last executing test programs: 17m6.096812223s ago: executing program 32 (id=1570): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={r1, 0xfffffffc, 0x2000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) 10m47.619894552s ago: executing program 33 (id=4385): syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x58bc, 0x10000, 0x10001, 0x3da}, 0x0, 0x0, 0x0) 10m40.43514497s ago: executing program 34 (id=4419): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) setns(0xc9, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000) shutdown(r0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 10m23.559370133s ago: executing program 35 (id=4490): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 10m4.68861196s ago: executing program 36 (id=4551): unshare(0x40400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x1) 8m34.390590163s ago: executing program 37 (id=5194): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'io'}]}, 0x4) 8m33.017744758s ago: executing program 38 (id=5205): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_ublk_setup_io_uring(0x5ade, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0xa, 0xfffff800) recvmsg$unix(r0, 0x0, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e33, 0x1a001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x20004000) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x125d, 0x10000000010005) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f0000000300)) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x0) 8m26.833972529s ago: executing program 39 (id=5244): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x8180c8, &(0x7f0000000080)={[{@fat=@usefree}, {@nodots}, {@nodots}, {@dots}, {@fat=@uid}]}, 0x1, 0x252, &(0x7f0000000580)="$eJzs3TFrE2EYB/DHNm1DB+0sDgcuTkGdXINUEANCJINOBqpLK8J1OZ3uY/gZ/Eh+jE7dTuwdvbZGB23yXnK/H4T3gT8hz7vkzfC8ufcPPh0ffT79WP34FsNhFoOIsqoiDmIrtqN2p1m3LurduKoMAGDdTKfzceoeWK48H893ImLvt2T2PUlDAAAAAAAAAAAA/LdF8/9xbv4fADaZ+f/Nl+fj+X7z++068/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOudVda/6yyt1fwDA7XP+A0D/OP8BoH+c/wDQP2/evns1nkwOp1k2jDgri1kxq9c6f/Fycvg4u3DQvuusKGbbl/mTOs+u5zux3+RPF+a78ehhnf/Knr+e3Mj34mj52wcAAAAAAAAAAAAAAAAAAIBOGGWXFt7vH43+lNfVlf8HuHF/fxD3ByvbBgAAAAAAAAAAAAAAAAAAAKy10y9fj+cnJx/y9S+GzZa60k+yIp51oo1VFxGdaKMtBt1o4x+LxF9MAAAAAAAAAAAAAAAAAADQQ+2l39SdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA67fP/l1dERFnVmk+9m3jXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCb6GQAA//+5CZb8") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 8m25.808806077s ago: executing program 40 (id=5246): mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m12.859432126s ago: executing program 9 (id=5197): r0 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r1) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000600), 0x2, 0x8}}, 0x20) close(r0) 8m11.899207671s ago: executing program 9 (id=5248): r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0x30000000}) 8m11.620872654s ago: executing program 9 (id=5249): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 8m11.528748829s ago: executing program 9 (id=5250): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) 8m11.102159738s ago: executing program 9 (id=5251): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x45145}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) sendto$packet(r0, &(0x7f00000003c0)='\x00', 0x1, 0x20000081, &(0x7f0000000200)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) 8m10.689959508s ago: executing program 41 (id=5251): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, 0x0, 0x45145}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) sendto$packet(r0, &(0x7f00000003c0)='\x00', 0x1, 0x20000081, &(0x7f0000000200)={0x11, 0xf8, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) 8m4.292789678s ago: executing program 3 (id=5270): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x4, 0xfffffffffffffc49}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x1b) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 8m4.031627961s ago: executing program 3 (id=5272): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000003c0), 0x0, 0x3, 0x10, 0x1) 8m3.840440039s ago: executing program 3 (id=5273): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x100, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) 8m3.575667972s ago: executing program 3 (id=5277): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 8m3.422157459s ago: executing program 2 (id=5279): timer_create(0x0, 0x0, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) setresuid(0xee01, 0xee01, 0x0) getpriority(0x2, 0x0) 8m3.243055338s ago: executing program 3 (id=5281): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x8000, 0x9, 0x1}, 0x50) r2 = openat$cgroup_int(r0, &(0x7f0000000240)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x1000, 0x12) 8m3.200945009s ago: executing program 2 (id=5282): mincore(&(0x7f0000002000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/92) 8m3.060743816s ago: executing program 2 (id=5283): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44004, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fff, 0xffffffff}) r3 = syz_open_pts(r2, 0x101000) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 8m2.739981042s ago: executing program 3 (id=5286): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') 8m2.380969978s ago: executing program 42 (id=5286): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') 8m2.365900059s ago: executing program 2 (id=5288): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 8m2.224284326s ago: executing program 2 (id=5290): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x3, 0x10, 0x1) 8m1.70685188s ago: executing program 2 (id=5293): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x38, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000000)={0x1, 0xfffffffffffffff7, 0x1, 0x1, 0x5, 0x7fffffffffffffff, 0x10000, 0x2}, 0x0, &(0x7f00000000c0)={0x8, 0x5, 0x2, 0x311ba34d, 0x8, 0x300000000, 0x8, 0xf6c7}, &(0x7f0000000100), 0x0) 8m1.110069728s ago: executing program 43 (id=5293): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x38, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000000)={0x1, 0xfffffffffffffff7, 0x1, 0x1, 0x5, 0x7fffffffffffffff, 0x10000, 0x2}, 0x0, &(0x7f00000000c0)={0x8, 0x5, 0x2, 0x311ba34d, 0x8, 0x300000000, 0x8, 0xf6c7}, &(0x7f0000000100), 0x0) 7m54.751140157s ago: executing program 4 (id=5300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1:1\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='0\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='readonly', 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x50) 7m54.237537351s ago: executing program 4 (id=5302): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 7m54.04893091s ago: executing program 4 (id=5296): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 7m53.850826169s ago: executing program 4 (id=5297): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 7m53.574275422s ago: executing program 4 (id=5299): syz_clone3(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000004040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x258, 0xc8, 0x8, 0x0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {}, {}, 0x21, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0xf81, 0x9, 0x500, 0x7ff, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 7m50.569410794s ago: executing program 4 (id=5308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7ff, 0x0, 0x0, 0x41101, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x10, 0x2c}, 0x94) 7m50.041321738s ago: executing program 44 (id=5308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7ff, 0x0, 0x0, 0x41101, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0, 0x0, 0x0, 0x0, 0x10, 0x2c}, 0x94) 7m0.255877958s ago: executing program 0 (id=5567): r0 = io_uring_setup(0x116c, &(0x7f0000000100)={0x0, 0x6683, 0x480, 0x3, 0x2c1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m59.870362826s ago: executing program 0 (id=5570): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f3", 0xf1}, {&(0x7f0000000b40)="abf5afe05d4f96614c55", 0xa}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) write(r0, &(0x7f0000001e00)="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", 0x283) 6m59.264590935s ago: executing program 0 (id=5573): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff70) ppoll(&(0x7f0000000180)=[{r0, 0x10000}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 6m58.273521461s ago: executing program 0 (id=5580): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x80803, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6m46.238308627s ago: executing program 0 (id=5667): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x34}]) 6m45.855627335s ago: executing program 0 (id=5670): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) 6m30.562805824s ago: executing program 45 (id=5670): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) 6m14.384755074s ago: executing program 6 (id=5805): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048094) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffff8, 0x9, 0x59}}}}]}, 0x44}}, 0x0) 6m13.61614463s ago: executing program 6 (id=5812): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x80803, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6m2.059881023s ago: executing program 6 (id=5892): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f00000009c0)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="130000007145c076a975cca796f6519233ac8be4534500de098f66ac03c5f8c11fe5c902a81f45e325415b5b070132f6a41a3285fa17d441de365225fba5a80e7af7f97fe747469945f03b5b73b573ef13a574693b7472dede47a9986c8af526cb192531bf2430a1870aefea89ca6201e2526922a4673089bd92c5ec8203bd242e2cd4de03e8c8382d895fd8e1279d47dad9486d788d6c4c79083ccc8399bdee303790fa56ac8ab672616f83022a28307f11511faa242c1030c2ffe8c76a2fa9db580e62a67da8b74cfd38574b9e5194acb8a69374fa266cffa1cdecbba057919f2d25f815d3"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000100), 0x0}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='hsr0\x00', 0x10) 6m1.016456583s ago: executing program 6 (id=5898): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x1f5) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) syz_mount_image$fuse(0x0, 0x0, 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 6m0.725229156s ago: executing program 6 (id=5899): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fanotify_init(0xf00, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='securityfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, 0x0) chdir(0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x181042, 0x15) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 6m0.296768896s ago: executing program 6 (id=5901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x80803, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5m45.255725423s ago: executing program 46 (id=5901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffff, 0x2) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f000049b000/0x2000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000d5000/0x2000)=nil, &(0x7f0000beb000/0x4000)=nil, &(0x7f000023c000/0x4000)=nil, &(0x7f00000ff000/0x2000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x11, 0x80803, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 8.381193035s ago: executing program 1 (id=8539): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="20831a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.416421637s ago: executing program 1 (id=8546): recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000780)=""/208, 0xd0}], 0x1}, 0x4}], 0x1, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) socket(0xf, 0x4, 0x2) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8d1}], 0x4924a67, 0x80001) r5 = socket$inet(0x2, 0x3, 0x1) recvmmsg(r5, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4080, 0xff0}], 0x1}, 0x8}, {{&(0x7f00000000c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003980)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/89, 0x59}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/240, 0xf0}, {&(0x7f00000038c0)=""/145, 0x91}], 0x5}, 0x100}], 0x2, 0x40000142, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e010410"], 0x11) 5.753204199s ago: executing program 8 (id=8550): syz_usb_connect(0x0, 0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac000705820100020109040200"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x170bd26, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xfffffffe, 0x2, 0x2, 0x0, 0x8001, 0x1}}) 5.240491493s ago: executing program 1 (id=8553): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x33, 0x30, 0x0, 0x30, 0x30, 0x64, 0x30, 0x61, 0x64, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x31, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "0011223344556677889999ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x32, 0x39, 0x62, 0x30, 0x30, 0x35, 0x66, 0x31, 0x31, 0x61, 0x35, 0x30, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x35, 0x6e, 0x61, 0x35, 0x30, 0x66, 0x30, 0x34, 0x30, 0x62, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011227740f630b9aac5dfbbccddeeff001122338540047597e0d26325c3eeff00112299aabbcceeff0000ddff00", 0x3d}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x66, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 5.118465209s ago: executing program 1 (id=8555): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b19, 0x0) 4.761212835s ago: executing program 7 (id=8556): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000222000/0x3000)=nil, &(0x7f000022a000/0x2000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000222000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000228000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000082000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x79b}) r0 = syz_io_uring_setup(0x1c10, &(0x7f0000000240)={0x0, 0x4c1b, 0x40, 0xfffffffe, 0x1e9}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002300)=[{0x0, 0x0, 0x0}], 0x1) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 4.200772962s ago: executing program 8 (id=8557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xcf}], 0x1}, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x80000000, 0x3) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB=' \r\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4005}, 0x4) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) 3.927548475s ago: executing program 5 (id=8561): r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x4000) r3 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, 0x0) r6 = socket(0x1e, 0x4, 0x0) fcntl$setlease(r6, 0x400, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x10f, 0x6f, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) connect$unix(r3, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) 3.823137729s ago: executing program 7 (id=8562): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 3.648670298s ago: executing program 7 (id=8563): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x33, 0x30, 0x0, 0x30, 0x30, 0x64, 0x30, 0x61, 0x64, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x31, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "0011223344556677889999ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x32, 0x39, 0x62, 0x30, 0x30, 0x35, 0x66, 0x31, 0x31, 0x61, 0x35, 0x30, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x35, 0x6e, 0x61, 0x35, 0x30, 0x66, 0x30, 0x34, 0x30, 0x62, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011227740f630b9aac5dfbbccddeeff001122338540047597e0d26325c3eeff00112299aabbcceeff0000ddff00", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x66, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.648232628s ago: executing program 5 (id=8564): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000002c000/0x4000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f00004fb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000068c000/0x4000)=nil, &(0x7f0000128000/0x1000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000138000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3", 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x1, 0x8) syz_io_uring_setup(0x3bd4, &(0x7f0000000240)={0x0, 0xcc19, 0x130c8, 0x1, 0x80030d}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) 3.546179032s ago: executing program 7 (id=8565): ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4008}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="23e8"], 0x28}}, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) 3.101346894s ago: executing program 5 (id=8566): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="05000c007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) 2.988642249s ago: executing program 5 (id=8567): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.54462931s ago: executing program 7 (id=8568): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x80044df9, 0x0) syz_usb_connect(0x5, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="120140017061dd08a9054126e7f50102030109024400010709b0050904ac02000e0100010a2401ce400f0002010205240501070524060000052400c7970d240f010400000003000008030c"], 0x0) 2.11788946s ago: executing program 8 (id=8569): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080100020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000206000924030201010001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000240)={0x40, 0x15, 0x4, 'P)ol'}, 0x0, 0x0, 0x0, 0x0}) 1.972907117s ago: executing program 1 (id=8570): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000222000/0x3000)=nil, &(0x7f000022a000/0x2000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f0000222000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000228000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000082000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, 0x0) r0 = syz_io_uring_setup(0x1c10, &(0x7f0000000240)={0x0, 0x4c1b, 0x40, 0xfffffffe, 0x1e9}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002300)=[{0x0, 0x0, 0x0}], 0x1) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 1.154377025s ago: executing program 7 (id=8571): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480), 0x111, 0x3}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120101020958b810101404702c2e8b14030109021b0001010110040904e85d014210ab02090583020002090106"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000540), 0x0, 0x40010063, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d0027bd7000fddbdf2526000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8bb0e285b84b6b92) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x325, @time={0xbc, 0x20000002}, 0x41, {}, 0x2, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000300)={{0x0, 0x7}, 0x0, 0x2000000, 0x5, {0x8, 0x1}, 0x0, 0x7}) tkill(r3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) fsopen(&(0x7f00000004c0)='adfs\x00', 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1103) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0xc5, 0xf8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="07114f79f6d8b48a60e65124c3a826a805253376030f1b94679a14390fec109b167d5b54e0dfeffb7ff65182e5f07cccf3bd0245b550590bfda5122168fb806371d8a65642552d2e1b8b66d20bcd5dc23667c877fdbc6a8834f9a0e651081b870516b1e63e9581ac0f086e895bcee04a5ce4955d761d41a60ea5cd827de3073b0ae9e9f265cac3fed86cf7bf36d3f1f6d93faceca0bd0596497e7698c2da70e6135fe7c71f48899dfe64009b8769afc4597281b14667ba7eb74c08cbb06f1468a4be505fb6", 0x0, 0x3, 0x0, 0x7, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r5, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b64", 0xf8}, {&(0x7f0000001480)="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", 0xe01}], 0x3) 1.05519454s ago: executing program 1 (id=8572): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$uac1(0x1, 0x8f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x9, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x14}, [@processing_unit={0xa, 0x24, 0x7, 0x6, 0x5, 0x40, "36858c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x8, 0x2, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x1, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x7, 0x4000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x0, 0x3, 0x3, 0xd}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x46, 0x7, 0x5f, {0x7, 0x25, 0x1, 0x8, 0x6, 0xff72}}}}}}}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 603.485921ms ago: executing program 5 (id=8573): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x33, 0x30, 0x0, 0x30, 0x30, 0x64, 0x30, 0x61, 0x64, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x31, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "0011223344556677889999ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x32, 0x39, 0x62, 0x30, 0x30, 0x35, 0x66, 0x31, 0x31, 0x61, 0x35, 0x30, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x35, 0x6e, 0x61, 0x35, 0x30, 0x66, 0x30, 0x34, 0x30, 0x62, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011227740f630b9aac5dfbbccddeeff001122338540047597e0d26325c3eeff00112299aabbcceeff0000ddff00", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x66, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 511.985215ms ago: executing program 5 (id=8574): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008b3000/0x2000)=nil, &(0x7f0000409000/0xa000)=nil, &(0x7f000002c000/0x4000)=nil, &(0x7f000036f000/0x2000)=nil, &(0x7f00004fb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000068c000/0x4000)=nil, &(0x7f0000128000/0x1000)=nil, &(0x7f00000db000/0x1000)=nil, &(0x7f0000138000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3", 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x1, 0x8) syz_io_uring_setup(0x3bd4, &(0x7f0000000240)={0x0, 0xcc19, 0x130c8, 0x1, 0x80030d}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) 508.857226ms ago: executing program 8 (id=8575): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 196.62165ms ago: executing program 8 (id=8576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000106010000000000000000000000000000000000000000000000100003"], 0x48}}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000240)={'veth0_vlan\x00', 0xffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendfile(r0, r0, &(0x7f00000001c0)=0x8, 0x81) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)={0x16c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':%]}$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}]}, @ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "5888faa0a7a6c2167ed6747f30cf96903cbba10ba9c636ee4420b73ed0b90aea33f3217bbe639f63ef7fcc30d466052ca1d71570ddc4b059fbf26f1e6c228218c6c2ae42de781133330ce0010ded093d9d03401f1b0068cafb89e500d27d2a7ac85cfa5e8906"}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8980}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001140)={0xa, 0x5000, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 0s ago: executing program 8 (id=8577): ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4008}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="23e8"], 0x28}}, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) kernel console output (not intermixed with test programs): im netdevsim1 netdevsim2: renamed from eth2 [ 1009.567579][T24596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1009.959967][T24797] ip_tables: iptables: counters copy to user failed while replacing table [ 1010.059157][T24596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.272039][T24816] overlayfs: missing 'workdir' [ 1010.360697][T24596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.397470][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.404696][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.553365][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6098'. [ 1010.595894][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6098'. [ 1010.612764][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.620028][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.697354][ T5786] Bluetooth: hci4: command tx timeout [ 1011.042974][T24832] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6101'. [ 1011.161705][ T11] erspan0 (unregistering): left allmulticast mode [ 1011.611801][T24851] overlayfs: missing 'lowerdir' [ 1011.725445][T24596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.211630][ T11] hsr_slave_0: left promiscuous mode [ 1012.224090][ T11] hsr_slave_1: left promiscuous mode [ 1012.242401][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.255624][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.269738][T24849] ip_tables: iptables: counters copy to user failed while replacing table [ 1012.285639][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.304616][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.333608][ T11] bridge_slave_1: left allmulticast mode [ 1012.351607][ T11] bridge_slave_1: left promiscuous mode [ 1012.357448][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.377803][ T11] bridge_slave_0: left allmulticast mode [ 1012.385003][ T11] bridge_slave_0: left promiscuous mode [ 1012.409710][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.481606][ T11] veth1_macvtap: left promiscuous mode [ 1012.487222][ T11] veth0_macvtap: left promiscuous mode [ 1012.508535][ T11] veth1_vlan: left promiscuous mode [ 1012.514059][ T11] veth0_vlan: left promiscuous mode [ 1012.761596][T24862] overlayfs: failed to clone upperpath [ 1013.314837][T24873] overlayfs: missing 'lowerdir' [ 1013.726388][T24888] fuse: Bad value for 'fd' [ 1013.837882][T24890] ip_tables: iptables: counters copy to user failed while replacing table [ 1013.874164][T24892] overlayfs: missing 'lowerdir' [ 1014.404611][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1014.506609][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1014.575091][T24915] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1014.586799][T24915] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1014.605135][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.690393][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.058890][T24925] fuse: Bad value for 'fd' [ 1015.318547][ T11] bond0 (unregistering): Released all slaves [ 1015.422160][T24933] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1015.432242][T24933] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1015.481677][T24596] veth0_vlan: entered promiscuous mode [ 1015.660668][T24596] veth1_vlan: entered promiscuous mode [ 1015.830671][T24596] veth0_macvtap: entered promiscuous mode [ 1015.858927][T24596] veth1_macvtap: entered promiscuous mode [ 1015.952026][T24596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.985301][T24596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.001432][T24596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.019545][T24596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.040077][T24596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.085345][T24596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.114358][T24596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.141974][T24596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.167094][T24596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.179379][T24596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.198941][T24596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.211220][T24596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.444361][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.465241][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.507837][T19038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.524515][T19038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.124673][T24973] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1017.158724][T24973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1018.000957][T25007] overlayfs: failed to clone upperpath [ 1018.339282][T25021] overlayfs: missing 'lowerdir' [ 1019.456022][T25058] overlayfs: failed to clone upperpath [ 1019.481476][T25061] overlayfs: missing 'lowerdir' [ 1019.973960][T25076] fuse: Bad value for 'fd' [ 1020.374445][T25091] overlayfs: missing 'lowerdir' [ 1020.415816][T25090] overlayfs: failed to clone upperpath [ 1020.434547][T25066] ip_tables: iptables: counters copy to user failed while replacing table [ 1020.977204][T25111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6192'. [ 1021.329682][T25124] overlayfs: missing 'lowerdir' [ 1021.336256][T25125] overlayfs: failed to clone upperpath [ 1022.055374][T25152] overlayfs: failed to clone upperpath [ 1022.081225][T25153] overlayfs: missing 'lowerdir' [ 1023.644621][T25194] overlayfs: missing 'lowerdir' [ 1023.845407][T25197] overlayfs: failed to clone upperpath [ 1024.431410][T25212] ip6gre1: entered promiscuous mode [ 1024.436789][T25212] ip6gre1: entered allmulticast mode [ 1024.573994][ T2942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1024.601271][ T2942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1024.609721][ T5853] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1024.683752][T25224] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1024.728968][T25224] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1024.992514][ T5853] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1025.149145][ T5853] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1025.520163][T25255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6234'. [ 1025.946424][T25270] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1025.968757][T25270] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1026.824110][ T27] audit: type=1326 audit(1789876280.366:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1026.928912][ T27] audit: type=1326 audit(1789876280.366:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1026.990828][ T27] audit: type=1326 audit(1789876280.366:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1027.057554][T25305] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1027.061344][ T27] audit: type=1326 audit(1789876280.366:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1027.087374][T25305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1027.156095][ T27] audit: type=1326 audit(1789876280.366:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1027.225036][ T27] audit: type=1326 audit(1789876280.366:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1027.278973][ T27] audit: type=1326 audit(1789876280.366:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1027.362495][ T27] audit: type=1326 audit(1789876280.366:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1027.462797][ T27] audit: type=1326 audit(1789876280.366:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1027.532082][ T27] audit: type=1326 audit(1789876280.366:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25295 comm="syz.7.6247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1027.854568][T25341] overlayfs: missing 'lowerdir' [ 1028.288481][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1029.031758][T25378] overlayfs: missing 'lowerdir' [ 1029.802658][T25412] overlayfs: missing 'lowerdir' [ 1030.651519][T25446] overlayfs: missing 'workdir' [ 1032.016290][T25491] overlayfs: missing 'workdir' [ 1032.876130][T25526] overlayfs: missing 'workdir' [ 1035.052400][T25600] overlayfs: failed to clone upperpath [ 1035.568474][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1035.954558][T25636] overlayfs: failed to clone upperpath [ 1037.301450][T25672] FAULT_INJECTION: forcing a failure. [ 1037.301450][T25672] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.340979][T25672] CPU: 1 PID: 25672 Comm: syz.1.6356 Not tainted syzkaller #0 [ 1037.348544][T25672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1037.358638][T25672] Call Trace: [ 1037.361931][T25672] [ 1037.364877][T25672] dump_stack_lvl+0x18c/0x250 [ 1037.369584][T25672] ? show_regs_print_info+0x20/0x20 [ 1037.374800][T25672] ? load_image+0x420/0x420 [ 1037.379317][T25672] ? __might_sleep+0xe0/0xe0 [ 1037.383923][T25672] ? __lock_acquire+0x7d80/0x7d80 [ 1037.389144][T25672] should_fail_ex+0x394/0x4c0 [ 1037.393942][T25672] should_failslab+0x9/0x20 [ 1037.398581][T25672] slab_pre_alloc_hook+0x59/0x300 [ 1037.403720][T25672] ? x509_get_sig_params+0x215/0x860 [ 1037.409202][T25672] ? x509_get_sig_params+0x215/0x860 [ 1037.414609][T25672] __kmem_cache_alloc_node+0x53/0x250 [ 1037.420272][T25672] ? x509_get_sig_params+0x215/0x860 [ 1037.425690][T25672] __kmalloc+0xa7/0x240 [ 1037.429868][T25672] x509_get_sig_params+0x215/0x860 [ 1037.435003][T25672] ? __asan_memcpy+0x40/0x70 [ 1037.439615][T25672] x509_cert_parse+0x4af/0x7b0 [ 1037.444402][T25672] x509_key_preparse+0x64/0x6c0 [ 1037.449274][T25672] ? down_read+0x1ac/0x2e0 [ 1037.453714][T25672] asymmetric_key_preparse+0xa9/0x140 [ 1037.459110][T25672] __key_create_or_update+0x3a6/0xa60 [ 1037.464599][T25672] ? key_create_or_update+0x60/0x60 [ 1037.469919][T25672] ? bpf_lsm_key_permission+0x9/0x10 [ 1037.475328][T25672] ? lookup_user_key+0xb66/0x1140 [ 1037.480402][T25672] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 1037.487163][T25672] key_create_or_update+0x42/0x60 [ 1037.492434][T25672] __se_sys_add_key+0x34f/0x410 [ 1037.497501][T25672] ? __x64_sys_add_key+0xc0/0xc0 [ 1037.502484][T25672] ? lockdep_hardirqs_on+0x98/0x150 [ 1037.507818][T25672] ? __x64_sys_add_key+0x20/0xc0 [ 1037.513153][T25672] do_syscall_64+0x55/0xb0 [ 1037.517595][T25672] ? clear_bhb_loop+0x40/0x90 [ 1037.522293][T25672] ? clear_bhb_loop+0x40/0x90 [ 1037.526991][T25672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.532927][T25672] RIP: 0033:0x7f51c199e159 [ 1037.537379][T25672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.557359][T25672] RSP: 002b:00007f51c285d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1037.565911][T25672] RAX: ffffffffffffffda RBX: 00007f51c1c25fa0 RCX: 00007f51c199e159 [ 1037.574078][T25672] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1037.582064][T25672] RBP: 00007f51c1a3506b R08: ffffffffffffffff R09: 0000000000000000 [ 1037.590161][T25672] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1037.598230][T25672] R13: 00007f51c1c26038 R14: 00007f51c1c25fa0 R15: 00007ffdeb8773a8 [ 1037.606239][T25672] [ 1044.280108][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1044.280125][ T27] audit: type=1326 audit(1789876297.826:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.384056][ T27] audit: type=1326 audit(1789876297.856:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.450371][ T27] audit: type=1326 audit(1789876297.856:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.524922][ T27] audit: type=1326 audit(1789876297.866:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.630120][ T27] audit: type=1326 audit(1789876297.866:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.664297][ T27] audit: type=1326 audit(1789876297.866:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.691019][ T27] audit: type=1326 audit(1789876297.866:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.738385][ T27] audit: type=1326 audit(1789876297.866:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.809245][ T27] audit: type=1326 audit(1789876297.866:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1044.888370][ T27] audit: type=1326 audit(1789876297.866:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.7.6413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1050.288540][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1051.098729][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1051.098748][ T27] audit: type=1326 audit(1789876304.646:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.229408][ T27] audit: type=1326 audit(1789876304.676:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.310172][ T27] audit: type=1326 audit(1789876304.676:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.377933][ T27] audit: type=1326 audit(1789876304.676:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.456092][ T27] audit: type=1326 audit(1789876304.676:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.533108][ T27] audit: type=1326 audit(1789876304.676:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.608486][ T27] audit: type=1326 audit(1789876304.676:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.686524][ T27] audit: type=1326 audit(1789876304.676:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.755122][ T27] audit: type=1326 audit(1789876304.676:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1051.822282][ T27] audit: type=1326 audit(1789876304.676:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.5.6466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1054.788450][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.794854][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.194589][T26572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1066.587140][T26591] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 1073.845362][T26869] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 1073.869459][T26869] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1077.808501][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1078.860220][T27059] kvm: pic: single mode not supported [ 1078.860423][T27059] kvm: pic: level sensitive irq not supported [ 1078.866438][T27059] kvm: pic: single mode not supported [ 1078.907987][T27059] kvm: pic: single mode not supported [ 1078.927375][T27059] kvm: pic: single mode not supported [ 1078.951778][T27059] kvm: pic: single mode not supported [ 1078.968626][T27059] kvm: pic: single mode not supported [ 1078.983694][T27059] kvm: pic: single mode not supported [ 1079.013803][T27059] kvm: pic: single mode not supported [ 1079.031636][T27059] kvm: pic: single mode not supported [ 1079.057004][T27059] kvm: pic: single mode not supported [ 1079.084478][T27059] kvm: pic: level sensitive irq not supported [ 1079.102300][T27059] kvm: pic: level sensitive irq not supported [ 1079.420725][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1079.420744][ T27] audit: type=1326 audit(1789876332.956:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.528443][ T27] audit: type=1326 audit(1789876332.956:6556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.591465][ T27] audit: type=1326 audit(1789876332.956:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.617455][ T27] audit: type=1326 audit(1789876333.006:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.649813][ T27] audit: type=1326 audit(1789876333.006:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.688863][ T27] audit: type=1326 audit(1789876333.006:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.759202][ T27] audit: type=1326 audit(1789876333.006:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.831765][ T27] audit: type=1326 audit(1789876333.006:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.878543][ T27] audit: type=1326 audit(1789876333.006:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1079.966823][ T27] audit: type=1326 audit(1789876333.006:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27078 comm="syz.8.6758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1082.448639][T18242] Bluetooth: hci0: command 0x0406 tx timeout [ 1090.261906][T27445] pic_ioport_write: 22 callbacks suppressed [ 1090.261925][T27445] kvm: pic: single mode not supported [ 1090.267937][T27445] kvm: pic: level sensitive irq not supported [ 1090.293180][T27445] kvm: pic: single mode not supported [ 1090.318852][T27445] kvm: pic: single mode not supported [ 1090.328740][T27445] kvm: pic: single mode not supported [ 1090.348991][T27445] kvm: pic: single mode not supported [ 1090.361101][T27445] kvm: pic: single mode not supported [ 1090.384698][T27445] kvm: pic: single mode not supported [ 1090.400307][T27445] kvm: pic: single mode not supported [ 1090.416226][T27445] kvm: pic: single mode not supported [ 1090.432194][T27445] kvm: pic: single mode not supported [ 1090.456368][T27445] kvm: pic: non byte read [ 1090.487004][T27445] kvm: pic: non byte read [ 1109.236891][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1109.236910][ T27] audit: type=1326 audit(1789876362.776:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.330621][ T27] audit: type=1326 audit(1789876362.826:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.388948][ T27] audit: type=1326 audit(1789876362.826:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.465086][ T27] audit: type=1326 audit(1789876362.826:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.548468][ T27] audit: type=1326 audit(1789876362.826:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.604524][ T27] audit: type=1326 audit(1789876362.826:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.643359][ T27] audit: type=1326 audit(1789876362.826:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.676903][ T27] audit: type=1326 audit(1789876362.826:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.738344][ T27] audit: type=1326 audit(1789876362.826:6576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1109.825574][ T27] audit: type=1326 audit(1789876362.826:6577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28072 comm="syz.7.7031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1116.215873][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.222799][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.665105][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 1119.665122][ T27] audit: type=1326 audit(1789876373.206:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1119.768469][ T27] audit: type=1326 audit(1789876373.206:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1119.885973][ T27] audit: type=1326 audit(1789876373.206:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1119.981396][ T27] audit: type=1326 audit(1789876373.206:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1120.080922][ T27] audit: type=1326 audit(1789876373.206:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1120.146074][ T27] audit: type=1326 audit(1789876373.206:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1120.234855][ T27] audit: type=1326 audit(1789876373.206:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1120.328513][ T27] audit: type=1326 audit(1789876373.206:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1120.428124][ T27] audit: type=1326 audit(1789876373.206:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1120.497311][ T27] audit: type=1326 audit(1789876373.206:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28427 comm="syz.7.7141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548879e159 code=0x7ffc0000 [ 1126.833979][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1126.833996][ T27] audit: type=1326 audit(1789876380.376:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28627 comm="syz.8.7193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1126.920964][ T27] audit: type=1326 audit(1789876380.416:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28627 comm="syz.8.7193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1126.994408][ T27] audit: type=1326 audit(1789876380.416:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28627 comm="syz.8.7193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1127.060343][ T27] audit: type=1326 audit(1789876380.416:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28627 comm="syz.8.7193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x7ffc0000 [ 1128.532257][T18242] Bluetooth: hci4: command 0x0406 tx timeout [ 1131.578492][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1134.284156][T28806] sctp: [Deprecated]: syz.8.7233 (pid 28806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1134.284156][T28806] Use struct sctp_sack_info instead [ 1134.880175][T28830] pic_ioport_write: 7 callbacks suppressed [ 1134.880195][T28830] kvm: pic: single mode not supported [ 1134.886269][T28830] kvm: pic: level sensitive irq not supported [ 1134.922147][T28830] kvm: pic: level sensitive irq not supported [ 1134.948756][T28830] kvm: pic: non byte read [ 1141.011728][ T27] audit: type=1326 audit(1789876394.546:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.088783][ T27] audit: type=1326 audit(1789876394.546:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.168753][ T27] audit: type=1326 audit(1789876394.546:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.269584][ T27] audit: type=1326 audit(1789876394.546:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.367485][ T27] audit: type=1326 audit(1789876394.556:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.432527][ T27] audit: type=1326 audit(1789876394.556:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.519075][ T27] audit: type=1326 audit(1789876394.556:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.588339][ T27] audit: type=1326 audit(1789876394.556:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.684137][ T27] audit: type=1326 audit(1789876394.556:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1141.780487][ T27] audit: type=1326 audit(1789876394.556:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.1.7300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1148.503627][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 1148.503645][ T27] audit: type=1326 audit(1789876402.046:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29265 comm="syz.8.7373" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa751d9e159 code=0x0 [ 1148.701146][ T27] audit: type=1326 audit(1789876402.246:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.5.7376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1148.750948][ T27] audit: type=1326 audit(1789876402.246:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.5.7376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1148.814278][ T27] audit: type=1326 audit(1789876402.246:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.5.7376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1148.878750][ T27] audit: type=1326 audit(1789876402.246:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.5.7376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1148.915034][ T27] audit: type=1326 audit(1789876402.246:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.5.7376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1148.950066][ T27] audit: type=1326 audit(1789876402.246:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29272 comm="syz.5.7376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdec99e159 code=0x7ffc0000 [ 1150.827711][T18242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1150.839399][T18242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1150.848086][T18242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1150.862310][T18242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1150.870447][T18242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1150.878409][T18242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1150.964689][ T1132] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.129717][ T1132] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.329557][ T1132] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.449195][ T1132] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.989039][T29346] chnl_net:caif_netlink_parms(): no params data found [ 1152.907436][T29346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.915112][T29346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.928956][ T5786] Bluetooth: hci1: command tx timeout [ 1152.957236][T29346] bridge_slave_0: entered allmulticast mode [ 1152.986086][T29346] bridge_slave_0: entered promiscuous mode [ 1153.053374][T29346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.071025][T29346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.090525][T29346] bridge_slave_1: entered allmulticast mode [ 1153.113410][T29346] bridge_slave_1: entered promiscuous mode [ 1153.313076][T29346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.355734][T29346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.399450][T29430] kvm: pic: single mode not supported [ 1153.399732][T29430] kvm: pic: level sensitive irq not supported [ 1153.415224][T29430] kvm: pic: level sensitive irq not supported [ 1153.431877][T29430] kvm: pic: non byte read [ 1153.713755][T29346] team0: Port device team_slave_0 added [ 1153.815055][T29346] team0: Port device team_slave_1 added [ 1154.035929][T29346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.056036][T29346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.115351][T29346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.295895][T29346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.320852][T29346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.399627][T29346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.713512][T29346] hsr_slave_0: entered promiscuous mode [ 1154.733682][T29346] hsr_slave_1: entered promiscuous mode [ 1154.750151][T29346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1154.764011][T29346] Cannot create hsr debugfs directory [ 1154.884497][ T1132] hsr_slave_0: left promiscuous mode [ 1154.897750][ T1132] hsr_slave_1: left promiscuous mode [ 1154.911868][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.925077][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.945874][ T1132] bridge_slave_1: left allmulticast mode [ 1154.959322][ T1132] bridge_slave_1: left promiscuous mode [ 1154.965460][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.975763][ T1132] bridge_slave_0: left allmulticast mode [ 1154.982010][ T1132] bridge_slave_0: left promiscuous mode [ 1154.998546][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.008515][ T5786] Bluetooth: hci1: command tx timeout [ 1155.067758][ T1132] veth1_macvtap: left promiscuous mode [ 1155.083495][ T1132] veth0_macvtap: left promiscuous mode [ 1155.098751][ T1132] veth1_vlan: left promiscuous mode [ 1155.116911][ T1132] veth0_vlan: left promiscuous mode [ 1156.696715][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 1156.778596][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 1156.844244][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.904373][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.096791][ T5786] Bluetooth: hci1: command tx timeout [ 1157.399592][ T1132] bond0 (unregistering): Released all slaves [ 1158.873685][T29346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1158.925567][T29346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1158.947882][T29346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1158.998528][T29346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1159.172871][ T5786] Bluetooth: hci1: command tx timeout [ 1159.304178][T29346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.362366][T29346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.393032][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.400421][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.473902][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.481122][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.664599][T29346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1160.163690][T29346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.072709][T29346] veth0_vlan: entered promiscuous mode [ 1161.126142][T29346] veth1_vlan: entered promiscuous mode [ 1161.232600][T29346] veth0_macvtap: entered promiscuous mode [ 1161.271661][T29346] veth1_macvtap: entered promiscuous mode [ 1161.324716][T29346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.341830][T29346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.356393][T29346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1161.367140][T29346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.389136][T29346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.437029][T29346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.458067][T29346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.503741][T29346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1161.517134][T29346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1161.537096][T29346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.572633][T29346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.594672][T29346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.624441][T29346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.658276][T29346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.875791][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.909879][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.056237][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1162.083441][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.473089][T29757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1170.965006][T29930] sctp: [Deprecated]: syz.1.7560 (pid 29930) Use of int in maxseg socket option. [ 1170.965006][T29930] Use struct sctp_assoc_value instead [ 1171.009647][T29930] sctp: [Deprecated]: syz.1.7560 (pid 29930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1171.009647][T29930] Use struct sctp_sack_info instead [ 1171.988345][ T27] audit: type=1326 audit(1789876425.526:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.052751][ T27] audit: type=1326 audit(1789876425.526:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.143308][ T27] audit: type=1326 audit(1789876425.526:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.228368][ T27] audit: type=1326 audit(1789876425.526:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.319738][ T27] audit: type=1326 audit(1789876425.526:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.432820][ T27] audit: type=1326 audit(1789876425.526:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.433271][T18242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1172.470463][ T27] audit: type=1326 audit(1789876425.526:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.495626][T18242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1172.505419][ T27] audit: type=1326 audit(1789876425.526:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.530822][T18242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1172.548477][T18242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1172.560004][T18242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1172.567596][ T27] audit: type=1326 audit(1789876425.526:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1172.593399][T18242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1172.630391][ T27] audit: type=1326 audit(1789876425.526:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29957 comm="syz.5.7568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1173.618745][T29969] chnl_net:caif_netlink_parms(): no params data found [ 1173.950973][T29969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.958506][T29969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.965800][T29969] bridge_slave_0: entered allmulticast mode [ 1173.974973][T29969] bridge_slave_0: entered promiscuous mode [ 1174.003441][T29969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.010989][T29969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.018858][T29969] bridge_slave_1: entered allmulticast mode [ 1174.036422][T29969] bridge_slave_1: entered promiscuous mode [ 1174.224552][T29969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.249497][T29969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.401367][T29969] team0: Port device team_slave_0 added [ 1174.420418][T29969] team0: Port device team_slave_1 added [ 1174.508041][T29969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.516802][T29969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.558732][T29969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.596392][T29969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.606861][T29969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.636884][T29969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.688862][T18242] Bluetooth: hci2: command tx timeout [ 1174.797362][T29969] hsr_slave_0: entered promiscuous mode [ 1174.810571][T29969] hsr_slave_1: entered promiscuous mode [ 1176.768519][T18242] Bluetooth: hci2: command tx timeout [ 1177.675791][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.682589][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.726621][ T3528] bond0 (unregistering): Released all slaves [ 1178.845867][T29969] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1178.853097][T18242] Bluetooth: hci2: command tx timeout [ 1178.883953][T29969] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1178.903444][T29969] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1178.917756][T29969] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1179.045887][T29969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.079521][T29969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.097218][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.104450][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.136321][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.143650][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.255785][T29969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1179.714659][T29969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.504376][T29969] veth0_vlan: entered promiscuous mode [ 1180.539955][T29969] veth1_vlan: entered promiscuous mode [ 1180.666644][T29969] veth0_macvtap: entered promiscuous mode [ 1180.721787][T29969] veth1_macvtap: entered promiscuous mode [ 1180.801549][T29969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.835964][T29969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.868674][T29969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.898867][T29969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.918703][T29969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.936641][T18242] Bluetooth: hci2: command tx timeout [ 1180.958401][T29969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.002528][T29969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.081402][T29969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.138138][T29969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.154730][T29969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.178698][T29969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.206160][T29969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.253130][T29969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.287593][T29969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.313673][T29969] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.346978][T29969] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.374497][T29969] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.393862][T29969] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.730853][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.754828][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.827213][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.848820][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.300424][T30296] kvm: pic: single mode not supported [ 1188.300449][T30296] kvm: pic: level sensitive irq not supported [ 1188.309071][T30296] kvm: pic: single mode not supported [ 1188.315409][T30296] kvm: pic: single mode not supported [ 1188.347675][T30296] kvm: pic: single mode not supported [ 1188.357777][T30296] kvm: pic: single mode not supported [ 1188.368946][T30296] kvm: pic: single mode not supported [ 1188.387896][T30296] kvm: pic: single mode not supported [ 1188.400782][T30296] kvm: pic: single mode not supported [ 1188.428865][T30296] kvm: pic: single mode not supported [ 1188.434538][T30296] kvm: pic: single mode not supported [ 1188.470272][T30296] kvm: pic: non byte read [ 1188.497846][T30296] kvm: pic: non byte read [ 1197.694471][T30566] kvm: kvm [30563]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 1197.745166][T30566] kvm: kvm [30563]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 1197.785976][T30566] kvm: kvm [30563]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 1197.829136][T30566] kvm: kvm [30563]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 1197.865109][T30566] kvm: kvm [30563]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 1200.771688][T30639] kvm: kvm [30637]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 1200.796974][T30639] kvm: kvm [30637]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 1200.850192][T30639] kvm: kvm [30637]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 1200.877316][T30639] kvm: kvm [30637]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 1200.908440][T30639] kvm: kvm [30637]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 1216.195393][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 1216.195412][ T27] audit: type=1326 audit(1789876469.736:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1216.239691][ T27] audit: type=1326 audit(1789876469.756:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1216.305656][ T27] audit: type=1326 audit(1789876469.756:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1216.349045][ T27] audit: type=1326 audit(1789876469.756:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1216.376712][ T27] audit: type=1326 audit(1789876469.756:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3bec99e159 code=0x7ffc0000 [ 1216.436772][ T27] audit: type=1326 audit(1789876469.806:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bec95e98e code=0x7ffc0000 [ 1216.496522][ T27] audit: type=1326 audit(1789876469.816:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bec95e98e code=0x7ffc0000 [ 1216.527558][ T27] audit: type=1326 audit(1789876469.816:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bec95e98e code=0x7ffc0000 [ 1216.565072][ T27] audit: type=1326 audit(1789876469.826:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bec95e98e code=0x7ffc0000 [ 1216.604138][ T27] audit: type=1326 audit(1789876469.826:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31180 comm="syz.5.7868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bec95e98e code=0x7ffc0000 [ 1217.893802][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1217.905757][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1217.916425][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1217.938618][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1217.948504][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1217.958668][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1218.165103][ T1132] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.529892][ T1132] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.765035][ T1132] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.023778][ T1132] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.278935][T31224] chnl_net:caif_netlink_parms(): no params data found [ 1219.744372][T31224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.779648][T31224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.786948][T31224] bridge_slave_0: entered allmulticast mode [ 1219.817200][T31224] bridge_slave_0: entered promiscuous mode [ 1219.850795][T31224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.908800][T31224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.932075][T31224] bridge_slave_1: entered allmulticast mode [ 1219.963737][T31224] bridge_slave_1: entered promiscuous mode [ 1220.058366][T18242] Bluetooth: hci0: command tx timeout [ 1220.207235][T31224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.240666][T31224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.481559][T31224] team0: Port device team_slave_0 added [ 1220.513755][T31224] team0: Port device team_slave_1 added [ 1220.711648][T31224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.741718][T31224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.848537][T31224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.109069][T31224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.116115][T31224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.198320][T31224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.831124][T31224] hsr_slave_0: entered promiscuous mode [ 1221.906556][T31224] hsr_slave_1: entered promiscuous mode [ 1221.927863][T31224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1221.968943][T31224] Cannot create hsr debugfs directory [ 1222.138322][T18242] Bluetooth: hci0: command tx timeout [ 1223.406148][ T1132] hsr_slave_0: left promiscuous mode [ 1223.415243][ T1132] hsr_slave_1: left promiscuous mode [ 1223.425350][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.446038][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.489849][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.497505][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.613181][ T1132] bridge_slave_1: left allmulticast mode [ 1223.620058][ T1132] bridge_slave_1: left promiscuous mode [ 1223.625936][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.661623][ T1132] bridge_slave_0: left allmulticast mode [ 1223.667947][ T1132] bridge_slave_0: left promiscuous mode [ 1223.674596][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.859837][ T1132] veth1_macvtap: left promiscuous mode [ 1223.865474][ T1132] veth0_macvtap: left promiscuous mode [ 1223.880065][ T1132] veth1_vlan: left promiscuous mode [ 1223.896329][ T1132] veth0_vlan: left promiscuous mode [ 1224.218263][T18242] Bluetooth: hci0: command tx timeout [ 1226.289079][T18242] Bluetooth: hci0: command tx timeout [ 1227.105075][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 1227.312619][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 1227.566851][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.810989][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.201521][ T1132] bond0 (unregistering): Released all slaves [ 1230.523957][T31224] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1230.572408][T31224] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1230.612586][T31224] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1230.672185][T31224] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1231.003610][T31224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.090717][T31224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.134634][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.141879][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.225298][T19038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.232562][T19038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.141199][T31224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.961950][T31224] veth0_vlan: entered promiscuous mode [ 1233.001459][T31224] veth1_vlan: entered promiscuous mode [ 1233.106237][T31224] veth0_macvtap: entered promiscuous mode [ 1233.138896][T31224] veth1_macvtap: entered promiscuous mode [ 1233.188099][T31224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.244200][T31224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.278265][T31224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.305664][T31224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.349987][T31224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.378377][T31224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.400500][T31224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.442350][T31224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.477676][T31224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.508251][T31224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.527955][T31224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.547486][T31224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.568768][T31224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.599963][T31224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.657980][T31224] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.695311][T31224] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.728317][T31224] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.737442][T31224] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.023738][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.064824][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.141112][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.150215][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.096075][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.103439][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.319722][T31792] kvm: pic: level sensitive irq not supported [ 1241.320081][T31792] pic_ioport_write: 7 callbacks suppressed [ 1241.320096][T31792] kvm: pic: single mode not supported [ 1241.349203][T31792] kvm: pic: single mode not supported [ 1241.355078][T31792] kvm: pic: single mode not supported [ 1241.360931][T31792] kvm: pic: level sensitive irq not supported [ 1241.375715][T31792] kvm: pic: single mode not supported [ 1241.386374][T31792] kvm: pic: single mode not supported [ 1241.392691][T31792] kvm: pic: single mode not supported [ 1241.398253][T31792] kvm: pic: level sensitive irq not supported [ 1256.946586][T32238] kvm: kvm [32236]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 1256.974982][T32238] kvm: kvm [32236]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 1257.012353][T32238] kvm: kvm [32236]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 1257.094225][T32238] kvm: kvm [32236]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 1257.130804][T32238] kvm: kvm [32236]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 1276.160586][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 1276.160604][ T27] audit: type=1326 audit(1789876529.706:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.265549][ T27] audit: type=1326 audit(1789876529.706:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.302339][ T27] audit: type=1326 audit(1789876529.706:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.346586][ T27] audit: type=1326 audit(1789876529.716:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.423305][ T27] audit: type=1326 audit(1789876529.716:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.452942][ T27] audit: type=1326 audit(1789876529.716:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.487863][ T27] audit: type=1326 audit(1789876529.716:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.567817][ T27] audit: type=1326 audit(1789876529.716:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.630835][ T27] audit: type=1326 audit(1789876529.716:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1276.686218][ T27] audit: type=1326 audit(1789876529.716:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32764 comm="syz.1.8220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f51c199e159 code=0x7ffc0000 [ 1277.018286][T18242] Bluetooth: hci1: command 0x0406 tx timeout [ 1290.189406][ T750] "syz.1.8329" (750) uses obsolete ecb(arc4) skcipher [ 1291.154374][T20849] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1291.403371][T20849] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.435618][T20849] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1291.460515][T20849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.483311][T20849] usb 9-1: Product: syz [ 1291.501353][T20849] usb 9-1: Manufacturer: syz [ 1291.509511][T20849] usb 9-1: SerialNumber: syz [ 1291.581501][T20849] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1291.655983][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 1291.656001][ T27] audit: type=1326 audit(1789876545.196:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1291.735011][ T27] audit: type=1326 audit(1789876545.196:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1291.808948][ T27] audit: type=1326 audit(1789876545.226:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1291.832287][T20849] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1291.886690][T20849] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1291.926253][ T27] audit: type=1326 audit(1789876545.236:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1291.955133][T20849] usb 9-1: media controller created [ 1292.008518][ T27] audit: type=1326 audit(1789876545.236:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1292.037912][T20849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1292.049272][ T802] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8341'. [ 1292.102731][ T27] audit: type=1326 audit(1789876545.236:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1292.166376][ T27] audit: type=1326 audit(1789876545.236:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1292.238256][ T27] audit: type=1326 audit(1789876545.236:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1292.336143][ T27] audit: type=1326 audit(1789876545.236:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1292.358385][T19982] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1292.428994][ T27] audit: type=1326 audit(1789876545.246:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=794 comm="syz.7.8340" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1292.458266][T21327] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1292.509262][T20849] usb 9-1: USB disconnect, device number 2 [ 1292.568565][T19982] usb 6-1: Using ep0 maxpacket: 32 [ 1292.586848][T19982] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1292.630588][T19982] usb 6-1: config 0 has no interface number 0 [ 1292.642849][T19982] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1292.654267][T21327] usb 8-1: Using ep0 maxpacket: 8 [ 1292.664749][T21327] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1292.673230][T19982] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1292.692439][T19982] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1292.706652][T19982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.717693][T19982] usb 6-1: Product: syz [ 1292.722300][T21327] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.745455][T19982] usb 6-1: Manufacturer: syz [ 1292.753954][T21327] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1292.773837][T19982] usb 6-1: SerialNumber: syz [ 1292.797445][T19982] usb 6-1: config 0 descriptor?? [ 1292.813264][T21327] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1292.884015][T21327] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 1292.911942][T21327] usb 8-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 1292.942931][T21327] usb 8-1: Product: syz [ 1292.947220][T21327] usb 8-1: Manufacturer: syz [ 1292.973006][T21327] usb 8-1: SerialNumber: syz [ 1293.299053][T21327] cdc_ncm 8-1:1.0: skipping garbage [ 1293.338413][T21327] cdc_ncm 8-1:1.0: skipping garbage [ 1293.358349][T21327] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1293.365278][T21327] cdc_ncm 8-1:1.0: bind() failure [ 1293.433558][T21327] usb 8-1: USB disconnect, device number 2 [ 1293.460880][T19982] appletouch 6-1:0.85: Geyser mode initialized. [ 1293.495879][T19982] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input5 [ 1293.708498][T20849] usb 6-1: USB disconnect, device number 2 [ 1293.850605][T20849] appletouch 6-1:0.85: input: appletouch disconnected [ 1295.097103][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1295.311606][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1295.330365][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1295.346938][ T9] usb 9-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1295.368416][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.376577][ T9] usb 9-1: Product: syz [ 1295.391857][ T9] usb 9-1: Manufacturer: syz [ 1295.396540][ T9] usb 9-1: SerialNumber: syz [ 1295.479314][ T9] ums-sddr09 9-1:1.0: USB Mass Storage device detected [ 1295.531668][ T9] ums-sddr09 9-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1295.531668][ T9] Please send a copy of this message to and [ 1295.554793][T21327] IPVS: starting estimator thread 0... [ 1295.611728][ T868] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1295.681691][ T866] IPVS: using max 18 ests per chain, 43200 per kthread [ 1295.966055][ T9] ums-sddr09: probe of 9-1:1.0 failed with error -32 [ 1295.990078][ T9] usb 9-1: USB disconnect, device number 3 [ 1296.255873][T21327] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1296.447198][T21327] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1296.475393][T21327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.500276][T21327] usb 8-1: Product: syz [ 1296.526595][T21327] usb 8-1: Manufacturer: syz [ 1296.536283][T21327] usb 8-1: SerialNumber: syz [ 1296.716011][T21325] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1297.030684][ T9] usb 8-1: USB disconnect, device number 3 [ 1297.489529][ T857] Bluetooth: hci2: command 0x0406 tx timeout [ 1297.563560][ T932] syzkaller0: entered promiscuous mode [ 1297.570738][ T932] syzkaller0: entered allmulticast mode [ 1297.817743][T21325] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1297.858929][T21325] ath9k_htc: Failed to initialize the device [ 1297.868396][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 1299.061580][ T982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1299.149510][ T982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1299.238565][ T982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1299.548228][T20849] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1299.760615][T20849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.800189][T20849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.825052][T20849] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1299.841078][T20849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.860974][T20849] usb 2-1: config 0 descriptor?? [ 1300.098556][T21325] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1300.298307][T21325] usb 8-1: Using ep0 maxpacket: 16 [ 1300.314127][T20849] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 1300.316873][T21325] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1300.329865][T20849] cm6533_jd 0003:0D8C:0022.0001: item fetching failed at offset 3/5 [ 1300.346968][T20849] cm6533_jd 0003:0D8C:0022.0001: parse failed [ 1300.362615][T21325] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1300.364085][T20849] cm6533_jd: probe of 0003:0D8C:0022.0001 failed with error -22 [ 1300.385033][T21325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.436028][T21325] usb 8-1: Product: syz [ 1300.447032][T21325] usb 8-1: Manufacturer: syz [ 1300.463354][T21325] usb 8-1: SerialNumber: syz [ 1300.480588][T21325] usb 8-1: config 0 descriptor?? [ 1300.510900][T20849] usb 2-1: USB disconnect, device number 2 [ 1300.541688][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.548080][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.932511][T19982] usb 8-1: USB disconnect, device number 4 [ 1303.138300][T20849] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1303.320448][T20849] usb 9-1: Using ep0 maxpacket: 32 [ 1303.343379][T20849] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1303.356739][T20849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.419552][T20849] usb 9-1: config 0 descriptor?? [ 1303.443779][T20849] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1303.927513][ T1155] sg_write: process 652 (syz.5.8404) changed security contexts after opening file descriptor, this is not allowed. [ 1303.995167][ T1153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1304.864396][T20849] gspca_vc032x: reg_w err -71 [ 1304.874350][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.900375][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.905793][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.916438][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.923126][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.933665][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.939507][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.944846][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.955543][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.962842][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.968768][T19982] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1304.974434][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.988317][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.993909][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1305.008220][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1305.013588][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1305.028679][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1305.034210][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1305.040180][T20849] gspca_vc032x: I2c Bus Busy Wait 00 [ 1305.045523][T20849] gspca_vc032x: Unknown sensor... [ 1305.052555][T20849] vc032x: probe of 9-1:0.0 failed with error -22 [ 1305.062501][T20849] usb 9-1: USB disconnect, device number 4 [ 1305.148298][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1305.176215][T19982] usb 8-1: Using ep0 maxpacket: 16 [ 1305.185922][T19982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1305.211218][T19982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1305.221819][T19982] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1305.236728][T19982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.246238][T19982] usb 8-1: Product: syz [ 1305.255888][T19982] usb 8-1: Manufacturer: syz [ 1305.261041][T19982] usb 8-1: SerialNumber: syz [ 1305.274327][T19982] usb 8-1: config 0 descriptor?? [ 1305.341689][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.359678][ T5819] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1305.374536][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.456139][ T5819] as10x_usb: device has been detected [ 1305.465334][ T5819] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1305.499215][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1305.551524][T19982] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input6 [ 1305.578990][ T5819] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1305.583353][ T1195] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1305.656577][T19982] imon:send_packet: packet tx failed (-71) [ 1305.681304][T19982] imon 8-1:0.0: panel buttons/knobs setup failed [ 1305.711010][ T5819] as10x_usb: error during firmware upload part1 [ 1305.722773][ T5819] Registered device Abilis Systems DVB-Titan [ 1305.818660][T19982] rc_core: IR keymap rc-imon-pad not found [ 1305.841344][T19982] Registered IR keymap rc-empty [ 1305.846296][T19982] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1305.871880][T19982] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1305.884331][T19982] imon:send_packet: packet tx failed (-71) [ 1305.909022][T19982] imon 8-1:0.0: remote input dev register failed [ 1305.916695][T19982] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 1305.961753][T19982] imon 8-1:0.0: unable to initialize intf0, err 0 [ 1305.970021][T19982] imon:imon_probe: failed to initialize context! [ 1305.977153][T19982] imon 8-1:0.0: unable to register, err -19 [ 1306.001515][T19982] usb 8-1: USB disconnect, device number 5 [ 1306.368820][T19982] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1306.560140][T19982] usb 8-1: Using ep0 maxpacket: 16 [ 1306.572919][T19982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1306.585785][T19982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1306.599556][T19982] usb 8-1: string descriptor 0 read error: -22 [ 1306.611681][T19982] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1306.622345][T19982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.642663][T19982] usb 8-1: config 0 descriptor?? [ 1306.648392][ T5843] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1306.671431][T19982] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input8 [ 1306.841117][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 1306.851590][ T5843] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.877729][ T5843] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1306.907402][ T5843] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1306.937767][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.958089][ T5843] usb 9-1: Product: syz [ 1306.962843][ T5843] usb 9-1: Manufacturer: syz [ 1306.967570][ T5843] usb 9-1: SerialNumber: syz [ 1307.148373][T19982] rc_core: IR keymap rc-imon-pad not found [ 1307.164384][T19982] Registered IR keymap rc-empty [ 1307.182885][T19982] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1307.195459][ T1202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.221152][ T5843] usb 9-1: 0:2 : does not exist [ 1307.238306][T19982] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1307.238865][ T1202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.257528][ T5843] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1307.281558][T19982] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1307.367707][T19982] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 1307.460985][T19982] imon 8-1:0.0: iMON device (15c2:0041, intf0) on usb<8:6> initialized [ 1307.490032][ T5843] usb 9-1: USB disconnect, device number 5 [ 1307.699593][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1307.700111][T20849] usb 8-1: USB disconnect, device number 6 [ 1307.707752][ T811] udevd[811]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.780576][ T5160] usb 2-1: USB disconnect, device number 3 [ 1307.885685][ T5160] Unregistered device Abilis Systems DVB-Titan [ 1307.899626][ T5160] as10x_usb: device has been disconnected [ 1310.688521][ T5843] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1310.878868][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1310.894459][ T5843] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1310.903117][ T5843] usb 2-1: config 0 has no interface number 0 [ 1310.916644][ T5843] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1310.930000][ T5843] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1310.943207][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.953234][ T5843] usb 2-1: Product: syz [ 1310.957629][ T5843] usb 2-1: Manufacturer: syz [ 1310.963057][ T5843] usb 2-1: SerialNumber: syz [ 1310.974314][ T5843] usb 2-1: config 0 descriptor?? [ 1310.989195][ T5843] smsc75xx v1.0.0 [ 1311.008518][T29914] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1311.228507][T29914] usb 8-1: Using ep0 maxpacket: 32 [ 1311.249489][T29914] usb 8-1: config 1 interface 0 altsetting 31 endpoint 0x2 has an invalid bInterval 253, changing to 11 [ 1311.268200][T29914] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1311.286738][T29914] usb 8-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 1311.297153][T29914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.306113][T29914] usb 8-1: Product: syz [ 1311.311130][T29914] usb 8-1: Manufacturer: ã [ 1311.315781][T29914] usb 8-1: SerialNumber: syz [ 1311.612466][ T5843] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1311.649567][ T5843] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1311.688254][ T5843] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1311.709658][ T1358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.728771][ T5843] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 1311.760078][ T5843] usb 2-1: USB disconnect, device number 4 [ 1311.766761][ T1358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.899165][T29914] usbhid 8-1:1.0: can't add hid device: -71 [ 1311.916736][T29914] usbhid: probe of 8-1:1.0 failed with error -71 [ 1311.950690][T29914] usb 8-1: USB disconnect, device number 7 [ 1312.182796][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1312.398530][ T5853] usb 6-1: Using ep0 maxpacket: 16 [ 1312.424131][ T5853] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1312.465883][ T5853] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1312.487697][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.504978][ T5853] usb 6-1: Product: syz [ 1312.516111][ T5853] usb 6-1: Manufacturer: syz [ 1312.526467][ T5853] usb 6-1: SerialNumber: syz [ 1312.540842][ T5853] usb 6-1: config 0 descriptor?? [ 1313.818433][ T5823] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1314.018349][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 1314.031574][ T5823] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1314.058235][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.089361][ T5823] usb 2-1: config 0 descriptor?? [ 1314.111982][ T5823] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1314.968700][ T5823] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1315.038428][ T5823] sq930x: probe of 2-1:0.0 failed with error -71 [ 1315.054215][ T5823] usb 2-1: USB disconnect, device number 5 [ 1315.320044][T21327] usb 6-1: USB disconnect, device number 3 [ 1315.441243][ T1443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1316.108314][T21327] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1316.770681][T21327] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1316.790132][T21327] usb 6-1: config index 0 descriptor too short (expected 40744, got 96) [ 1316.808319][T21327] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1316.828725][T21327] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1316.852542][T21327] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 1316.877867][T21327] usb 6-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 1316.899623][T21327] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 1316.916940][T21327] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 1316.939330][T21327] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 1316.964816][T21327] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1316.987735][T21327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.006458][T21327] usb 6-1: Product: syz [ 1317.014464][T21327] usb 6-1: Manufacturer: syz [ 1317.024883][T21327] usb 6-1: SerialNumber: syz [ 1317.306454][T21327] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 1317.320404][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.328254][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.384477][T21327] usb 6-1: USB disconnect, device number 4 [ 1317.531833][T29339] udevd[29339]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.841194][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.884055][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.526400][ T1476] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.537347][ T1502] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8460'. [ 1318.539403][ T1476] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.561571][ T1476] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.573290][ T1476] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.029530][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1319.228604][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1319.251292][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1319.278310][ T9] usb 8-1: can't read configurations, error -61 [ 1319.440307][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1319.649046][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1319.660649][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1319.669077][ T9] usb 8-1: can't read configurations, error -61 [ 1319.687783][ T9] usb usb8-port1: attempt power cycle [ 1320.128910][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1320.163945][T20849] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1320.175452][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1320.189353][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1320.197545][ T9] usb 8-1: can't read configurations, error -61 [ 1320.358458][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1320.378275][T21327] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1320.388811][T20849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.399697][T20849] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1320.416176][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1320.444512][ T9] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1320.459466][T20849] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1320.475447][ T9] usb 8-1: can't read configurations, error -61 [ 1320.483454][T20849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.492195][ T9] usb usb8-port1: unable to enumerate USB device [ 1320.578571][T21327] usb 2-1: Using ep0 maxpacket: 16 [ 1320.611352][T21327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.638063][T21327] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1320.651651][T21327] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1320.667196][T21327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.676714][T21327] usb 2-1: Product: syz [ 1320.686397][T21327] usb 2-1: Manufacturer: syz [ 1320.691183][T21327] usb 2-1: SerialNumber: syz [ 1320.734282][T20849] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1320.757889][T20849] usb 6-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1320.909697][T21327] usb 2-1: 0:2 : does not exist [ 1320.923449][T21327] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1320.924903][T20849] ttusb_dec_send_command: command bulk message failed: error -71 [ 1320.974259][T21327] usb 2-1: USB disconnect, device number 6 [ 1320.977883][T20849] usb 6-1: USB disconnect, device number 5 [ 1321.070807][ T811] udevd[811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.838436][T21325] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1321.898672][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1322.033149][T21325] usb 2-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1322.062278][T21325] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1322.082694][T21325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.112373][ T1592] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1322.121483][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1322.136347][T21325] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1322.152946][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1322.194206][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1322.213008][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.228810][ T9] usb 6-1: Product: syz [ 1322.238481][ T9] usb 6-1: Manufacturer: syz [ 1322.243142][ T9] usb 6-1: SerialNumber: syz [ 1322.272393][ T9] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1322.299068][ T9] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1322.299068][ T9] Please send a copy of this message to and [ 1322.932694][ T9] ums-sddr09: probe of 6-1:1.0 failed with error -5 [ 1323.112643][T18525] usb 6-1: USB disconnect, device number 6 [ 1324.079037][T13547] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1324.228346][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1324.298577][T13547] usb 6-1: Using ep0 maxpacket: 16 [ 1324.321889][T13547] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1324.361549][T13547] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1324.375805][T13547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.384536][T13547] usb 6-1: Product: syz [ 1324.402766][T13547] usb 6-1: Manufacturer: syz [ 1324.414757][T13547] usb 6-1: SerialNumber: syz [ 1324.429374][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1324.437417][T13547] r8152-cfgselector 6-1: config 0 descriptor?? [ 1324.462448][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.482735][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1324.502869][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1324.524816][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.534544][ T9] usb 8-1: Product: syz [ 1324.557335][ T9] usb 8-1: Manufacturer: syz [ 1324.578217][ T9] usb 8-1: SerialNumber: syz [ 1324.717877][T29914] usb 2-1: USB disconnect, device number 7 [ 1324.823874][ T9] usb 8-1: 0:2 : does not exist [ 1324.854546][ T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1324.908327][T13547] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1324.936631][ T9] usb 8-1: USB disconnect, device number 12 [ 1324.959598][T13547] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 1324.997554][ T811] udevd[811]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1325.348298][ T790] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1325.564103][ T790] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.597048][ T790] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1325.630573][ T790] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1325.630627][ T790] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1325.630653][ T790] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.634325][ T790] usb 9-1: config 0 descriptor?? [ 1326.045495][ T790] usbhid 9-1:0.0: can't add hid device: -71 [ 1326.067316][ T790] usbhid: probe of 9-1:0.0 failed with error -71 [ 1326.093690][ T790] usb 9-1: USB disconnect, device number 6 [ 1327.068576][T21327] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1327.269669][T21327] usb 9-1: Using ep0 maxpacket: 16 [ 1327.285924][T21327] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.309889][T21327] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1327.328666][T21327] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1327.346668][T21327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.365887][T21327] usb 9-1: Product: syz [ 1327.370596][T21327] usb 9-1: Manufacturer: syz [ 1327.375355][T21327] usb 9-1: SerialNumber: syz [ 1327.647114][T21327] usb 9-1: 0:2 : does not exist [ 1327.684229][T21327] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1327.798632][T21327] usb 9-1: USB disconnect, device number 7 [ 1327.891011][ T811] udevd[811]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.218247][T21327] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1328.418796][ T1799] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8500'. [ 1328.463847][T21327] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1328.488368][T21327] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.514037][T21327] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.538498][T21327] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1328.581715][T21327] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1328.598297][T21327] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1328.606797][T21327] usb 9-1: Manufacturer: syz [ 1328.641013][T21327] usb 9-1: config 0 descriptor?? [ 1328.858799][ T1804] netlink: 'syz.7.8501': attribute type 1 has an invalid length. [ 1329.006332][ T1804] libceph: resolve '0..' (ret=-3): failed [ 1329.104357][ T1754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.117443][ T1754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.714105][T21327] usbhid 9-1:0.0: can't add hid device: -71 [ 1329.741609][T21327] usbhid: probe of 9-1:0.0 failed with error -71 [ 1329.811500][T21327] usb 9-1: USB disconnect, device number 8 [ 1330.589609][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1330.787876][ T9] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1330.801506][T13547] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1330.818355][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1330.869166][ T9] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1330.887732][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.908707][ T9] usb 6-1: Product: syz [ 1330.912958][ T9] usb 6-1: Manufacturer: syz [ 1330.941298][ T9] usb 6-1: SerialNumber: syz [ 1330.952857][ T9] usb 6-1: config 0 descriptor?? [ 1330.970586][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1331.008367][T13547] usb 8-1: Using ep0 maxpacket: 32 [ 1331.016848][T13547] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1331.041224][T13547] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1331.063258][T13547] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1331.079032][T13547] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1331.096273][T13547] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1331.108029][T13547] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1331.129707][T13547] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1331.144493][T13547] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.179269][T13547] usb 8-1: config 0 descriptor?? [ 1331.413706][T13547] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1331.769187][T13547] usb 8-1: USB disconnect, device number 13 [ 1331.809212][T13547] usblp0: removed [ 1332.401913][T20849] usb 6-1: USB disconnect, device number 8 [ 1332.655861][ T1873] [U] ¹éM [ 1333.578450][T20849] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1333.778465][T20849] usb 2-1: Using ep0 maxpacket: 32 [ 1333.786313][T20849] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1333.797867][T20849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1333.810825][T20849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1333.831006][T20849] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1333.846286][T20849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.854979][T20849] usb 2-1: Product: syz [ 1333.859323][T20849] usb 2-1: Manufacturer: syz [ 1333.863958][T20849] usb 2-1: SerialNumber: syz [ 1333.878905][T20849] usb 2-1: config 0 descriptor?? [ 1333.991265][T29433] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1334.194934][T29433] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.221711][T29433] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.242605][T29433] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1334.276903][T29433] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1334.293305][T29433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.318747][T29433] usb 9-1: config 0 descriptor?? [ 1334.780805][T29433] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1334.834648][T29433] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1336.102805][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 1336.378996][T18525] usb 2-1: USB disconnect, device number 8 [ 1336.563666][ T1982] netlink: 'syz.1.8528': attribute type 28 has an invalid length. [ 1337.229368][T21325] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 1337.439419][T21325] usb 9-1: device firmware changed [ 1337.474141][ T1508] usb 9-1: USB disconnect, device number 9 [ 1337.709329][ T1508] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1337.943159][ T1508] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1337.961942][ T1508] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1338.005781][ T1508] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1338.034750][ T1508] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.056520][ T1508] usb 9-1: Product: syz [ 1338.071273][ T1508] usb 9-1: Manufacturer: syz [ 1338.087686][ T1508] usb 9-1: SerialNumber: syz [ 1338.109554][ T1508] usb 9-1: config 0 descriptor?? [ 1338.142595][ T1508] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1338.548269][T29914] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1338.613733][T20849] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1338.760870][T29914] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.786709][T29914] usb 8-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1338.806391][T29914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.825130][T29914] usb 8-1: Product: syz [ 1338.835512][T29914] usb 8-1: Manufacturer: syz [ 1338.841605][T20849] usb 2-1: not running at top speed; connect to a high speed hub [ 1338.858387][T29914] usb 8-1: SerialNumber: syz [ 1338.864951][T20849] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.878683][T20849] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1338.897496][T29914] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1338.911186][T20849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.952757][T20849] usb 2-1: Found UVC 1.00 device (046d:0825) [ 1339.551327][T20849] uvcvideo 2-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 1339.582633][T20849] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1339.609754][T20849] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 1339.651643][T20849] usb 2-1: USB disconnect, device number 9 [ 1339.752212][ T2031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.769112][ T2031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.782401][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1339.782417][ T27] audit: type=1326 audit(1789876593.326:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.7.8538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1339.787567][T21325] usb 9-1: USB disconnect, device number 10 [ 1339.793747][ T27] audit: type=1326 audit(1789876593.336:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.7.8538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1339.848110][T29914] gspca_mr97310a: reg read [21] error -71 [ 1339.863238][T29914] mr97310a: probe of 8-1:1.0 failed with error -71 [ 1339.874799][ T27] audit: type=1326 audit(1789876593.336:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.7.8538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1339.912447][ T27] audit: type=1326 audit(1789876593.336:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.7.8538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25b839ddeb code=0x7ffc0000 [ 1339.944822][T29914] usb 8-1: USB disconnect, device number 14 [ 1340.012363][ T27] audit: type=1326 audit(1789876593.386:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.7.8538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1340.056204][ T27] audit: type=1326 audit(1789876593.386:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.7.8538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25b839ddeb code=0x7ffc0000 [ 1340.097988][ T27] audit: type=1326 audit(1789876593.386:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.7.8538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1340.139925][ T27] audit: type=1326 audit(1789876593.406:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2029 comm="syz.7.8538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b839e159 code=0x7ffc0000 [ 1340.243463][ T2082] GUP no longer grows the stack in syz.1.8546 (2082): 200000004000-200000005000 (200000001000) [ 1340.255023][ T2082] CPU: 0 PID: 2082 Comm: syz.1.8546 Not tainted syzkaller #0 [ 1340.262525][ T2082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1340.272788][ T2082] Call Trace: [ 1340.276087][ T2082] [ 1340.279048][ T2082] dump_stack_lvl+0x18c/0x250 [ 1340.283759][ T2082] ? show_regs_print_info+0x20/0x20 [ 1340.288980][ T2082] ? load_image+0x420/0x420 [ 1340.293501][ T2082] ? find_vma+0x134/0x1b0 [ 1340.297862][ T2082] __get_user_pages+0xfe7/0x1580 [ 1340.302838][ T2082] ? rb_commit+0x6f7/0x750 [ 1340.307469][ T2082] ? populate_vma_page_range+0x380/0x380 [ 1340.313260][ T2082] ? __gup_longterm_locked+0x21d8/0x2cb0 [ 1340.318925][ T2082] ? down_read_killable+0x1d0/0x340 [ 1340.324146][ T2082] __gup_longterm_locked+0x2345/0x2cb0 [ 1340.329733][ T2082] ? pin_user_pages_remote+0x220/0x220 [ 1340.335211][ T2082] ? mark_lock+0x94/0x320 [ 1340.339564][ T2082] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1340.345561][ T2082] ? __lock_acquire+0x7d80/0x7d80 [ 1340.350716][ T2082] ? lock_chain_count+0x20/0x20 [ 1340.355584][ T2082] ? internal_get_user_pages_fast+0x1f8e/0x27a0 [ 1340.361852][ T2082] internal_get_user_pages_fast+0x2174/0x27a0 [ 1340.368010][ T2082] ? get_user_pages_fast_only+0xa0/0xa0 [ 1340.373690][ T2082] ? trace_contention_end+0x39/0xe0 [ 1340.379207][ T2082] ? __mutex_lock+0x30d/0xc80 [ 1340.384009][ T2082] ? futex_wait_queue+0x9d/0x1b0 [ 1340.389176][ T2082] __iov_iter_get_pages_alloc+0x380/0xac0 [ 1340.394955][ T2082] ? wait_for_space+0x24e/0x2d0 [ 1340.399851][ T2082] iov_iter_get_pages2+0x5f/0xa0 [ 1340.404816][ T2082] __se_sys_vmsplice+0x5e5/0x11f0 [ 1340.409978][ T2082] ? __x64_sys_vmsplice+0xb0/0xb0 [ 1340.415091][ T2082] ? fd_install+0x60/0x4e0 [ 1340.419575][ T2082] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1340.425608][ T2082] ? lockdep_hardirqs_on+0x98/0x150 [ 1340.430916][ T2082] do_syscall_64+0x55/0xb0 [ 1340.435354][ T2082] ? clear_bhb_loop+0x40/0x90 [ 1340.440138][ T2082] ? clear_bhb_loop+0x40/0x90 [ 1340.444922][ T2082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1340.451067][ T2082] RIP: 0033:0x7f51c199e159 [ 1340.455500][ T2082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.475389][ T2082] RSP: 002b:00007f51c285d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1340.483849][ T2082] RAX: ffffffffffffffda RBX: 00007f51c1c25fa0 RCX: 00007f51c199e159 [ 1340.492021][ T2082] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 1340.500020][ T2082] RBP: 00007f51c1a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1340.508098][ T2082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.516087][ T2082] R13: 00007f51c1c26038 R14: 00007f51c1c25fa0 R15: 00007ffdeb8773a8 [ 1340.524264][ T2082] [ 1340.732824][ T2082] trusted_key: syz.1.8546 sent an empty control message without MSG_MORE. [ 1340.815148][ T5786] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1341.259131][T29433] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1341.463210][T29433] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.484441][T29433] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 1341.513478][T29433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.611042][T29433] snd-ua101: probe of 9-1:1.0 failed with error -2 [ 1341.802231][T20849] usb 9-1: USB disconnect, device number 11 [ 1341.858323][T29914] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1342.078265][T29914] usb 2-1: Using ep0 maxpacket: 8 [ 1342.088494][T29914] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1342.118837][T29914] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1342.141975][T29914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1342.169288][T29914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1342.179670][T29914] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1342.197969][T29914] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1342.207479][T29914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.432588][T29914] usb 2-1: usb_control_msg returned -32 [ 1342.448243][T29914] usbtmc 2-1:16.0: can't read capabilities [ 1342.768294][T29914] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1342.807120][ T2126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8561'. [ 1342.948215][T29914] usb 9-1: Using ep0 maxpacket: 32 [ 1342.967453][T29914] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1342.989829][T29914] usb 9-1: config 0 has no interface number 0 [ 1342.996198][T29914] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1343.026016][T29914] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1343.043689][T29914] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1343.054493][T29914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.075169][T29914] usb 9-1: Product: syz [ 1343.082599][T29914] usb 9-1: Manufacturer: syz [ 1343.087277][T29914] usb 9-1: SerialNumber: syz [ 1343.119456][T29914] usb 9-1: config 0 descriptor?? [ 1343.570762][ T857] Bluetooth: hci0: command 0x0406 tx timeout [ 1343.737965][T29914] appletouch 9-1:0.85: Geyser mode initialized. [ 1343.746947][T29914] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input11 [ 1343.888662][T20849] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1343.950672][T18525] usb 9-1: USB disconnect, device number 12 [ 1343.973810][T18525] appletouch 9-1:0.85: input: appletouch disconnected [ 1344.094548][T20849] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1344.104772][T20849] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1344.118622][T20849] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1344.128079][T20849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.151979][T20849] usb 6-1: probing VID:PID(0424:012C) [ 1344.169900][T20849] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 1344.176272][T20849] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1344.183753][T20849] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 1344.191938][T20849] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1344.198680][T20849] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1344.354436][ T2145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.368693][ T2145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.408320][T29433] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1344.576066][ T5853] usb 2-1: USB disconnect, device number 10 [ 1344.588976][T29433] usb 8-1: Using ep0 maxpacket: 8 [ 1344.599815][T20849] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1344.603512][T29433] usb 8-1: config 7 has an invalid interface number: 172 but max is 0 [ 1344.618552][T29433] usb 8-1: config 7 has no interface number 0 [ 1344.625198][T29433] usb 8-1: config 7 interface 172 has no altsetting 0 [ 1344.652138][T29433] usb 8-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=f5.e7 [ 1344.666792][T29433] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.676141][T29433] usb 8-1: Product: syz [ 1344.685603][T29433] usb 8-1: Manufacturer: syz [ 1344.698588][T29433] usb 8-1: SerialNumber: syz [ 1344.809732][T20849] usb 6-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 1344.888282][T21325] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1344.929684][T29433] uvcvideo 8-1:7.172: Found Unit with invalid ID 0 [ 1344.936532][T29433] usb 8-1: Found UVC 64.ce device syz (05a9:2641) [ 1344.943948][T29433] usb 8-1: No valid video chain found. [ 1344.956601][T29433] usb 8-1: USB disconnect, device number 15 [ 1345.012156][ T2145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.027839][ T2145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.071874][T21325] usb 9-1: not running at top speed; connect to a high speed hub [ 1345.081289][T21325] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1345.090669][T21325] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.100987][T21325] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1345.110035][T21325] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1345.120063][T21325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.142352][T21325] usb 9-1: Found UVC 1.00 device (046d:0825) [ 1345.548217][T21325] usb 9-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 1345.565503][T21325] usb 9-1: No streaming interface found for terminal 2. [ 1345.586625][T21325] usb 9-1: USB disconnect, device number 13 [ 1345.798390][T29433] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1345.868524][ T5853] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1345.877154][T20849] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1345.901499][T29914] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1345.912361][T20849] usb 6-1: USB disconnect, device number 9 [ 1345.978315][T29433] usb 8-1: Using ep0 maxpacket: 16 [ 1345.989511][T29433] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1345.995022][T20849] USB vub300 remote SDIO host controller[0] now disconnected [ 1346.017414][T29433] usb 8-1: config 1 has an invalid interface number: 232 but max is 0 [ 1346.041802][T29433] usb 8-1: config 1 has no interface number 0 [ 1346.048096][T29433] usb 8-1: config 1 interface 232 has no altsetting 0 [ 1346.070429][T29433] usb 8-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice=2e.2c [ 1346.070473][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.088241][T29433] usb 8-1: New USB device strings: Mfr=139, Product=20, SerialNumber=3 [ 1346.111886][T29433] usb 8-1: Product: syz [ 1346.118316][ T5853] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1346.128313][T29433] usb 8-1: Manufacturer: syz [ 1346.137799][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.156122][T29433] usb 8-1: SerialNumber: syz [ 1346.166571][ T5853] usb 2-1: config 0 descriptor?? [ 1346.222824][ T27] audit: type=1326 audit(1789876599.766:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.278442][ T27] audit: type=1326 audit(1789876599.766:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.278535][ T27] audit: type=1326 audit(1789876599.796:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.278574][ T27] audit: type=1326 audit(1789876599.796:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.399804][ T2158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.439142][ T2158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.459075][ T27] audit: type=1326 audit(1789876599.796:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.481662][ T2167] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8576'. [ 1346.519525][ T5853] usbhid 2-1:0.0: can't add hid device: -71 [ 1346.528736][ T5853] usbhid: probe of 2-1:0.0 failed with error -71 [ 1346.538426][ T27] audit: type=1326 audit(1789876599.796:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.578489][ T5853] usb 2-1: USB disconnect, device number 11 [ 1346.594692][T29433] hub 8-1:1.232: bad descriptor, ignoring hub [ 1346.610998][T29433] hub: probe of 8-1:1.232 failed with error -5 [ 1346.638333][ T27] audit: type=1326 audit(1789876599.796:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.639409][T29433] option 8-1:1.232: GSM modem (1-port) converter detected [ 1346.724250][ T27] audit: type=1326 audit(1789876599.796:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.783732][T29433] usb 8-1: USB disconnect, device number 16 [ 1346.792889][ T27] audit: type=1326 audit(1789876599.796:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2163 comm="syz.8.8575" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc0a919e159 code=0x7ffc0000 [ 1346.794432][T29433] option 8-1:1.232: device disconnected [ 1346.928434][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 1346.938432][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1030, name: kworker/u4:3 [ 1346.947678][ C0] preempt_count: 101, expected: 0 [ 1346.952869][ C0] RCU nest depth: 0, expected: 0 [ 1346.957842][ C0] 5 locks held by kworker/u4:3/1030: [ 1346.963196][ C0] #0: ffff8880196ce538 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1346.974463][ C0] #1: ffffc9000c65fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1346.986789][ C0] #2: ffff88808a18a0a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_uring_try_cancel_requests+0x456/0x540 [ 1346.999007][ C0] #3: ffff88801f29f118 (&table->hbs[i].lock){+.+.}-{2:2}, at: io_poll_remove_all_table+0xbe/0x2c0 [ 1347.009843][ C0] #4: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1347.020456][ C0] Preemption disabled at: [ 1347.020472][ C0] [<0000000000000000>] 0x0 [ 1347.029284][ C0] CPU: 0 PID: 1030 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1347.036914][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1347.047081][ C0] Workqueue: iou_exit io_ring_exit_work [ 1347.052641][ C0] Call Trace: [ 1347.055922][ C0] [ 1347.058781][ C0] dump_stack_lvl+0x18c/0x250 [ 1347.063631][ C0] ? show_regs_print_info+0x20/0x20 [ 1347.068831][ C0] ? load_image+0x420/0x420 [ 1347.073344][ C0] __might_resched+0x48d/0x5f0 [ 1347.078137][ C0] ? __might_sleep+0xe0/0xe0 [ 1347.082771][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1347.088840][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1347.093757][ C0] ? kasan_set_track+0x5f/0x70 [ 1347.098638][ C0] ? kasan_save_free_info+0x28/0x40 [ 1347.103957][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 1347.109252][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 1347.114908][ C0] __flush_work+0x10f/0xac0 [ 1347.119437][ C0] ? flush_work+0x20/0x20 [ 1347.123794][ C0] ? __timer_delete+0x6b/0x290 [ 1347.128687][ C0] ? mark_lock+0x94/0x320 [ 1347.133051][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1347.139211][ C0] ? mod_delayed_work_on+0x1c0/0x1c0 [ 1347.144508][ C0] ? lock_chain_count+0x20/0x20 [ 1347.149505][ C0] ? __cancel_work_timer+0x36e/0x560 [ 1347.154838][ C0] __cancel_work_timer+0x3f8/0x560 [ 1347.159977][ C0] ? cancel_work_sync+0x20/0x20 [ 1347.164875][ C0] ? kobject_put+0x260/0x450 [ 1347.169699][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 1347.174873][ C0] ? kobject_put+0x421/0x450 [ 1347.179481][ C0] mmc_free_host+0x19/0x30 [ 1347.183922][ C0] call_timer_fn+0x189/0x540 [ 1347.188524][ C0] ? kref_get+0x70/0x70 [ 1347.192695][ C0] ? call_timer_fn+0xd2/0x540 [ 1347.197397][ C0] ? __run_timers+0x810/0x810 [ 1347.202187][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1347.207392][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1347.212607][ C0] ? kref_get+0x70/0x70 [ 1347.216925][ C0] __run_timers+0x570/0x810 [ 1347.221468][ C0] ? detach_timer+0x2b0/0x2b0 [ 1347.226273][ C0] ? lock_chain_count+0x20/0x20 [ 1347.231181][ C0] run_timer_softirq+0x67/0xf0 [ 1347.235982][ C0] handle_softirqs+0x27d/0x820 [ 1347.241474][ C0] ? read_tsc+0x9/0x20 [ 1347.245592][ C0] ? ktime_get+0x24b/0x280 [ 1347.250142][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1347.255277][ C0] ? do_softirq+0x1a0/0x1a0 [ 1347.259880][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1347.265292][ C0] __irq_exit_rcu+0xd3/0x190 [ 1347.269948][ C0] ? irq_exit_rcu+0x20/0x20 [ 1347.274518][ C0] irq_exit_rcu+0x9/0x20 [ 1347.278891][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1347.284604][ C0] [ 1347.287577][ C0] [ 1347.290544][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1347.296657][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1347.301996][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1347.321755][ C0] RSP: 0018:ffffc9000c65f7c0 EFLAGS: 00000206 [ 1347.327973][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ca376bdc1294100 [ 1347.335992][ C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 1347.344011][ C0] RBP: ffffc9000c65f8c8 R08: dffffc0000000000 R09: 1ffffffff223d6c0 [ 1347.352023][ C0] R10: dffffc0000000000 R11: fffffbfff223d6c1 R12: 1ffff920018cbf04 [ 1347.360025][ C0] R13: ffff88801f29f118 R14: 0000000000000246 R15: dffffc0000000000 [ 1347.368147][ C0] ? io_poll_remove_all_table+0x247/0x2c0 [ 1347.374258][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1347.379650][ C0] ? __rwlock_init+0x150/0x150 [ 1347.384614][ C0] _raw_spin_lock+0x2e/0x40 [ 1347.389224][ C0] ? io_poll_remove_all_table+0xbe/0x2c0 [ 1347.395564][ C0] io_poll_remove_all_table+0xbe/0x2c0 [ 1347.401243][ C0] io_poll_remove_all+0x3e/0x50 [ 1347.406109][ C0] io_uring_try_cancel_requests+0x464/0x540 [ 1347.412140][ C0] ? io_uring_cancel_generic+0x6c0/0x6c0 [ 1347.417817][ C0] ? io_move_task_work_from_local+0x209/0x220 [ 1347.424009][ C0] ? io_ring_exit_work+0x1f7/0x830 [ 1347.429215][ C0] io_ring_exit_work+0x226/0x830 [ 1347.434198][ C0] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1347.440027][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1347.445247][ C0] ? process_scheduled_works+0x975/0x1600 [ 1347.451000][ C0] ? process_scheduled_works+0x975/0x1600 [ 1347.456728][ C0] process_scheduled_works+0xa60/0x1600 [ 1347.462393][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1347.467984][ C0] ? assign_work+0x3cc/0x5d0 [ 1347.472713][ C0] worker_thread+0xa5e/0xfe0 [ 1347.477377][ C0] kthread+0x2fa/0x390 [ 1347.481470][ C0] ? pr_cont_work+0x550/0x550 [ 1347.486182][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1347.490817][ C0] ret_from_fork+0x48/0x80 [ 1347.495337][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1347.500140][ C0] ret_from_fork_asm+0x11/0x20 [ 1347.504971][ C0] [ 1347.508402][ C0] ODEBUG: object ffffc900000079c0 is NOT on stack ffffc9000c658000, but annotated. [ 1347.511184][ C0] [ 1347.511192][ C0] ====================================================== [ 1347.511200][ C0] WARNING: possible circular locking dependency detected [ 1347.511207][ C0] syzkaller #0 Tainted: G W [ 1347.511219][ C0] ------------------------------------------------------ [ 1347.511225][ C0] kworker/u4:3/1030 is trying to acquire lock: [ 1347.511235][ C0] ffffffff8d1263e0 (console_owner){..-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1347.511289][ C0] [ 1347.511289][ C0] but task is already holding lock: [ 1347.511295][ C0] ffffffff9754b2b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 1347.511339][ C0] [ 1347.511339][ C0] which lock already depends on the new lock. [ 1347.511339][ C0] [ 1347.511345][ C0] [ 1347.511345][ C0] the existing dependency chain (in reverse order) is: [ 1347.511351][ C0] [ 1347.511351][ C0] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 1347.511374][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1347.511427][ C0] debug_object_activate+0x6c/0x500 [ 1347.511449][ C0] insert_work+0x35/0x310 [ 1347.511467][ C0] __queue_work+0xbfd/0xfd0 [ 1347.511482][ C0] queue_work_on+0x128/0x1f0 [ 1347.511498][ C0] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 1347.511525][ C0] rcu_init+0x10d/0x160 [ 1347.511543][ C0] start_kernel+0x1fd/0x4e0 [ 1347.511561][ C0] x86_64_start_reservations+0x2a/0x30 [ 1347.511576][ C0] copy_bootdata+0x0/0xd0 [ 1347.511597][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1347.511620][ C0] [ 1347.511620][ C0] -> #3 (&pool->lock){-.-.}-{2:2}: [ 1347.511643][ C0] _raw_spin_lock+0x2e/0x40 [ 1347.511662][ C0] __queue_work+0x72f/0xfd0 [ 1347.511677][ C0] queue_work_on+0x128/0x1f0 [ 1347.511693][ C0] rpm_suspend+0x1133/0x1b60 [ 1347.511714][ C0] __pm_runtime_idle+0x12f/0x1a0 [ 1347.511734][ C0] __device_attach+0x352/0x420 [ 1347.511750][ C0] bus_probe_device+0x180/0x260 [ 1347.511770][ C0] device_add+0x87c/0xc40 [ 1347.511788][ C0] serial_base_port_add+0x2f6/0x430 [ 1347.511808][ C0] serial_core_register_port+0x378/0x20b0 [ 1347.511826][ C0] serial8250_register_8250_port+0x15fd/0x1f40 [ 1347.511847][ C0] serial_pnp_probe+0x577/0x750 [ 1347.511867][ C0] pnp_device_probe+0x305/0x4b0 [ 1347.511887][ C0] really_probe+0x247/0xae0 [ 1347.511901][ C0] __driver_probe_device+0x1f5/0x390 [ 1347.511917][ C0] driver_probe_device+0x4f/0x420 [ 1347.511933][ C0] __driver_attach+0x444/0x6d0 [ 1347.511946][ C0] bus_for_each_dev+0x235/0x2b0 [ 1347.511968][ C0] bus_add_driver+0x340/0x630 [ 1347.511987][ C0] driver_register+0x23a/0x310 [ 1347.512003][ C0] serial8250_init+0x9a/0x170 [ 1347.512020][ C0] do_one_initcall+0x242/0x790 [ 1347.512057][ C0] do_initcall_level+0x13d/0x1f0 [ 1347.512075][ C0] do_initcalls+0x69/0xd0 [ 1347.512093][ C0] kernel_init_freeable+0x3d9/0x560 [ 1347.512111][ C0] kernel_init+0x1d/0x1c0 [ 1347.512130][ C0] ret_from_fork+0x48/0x80 [ 1347.512151][ C0] ret_from_fork_asm+0x11/0x20 [ 1347.512171][ C0] [ 1347.512171][ C0] -> #2 (&dev->power.lock){-...}-{2:2}: [ 1347.512196][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1347.512214][ C0] __pm_runtime_resume+0x10f/0x170 [ 1347.512251][ C0] __uart_start+0x171/0x3e0 [ 1347.512266][ C0] uart_write+0x449/0x5d0 [ 1347.512282][ C0] n_tty_write+0xd3d/0x11e0 [ 1347.512304][ C0] file_tty_write+0x529/0x960 [ 1347.512324][ C0] vfs_write+0x474/0x9a0 [ 1347.512345][ C0] ksys_write+0x151/0x260 [ 1347.512367][ C0] do_syscall_64+0x55/0xb0 [ 1347.512397][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1347.512421][ C0] [ 1347.512421][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1347.512444][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1347.512462][ C0] serial8250_console_write+0x181/0x18b0 [ 1347.512483][ C0] console_flush_all+0x6ad/0xcf0 [ 1347.512503][ C0] console_unlock+0xad/0x350 [ 1347.512522][ C0] vprintk_emit+0x497/0x610 [ 1347.512539][ C0] _printk+0xde/0x130 [ 1347.512557][ C0] register_console+0xb96/0xf00 [ 1347.512577][ C0] univ8250_console_init+0x45/0x50 [ 1347.512592][ C0] console_init+0x17b/0x5d0 [ 1347.512609][ C0] start_kernel+0x2c8/0x4e0 [ 1347.512625][ C0] x86_64_start_reservations+0x2a/0x30 [ 1347.512641][ C0] copy_bootdata+0x0/0xd0 [ 1347.512662][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1347.512684][ C0] [ 1347.512684][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 1347.512706][ C0] __lock_acquire+0x37ef/0x7d80 [ 1347.512725][ C0] lock_acquire+0x19e/0x420 [ 1347.512742][ C0] console_flush_all+0x676/0xcf0 [ 1347.512762][ C0] console_unlock+0xad/0x350 [ 1347.512780][ C0] vprintk_emit+0x497/0x610 [ 1347.512799][ C0] _printk+0xde/0x130 [ 1347.512816][ C0] __debug_object_init+0x18d/0x450 [ 1347.512835][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1347.512855][ C0] wakeup_source_unregister+0x116/0x190 [ 1347.512874][ C0] mmc_host_classdev_release+0x47/0x100 [ 1347.512897][ C0] device_release+0xbc/0x1e0 [ 1347.512917][ C0] kobject_put+0x21b/0x450 [ 1347.512933][ C0] call_timer_fn+0x189/0x540 [ 1347.512949][ C0] __run_timers+0x570/0x810 [ 1347.512964][ C0] run_timer_softirq+0x67/0xf0 [ 1347.512980][ C0] handle_softirqs+0x27d/0x820 [ 1347.512996][ C0] __irq_exit_rcu+0xd3/0x190 [ 1347.513012][ C0] irq_exit_rcu+0x9/0x20 [ 1347.513026][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1347.513042][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1347.513064][ C0] lock_acquire+0x208/0x420 [ 1347.513081][ C0] _raw_spin_lock+0x2e/0x40 [ 1347.513097][ C0] io_poll_remove_all_table+0xbe/0x2c0 [ 1347.513116][ C0] io_poll_remove_all+0x3e/0x50 [ 1347.513133][ C0] io_uring_try_cancel_requests+0x464/0x540 [ 1347.513150][ C0] io_ring_exit_work+0x226/0x830 [ 1347.513166][ C0] process_scheduled_works+0xa60/0x1600 [ 1347.513186][ C0] worker_thread+0xa5e/0xfe0 [ 1347.513206][ C0] kthread+0x2fa/0x390 [ 1347.513221][ C0] ret_from_fork+0x48/0x80 [ 1347.513241][ C0] ret_from_fork_asm+0x11/0x20 [ 1347.513260][ C0] [ 1347.513260][ C0] other info that might help us debug this: [ 1347.513260][ C0] [ 1347.513266][ C0] Chain exists of: [ 1347.513266][ C0] console_owner --> &pool->lock --> &obj_hash[i].lock [ 1347.513266][ C0] [ 1347.513293][ C0] Possible unsafe locking scenario: [ 1347.513293][ C0] [ 1347.513298][ C0] CPU0 CPU1 [ 1347.513303][ C0] ---- ---- [ 1347.513308][ C0] lock(&obj_hash[i].lock); [ 1347.513318][ C0] lock(&pool->lock); [ 1347.513330][ C0] lock(&obj_hash[i].lock); [ 1347.513341][ C0] lock(console_owner); [ 1347.513352][ C0] [ 1347.513352][ C0] *** DEADLOCK *** [ 1347.513352][ C0] [ 1347.513356][ C0] 8 locks held by kworker/u4:3/1030: [ 1347.513366][ C0] #0: ffff8880196ce538 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1347.513423][ C0] #1: ffffc9000c65fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1347.513468][ C0] #2: ffff88808a18a0a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_uring_try_cancel_requests+0x456/0x540 [ 1347.513508][ C0] #3: ffff88801f29f118 (&table->hbs[i].lock){+.+.}-{2:2}, at: io_poll_remove_all_table+0xbe/0x2c0 [ 1347.513552][ C0] #4: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1347.513593][ C0] #5: ffffffff9754b2b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 1347.513638][ C0] #6: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 1347.513679][ C0] #7: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 1347.513724][ C0] [ 1347.513724][ C0] stack backtrace: [ 1347.513730][ C0] CPU: 0 PID: 1030 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 1347.513749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1347.513761][ C0] Workqueue: iou_exit io_ring_exit_work [ 1347.513779][ C0] Call Trace: [ 1347.513787][ C0] [ 1347.513794][ C0] dump_stack_lvl+0x18c/0x250 [ 1347.513820][ C0] ? load_image+0x420/0x420 [ 1347.513840][ C0] ? show_regs_print_info+0x20/0x20 [ 1347.513867][ C0] ? print_circular_bug+0x12b/0x1a0 [ 1347.513890][ C0] check_noncircular+0x2fc/0x400 [ 1347.513913][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 1347.513933][ C0] ? lockdep_lock+0xf5/0x230 [ 1347.513959][ C0] __lock_acquire+0x37ef/0x7d80 [ 1347.513989][ C0] ? verify_lock_unused+0x140/0x140 [ 1347.514017][ C0] lock_acquire+0x19e/0x420 [ 1347.514037][ C0] ? console_flush_all+0x10b/0xcf0 [ 1347.514061][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1347.514080][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 1347.514102][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1347.514123][ C0] ? __rwlock_init+0x150/0x150 [ 1347.514146][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1347.514169][ C0] console_flush_all+0x676/0xcf0 [ 1347.514190][ C0] ? console_flush_all+0x10b/0xcf0 [ 1347.514213][ C0] ? console_flush_all+0x10b/0xcf0 [ 1347.514238][ C0] ? is_console_locked+0x20/0x20 [ 1347.514265][ C0] console_unlock+0xad/0x350 [ 1347.514288][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1347.514313][ C0] vprintk_emit+0x497/0x610 [ 1347.514336][ C0] ? printk_sprint+0x460/0x460 [ 1347.514360][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 1347.514395][ C0] _printk+0xde/0x130 [ 1347.514416][ C0] ? load_image+0x420/0x420 [ 1347.514436][ C0] ? alloc_object+0x1c/0x640 [ 1347.514461][ C0] ? lock_release+0x8c0/0x8c0 [ 1347.514483][ C0] __debug_object_init+0x18d/0x450 [ 1347.514511][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1347.514534][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1347.514557][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1347.514586][ C0] ? read_tsc+0x9/0x20 [ 1347.514605][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1347.514627][ C0] ? synchronize_srcu+0x25a/0x280 [ 1347.514651][ C0] wakeup_source_unregister+0x116/0x190 [ 1347.514674][ C0] mmc_host_classdev_release+0x47/0x100 [ 1347.514699][ C0] ? mmc_free_host+0x30/0x30 [ 1347.514723][ C0] device_release+0xbc/0x1e0 [ 1347.514747][ C0] kobject_put+0x21b/0x450 [ 1347.514767][ C0] call_timer_fn+0x189/0x540 [ 1347.514786][ C0] ? kref_get+0x70/0x70 [ 1347.514803][ C0] ? call_timer_fn+0xd2/0x540 [ 1347.514820][ C0] ? __run_timers+0x810/0x810 [ 1347.514841][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1347.514862][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1347.514878][ C0] ? kref_get+0x70/0x70 [ 1347.514896][ C0] __run_timers+0x570/0x810 [ 1347.514920][ C0] ? detach_timer+0x2b0/0x2b0 [ 1347.514940][ C0] ? lock_chain_count+0x20/0x20 [ 1347.514963][ C0] run_timer_softirq+0x67/0xf0 [ 1347.514981][ C0] handle_softirqs+0x27d/0x820 [ 1347.514999][ C0] ? read_tsc+0x9/0x20 [ 1347.515017][ C0] ? ktime_get+0x24b/0x280 [ 1347.515039][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1347.515058][ C0] ? do_softirq+0x1a0/0x1a0 [ 1347.515078][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1347.515101][ C0] __irq_exit_rcu+0xd3/0x190 [ 1347.515119][ C0] ? irq_exit_rcu+0x20/0x20 [ 1347.515138][ C0] irq_exit_rcu+0x9/0x20 [ 1347.515155][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1347.515173][ C0] [ 1347.515180][ C0] [ 1347.515185][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1347.515210][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1347.515232][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1347.515247][ C0] RSP: 0018:ffffc9000c65f7c0 EFLAGS: 00000206 [ 1347.515262][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ca376bdc1294100 [ 1347.515275][ C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 1347.515288][ C0] RBP: ffffc9000c65f8c8 R08: dffffc0000000000 R09: 1ffffffff223d6c0 [ 1347.515301][ C0] R10: dffffc0000000000 R11: fffffbfff223d6c1 R12: 1ffff920018cbf04 [ 1347.515314][ C0] R13: ffff88801f29f118 R14: 0000000000000246 R15: dffffc0000000000 [ 1347.515339][ C0] ? io_poll_remove_all_table+0x247/0x2c0 [ 1347.515360][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1347.515381][ C0] ? __rwlock_init+0x150/0x150 [ 1347.515415][ C0] _raw_spin_lock+0x2e/0x40 [ 1347.515435][ C0] ? io_poll_remove_all_table+0xbe/0x2c0 [ 1347.515454][ C0] io_poll_remove_all_table+0xbe/0x2c0 [ 1347.515478][ C0] io_poll_remove_all+0x3e/0x50 [ 1347.515497][ C0] io_uring_try_cancel_requests+0x464/0x540 [ 1347.515518][ C0] ? io_uring_cancel_generic+0x6c0/0x6c0 [ 1347.515539][ C0] ? io_move_task_work_from_local+0x209/0x220 [ 1347.515558][ C0] ? io_ring_exit_work+0x1f7/0x830 [ 1347.515578][ C0] io_ring_exit_work+0x226/0x830 [ 1347.515600][ C0] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1347.515625][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1347.515645][ C0] ? process_scheduled_works+0x975/0x1600 [ 1347.515667][ C0] ? process_scheduled_works+0x975/0x1600 [ 1347.515691][ C0] process_scheduled_works+0xa60/0x1600 [ 1347.515723][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1347.515748][ C0] ? assign_work+0x3cc/0x5d0 [ 1347.515772][ C0] worker_thread+0xa5e/0xfe0 [ 1347.515805][ C0] kthread+0x2fa/0x390 [ 1347.515823][ C0] ? pr_cont_work+0x550/0x550 [ 1347.515844][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1347.515863][ C0] ret_from_fork+0x48/0x80 [ 1347.515884][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1347.515900][ C0] ret_from_fork_asm+0x11/0x20 [ 1347.515928][ C0] [ 1348.872810][ C0] ------------[ cut here ]------------ [ 1348.878270][ C0] WARNING: CPU: 0 PID: 1030 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 1348.888092][ C0] Modules linked in: [ 1348.892385][ C0] CPU: 0 PID: 1030 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 1348.901845][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1348.912106][ C0] Workqueue: iou_exit io_ring_exit_work [ 1348.917682][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 1348.923695][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 1348.943698][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010046 [ 1348.949884][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: 1ca376bdc1294100 [ 1348.958066][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 1348.966222][ C0] RBP: dffffc0000000000 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 1348.974378][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88807fb0da20 [ 1348.982556][ C0] R13: ffff888023feab98 R14: 0000000000000001 R15: ffffffff8acbe000 [ 1348.990726][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1348.999783][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1349.006412][ C0] CR2: 0000001b2d120ff8 CR3: 000000006ead2000 CR4: 00000000003526f0 [ 1349.014657][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 1349.022729][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1349.030724][ C0] Call Trace: [ 1349.034034][ C0] [ 1349.037154][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1349.042187][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1349.048205][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1349.054217][ C0] ? read_tsc+0x9/0x20 [ 1349.058286][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1349.064153][ C0] ? synchronize_srcu+0x25a/0x280 [ 1349.069208][ C0] wakeup_source_unregister+0x116/0x190 [ 1349.074767][ C0] mmc_host_classdev_release+0x47/0x100 [ 1349.080337][ C0] ? mmc_free_host+0x30/0x30 [ 1349.084971][ C0] device_release+0xbc/0x1e0 [ 1349.089615][ C0] kobject_put+0x21b/0x450 [ 1349.094063][ C0] call_timer_fn+0x189/0x540 [ 1349.098675][ C0] ? kref_get+0x70/0x70 [ 1349.102884][ C0] ? call_timer_fn+0xd2/0x540 [ 1349.107719][ C0] ? __run_timers+0x810/0x810 [ 1349.112755][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.118047][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1349.123258][ C0] ? kref_get+0x70/0x70 [ 1349.127451][ C0] __run_timers+0x570/0x810 [ 1349.132052][ C0] ? detach_timer+0x2b0/0x2b0 [ 1349.136833][ C0] ? lock_chain_count+0x20/0x20 [ 1349.141693][ C0] run_timer_softirq+0x67/0xf0 [ 1349.146469][ C0] handle_softirqs+0x27d/0x820 [ 1349.151241][ C0] ? read_tsc+0x9/0x20 [ 1349.155398][ C0] ? ktime_get+0x24b/0x280 [ 1349.159899][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1349.164662][ C0] ? do_softirq+0x1a0/0x1a0 [ 1349.169260][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1349.174458][ C0] __irq_exit_rcu+0xd3/0x190 [ 1349.179041][ C0] ? irq_exit_rcu+0x20/0x20 [ 1349.183539][ C0] irq_exit_rcu+0x9/0x20 [ 1349.187778][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1349.193442][ C0] [ 1349.196379][ C0] [ 1349.199318][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1349.205310][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1349.210603][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1349.230320][ C0] RSP: 0018:ffffc9000c65f7c0 EFLAGS: 00000206 [ 1349.236398][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ca376bdc1294100 [ 1349.244389][ C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 1349.252374][ C0] RBP: ffffc9000c65f8c8 R08: dffffc0000000000 R09: 1ffffffff223d6c0 [ 1349.260826][ C0] R10: dffffc0000000000 R11: fffffbfff223d6c1 R12: 1ffff920018cbf04 [ 1349.268803][ C0] R13: ffff88801f29f118 R14: 0000000000000246 R15: dffffc0000000000 [ 1349.276792][ C0] ? io_poll_remove_all_table+0x247/0x2c0 [ 1349.282521][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1349.287895][ C0] ? __rwlock_init+0x150/0x150 [ 1349.292684][ C0] _raw_spin_lock+0x2e/0x40 [ 1349.297300][ C0] ? io_poll_remove_all_table+0xbe/0x2c0 [ 1349.303092][ C0] io_poll_remove_all_table+0xbe/0x2c0 [ 1349.308730][ C0] io_poll_remove_all+0x3e/0x50 [ 1349.313591][ C0] io_uring_try_cancel_requests+0x464/0x540 [ 1349.319768][ C0] ? io_uring_cancel_generic+0x6c0/0x6c0 [ 1349.325427][ C0] ? io_move_task_work_from_local+0x209/0x220 [ 1349.331605][ C0] ? io_ring_exit_work+0x1f7/0x830 [ 1349.336842][ C0] io_ring_exit_work+0x226/0x830 [ 1349.341807][ C0] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1349.347908][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.353211][ C0] ? process_scheduled_works+0x975/0x1600 [ 1349.359053][ C0] ? process_scheduled_works+0x975/0x1600 [ 1349.364882][ C0] process_scheduled_works+0xa60/0x1600 [ 1349.370445][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1349.375910][ C0] ? assign_work+0x3cc/0x5d0 [ 1349.380544][ C0] worker_thread+0xa5e/0xfe0 [ 1349.385141][ C0] kthread+0x2fa/0x390 [ 1349.389227][ C0] ? pr_cont_work+0x550/0x550 [ 1349.393923][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1349.398688][ C0] ret_from_fork+0x48/0x80 [ 1349.403141][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1349.407753][ C0] ret_from_fork_asm+0x11/0x20 [ 1349.412527][ C0] [ 1349.415565][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1349.423004][ C0] CPU: 0 PID: 1030 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 1349.432071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1349.442306][ C0] Workqueue: iou_exit io_ring_exit_work [ 1349.447953][ C0] Call Trace: [ 1349.451247][ C0] [ 1349.454089][ C0] dump_stack_lvl+0x18c/0x250 [ 1349.458777][ C0] ? show_regs_print_info+0x20/0x20 [ 1349.463977][ C0] ? load_image+0x420/0x420 [ 1349.468503][ C0] panic+0x2ca/0x720 [ 1349.472398][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1349.476900][ C0] ? ret_from_fork_asm+0x11/0x20 [ 1349.481837][ C0] __warn+0x2e0/0x470 [ 1349.485833][ C0] ? __debug_object_init+0x18d/0x450 [ 1349.491304][ C0] ? __debug_object_init+0x18d/0x450 [ 1349.496612][ C0] report_bug+0x2be/0x4f0 [ 1349.501007][ C0] ? __debug_object_init+0x18d/0x450 [ 1349.506318][ C0] ? __debug_object_init+0x18d/0x450 [ 1349.511708][ C0] ? __debug_object_init+0x18f/0x450 [ 1349.517083][ C0] handle_bug+0xcf/0x120 [ 1349.521352][ C0] exc_invalid_op+0x1a/0x50 [ 1349.525875][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1349.530770][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 1349.536761][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 1349.556385][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010046 [ 1349.562559][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: 1ca376bdc1294100 [ 1349.570647][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 1349.578617][ C0] RBP: dffffc0000000000 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 1349.586686][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88807fb0da20 [ 1349.594973][ C0] R13: ffff888023feab98 R14: 0000000000000001 R15: ffffffff8acbe000 [ 1349.603241][ C0] ? __debug_object_init+0x18d/0x450 [ 1349.608547][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1349.613581][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1349.619496][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1349.625219][ C0] ? read_tsc+0x9/0x20 [ 1349.629317][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1349.634865][ C0] ? synchronize_srcu+0x25a/0x280 [ 1349.639984][ C0] wakeup_source_unregister+0x116/0x190 [ 1349.645634][ C0] mmc_host_classdev_release+0x47/0x100 [ 1349.651370][ C0] ? mmc_free_host+0x30/0x30 [ 1349.655965][ C0] device_release+0xbc/0x1e0 [ 1349.660569][ C0] kobject_put+0x21b/0x450 [ 1349.665011][ C0] call_timer_fn+0x189/0x540 [ 1349.669598][ C0] ? kref_get+0x70/0x70 [ 1349.673750][ C0] ? call_timer_fn+0xd2/0x540 [ 1349.678423][ C0] ? __run_timers+0x810/0x810 [ 1349.683200][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.688397][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1349.693613][ C0] ? kref_get+0x70/0x70 [ 1349.698055][ C0] __run_timers+0x570/0x810 [ 1349.702722][ C0] ? detach_timer+0x2b0/0x2b0 [ 1349.707513][ C0] ? lock_chain_count+0x20/0x20 [ 1349.712463][ C0] run_timer_softirq+0x67/0xf0 [ 1349.717232][ C0] handle_softirqs+0x27d/0x820 [ 1349.722180][ C0] ? read_tsc+0x9/0x20 [ 1349.726260][ C0] ? ktime_get+0x24b/0x280 [ 1349.730857][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1349.735621][ C0] ? do_softirq+0x1a0/0x1a0 [ 1349.740151][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1349.745354][ C0] __irq_exit_rcu+0xd3/0x190 [ 1349.749947][ C0] ? irq_exit_rcu+0x20/0x20 [ 1349.754456][ C0] irq_exit_rcu+0x9/0x20 [ 1349.758697][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1349.764439][ C0] [ 1349.767573][ C0] [ 1349.770555][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1349.776624][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1349.781964][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1349.802202][ C0] RSP: 0018:ffffc9000c65f7c0 EFLAGS: 00000206 [ 1349.808550][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 1ca376bdc1294100 [ 1349.816526][ C0] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 1349.824592][ C0] RBP: ffffc9000c65f8c8 R08: dffffc0000000000 R09: 1ffffffff223d6c0 [ 1349.832600][ C0] R10: dffffc0000000000 R11: fffffbfff223d6c1 R12: 1ffff920018cbf04 [ 1349.840956][ C0] R13: ffff88801f29f118 R14: 0000000000000246 R15: dffffc0000000000 [ 1349.849298][ C0] ? io_poll_remove_all_table+0x247/0x2c0 [ 1349.855112][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1349.860486][ C0] ? __rwlock_init+0x150/0x150 [ 1349.865265][ C0] _raw_spin_lock+0x2e/0x40 [ 1349.869772][ C0] ? io_poll_remove_all_table+0xbe/0x2c0 [ 1349.875400][ C0] io_poll_remove_all_table+0xbe/0x2c0 [ 1349.880870][ C0] io_poll_remove_all+0x3e/0x50 [ 1349.885829][ C0] io_uring_try_cancel_requests+0x464/0x540 [ 1349.891851][ C0] ? io_uring_cancel_generic+0x6c0/0x6c0 [ 1349.897545][ C0] ? io_move_task_work_from_local+0x209/0x220 [ 1349.903623][ C0] ? io_ring_exit_work+0x1f7/0x830 [ 1349.908734][ C0] io_ring_exit_work+0x226/0x830 [ 1349.913678][ C0] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1349.919490][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.924973][ C0] ? process_scheduled_works+0x975/0x1600 [ 1349.930882][ C0] ? process_scheduled_works+0x975/0x1600 [ 1349.936747][ C0] process_scheduled_works+0xa60/0x1600 [ 1349.942336][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1349.947900][ C0] ? assign_work+0x3cc/0x5d0 [ 1349.952603][ C0] worker_thread+0xa5e/0xfe0 [ 1349.957219][ C0] kthread+0x2fa/0x390 [ 1349.961286][ C0] ? pr_cont_work+0x550/0x550 [ 1349.965978][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1349.970642][ C0] ret_from_fork+0x48/0x80 [ 1349.975267][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1349.979985][ C0] ret_from_fork_asm+0x11/0x20 [ 1349.984860][ C0] [ 1349.988360][ C0] Kernel Offset: disabled [ 1349.992707][ C0] Rebooting in 86400 seconds..