? sb_check+0x310/0x310 [ 1361.834794][T14199] ? dm_split_args+0x92/0x5b0 [ 1361.839455][T14199] ? rcu_is_watching+0x15/0xb0 [ 1361.844211][T14199] ? dm_split_args+0x505/0x5b0 [ 1361.848974][T14199] dm_table_add_target+0x575/0xbc0 [ 1361.854079][T14199] table_load+0x2eb/0x7e0 [ 1361.858402][T14199] ? dev_wait+0x2f0/0x2f0 [ 1361.862746][T14199] ? __might_fault+0xaa/0x120 [ 1361.867409][T14199] ? __might_fault+0xc6/0x120 [ 1361.872093][T14199] ? __might_fault+0xaa/0x120 [ 1361.876759][T14199] ? dev_wait+0x2f0/0x2f0 [ 1361.881076][T14199] dm_ctl_ioctl+0x975/0xd00 [ 1361.885571][T14199] ? dev_wait+0x2f0/0x2f0 [ 1361.889887][T14199] ? dm_poll+0x120/0x120 [ 1361.894134][T14199] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1361.899055][T14199] ? security_file_ioctl+0x80/0xa0 [ 1361.904171][T14199] ? dm_poll+0x120/0x120 [ 1361.908402][T14199] __se_sys_ioctl+0xfd/0x170 [ 1361.912987][T14199] do_syscall_64+0x55/0xb0 [ 1361.917389][T14199] ? clear_bhb_loop+0x40/0x90 [ 1361.922073][T14199] ? clear_bhb_loop+0x40/0x90 [ 1361.926738][T14199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.932619][T14199] RIP: 0033:0x7fd64fd9fb19 [ 1361.937035][T14199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.956651][T14199] RSP: 002b:00007fd650d34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.965056][T14199] RAX: ffffffffffffffda RBX: 00007fd650025fa0 RCX: 00007fd64fd9fb19 [ 1361.973035][T14199] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 1361.980993][T14199] RBP: 00007fd64fe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1361.988947][T14199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.996918][T14199] R13: 00007fd650026038 R14: 00007fd650025fa0 R15: 00007ffda2b03438 [ 1362.004905][T14199] [ 1362.050941][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.068695][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.079363][T14199] device-mapper: table: 248:3: integrity: Cannot initialize dm-bufio (-ENOMEM) [ 1362.092835][T14199] device-mapper: ioctl: error adding target to table [ 1362.178171][ T788] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1365.390849][T14217] CIFS: Attempting to mount //127.0.0.1/share [ 1366.119487][T14217] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1366.696184][T14228] binder: 14227:14228 ioctl 4018620d 0 returned -22 [ 1373.168618][ T9742] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1373.360010][ T9742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.390002][ T9742] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1373.422620][ T9742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.453027][ T9742] usb 3-1: config 0 descriptor?? [ 1373.705218][T14261] CIFS: Attempting to mount //127.0.0.1/share [ 1374.395845][T14261] CIFS: VFS: error -4 create cifsd thread [ 1374.509413][T14261] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1374.558913][ T9742] usbhid 3-1:0.0: can't add hid device: -71 [ 1374.573767][ T9742] usbhid: probe of 3-1:0.0 failed with error -71 [ 1374.600556][ T9742] usb 3-1: USB disconnect, device number 40 [ 1374.641865][T14266] binder: 14265:14266 ioctl 4018620d 0 returned -22 [ 1376.046559][T14271] tmpfs: Bad value for 'mpol' [ 1378.519847][T14277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2076'. [ 1383.125105][T14295] binder: 14294:14295 ioctl 4018620d 0 returned -22 [ 1387.068270][ T5871] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1387.311125][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1387.329589][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.348146][ T5871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1387.359564][ T5871] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1387.369154][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.377562][ T5871] usb 4-1: Product: syz [ 1387.494694][ T5871] usb 4-1: Manufacturer: syz [ 1387.508258][ T5871] usb 4-1: SerialNumber: syz [ 1387.790939][ T5871] usb 4-1: selecting invalid altsetting 1 [ 1387.797331][ T5871] usb 4-1: unit 3 not found! [ 1387.838247][ T5871] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 1387.858247][ T5871] usb 4-1: invalid MIXER UNIT descriptor 6 [ 1387.950429][ T5871] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1387.988886][ T5871] usb 4-1: USB disconnect, device number 30 [ 1388.104429][T14331] udevd[14331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1399.168506][ T5871] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1399.446973][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.459511][ T5871] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1399.470207][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.527762][ T5871] usb 3-1: config 0 descriptor?? [ 1399.855523][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 1399.893718][ T5871] usbhid: probe of 3-1:0.0 failed with error -71 [ 1399.924594][ T5871] usb 3-1: USB disconnect, device number 41 [ 1400.468327][ T5871] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1402.027719][ T5871] usb 3-1: device descriptor read/all, error -71 [ 1407.346230][ T5775] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1407.560370][ T5775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1407.616477][ T5775] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1407.650880][ T5775] usb 3-1: can't read configurations, error -61 [ 1407.838263][ T5775] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1408.181922][ T5775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1408.207036][ T5775] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1408.224992][ T5775] usb 3-1: can't read configurations, error -61 [ 1408.532324][ T5775] usb usb3-port1: attempt power cycle [ 1409.873705][T14437] loop1: detected capacity change from 0 to 16 [ 1409.918784][T14437] erofs: (device loop1): mounted with root inode @ nid 36. [ 1416.068383][ T970] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1416.270310][ T970] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1416.282849][ T970] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1416.308179][ T970] usb 4-1: can't read configurations, error -61 [ 1416.468301][ T970] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1416.700798][ T970] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1416.730201][ T970] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1416.737833][ T970] usb 4-1: can't read configurations, error -61 [ 1416.764664][ T970] usb usb4-port1: attempt power cycle [ 1417.198234][ T970] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1417.231411][ T970] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1417.263242][ T970] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1417.284838][ T970] usb 4-1: can't read configurations, error -61 [ 1417.460623][ T970] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1417.523110][ T970] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1417.539652][ T970] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1417.572125][ T970] usb 4-1: can't read configurations, error -61 [ 1417.592709][ T970] usb usb4-port1: unable to enumerate USB device [ 1419.008750][ T970] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1419.220819][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.248511][ T970] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1419.288419][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.319013][ T970] usb 2-1: config 0 descriptor?? [ 1419.465158][T14484] CIFS: Attempting to mount //127.0.0.1/share [ 1419.777041][ T970] usbhid 2-1:0.0: can't add hid device: -71 [ 1420.252994][T14484] CIFS: VFS: error -4 create cifsd thread [ 1420.268283][ T970] usbhid: probe of 2-1:0.0 failed with error -71 [ 1420.278409][ T970] usb 2-1: USB disconnect, device number 29 [ 1421.561054][T14484] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1423.358252][ T970] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1423.412170][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.418808][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.540233][ T970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1423.561614][ T970] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1423.587235][ T970] usb 2-1: can't read configurations, error -61 [ 1423.778346][ T970] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1425.721538][T14514] tmpfs: Bad value for 'mpol' [ 1428.660131][T14531] CIFS: Attempting to mount //127.0.0.1/share [ 1429.517147][T14531] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1431.048295][ T5890] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1431.148239][ T970] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1431.335977][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.388158][ T5890] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1431.397269][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.407643][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1431.458180][ T970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.487074][ T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1431.497602][ T5890] usb 4-1: config 0 descriptor?? [ 1431.519484][ T970] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1431.537026][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.578215][ T970] usb 5-1: Product: syz [ 1431.582457][ T970] usb 5-1: Manufacturer: syz [ 1431.618463][ T970] usb 5-1: SerialNumber: syz [ 1431.819289][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 1431.825432][ T5890] usbhid: probe of 4-1:0.0 failed with error -71 [ 1431.903728][ T970] usb 5-1: selecting invalid altsetting 1 [ 1431.926541][ T5890] usb 4-1: USB disconnect, device number 35 [ 1431.936793][ T970] usb 5-1: unit 3 not found! [ 1431.958214][ T970] usb 5-1: cannot request logical cluster ID: 0 (err: -71) [ 1431.983491][ T970] usb 5-1: invalid MIXER UNIT descriptor 6 [ 1432.046834][ T970] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 1432.076551][ T970] usb 5-1: USB disconnect, device number 68 [ 1432.162227][T14536] udevd[14536]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1436.238244][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1439.074596][T14575] tmpfs: Bad value for 'mpol' [ 1441.207925][T14589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.518736][T14585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.730018][T14585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.261349][ T5899] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1443.523784][T14603] CIFS: Attempting to mount //127.0.0.1/share [ 1444.389149][T14603] CIFS: VFS: error -4 create cifsd thread [ 1444.498860][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.520754][ T5899] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1444.540502][T14603] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1444.541469][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.572366][ T5899] usb 4-1: config 0 descriptor?? [ 1446.379256][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 1446.398258][ T5899] usbhid: probe of 4-1:0.0 failed with error -71 [ 1446.409475][ T5899] usb 4-1: USB disconnect, device number 36 [ 1450.628718][T14632] FAULT_INJECTION: forcing a failure. [ 1450.628718][T14632] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.736988][T14632] CPU: 0 PID: 14632 Comm: syz.4.2166 Not tainted syzkaller #0 [ 1450.744519][T14632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1450.754597][T14632] Call Trace: [ 1450.757891][T14632] [ 1450.760834][T14632] dump_stack_lvl+0x18c/0x250 [ 1450.765541][T14632] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1450.771211][T14632] ? show_regs_print_info+0x20/0x20 [ 1450.776440][T14632] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1450.782115][T14632] should_fail_ex+0x394/0x4c0 [ 1450.786821][T14632] should_failslab+0x9/0x20 [ 1450.791351][T14632] slab_pre_alloc_hook+0x59/0x300 [ 1450.796398][T14632] kmem_cache_alloc+0x5a/0x2d0 [ 1450.801175][T14632] ? mempool_init_node+0x1e9/0x480 [ 1450.806397][T14632] ? mempool_free+0x320/0x320 [ 1450.811096][T14632] mempool_init_node+0x1e9/0x480 [ 1450.816157][T14632] ? mempool_alloc_slab+0x60/0x60 [ 1450.821201][T14632] ? mempool_free+0x320/0x320 [ 1450.825902][T14632] mempool_init+0x3a/0x50 [ 1450.830256][T14632] bioset_init+0x286/0x6d0 [ 1450.834692][T14632] ? mempool_init+0x3a/0x50 [ 1450.839217][T14632] dm_io_client_create+0xb6/0xf0 [ 1450.844185][T14632] dm_bufio_client_create+0x6b3/0x1400 [ 1450.849679][T14632] ? dm_bufio_get_client+0x40/0x40 [ 1450.854811][T14632] ? calculate_device_limits+0x954/0xf10 [ 1450.860476][T14632] dm_integrity_ctr+0x38ea/0x4bb0 [ 1450.865554][T14632] ? sb_check+0x310/0x310 [ 1450.869913][T14632] ? dm_split_args+0x92/0x5b0 [ 1450.874604][T14632] ? rcu_is_watching+0x15/0xb0 [ 1450.879393][T14632] ? dm_split_args+0x505/0x5b0 [ 1450.884184][T14632] dm_table_add_target+0x575/0xbc0 [ 1450.889333][T14632] table_load+0x2eb/0x7e0 [ 1450.893780][T14632] ? dev_wait+0x2f0/0x2f0 [ 1450.898125][T14632] ? __might_fault+0xaa/0x120 [ 1450.902816][T14632] ? __might_fault+0xc6/0x120 [ 1450.907507][T14632] ? __might_fault+0xaa/0x120 [ 1450.912207][T14632] ? dev_wait+0x2f0/0x2f0 [ 1450.916554][T14632] dm_ctl_ioctl+0x975/0xd00 [ 1450.921090][T14632] ? dev_wait+0x2f0/0x2f0 [ 1450.925443][T14632] ? dm_poll+0x120/0x120 [ 1450.929748][T14632] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1450.934715][T14632] ? security_file_ioctl+0x80/0xa0 [ 1450.939844][T14632] ? dm_poll+0x120/0x120 [ 1450.944140][T14632] __se_sys_ioctl+0xfd/0x170 [ 1450.948762][T14632] do_syscall_64+0x55/0xb0 [ 1450.953199][T14632] ? clear_bhb_loop+0x40/0x90 [ 1450.957895][T14632] ? clear_bhb_loop+0x40/0x90 [ 1450.962597][T14632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1450.968520][T14632] RIP: 0033:0x7f5fa499fb19 [ 1450.972952][T14632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.992582][T14632] RSP: 002b:00007f5fa5841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.001017][T14632] RAX: ffffffffffffffda RBX: 00007f5fa4c25fa0 RCX: 00007f5fa499fb19 [ 1451.009007][T14632] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 1451.017032][T14632] RBP: 00007f5fa4a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1451.025026][T14632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.033106][T14632] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffe0aa51318 [ 1451.041155][T14632] [ 1452.150533][T14632] device-mapper: table: 248:1: integrity: Cannot initialize dm-bufio (-ENOMEM) [ 1452.168519][T14632] device-mapper: ioctl: error adding target to table [ 1453.389789][T14647] tmpfs: Bad value for 'mpol' [ 1453.469028][T14649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.578122][T14651] FAULT_INJECTION: forcing a failure. [ 1453.578122][T14651] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.578909][T14649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.600979][T14651] CPU: 1 PID: 14651 Comm: syz.4.2181 Not tainted syzkaller #0 [ 1453.608452][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1453.618619][T14651] Call Trace: [ 1453.621919][T14651] [ 1453.624865][T14651] dump_stack_lvl+0x18c/0x250 [ 1453.629579][T14651] ? show_regs_print_info+0x20/0x20 [ 1453.634807][T14651] ? load_image+0x420/0x420 [ 1453.639347][T14651] ? __lock_acquire+0x7eb0/0x7eb0 [ 1453.644423][T14651] should_fail_ex+0x394/0x4c0 [ 1453.649148][T14651] should_failslab+0x9/0x20 [ 1453.653674][T14651] slab_pre_alloc_hook+0x59/0x300 [ 1453.658741][T14651] kmem_cache_alloc+0x5a/0x2d0 [ 1453.663555][T14651] ? mempool_init_node+0x1e9/0x480 [ 1453.668702][T14651] ? mempool_free+0x320/0x320 [ 1453.673431][T14651] mempool_init_node+0x1e9/0x480 [ 1453.673741][T14649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.678396][T14651] ? mempool_alloc_slab+0x60/0x60 [ 1453.678428][T14651] ? mempool_free+0x320/0x320 [ 1453.697887][T14651] mempool_init+0x3a/0x50 [ 1453.702253][T14651] bioset_init+0x286/0x6d0 [ 1453.706740][T14651] ? mempool_init+0x3a/0x50 [ 1453.711282][T14651] dm_io_client_create+0xb6/0xf0 [ 1453.716333][T14651] dm_bufio_client_create+0x6b3/0x1400 [ 1453.721805][T14651] ? dm_bufio_get_client+0x40/0x40 [ 1453.726918][T14651] ? calculate_device_limits+0x954/0xf10 [ 1453.732560][T14651] dm_integrity_ctr+0x38ea/0x4bb0 [ 1453.737607][T14651] ? sb_check+0x310/0x310 [ 1453.741980][T14651] ? dm_split_args+0x92/0x5b0 [ 1453.746656][T14651] ? rcu_is_watching+0x15/0xb0 [ 1453.751600][T14651] ? dm_split_args+0x505/0x5b0 [ 1453.756368][T14651] dm_table_add_target+0x575/0xbc0 [ 1453.761492][T14651] table_load+0x2eb/0x7e0 [ 1453.765830][T14651] ? dev_wait+0x2f0/0x2f0 [ 1453.770180][T14651] ? __might_fault+0xaa/0x120 [ 1453.774863][T14651] ? __might_fault+0xc6/0x120 [ 1453.779535][T14651] ? __might_fault+0xaa/0x120 [ 1453.784211][T14651] ? dev_wait+0x2f0/0x2f0 [ 1453.788550][T14651] dm_ctl_ioctl+0x975/0xd00 [ 1453.793063][T14651] ? dev_wait+0x2f0/0x2f0 [ 1453.797396][T14651] ? dm_poll+0x120/0x120 [ 1453.801664][T14651] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1453.806603][T14651] ? security_file_ioctl+0x80/0xa0 [ 1453.811729][T14651] ? dm_poll+0x120/0x120 [ 1453.815974][T14651] __se_sys_ioctl+0xfd/0x170 [ 1453.820569][T14651] do_syscall_64+0x55/0xb0 [ 1453.824984][T14651] ? clear_bhb_loop+0x40/0x90 [ 1453.829663][T14651] ? clear_bhb_loop+0x40/0x90 [ 1453.834344][T14651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.840239][T14651] RIP: 0033:0x7f5fa499fb19 [ 1453.844654][T14651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.864270][T14651] RSP: 002b:00007f5fa5841028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.872691][T14651] RAX: ffffffffffffffda RBX: 00007f5fa4c25fa0 RCX: 00007f5fa499fb19 [ 1453.880670][T14651] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 1453.888637][T14651] RBP: 00007f5fa4a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1453.896605][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.904571][T14651] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffe0aa51318 [ 1453.912555][T14651] [ 1453.973591][T14651] device-mapper: table: 248:1: integrity: Cannot initialize dm-bufio (-ENOMEM) [ 1454.020458][T14651] device-mapper: ioctl: error adding target to table [ 1455.718344][ T5899] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1455.842760][T14670] CIFS: Attempting to mount //127.0.0.1/share [ 1455.933590][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.974498][ T5899] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1456.046494][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.189765][ T5899] usb 5-1: config 0 descriptor?? [ 1456.566676][ T5899] usbhid 5-1:0.0: can't add hid device: -71 [ 1456.636423][ T5899] usbhid: probe of 5-1:0.0 failed with error -71 [ 1456.749632][ T5899] usb 5-1: USB disconnect, device number 69 [ 1456.920629][T14670] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1457.584026][T14680] tmpfs: Bad value for 'mpol' [ 1458.222666][T14681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2179'. [ 1472.077558][T14739] tmpfs: Bad value for 'mpol' [ 1472.895390][T14741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'. [ 1475.859050][T14751] tmpfs: Bad value for 'mpol' [ 1476.538592][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2198'. [ 1480.280346][T14778] loop3: detected capacity change from 0 to 16 [ 1480.305975][T14778] erofs: (device loop3): mounted with root inode @ nid 36. [ 1482.321749][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1482.482118][T14800] CIFS: Attempting to mount //127.0.0.1/share [ 1482.564864][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.589565][ T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1482.598965][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.632317][ T8] usb 2-1: config 0 descriptor?? [ 1482.961779][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 1482.967863][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 1483.170282][ T8] usb 2-1: USB disconnect, device number 33 [ 1483.193400][T14800] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1483.352372][T14806] tmpfs: Bad value for 'mpol' [ 1484.855733][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.862563][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.903881][T14812] tmpfs: Bad value for 'mpol' [ 1490.178225][ T8] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1490.479228][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.649767][ T8] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1490.715284][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.741962][ T8] usb 5-1: config 0 descriptor?? [ 1490.936302][T14848] loop2: detected capacity change from 0 to 16 [ 1490.965478][T14848] erofs: (device loop2): mounted with root inode @ nid 36. [ 1491.028404][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 1491.037432][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 1491.201482][ T8] usb 5-1: USB disconnect, device number 70 [ 1491.746008][T14853] CIFS: Attempting to mount //127.0.0.1/share [ 1491.858189][ T8] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1494.761764][ T8] usb 5-1: device not accepting address 71, error -71 [ 1494.769244][T14853] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1496.299104][T14876] CIFS: Attempting to mount //127.0.0.1/share [ 1497.061793][T14876] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1497.188941][T14882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1497.323922][T14882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1497.411998][T14882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1500.405302][T14901] tmpfs: Bad value for 'mpol' [ 1503.032957][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2227'. [ 1505.746117][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1505.824335][T14921] CIFS: Attempting to mount //127.0.0.1/share [ 1506.067701][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1506.121132][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.179657][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1506.245284][ T8] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1506.288633][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.324365][ T8] usb 4-1: Product: syz [ 1506.344995][ T8] usb 4-1: Manufacturer: syz [ 1506.363419][ T8] usb 4-1: SerialNumber: syz [ 1506.600203][T14921] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1506.672462][ T8] usb 4-1: selecting invalid altsetting 1 [ 1506.708714][ T8] usb 4-1: unit 3 not found! [ 1506.728265][ T8] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 1506.735547][ T8] usb 4-1: invalid MIXER UNIT descriptor 6 [ 1506.853274][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1506.871297][T14929] CIFS: Attempting to mount //127.0.0.1/share [ 1506.918645][ T8] usb 4-1: USB disconnect, device number 37 [ 1506.978800][ T970] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1507.070711][T14917] udevd[14917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1507.241596][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.308220][ T970] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1507.328642][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.382410][ T970] usb 5-1: config 0 descriptor?? [ 1507.618409][T14929] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1507.740964][ T970] usbhid 5-1:0.0: can't add hid device: -71 [ 1507.759220][ T970] usbhid: probe of 5-1:0.0 failed with error -71 [ 1507.831905][ T970] usb 5-1: USB disconnect, device number 73 [ 1508.145825][T14938] CIFS: Attempting to mount //127.0.0.1/share [ 1508.180017][T14940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.319122][ T970] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1508.329373][T14940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.363536][T14940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.560245][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.594097][ T970] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1508.617259][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.657652][ T970] usb 5-1: config 0 descriptor?? [ 1508.956168][T14938] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1510.789597][ T970] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 1510.841416][ T970] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input137 [ 1511.023140][ T970] usb 5-1: USB disconnect, device number 74 [ 1511.029220][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1514.298197][ T5871] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1514.573067][ T5871] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1514.592936][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.654141][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1514.707123][ T5871] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1514.733853][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.761244][ T5871] usb 5-1: Product: syz [ 1514.775253][ T5871] usb 5-1: Manufacturer: syz [ 1514.782340][ T5871] usb 5-1: SerialNumber: syz [ 1515.050964][ T5871] usb 5-1: selecting invalid altsetting 1 [ 1515.072388][ T5871] usb 5-1: unit 3 not found! [ 1515.098681][ T5871] usb 5-1: cannot request logical cluster ID: 0 (err: -71) [ 1515.118129][ T5871] usb 5-1: invalid MIXER UNIT descriptor 6 [ 1515.162800][ T5871] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 1515.218465][ T5871] usb 5-1: USB disconnect, device number 75 [ 1515.255724][T14917] udevd[14917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1515.337165][T14980] tmpfs: Bad value for 'mpol' [ 1516.092795][T14983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2252'. [ 1516.988513][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1517.008557][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1517.028209][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1517.040288][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1517.050469][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1517.057891][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1517.306587][T14986] rxe_eth0 speed is unknown, defaulting to 1000 [ 1518.918342][ T970] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1519.088406][ T5797] Bluetooth: hci0: command tx timeout [ 1519.140351][T14986] chnl_net:caif_netlink_parms(): no params data found [ 1519.204299][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1519.234801][T14986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.250624][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.258402][T14986] bridge_slave_0: entered allmulticast mode [ 1519.258810][ T970] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1519.265769][T14986] bridge_slave_0: entered promiscuous mode [ 1519.283930][T14986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.298447][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.305748][T14986] bridge_slave_1: entered allmulticast mode [ 1519.313141][T14986] bridge_slave_1: entered promiscuous mode [ 1519.348152][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.383700][T14986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.406240][ T970] usb 3-1: config 0 descriptor?? [ 1519.445487][T14986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.168315][ T5797] Bluetooth: hci0: command tx timeout [ 1521.317558][T14986] team0: Port device team_slave_0 added [ 1521.401630][T14986] team0: Port device team_slave_1 added [ 1521.538382][ T970] usbhid 3-1:0.0: can't add hid device: -71 [ 1521.551462][T14986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.558710][ T970] usbhid: probe of 3-1:0.0 failed with error -71 [ 1521.591949][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.619201][ T970] usb 3-1: USB disconnect, device number 47 [ 1521.691288][T14986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.724899][T14986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.758137][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.838284][T14986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.023520][T14986] hsr_slave_0: entered promiscuous mode [ 1522.059575][T14986] hsr_slave_1: entered promiscuous mode [ 1522.078274][T14986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1522.085897][T14986] Cannot create hsr debugfs directory [ 1522.118346][ T970] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1522.319984][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1522.368187][ T970] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1522.377286][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.440508][ T970] usb 3-1: config 0 descriptor?? [ 1522.741342][T14986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.072959][T14986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.248477][ T5797] Bluetooth: hci0: command tx timeout [ 1523.288299][T14986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.369509][ T970] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1523.414708][ T970] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input138 [ 1523.593376][T11849] usb 3-1: USB disconnect, device number 48 [ 1523.593494][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1523.702465][T14986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.034178][T14986] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1524.106984][T14986] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1524.137685][T14986] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1524.269540][T14986] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1524.713242][T14986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.071510][T14986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.169218][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.176401][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.329287][ T5797] Bluetooth: hci0: command tx timeout [ 1525.460171][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.467651][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.719950][T14986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1525.739244][T14986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.026181][T14986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.156190][T14986] veth0_vlan: entered promiscuous mode [ 1527.275545][T14986] veth1_vlan: entered promiscuous mode [ 1527.472358][T14986] veth0_macvtap: entered promiscuous mode [ 1527.517218][T14986] veth1_macvtap: entered promiscuous mode [ 1527.614120][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.679787][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1527.743344][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1527.901172][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.002397][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.112661][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.130269][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.141453][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.165489][T14986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1528.261997][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1528.285201][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.337103][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1528.378973][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.428364][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1528.458349][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.469825][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1528.495120][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.523822][T14986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1528.574148][T14986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.608394][T14986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.678375][T14986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.720790][T14986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.082365][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.106442][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.176935][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.208309][ T970] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1529.217285][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.669817][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.688645][ T970] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1530.712880][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.750800][ T970] usb 3-1: config 0 descriptor?? [ 1530.979338][ T970] usbhid 3-1:0.0: can't add hid device: -71 [ 1530.985534][ T970] usbhid: probe of 3-1:0.0 failed with error -71 [ 1531.019884][ T970] usb 3-1: USB disconnect, device number 49 [ 1531.590759][ T970] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1531.811078][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.876146][ T970] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1531.962381][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.153868][ T970] usb 3-1: config 0 descriptor?? [ 1532.428252][ T970] usb 3-1: can't set config #0, error -71 [ 1532.469830][ T970] usb 3-1: USB disconnect, device number 50 [ 1536.039258][T15107] tmpfs: Bad value for 'mpol' [ 1536.818126][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2276'. [ 1538.874856][T15108] CIFS: Attempting to mount //127.0.0.1/share [ 1540.041480][T15108] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1542.598442][ T27] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1542.961500][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.972805][ T27] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1542.985030][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.012223][ T27] usb 3-1: config 0 descriptor?? [ 1543.293315][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1543.328286][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1543.368371][ T27] usb 3-1: USB disconnect, device number 51 [ 1543.641184][T15139] CIFS: Attempting to mount //127.0.0.1/share [ 1543.898587][ T27] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1544.113645][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.163362][ T27] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1545.148456][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.159810][ T27] usb 3-1: config 0 descriptor?? [ 1545.196162][T15139] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1545.330023][ T27] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1545.359114][ T27] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input139 [ 1545.448645][ T27] usb 3-1: USB disconnect, device number 52 [ 1545.454650][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1545.559235][T15153] tmpfs: Bad value for 'mpol' [ 1546.304610][T15159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2288'. [ 1546.910277][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.918197][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.294134][T15170] CIFS: Attempting to mount //127.0.0.1/share [ 1549.578254][T15170] CIFS: VFS: error -4 create cifsd thread [ 1549.738485][T15170] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1556.913422][T15199] tmpfs: Bad value for 'mpol' [ 1558.369526][T15203] CIFS: Attempting to mount //127.0.0.1/share [ 1559.141226][T15203] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1560.367984][T15225] tmpfs: Bad value for 'mpol' [ 1560.462836][T15226] CIFS: Attempting to mount //127.0.0.1/share [ 1561.350643][T15226] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1561.587212][T15234] loop4: detected capacity change from 0 to 16 [ 1561.621260][T15234] erofs: (device loop4): mounted with root inode @ nid 36. [ 1562.639744][T15243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2310'. [ 1564.747133][T15257] tmpfs: Bad value for 'mpol' [ 1572.235875][T15280] loop1: detected capacity change from 0 to 16 [ 1572.268681][T15280] erofs: (device loop1): mounted with root inode @ nid 36. [ 1573.860985][T15292] tmpfs: Bad value for 'mpol' [ 1577.266090][T15317] CIFS: Attempting to mount //127.0.0.1/share [ 1578.750451][T15317] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1583.347369][T15338] tmpfs: Bad value for 'mpol' [ 1584.077570][T15339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2328'. [ 1585.752064][T15346] tmpfs: Bad value for 'mpol' [ 1591.430393][T15380] tmpfs: Bad value for 'mpol' [ 1592.088288][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2342'. [ 1592.898551][T15136] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1593.079810][T15387] tmpfs: Bad value for 'mpol' [ 1593.113044][T15136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.145541][T15136] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1593.168215][T15136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.206662][T15136] usb 3-1: config 0 descriptor?? [ 1593.455987][T15136] usbhid 3-1:0.0: can't add hid device: -71 [ 1593.491724][T15136] usbhid: probe of 3-1:0.0 failed with error -71 [ 1593.510641][T15136] usb 3-1: USB disconnect, device number 53 [ 1593.718499][T15389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2339'. [ 1593.868010][T15393] CIFS: Attempting to mount //127.0.0.1/share [ 1594.758346][T15136] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1594.862539][T15393] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1603.033222][T15447] tmpfs: Bad value for 'mpol' [ 1605.157623][T15447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2358'. [ 1608.167197][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.196307][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.868640][T15482] tmpfs: Bad value for 'mpol' [ 1615.611453][T15506] tmpfs: Bad value for 'mpol' [ 1622.209463][T15530] CIFS: Attempting to mount //127.0.0.1/share [ 1623.307054][T15530] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1631.267969][T15572] tmpfs: Bad value for 'mpol' [ 1631.976442][T15573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2386'. [ 1633.881163][T15583] CIFS: Attempting to mount //127.0.0.1/share [ 1634.124982][T15583] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1640.648459][T15620] tmpfs: Bad value for 'mpol' [ 1641.814320][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 1643.522669][T15630] CIFS: Attempting to mount //127.0.0.1/share [ 1643.564064][T15627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1644.261898][T15630] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1661.708547][T15711] CIFS: Attempting to mount //127.0.0.1/share [ 1661.964149][T15711] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1662.187798][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1662.199795][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1662.209426][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1662.224374][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1662.233550][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1662.241558][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1662.411217][T15725] rxe_eth0 speed is unknown, defaulting to 1000 [ 1664.288376][ T5797] Bluetooth: hci1: command tx timeout [ 1665.443357][T15725] chnl_net:caif_netlink_parms(): no params data found [ 1667.002705][ T5797] Bluetooth: hci1: command tx timeout [ 1667.159951][T15725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.167091][T15725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.224275][T15725] bridge_slave_0: entered allmulticast mode [ 1667.267044][T15725] bridge_slave_0: entered promiscuous mode [ 1667.290960][T15725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.328466][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.335756][T15725] bridge_slave_1: entered allmulticast mode [ 1667.359719][T15725] bridge_slave_1: entered promiscuous mode [ 1667.439181][T15725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.532579][T15725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.626931][T15725] team0: Port device team_slave_0 added [ 1667.659501][T15725] team0: Port device team_slave_1 added [ 1667.788256][T15725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.803778][T15725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.855246][T15725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.914630][T15725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.929326][T15725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1668.045984][T15725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.249636][T15725] hsr_slave_0: entered promiscuous mode [ 1668.268681][T15725] hsr_slave_1: entered promiscuous mode [ 1668.285061][T15725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1668.293476][T15725] Cannot create hsr debugfs directory [ 1669.700240][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.706578][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.713359][ T5797] Bluetooth: hci1: command tx timeout [ 1671.327226][T15725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.388759][T15771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.455887][T15771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.483938][T15725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.495008][T15771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.613850][T15725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.730635][ T5797] Bluetooth: hci1: command tx timeout [ 1671.778759][T15725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.165985][T15725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1672.199735][T15725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1672.248626][T15725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1672.259848][T15725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1672.422041][T15725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.448451][ T5871] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1672.482009][T15725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.570250][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.577430][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.634182][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.640529][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.641401][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.723276][ T5871] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1672.732761][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.743597][ T5871] usb 3-1: config 0 descriptor?? [ 1672.978611][ T5871] usbhid 3-1:0.0: can't add hid device: -71 [ 1673.068613][ T5871] usbhid: probe of 3-1:0.0 failed with error -71 [ 1673.085222][ T5871] usb 3-1: USB disconnect, device number 55 [ 1673.668209][ T5871] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1673.763196][T15725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.870031][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.948305][ T5871] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1673.957458][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.975161][ T5871] usb 3-1: config 0 descriptor?? [ 1674.237958][T15725] veth0_vlan: entered promiscuous mode [ 1674.273260][T15725] veth1_vlan: entered promiscuous mode [ 1674.424246][T15725] veth0_macvtap: entered promiscuous mode [ 1674.511823][T15725] veth1_macvtap: entered promiscuous mode [ 1674.670279][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.070817][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.108207][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.122048][ T5871] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1676.146668][ T5871] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input140 [ 1676.154004][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.205526][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.257325][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.281902][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.315571][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.183647][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1678.219246][ T5871] usb 3-1: USB disconnect, device number 56 [ 1678.225238][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1678.271033][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.340271][T15725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1678.366078][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.387321][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.407849][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.448598][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.485410][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.528316][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.548202][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.559050][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.588219][T15725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1678.609259][T15725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1678.632769][T15725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1678.752334][T15725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.776773][T15725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.798255][T15725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.807019][T15725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.881845][T15802] CIFS: Attempting to mount //127.0.0.1/share [ 1679.029934][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.042355][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.120448][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.140737][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.265539][T15802] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1680.475198][T15812] CIFS: Attempting to mount //127.0.0.1/share [ 1681.286841][T15812] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1682.125917][T15824] tmpfs: Bad value for 'mpol' [ 1682.733652][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1682.744718][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1682.754825][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1682.763687][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1682.774710][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1682.783757][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1682.897201][T15826] rxe_eth0 speed is unknown, defaulting to 1000 [ 1685.553318][ T5797] Bluetooth: hci2: command tx timeout [ 1685.927106][T15826] chnl_net:caif_netlink_parms(): no params data found [ 1688.098305][ T5797] Bluetooth: hci2: command tx timeout [ 1688.487829][T15826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.518434][T15826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.525734][T15826] bridge_slave_0: entered allmulticast mode [ 1688.591597][T15826] bridge_slave_0: entered promiscuous mode [ 1688.668632][T15826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.746671][T15826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.817447][T15826] bridge_slave_1: entered allmulticast mode [ 1688.936696][T15826] bridge_slave_1: entered promiscuous mode [ 1689.772371][T15826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.992883][T15826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.128706][ T5797] Bluetooth: hci2: command tx timeout [ 1691.997039][T15865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.075203][T15866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.177794][T15865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.209991][ T5797] Bluetooth: hci2: command tx timeout [ 1692.325149][T15826] team0: Port device team_slave_0 added [ 1693.515220][T15826] team0: Port device team_slave_1 added [ 1693.655800][T15826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.678194][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.722039][T15826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.750476][T15826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.757470][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.868357][T15826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.974967][T15826] hsr_slave_0: entered promiscuous mode [ 1694.009116][T15826] hsr_slave_1: entered promiscuous mode [ 1695.354814][T15826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1695.368168][T15826] Cannot create hsr debugfs directory [ 1696.962184][T15826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.225032][T15826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.455661][T15826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.654199][T15826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.018329][T15826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1698.063470][T15826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1698.115090][T15826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1698.131729][T15826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1698.373351][T15826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.832149][T15826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.977259][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.984508][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.319287][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.326424][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.097245][T15826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1702.239479][T15907] CIFS: Attempting to mount //127.0.0.1/share [ 1702.480729][T15826] veth0_vlan: entered promiscuous mode [ 1702.806069][T15826] veth1_vlan: entered promiscuous mode [ 1703.168986][T15826] veth0_macvtap: entered promiscuous mode [ 1703.189677][T15826] veth1_macvtap: entered promiscuous mode [ 1703.257145][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.268376][T15907] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1703.298821][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.328594][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.378359][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.428828][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.451248][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.478148][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.498207][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.516909][T15913] loop4: detected capacity change from 0 to 16 [ 1703.517009][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.537082][T15913] erofs: (device loop4): mounted with root inode @ nid 36. [ 1703.544503][T15914] tmpfs: Bad value for 'mpol' [ 1703.574627][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.598143][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1703.638195][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1703.699811][T15826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.985648][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.305727][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.418222][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.450940][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.478197][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.508736][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.528437][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.557127][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.569234][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.580905][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.598210][T15826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.609694][T15826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.646748][T15826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1705.715045][T15826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.749075][T15826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.758430][T15826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.774647][T15826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.950263][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.978679][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.018300][T12902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.026643][T12902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.035443][T15923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2457'. [ 1707.151889][T15925] CIFS: Attempting to mount //127.0.0.1/share [ 1707.445337][T15925] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1709.145524][T15942] loop3: detected capacity change from 0 to 16 [ 1709.183650][T15942] erofs: (device loop3): mounted with root inode @ nid 36. [ 1710.071081][T15946] tmpfs: Bad value for 'mpol' [ 1712.516278][T15958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2471'. [ 1720.974573][T15983] tmpfs: Bad value for 'mpol' [ 1723.455915][T16000] loop2: detected capacity change from 0 to 16 [ 1723.504588][T16000] erofs: (device loop2): mounted with root inode @ nid 36. [ 1724.354391][T16007] tmpfs: Bad value for 'mpol' [ 1730.554358][T16044] tmpfs: Bad value for 'mpol' [ 1730.613747][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.620332][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.342909][T16051] CIFS: Attempting to mount //127.0.0.1/share [ 1732.207314][T16051] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1733.994935][T16066] tmpfs: Bad value for 'mpol' [ 1737.940509][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2492'. [ 1742.215441][T16092] CIFS: Attempting to mount //127.0.0.1/share [ 1742.977502][T16092] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1745.125812][T16114] tmpfs: Bad value for 'mpol' [ 1751.050766][T16142] tmpfs: Bad value for 'mpol' [ 1758.323250][T16172] CIFS: Attempting to mount //127.0.0.1/share [ 1759.086896][T16172] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1759.617224][T16190] loop3: detected capacity change from 0 to 16 [ 1759.684074][T16190] erofs: (device loop3): mounted with root inode @ nid 36. [ 1762.089087][T16204] tmpfs: Bad value for 'mpol' [ 1766.248456][T16215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2525'. [ 1768.725471][T16226] CIFS: Attempting to mount //127.0.0.1/share [ 1769.719357][T16226] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1769.968606][T16231] tmpfs: Bad value for 'mpol' [ 1781.741846][T16274] tmpfs: Bad value for 'mpol' [ 1783.545293][T16274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2540'. [ 1789.332166][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 1791.628514][T16336] tmpfs: Bad value for 'mpol' [ 1792.054349][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.318180][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.318623][T16336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2555'. [ 1794.719684][T16350] loop4: detected capacity change from 0 to 16 [ 1794.770158][T16350] erofs: (device loop4): mounted with root inode @ nid 36. [ 1800.396045][T16378] tmpfs: Bad value for 'mpol' [ 1801.164330][T16381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2565'. [ 1803.423601][T16389] tmpfs: Bad value for 'mpol' [ 1805.587141][T16389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2568'. [ 1810.538214][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 1821.081499][T16455] loop2: detected capacity change from 0 to 16 [ 1821.186414][T16455] erofs: (device loop2): mounted with root inode @ nid 36. [ 1825.705315][T16477] tmpfs: Bad value for 'mpol' [ 1826.487810][T16480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2586'. [ 1828.541409][T16486] tmpfs: Bad value for 'mpol' [ 1829.922592][T16490] loop4: detected capacity change from 0 to 16 [ 1829.964092][T16490] erofs: (device loop4): mounted with root inode @ nid 36. [ 1836.637383][T16517] CIFS: Attempting to mount //127.0.0.1/share [ 1836.931092][T16517] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1836.980477][T16524] loop2: detected capacity change from 0 to 16 [ 1836.994668][T16524] erofs: (device loop2): mounted with root inode @ nid 36. [ 1840.228378][T16537] tmpfs: Bad value for 'mpol' [ 1840.409122][T16540] CIFS: Attempting to mount //127.0.0.1/share [ 1841.282293][T16540] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1844.663281][T16556] tmpfs: Bad value for 'mpol' [ 1845.965742][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2600'. [ 1852.027576][T16587] CIFS: Attempting to mount //127.0.0.1/share [ 1852.253122][T16589] loop4: detected capacity change from 0 to 16 [ 1852.312778][T16589] erofs: (device loop4): mounted with root inode @ nid 36. [ 1852.811107][T16587] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1853.595532][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.046573][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.875814][T16613] CIFS: Attempting to mount //127.0.0.1/share [ 1858.777915][T16613] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1860.443243][T16623] tmpfs: Bad value for 'mpol' [ 1862.536548][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2615'. [ 1863.744903][T16638] CIFS: Attempting to mount //127.0.0.1/share [ 1864.500280][T16638] CIFS: VFS: error -4 create cifsd thread [ 1864.578674][T16638] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1869.603631][T16664] loop4: detected capacity change from 0 to 16 [ 1869.630871][T16664] erofs: (device loop4): mounted with root inode @ nid 36. [ 1870.647639][T16670] tmpfs: Bad value for 'mpol' [ 1874.253959][T16687] 9pnet_fd: Insufficient options for proto=fd [ 1875.327443][T16688] CIFS: Attempting to mount //127.0.0.1/share [ 1876.778755][T16696] tmpfs: Bad value for 'mpol' [ 1877.006323][T16688] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1884.134736][T16728] loop4: detected capacity change from 0 to 16 [ 1884.177256][T16728] erofs: (device loop4): mounted with root inode @ nid 36. [ 1887.940614][T16743] tmpfs: Bad value for 'mpol' [ 1888.529368][T16749] CIFS: Attempting to mount //127.0.0.1/share [ 1889.237201][T16749] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1889.398534][T16754] CIFS: Attempting to mount //127.0.0.1/share [ 1890.436697][T16754] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1892.569186][T16758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2642'. [ 1892.803229][T16771] loop4: detected capacity change from 0 to 16 [ 1892.840235][T16771] erofs: (device loop4): mounted with root inode @ nid 36. [ 1900.858490][T16797] 9pnet_fd: Insufficient options for proto=fd [ 1901.333695][T16802] CIFS: Attempting to mount //127.0.0.1/share [ 1902.087896][T16802] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1902.529345][T16809] tmpfs: Bad value for 'mpol' [ 1904.045517][T15136] IPVS: starting estimator thread 0... [ 1904.127285][T16819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2662'. [ 1904.138271][T16818] IPVS: using max 20 ests per chain, 48000 per kthread [ 1906.936744][T16829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2659'. [ 1914.948366][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.954769][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.621721][T16869] tmpfs: Bad value for 'mpol' [ 1916.950477][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 1917.471162][T16877] CIFS: Attempting to mount //127.0.0.1/share [ 1918.322157][T16877] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1918.431645][T16886] tmpfs: Bad value for 'mpol' [ 1918.583348][T16889] loop4: detected capacity change from 0 to 16 [ 1918.606651][T16889] erofs: (device loop4): mounted with root inode @ nid 36. [ 1920.590691][T16886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1922.319620][ T5899] kernel write not supported for file /sequencer2 (pid: 5899 comm: kworker/1:6) [ 1924.520252][T16918] CIFS: Attempting to mount //127.0.0.1/share [ 1925.305781][T16918] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1926.309159][T16927] tmpfs: Bad value for 'mpol' [ 1928.246987][T16935] CIFS: Attempting to mount //127.0.0.1/share [ 1928.546827][T16935] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1928.597038][T16939] tmpfs: Bad value for 'mpol' [ 1929.802790][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2691'. [ 1933.249552][T16956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2689'. [ 1935.417244][T16968] tmpfs: Bad value for 'mpol' [ 1938.800237][T16977] loop3: detected capacity change from 0 to 16 [ 1938.835258][T16977] erofs: (device loop3): mounted with root inode @ nid 36. [ 1940.651148][T16985] CIFS: Attempting to mount //127.0.0.1/share [ 1941.590818][T16985] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1943.286326][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 1945.079188][ T788] kernel write not supported for file /sequencer2 (pid: 788 comm: kworker/1:2) [ 1950.372370][T17039] CIFS: Attempting to mount //127.0.0.1/share [ 1951.374089][T17039] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1951.513027][T17045] loop3: detected capacity change from 0 to 16 [ 1951.536333][T17045] erofs: (device loop3): mounted with root inode @ nid 36. [ 1957.782268][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 1960.868312][T17077] CIFS: Attempting to mount //127.0.0.1/share [ 1961.605249][T17077] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1963.429579][T17097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2725'. [ 1964.371081][T17100] loop1: detected capacity change from 0 to 16 [ 1964.408709][T17100] erofs: (device loop1): mounted with root inode @ nid 36. [ 1965.457780][T17109] CIFS: Attempting to mount //127.0.0.1/share [ 1965.869433][T17109] CIFS: VFS: error -4 create cifsd thread [ 1966.079165][T17109] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1973.568373][T17140] CIFS: Attempting to mount //127.0.0.1/share [ 1974.123894][T17140] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1974.596197][T17144] binder: BINDER_SET_CONTEXT_MGR already set [ 1974.620807][T17144] binder: 17143:17144 ioctl 4018620d 200000000540 returned -16 [ 1974.738465][T17149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1974.817690][T17146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1975.769639][T17151] loop1: detected capacity change from 0 to 16 [ 1975.859600][T17151] erofs: (device loop1): mounted with root inode @ nid 36. [ 1976.830991][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.837343][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.879477][T17162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2735'. [ 1985.700320][T17194] CIFS: Attempting to mount //127.0.0.1/share [ 1986.619968][T17194] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1986.969683][T17203] CIFS: Attempting to mount //127.0.0.1/share [ 1987.692622][T17203] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1987.710179][T17202] loop3: detected capacity change from 0 to 16 [ 1987.798962][T17202] erofs: (device loop3): mounted with root inode @ nid 36. [ 1989.481435][T17218] tmpfs: Bad value for 'mpol' [ 1996.751814][T17248] loop3: detected capacity change from 0 to 16 [ 1996.836544][T17248] erofs: (device loop3): mounted with root inode @ nid 36. [ 1998.498426][T17253] tmpfs: Bad value for 'mpol' [ 2003.051290][T17277] CIFS: Attempting to mount //127.0.0.1/share [ 2003.785538][T17277] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2008.575452][T17301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2765'. [ 2010.707577][T17308] CIFS: Attempting to mount //127.0.0.1/share [ 2011.423207][T17308] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2013.482355][T17320] CIFS: Attempting to mount //127.0.0.1/share [ 2015.502899][T17320] CIFS: VFS: cifs_mount failed w/return code = -112 [ 2021.930128][T17340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2022.033107][T17341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2023.478913][T17346] loop4: detected capacity change from 0 to 16 [ 2023.551406][T17346] erofs: (device loop4): mounted with root inode @ nid 36. [ 2024.904746][T17358] CIFS: Attempting to mount //127.0.0.1/share [ 2025.772116][T17358] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 2025.785695][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2025.795801][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2025.803726][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2025.812232][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2025.820826][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2025.828208][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2025.916186][T17359] ------------[ cut here ]------------ [ 2025.922190][T17359] WARNING: CPU: 1 PID: 17359 at fs/smb/client/smb2ops.c:97 smb2_add_credits+0x1365/0x2600 [ 2025.932376][T17359] Modules linked in: [ 2025.936304][T17359] CPU: 1 PID: 17359 Comm: cifsd Not tainted syzkaller #0 [ 2025.943439][T17359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2025.953630][T17359] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 2025.959541][T17359] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 95 0a 3c ff 49 8b 34 24 48 c7 c7 a0 3b 17 8b e8 b5 56 e7 07 e9 eb f9 ff ff e8 cb 01 e3 fe <0f> 0b e9 d9 ef ff ff e8 bf 01 e3 fe c6 05 f0 65 d3 0c 01 48 c7 c7 [ 2025.979386][T17359] RSP: 0018:ffffc900103ff560 EFLAGS: 00010293 [ 2025.985801][T17359] RAX: ffffffff82a4dcd5 RBX: ffff8880317482c0 RCX: ffff88802f4f0000 [ 2025.993873][T17359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2026.001952][T17359] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 2026.011896][T17359] R10: dffffc0000000000 R11: fffff5200207fe9c R12: 1ffff110062e9058 [ 2026.020043][T17359] R13: dffffc0000000000 R14: ffff888031748000 R15: 0000000000000000 [ 2026.028369][T17359] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 2026.038059][T17359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2026.044753][T17359] CR2: 00007fcc09c62b0c CR3: 000000003e1a1000 CR4: 00000000003506e0 [ 2026.052852][T17359] Call Trace: [ 2026.056157][T17359] [ 2026.059157][T17359] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2026.064879][T17359] cifs_compound_last_callback+0x164/0x2a0 [ 2026.070776][T17359] ? cifs_compound_callback+0x2c0/0x2c0 [ 2026.076373][T17359] ? do_raw_spin_unlock+0x121/0x230 [ 2026.081660][T17359] cifs_abort_connection+0x937/0x1050 [ 2026.087074][T17359] ? cifs_reconnect+0xb97/0x15d0 [ 2026.092090][T17359] ? cifs_tcp_ses_needs_reconnect+0x450/0x450 [ 2026.098271][T17359] ? do_raw_spin_unlock+0x121/0x230 [ 2026.103594][T17359] cifs_reconnect+0xb9f/0x15d0 [ 2026.108474][T17359] ? cifs_readv_from_socket+0x4c3/0x8d0 [ 2026.114121][T17359] ? cifs_mark_tcp_ses_conns_for_reconnect+0x800/0x800 [ 2026.121093][T17359] ? __rwlock_init+0x150/0x150 [ 2026.126112][T17359] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2026.131556][T17359] ? do_raw_spin_unlock+0x121/0x230 [ 2026.136806][T17359] cifs_readv_from_socket+0x782/0x8d0 [ 2026.142294][T17359] cifs_demultiplex_thread+0x53b/0x2ad0 [ 2026.147905][T17359] ? cifs_echo_request+0x340/0x340 [ 2026.153082][T17359] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2026.159138][T17359] ? verify_lock_unused+0x140/0x140 [ 2026.164364][T17359] ? lock_chain_count+0x20/0x20 [ 2026.169303][T17359] ? finish_task_switch+0x262/0x8f0 [ 2026.174553][T17359] ? lockdep_hardirqs_on+0x98/0x150 [ 2026.180227][T17359] ? finish_task_switch+0x262/0x8f0 [ 2026.185481][T17359] ? __lock_acquire+0x7eb0/0x7eb0 [ 2026.190754][T17359] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2026.196706][T17359] ? _raw_spin_unlock+0x40/0x40 [ 2026.201677][T17359] ? __kthread_parkme+0x71/0x1c0 [ 2026.206663][T17359] ? __kthread_parkme+0x15b/0x1c0 [ 2026.211846][T17359] kthread+0x2fa/0x390 [ 2026.215974][T17359] ? cifs_echo_request+0x340/0x340 [ 2026.221190][T17359] ? kthread_blkcg+0xd0/0xd0 [ 2026.226192][T17359] ret_from_fork+0x48/0x80 [ 2026.230742][T17359] ? kthread_blkcg+0xd0/0xd0 [ 2026.235389][T17359] ret_from_fork_asm+0x11/0x20 [ 2026.240254][T17359] [ 2026.243288][T17359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2026.250550][T17359] CPU: 1 PID: 17359 Comm: cifsd Not tainted syzkaller #0 [ 2026.257553][T17359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 2026.267589][T17359] Call Trace: [ 2026.270852][T17359] [ 2026.273771][T17359] dump_stack_lvl+0x18c/0x250 [ 2026.278441][T17359] ? show_regs_print_info+0x20/0x20 [ 2026.283623][T17359] ? load_image+0x420/0x420 [ 2026.288124][T17359] panic+0x2ca/0x720 [ 2026.292029][T17359] ? bpf_jit_dump+0xd0/0xd0 [ 2026.296520][T17359] ? ret_from_fork_asm+0x11/0x20 [ 2026.301501][T17359] __warn+0x2e0/0x470 [ 2026.305467][T17359] ? smb2_add_credits+0x1365/0x2600 [ 2026.310648][T17359] ? smb2_add_credits+0x1365/0x2600 [ 2026.315836][T17359] report_bug+0x2be/0x4f0 [ 2026.320176][T17359] ? smb2_add_credits+0x1365/0x2600 [ 2026.325354][T17359] ? smb2_add_credits+0x1365/0x2600 [ 2026.330551][T17359] ? smb2_add_credits+0x1367/0x2600 [ 2026.335785][T17359] handle_bug+0xcf/0x120 [ 2026.340015][T17359] exc_invalid_op+0x1a/0x50 [ 2026.344501][T17359] asm_exc_invalid_op+0x1a/0x20 [ 2026.349340][T17359] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 2026.355147][T17359] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 95 0a 3c ff 49 8b 34 24 48 c7 c7 a0 3b 17 8b e8 b5 56 e7 07 e9 eb f9 ff ff e8 cb 01 e3 fe <0f> 0b e9 d9 ef ff ff e8 bf 01 e3 fe c6 05 f0 65 d3 0c 01 48 c7 c7 [ 2026.374743][T17359] RSP: 0018:ffffc900103ff560 EFLAGS: 00010293 [ 2026.380808][T17359] RAX: ffffffff82a4dcd5 RBX: ffff8880317482c0 RCX: ffff88802f4f0000 [ 2026.388780][T17359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2026.396758][T17359] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 2026.404724][T17359] R10: dffffc0000000000 R11: fffff5200207fe9c R12: 1ffff110062e9058 [ 2026.412684][T17359] R13: dffffc0000000000 R14: ffff888031748000 R15: 0000000000000000 [ 2026.420659][T17359] ? smb2_add_credits+0x1365/0x2600 [ 2026.425872][T17359] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2026.431551][T17359] cifs_compound_last_callback+0x164/0x2a0 [ 2026.437367][T17359] ? cifs_compound_callback+0x2c0/0x2c0 [ 2026.442926][T17359] ? do_raw_spin_unlock+0x121/0x230 [ 2026.448131][T17359] cifs_abort_connection+0x937/0x1050 [ 2026.453518][T17359] ? cifs_reconnect+0xb97/0x15d0 [ 2026.458453][T17359] ? cifs_tcp_ses_needs_reconnect+0x450/0x450 [ 2026.464532][T17359] ? do_raw_spin_unlock+0x121/0x230 [ 2026.469719][T17359] cifs_reconnect+0xb9f/0x15d0 [ 2026.474479][T17359] ? cifs_readv_from_socket+0x4c3/0x8d0 [ 2026.480010][T17359] ? cifs_mark_tcp_ses_conns_for_reconnect+0x800/0x800 [ 2026.486846][T17359] ? __rwlock_init+0x150/0x150 [ 2026.491596][T17359] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2026.496869][T17359] ? do_raw_spin_unlock+0x121/0x230 [ 2026.502061][T17359] cifs_readv_from_socket+0x782/0x8d0 [ 2026.507449][T17359] cifs_demultiplex_thread+0x53b/0x2ad0 [ 2026.513016][T17359] ? cifs_echo_request+0x340/0x340 [ 2026.518116][T17359] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2026.524096][T17359] ? verify_lock_unused+0x140/0x140 [ 2026.529278][T17359] ? lock_chain_count+0x20/0x20 [ 2026.534118][T17359] ? finish_task_switch+0x262/0x8f0 [ 2026.539300][T17359] ? lockdep_hardirqs_on+0x98/0x150 [ 2026.544483][T17359] ? finish_task_switch+0x262/0x8f0 [ 2026.549680][T17359] ? __lock_acquire+0x7eb0/0x7eb0 [ 2026.554711][T17359] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2026.560607][T17359] ? _raw_spin_unlock+0x40/0x40 [ 2026.565447][T17359] ? __kthread_parkme+0x71/0x1c0 [ 2026.570374][T17359] ? __kthread_parkme+0x15b/0x1c0 [ 2026.575384][T17359] kthread+0x2fa/0x390 [ 2026.579444][T17359] ? cifs_echo_request+0x340/0x340 [ 2026.584539][T17359] ? kthread_blkcg+0xd0/0xd0 [ 2026.589115][T17359] ret_from_fork+0x48/0x80 [ 2026.593517][T17359] ? kthread_blkcg+0xd0/0xd0 [ 2026.598088][T17359] ret_from_fork_asm+0x11/0x20 [ 2026.602879][T17359] [ 2026.606154][T17359] Kernel Offset: disabled [ 2026.610535][T17359] Rebooting in 86400 seconds..