last executing test programs: 53m26.655402956s ago: executing program 0 (id=579): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='//+9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2004a002) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r1, &(0x7f00000012c0), 0x0) 53m22.270072082s ago: executing program 0 (id=583): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0xb, 0x32e}, 0x28) 53m21.957908457s ago: executing program 0 (id=584): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x32, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 53m21.859551512s ago: executing program 0 (id=586): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x1, 0x265, &(0x7f00000006c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x39, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f00000007c0)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e22, 0x4, @private1, 0xffff}}, 0x400, 0x4, 0xcc8, 0x5, 0x42, 0x4, 0xd}, 0x9c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 53m21.182232054s ago: executing program 0 (id=592): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r2, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 53m19.76685049s ago: executing program 0 (id=594): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x32, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 53m17.412894271s ago: executing program 32 (id=594): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x32, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 39m18.431308011s ago: executing program 3 (id=3850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}}, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x1912, 0x71, 0x0, 0x0, 0x0) 39m17.905563946s ago: executing program 3 (id=3852): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x80010, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 39m16.295527872s ago: executing program 3 (id=3857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 39m15.229871612s ago: executing program 3 (id=3859): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x80010, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 39m6.516940851s ago: executing program 3 (id=3874): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x59, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0) 39m2.368977186s ago: executing program 3 (id=3876): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) close(0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f) write(r2, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) socket(0x18, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1\n', 0x2) 38m47.251309416s ago: executing program 33 (id=3876): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) close(0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000004) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f) write(r2, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) socket(0x18, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1\n', 0x2) 6m57.997019237s ago: executing program 1 (id=6998): mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000180)={0x4, 0x6, 0x9, 0x4, 0x2}) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x31}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020004}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) 6m56.342616866s ago: executing program 1 (id=7005): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 6m55.557375663s ago: executing program 1 (id=7007): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6m52.924268379s ago: executing program 1 (id=7010): move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffc, @loopback, 0xffffffff}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0xc4811) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) 6m52.246297261s ago: executing program 1 (id=7013): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000011c0)=[@in={0x2, 0x0, @local}], 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40095) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m47.323772796s ago: executing program 1 (id=7020): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x26) write(r1, &(0x7f0000000000)='7', 0x1) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x7f, 0x6, 0x6, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) 6m30.603918133s ago: executing program 34 (id=7020): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x26) write(r1, &(0x7f0000000000)='7', 0x1) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x7f, 0x6, 0x6, 0x400, 0x3, "54d208457f0b0000000001040000000000f700"}) 1m58.875807291s ago: executing program 4 (id=7111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x450082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x5, 0x8, 0x40, 0x13400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0xe}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000ffffff7f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xc}, {0x1, 0xfff1}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40028c5}, 0x840) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x2000000000005, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0xa1016b00, 0x0, 0x0, 0x0, 0x0, 0x0) 1m53.955772597s ago: executing program 4 (id=7115): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000000000003218ce2500001700293eebec9828030b3f897af9404e1632c0620e04ceee319ef007ff30f5c165fb9839a0a34629b65925fe556182f6533a3c5b88c8784c7c952bb37959aa1f55d79bec5f19b67214c36c01f6b5083d70a154438ad43241de228f07533e23bcc6cafc21c94c50aaedefc792c17ead9b1d193f99b1c2212fabd3bf21d28411f60d18a13ba5cb0436c4dbf7d81e5edcae3bfc713a438b69e3ea6fcb78e37cbfd6cb140aa00dac322311c9bd1a4cd14663c324c142a3ad3f6a16ec6db19a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000060010000000100006002030000125f627744144f70"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000001640)=""/4096, &(0x7f0000002640)=0x1000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) timer_create(0x6, &(0x7f0000001580)={0x0, 0x38, 0x2, @thr={&(0x7f00000000c0)="18e8db3aeb79efabd69d290ddb5924f5c92775c31ff52116f09331", &(0x7f0000000580)="475402c1cefe3d94b0a5abc04760d6aa9ea03209d08d24f0d90225482a6c96b3ae72d99e6dcf7143e92c86eaf71aa38d70b4dd324dd6d52879f3fb51ca00a988e3ba5ed99bdf1180d8f547f37be312b7b9e4db2fd56a404fac4d6d8ffabb2133f301456731d9fcd7d17d7ec6387d198f331714cf70db597321ff81d57319011cddbb15236501ef86b7d01d2cec2efa8684a6f6ede0a2ca63deff0e1199e17a1d0de0fe9a7cb918a26caa2abf80e5703515e3b3947be8df1f992315a2602447d6e0155278fe2a182dc2bc28e7ae98ebe0469c0b9ea3bc8200ccc192e15ba6addddd690de0c83afc7324a48a6809d7aee072e708f49e35f2b4b46f328da9da495dec467a7d002dbe4d88db51f89df92d9ef0b22e591fa49b60a390acb5d30d0a7efa9762185d85a14b4ec5cd73b08b843734673a424ea3a986928fd1a20b9d86c98d83a07b64b019fc7ae5480cbcea9ce0c3dcb504243c6e8fa7e6b6f3a94d05647be540844de6c9624cf420119ed57907382a4d7a6a407aea140df4d4e8e3943cdfde6569c6efc08db95352daaa1e05283ec790e1d8299e639d11498491f418ee39a679794c1608f8188619033d7283ecbafa1810343b7bb17515ddaedf460b380e644afbc1b6b48d53c086229c39645cf80187eb7ecc898bda88ecd932b43bb75748bc05de5a6f9d7aeed13b23a7941ee40ca76a6d3083bfa3c2d91943af087c9f7c8dcdfafbc450823a029334aa907155629b9177b6819aff64d99d298e469de7ecd4c6fa3aba8e8e1a25262be680c311e64fd087924bc537c15b5daab56cff534c4f167d391c9832692dfbafe7f7abbf57aa163f84a63b126a787ae9ab97e435c59d840362d11e3452a7fe547ff8a304aeee111171d6a364723d4b7e3588277a11c8ba4adb8463169bf7ebee8b7105f0bc10b33f9c183981b4a51ddb53a7e9e29da02cc0eaaa7758e404c467a3abd2d215d54ee38d66b446851614be5fa576eeff624aea31124d2ef3db162bf9d63f502234bbd71b2ad58dd596fa3c9d5541170e24eded6e53405cf8b4d9072d3bbf5e4d359ca7a8bd4e9c88006b1c9dc4a2ffe2a6242485d2ef69cd825afeb4e41e5f521108b6da1b5e7398dc62b77b817087a8db9abc90e44356274c8835156e8c39f38a77837d3b864f20fb80ccd8c35e2c1ec7180b83067069c12964345896dee75c40ee4b70eed00864f7d6d6f945e3f13ad4ab43fed12e1664631673164a8896631fbd299ec274afe1077a0b5ffef23b67c64c96b3bd256832e5edd6026cbc8eb554165ef36216f3e83d03897555ff88913875645898921ec9c1620777346ac598a2c5682e79515d0fd8ad126d0826b7139a2234adefb3a96697b4ea3767dda13b7acc8b641b265b23c8c3f9c035b51db58cfaab97a9e429dfb0401842c59409a8effd178bd1f052a57c46cd201c7565d7c782b3afa1d5d5b68b3edda0897e9d18f3da5f9f364804477c61a10aecf383a94ed3bf6a676f1ffaba799c1cd77a710f945966461bbfcc42017f3c71cdc5d4f6f868d1f31bb575215b1f2860f6a86ad38934488e42a93343da6d133dd4355a74293be910c1710b0af72b81676a9a468ccb4c61c498d093f0028ca4b9b332746b2a1af8e32d508ed50733608c220fd88b384ddee279f4e6c38f8fa24302c009decbd2507a8c948020e4edea8020145633a778f90a94abfd9743aa0d9f5b6a30631da5273a4daea3040d2c2d0a100dd4a524ab940a505425e6b115e9725fe1ef69f6c4a70fc832c2530fb74f6bc525712e69cb96c3d02a99cefd8b93bf2ba832aad4afe7c1022ad4566ae4ea79f2ef8b3b25aa101964e75beccb4a9d8217777eff62dd0c71ed653be05ea75a774a3d16b76525eeea3ff444b5f4f716f25def8896fd81c8b98778b7811c08ac78302b130992a0118f41b83d758d78bced03f58a10f8aeba1b7dac77b59ed922f85c33886c7ddf15056e3509e86dafa602d7f243212787dc4608eef8e07838a21245ed25fee2ad98336a7c718a56d40b24ea4f2e9fa343d1e452e3b60f28c4e83821ea1c49cc17423e4b95f977f7bae62f64124e2bdeea76cb39ab1060adb7c15827f2cd4f214644eaaffd90ab7f198c2bfc4c759bf1bb5f522fb9860ad38718562fee96438054b80a26bb1aff56982da56a4eb7aaa3cd242e56eff35a300503c829f141d46f3dde61126039ad037c51f39fa902255e5a57ffcd0d4df2a1b5810560b8b3f8cbed422898488904a357688f2d68f2a2b110bc98ce69d4f4f50c39dc8667977893140c9aa9d91d33c7e928c8ee9602da8c4650b264176fc9b46a19466ca00e7deb574df16382f4f3173fe40eecdfddd63f3d497d758d2fc36109cb7e7c4901d77b8dcef805d431f95fb5a96fd71ae31d67b4a0b3e9e09eccaa7e3502cd5423b8d4ecd2148e8626907d3c02bc6e7c5f4585b62703b0569ff0a2782151caab9f1a7740af0e9ccd9c12ed5170748a9b5df8691a2a713a3dd298dee0a6ae3bd5d7ade9d09dd846167c169a76cb1b1639cc6216d1cf449ea6dbfeec41194db9c0815f229dd7b8da538637043ea45f325a555e7a97772c0fb66547da31866200744f27d1f265a854f2f3fe078b27e1e75022aabd73fc0a5a5a9b98bcf3c32db59f965c6d47d48cc26738d28089cc6585b9116c277bd50fc47e2f8717b2621ab879d128859c5fb49abf033a1352ed31beea9f705bf8c93b579f62529b72b72e4b029643fb2e278972b94223bb78fc296d05e0ff5844475570bc564d020c2ed99beb2376be7943e26b26562b45666c38f857651b668e0750c1053bc56a9f345ef0f6e8dc259abc9539b93f0da0497bf9430dcdc6a25486b8fd94ad144a8f63b662b09a40a5024e95eeacc8286cea0590fe6a747bf1bbb5f0bbfc25a5da82afec0532839979590f1ad9971dd2b9d2707e6008eb604a99681163eab333eec597cb5100a977a5be812629a062e561665c83ae761041e230459561dafdc6861fe257cf7d94a3ff757d22c6755af230e9982d7b6d493a2991762a7bb5c168d78352f656c78d81a906dce870fd2b330369a502c4ba9f2f82dc9c2dc1e7b1a5ef95574dea71e36b5d9d206183e0a306aa0302e4963ea54753b7c6f5f346ae3830f4558290047d741365def12e8ef01d372ad51c709ec5afbc0e2ca8fadaf00a955fadd8d806d55172b4806ad2b5f853054fae203dcecd271a6e173123687da0176cc7f84345e44854704d8b8d2e8e0ccaf3ff3bd046cd01f446b537758d7872a7a1ecd2e521224967c4cf4476e28da3e1dd3f1d696478084fa05dc0717988c04bdb243b29002263a0f9a704defffca0855e3a2167aef81391d030bc64fc3841c5071498588624f91180098babdef0973c513af8919ce0aa74cfb91cc9a17446334a3752edfdcc6cd7014a507d02ecc5a77be28450ac2608182132eb9fd54406648acba67713e27022e885f01fb5e6b93017763e9e0c1ca0df5aa87abc1f7960f96d30b8842d9b128f2844885c2b182fc1fc5adb3ba270a5efe974a26f5d1508d099458d9641c64a4c1cc2c667fd14035c83906bc2787631493befd709350894c5bc7dfa23d311c95541f889eb658b3818139634fe24443c8c9bc5bd48e37c9018f8cd9a27f3bc8c7b3829205ecbb8bed913d9e52a4b3c88d86e149049b1a7f842163b301451419da20c369679b0862909c7d56748f6c6c4b726b1a5998b144730e9149dd101ef9e15df661e682d25a42bcb971202cd0215b4c770c488d183cb1aeb3e402b1435590384ea93b3e6742d19a3c8975ad95d16053f12ad3b3136db8b3e473485fa23ccc69a485c8c01baa56cc10e7a1c8754c5a1677de6ca1c7b6dd9126e46bc32af1b155d7d6eef1611a949919aac25cd67c4a40552c03e1e94f0b214f3b0a2c9231aabccd1e4a09b901971769c094835704927e84984ad19a30399b4d17adda5e4d4ce699d72b8ad3bb297c7a11439c81b65811b36ecd0999ebb2d6e9626397b9857a16b8cf34c3901b4baed153d38eca3799aa7e023fb4ed64e1d86ebb2ebff9caf3c58d8e7464204ac47f03779fee1795b0cba3d59fef6519d95d0bf19ac2d3f1a3404b23fd32798df3a2f25e5e39f03e3e5cb16dbabe1a0cc46189d7d34241669da840be6a7157465a85a09a7a5a41c85f960445b0c3ca7c0093ddff1977c3dfd10ad43f1ad37d1bb39c660afe27e0db49df757ad58c44280ad8059660041816645aaf328c4bbb4b8be140bffe29cdc24ebcf794610645d44f480e388a9f13a3ec5ee56cfc32ae43b6b9598435dc9d13b3bdeb870bae4a1f4a43d1c131d2aa69331acd8693994d3d31b10f26f87f946c42f77e35a92310d3420c87f2541d4dbaa8dc5a39317e9c960b88749d1c8a9218841160dfc506241d14e007bac7eff37f0965c6d4821105232d1adf2ae2b6230e5eb2b30e21c4ed6ca69c4ea5b4c10abcf9d054428bf8a2f6ab02b05bd3df169cbb6f9c2fb2250b7b1d707c94cd99f2b7f1c0eeb75a764a07ae020fec7c871aceed8ee1455984f0db67be48a1df9e641bf9130f6bd0c9365b087dfa527e75e40f424c252dd7cc27f02a44e6332b1d11d23940316c0da7d696d4b44935c340356352db66f7bf94887cfa4fd54371418f6e0a8d5632c2d859277e8bc183e6207083f7dd79c9100f9066f7ab3c91e3d809598d6833a4472748a0eb5b2b7399b72f047faaf92a385b501ace68a56afa137155b21ace5d371a3db56c6bb74a4f3a89880afdf86e2b1abd97c74ab38eb9bebc3cc5413fbad98e17bb247ea0ac3e2ef485fd8dfe11b61c414ebe6a328cf541037ff4e899ee98f57016e910ad9232367752cebd3f115c25d455cd847523e39d6490b3642ed0f342304729fed4501397c19c626fc31e7c37eb2bd01ccd3e9c76421e947b1d65a989dfc54a7b35d88ff73424e7acf89f4b45d31fb8147f85254267975f9d701260415a1b931c93346d2b5b502eeabdfc2a27b4aaf86e9c1c8804a6c31b9399c17906ead3029ada5f9db309def40ec317069d4459bb5c7adb0ba9f0418ecc1c94ac9d2b43f35da62ac9c4b35328f2d309308b4f5378f0f19b87a1cd836f2eed7575f3a6dbfc0f189384b7e5b002b9af3f637cee8cfd7aa441e962de65d6f06af490d95e745110def95b46d27ffab0c83b5923ad620ef64fe27ee88837a0bb1481aaf35972ffbd912afc89ad4667732e3301b9c8c2136112f1af7ff1102f18f6608fe8bbdfee321191be75a5e8a22443f3e7175f552731a99c301706daf22934552f715b0846bf37afe4cf84a0c147893f2a86f676519910eaa98ab42df53bef7487fe4c7e22786053543bef22f6fbcd22376bcc679c1fa150ce6fe34d210da20872642f52acf84b089392d394520ce8e35669e252914b3cb9ee01df02f1f37aa3d03ce85cd7a5aef950ffb9429da3e9e450c48d4588e980c147eba6eca35a5ee0b107122407c236b4dbbd15206ec6269d1a0e60912bd14289e50415e03d58ec7207bc946d18bf0e8a6259e"}}, &(0x7f0000001600)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r6, 0x540b, 0x2) 1m47.455880536s ago: executing program 4 (id=7124): mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) 1m39.153314182s ago: executing program 4 (id=7135): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m38.867109556s ago: executing program 4 (id=7137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1}}], 0x1, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2, {0x5, 0xf}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x480bc}, 0x20000000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x4000) syslog(0x3, &(0x7f0000000180)=""/21, 0x15) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06000000e964eadab347df3a46d28c84084dfab907000000d526ba677dad6cafc7755baeafe93bff2c527ce848b3f04f1a9fb29307b23a3adcf481bac81a0b7ebcbacc69c8cf776a387d8d05fe4c21b574777e3b8df55006358ba9d4ddbd7cf60cd3", @ANYRES32=0x0, @ANYBLOB], 0x20) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000240)={0x4, 0xb, 0x60000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 1m36.306111708s ago: executing program 4 (id=7141): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x28, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r4}) 1m33.545246939s ago: executing program 35 (id=7141): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x28, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r4}) 15.828616576s ago: executing program 2 (id=7273): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 13.257414028s ago: executing program 7 (id=7276): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000440)={{r3, &(0x7f00000000c0)='/dev/sg#\x00', 0x201, &(0x7f0000000100)={@align, {0x1000, 0x3, 0x9, 0x2}}, 0xfffffff8, 0x0, &(0x7f00000001c0)=0x81}, {[0xd, 0x80000000, 0xa, 0x6]}, 0x1c7, 0x98, &(0x7f0000000380)=""/152}) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000200)={0xd01, 0xac}) connect$can_bcm(r4, &(0x7f00000004c0), 0x10) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @loopback}, 0x1c) accept(r1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000600), &(0x7f0000000700)=ANY=[@ANYBLOB="d00000000802110000000802110000010802110000000000070001"], 0x1b) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 12.991461781s ago: executing program 2 (id=7277): timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) 12.813672629s ago: executing program 2 (id=7278): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4000000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000010820514014000010203010902a60003010110020904000000010100000a2401020029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_connect$uac1(0x7, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}}) syz_usb_ep_write(r0, 0x81, 0x47, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d9000000") 11.693575593s ago: executing program 7 (id=7281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1}}], 0x1, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2, {0x5, 0xf}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x480bc}, 0x20000000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x4000) syslog(0x3, &(0x7f0000000180)=""/21, 0x15) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x401, 0x3, 0x65e, 0x40, 0x81, 0x7fff, 0xc}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06000000e964eadab347df3a46d28c84084dfab907000000d526ba677dad6cafc7755baeafe93bff2c527ce848b3f04f1a9fb29307b23a3adcf481bac81a0b7ebcbacc69c8cf776a387d8d05fe4c21b574777e3b8df55006358ba9d4ddbd7cf60cd3", @ANYRES32=0x0, @ANYBLOB], 0x20) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x4, 0xb, 0x60000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 11.267688823s ago: executing program 6 (id=7283): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000140), 0x10, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000000000003218ce2500001700293eebec9828030b3f897af9404e1632c0620e04ceee319ef007ff30f5c165fb9839a0a34629b65925fe556182f6533a3c5b88c8784c7c952bb37959aa1f55d79bec5f19b67214c36c01f6b5083d70a154438ad43241de228f07533e23bcc6cafc21c94c50aaedefc792c17ead9b1d193f99b1c2212fabd3bf21d28411f60d18a13ba5cb0436c4dbf7d81e5edcae3bfc713a438b69e3ea6fcb78e37cbfd6cb140aa00dac322311c9bd1a4cd14663c324c142a3ad3f6a16ec6db19a3c7c3ccea280", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000060010000000100006002030000125f627744144f70"], 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048840) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000001640)=""/4096, &(0x7f0000002640)=0x1000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) timer_create(0x6, &(0x7f0000001580)={0x0, 0x38, 0x2, @thr={&(0x7f00000000c0)="18e8db3aeb79efabd69d290ddb5924f5c92775c31ff52116f09331", &(0x7f0000000580)="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"}}, &(0x7f0000001600)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/pid_for_children\x00') sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r6, 0x540b, 0x2) 8.289690645s ago: executing program 6 (id=7284): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x2}}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) truncate(0x0, 0x80000000) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) 8.234242427s ago: executing program 2 (id=7285): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b17cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1c66142e7c1caceb88de7d6e8a5c08ce052bb461f060bd6327072cc7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 7.618388897s ago: executing program 7 (id=7287): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r1], 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x30, 0x2, "fa2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.674726132s ago: executing program 6 (id=7289): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x65, 0x24, 0x1, 0x70bd2c, 0x25cfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffb}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.312171699s ago: executing program 6 (id=7291): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 6.023479453s ago: executing program 6 (id=7292): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x100000000) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5.979580145s ago: executing program 2 (id=7293): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in6=@remote, @in=@broadcast, 0x4e20, 0x0, 0x4e21, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x3, 0xe, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x2a8, 0x7fffffffffffffff}, {0x0, 0xaf4}, 0x70bd28, 0x3500, 0xa, 0x0, 0x0, 0xe4}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x40, "21c538cfcb"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd2a, 0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x10000) sendfile(r3, r4, 0x0, 0x7ffff004) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 3.764036651s ago: executing program 5 (id=7294): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 3.742955482s ago: executing program 6 (id=7295): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d00)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r5}) 3.527399662s ago: executing program 7 (id=7296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000c00)="f0d07920d1216c719ca21257d038517dbbfea5e075359248840f036d0636b1abea791fb7f5f11d2f003992f62d83497a11c690adb49036f1aa59ade2e21eda2d6cb92d537574a2a282ca8292b7c4633e65db96f91852bd0c0810cfeb65db2338e1f710ffa244e155425590b409bc31a8c3e0978a8a10ad5c3f938cceeef4b7be8a1f4f725563e43af93131113c97f7da20e316c12de5f5bf31bd1d80f43275a272e13d8720272790ed5b489f64245a63723e82edf9dfda635d2331940149349fa82faae4ca17b792444bd5515a3d05acb62ff66a06ed78c363fcad7f3c699c13eb8fc824b0eebdfbabbb44aa876fe3c84c66b156b4f680f454ad1f498595708c6bb678f585e040a22aac43d5a7272848ab73d303aa19c0bc2f9169818cc2b474a1e9551b10429b26e584723300d1c8c1d12d84d2643611a5a326c655f1eda754dedaf6cedb36f0f8bc7317a499ca3b458a7c345cb00f8b04b078d35ca1c8f877fcb481e6cba397ebd03a719e8502bf7514e383c39d17cd56680393ca65d5ef75bcdda1cb24434da5e50df4d30574c59abdf0a96ac97b48548dcae748e2d331d96234a05a044f0839c1c5987b5c847b58a0b85a2ed6f1718372cf9af814835011146aba26f7682de4f7027904bd843f2b2fbda509da9ddd0c9f3696529b9715ec7aab05afeace95043c9da24db2e133293ce16352ebff025b108f69d6fe8885e52e2e57847f2eb9e5e4283ea7c107920fa87f208e740225b83bbf9a5cd86086b908b05cc420abe1f22af35d6566205a1dac70c159e272a918f17e507fd72402b173b4c12e7cb359297b46c75f92b07abc66d23f73e1f1b89cfce69e9121ecaf2c15039d067d1d8127a7c3cfa395f245b475a195f61b5eec1bfad4a877d536adaaef349a78b5bb46ce8ffafac04dae50013b4c8a555c5b34f7ff93efd6f2e0a13254ea441ede6c1ecb1e105d9f0d451197b5f92eb9adc25c114991b0fd567fbd5d50b1b7fd73b847b4d80283a3b5462b13f1acf54537a4c46c7883d168f97543c94a7f2ffb6dbfd8d63ed047d2e9927135cf916d3294e08ec7c1591e97802784a50b7969837a138fefb7592ecefb58ecf724b11c50645992160915bc40f0f6a73a3f5263eba52c9469031110f599dd0d3de9fe1a62b1986e45eed77299cf033346ac74957147a06e55d43528d7efbaed4f17250b7525fda8aed69b8f4df5033ce672dfc7c4542294e24940bc45b849345ba0e90648203ed9b0b910455b664967e69dcbbda538b784d19f6c07a8499ef77fd87306ffaec660eaf4564febaef5032edb321b668b4d53f16a173888a12d252caf8847f52e6a70cf43f16cfe6706bc0e4b37dffa5c44ae2c4bbb2f36ff16f5d141d3745514400eafb76ccce978a4bbe8f093781a88844aaa796c56d7dcbf1000baf3e9f877b51365a026182aa51b6cd46a70eb71829d1a508d59d57a1bfc80245e65a84074eb9701bf515142514b6a0061dfd713b8913e8918831a79c42f21d7f7e55c3d898339339f9963ac8cafc987e9eead0530479daae39124247b032d6f270fc780714afb7fe43d0b276074a01b7e6fa98aa4dee38cd6154250558713e465936d3cc779dad0a2e39c94a63f033c0cfcae26f3023003a31676ac7bc16713575f24a018e2d0754ff0ecdecc4c4f6b3399a283b207f0dc30bcb6e29b29b169011ba6fc5744e950d809a85975505a3b2f4d8fc512af921892129501f1acba32b0e12dfb584960a800f433056dadc0e406db4c29105a0e9ea9b12d1a97c8a5f7347be8d475bd7c4a3d694349b77ef164ebff12c86495803175fdc5266fb7b222cd982a9934deae64e13e572bf9d859d1d516621bf9bba0700443f406897d5f5cac57240fb87cfeb60ceaeb14ef07f96c5626e0cafd61597703e76b4d3efde49918562142e6bf0f5f040128a54cffa838e891934194003ab2d8120b067f4c6bc5cc9abf0de436f4eca292563347fcc25237c87e13695be2dde1b3d93571b47dec3b265e60bf61481fda16b045b0ae071487ecd06c418737a4aa78c7db99b99b67903e0ec7815ab5c778bf09abe6d80f2448c9e0fa1eec273290944e61a3a9acfa243695b003ec604b29d86dfb4b589258fd6e8766b2dc1aff15089c7da3642c98570ddafbf0714502f4f99ddc0f9af780294fe17422c9aee66275f2e477dcaaa1ed32f44132d564c323e2fc2c2c2bc6fe59ad9287dde20bfa2011745641eeaa9aa54a6c775c076b57dcd12c6dab44654fef2471ad940226772263c1c8d3ff08b3603f1f587f10c7fa9e1c111169abd24f0a04c8a3df010f9db9d97b44a1cc23079e91d1082d2b02f9042a555d52ea4ccda4a4ad789f22bf0d6fbd0c1a6269d4b93894060896a28f8276455f65e53b3c66dbe92c8fa85d0c2bb0ff3b2b48dd1d2f244e6d41b63c061be1b69f285039d519d639c9b2a664e78bddba105f33f9bc74b8b505a773f8bcc9162d29f5a1a7e6b8f6d35d88b233f003629f84e8bcb26beab7220ea04883516aef01e769c9f3cf6031fa918c02e14e75bfaadc3905c104f89bd04b38b80c1a87ef0acf6735d118daee7cf707f0c5eef7d5b8e3eed9e65e76df87a8ebd03d8b0bee5417e10302d2b176f1737dd26aa514090aebc436503c99cad8f9e76b104d64e166ac7846c563f3b3730884ee00423df8634281c91bcd9fe8349dfc828d65f1db1005751cfb9df91d01adcac3cd9c063df931dedab146f924c9b365f49dd8ccf85bd1fb225cd52ae0195e0369ef1a926ae2939e63c9d455bdfd2b134fb8bc112cd8a5872af11506c0b7900142f1efdf2eedbd1f74bbfea1b39547ade99a51891e33ed585cf54cf33d37c86f0355d59e7cef639baa1f9322df55331deafa53cb1a12e53497c3c6f3d6878e4f278027fbe3b7dd8022645a5f9f40c212e7b8a8c635c856c21114e64cc17bca6a25df3fab1c3e6c7211e1cb3d11832dfbf3511017cf43b42f466c3e5be467ed5bc7ea3da0148bd1bb46309b2abe51ec64ee176d9a0ea7e6fb5f2dd066e9ab4d1cb119f7afdad34a2355f1675026a7b43b5a53c3651ff4906ead8f1a274d7abb7bde8d87860250674763c7964243897809d22e2578d86966dc233f01361e967748681b15fb2fb923a5fa2b103669ff71de1431e9b8af7bf4fc493519df5985a10a145e5576eaa81c46544ef8b39892bfbe2d44ebf309844a0f0ac189a345610ee6d0a8a8c1472a4e50c130af8487433f5e1192d84ce3db5548d7e6856f0b0be5db7af72603cb563d2e11b5f2ea4243c9458c2e9c09b283df2db9f77e309969f26877ce448681462889bccd899e02c7233d62e1a856d845340e19f899c2106e0cdf2fe45572b6542c70e1b256f57df30736df18552da1fbf49aae1691cc254fdeef463d8c2d45ebe0ebbd63266c3635e40528cba1e6baa93a80f56ecc55cd1eaea500484a991e03e369550b05faaef6668cb9699976da1a326a4936780c34b7074a7478432f82c32d9c2c5fd8cc0f177ee258b580f662dc326a6b5e1fc3a971845fde566ee11cf2fdbd1817d50113f78123977a503186ef1d3941f24816b5455d838cc94b28ec3a6224c051baae6cf9c70283a875a01c192570ac975a909de647a94e2c25422e7679b812ac3b426d361e3494370853dc70de681f27bcb3a2d3450c367c0dcbf76fa354e9b89931c6e116db03c95863b96f9e847f08c1c6d5cb362693387f24463be1de2dad1a7818448bf6da82af6f849c88c333a8a62c7d0c422eb6061438e47f7b17ff0876310de762c5a8ef03c2f59badf100a4b0e8e8019f09e56877bd25271b4b61c0abddd9fa19a2f6105f1adcd2322ad59366ea619b522d76f60aad01abd5799be461375e201cf561e21352d769bf8ccafdc6c2785c342ffc4f655ac9ac00885bd2ae456a5eaddeb2a2bb8dd6ad60aa4c323f227ccf7260b01f005382ed378101d8358ba02d4f2fb2b242239153168664c287d845e3422f1e98a4a45a40be1f9bbdcdc48f0fc45bda38e5d5be2273c3ed2b8b94c80e413393e9adf2fbf9b632b718db5445619273512170174f417ead15735cdf93d4c7e784ab8a9f8d07c05fb42f8d490a142948b96b8463009b83b8c4b31d2584fd2006ee00857ac6c2ca9a792693e9704751cf5d5310c6bcc4ac350f7d380f9aff4fda94ed7585081e256abf8a42b3b00b3e01eb8dbe4f0259353543fb83bb4ce5da48864b83156e084214dd2c89e4dd68d23146cc23aca8f546838f2db186873c106233ee0f583db7557df0f169fcf75c625cfb9d361f03032df5f628277c641904ad26fd3bda90ba17b6b5522ded18e25b2bca4995da6db55880b879e56943a777c3a7f5e2c5e7bff043e53c8e97f0c3c69ae59e8e06818caa2a7dba807736136ea2b1481a02c7bbe08bdbc22c9f8c4931d8ade31b34e21932f825ff2f909aa2e41e3d9c495d52b1663ffed021c9d85ad74b8ff94ca7b8b2786df60ebf2b2f52bd7874dfadb3da7a549564fff68a5ca332b43df65362eaa42ae9c235da35bcb653874b6b1e07355f1896eda8affff0b1db52a3ec502ef4a6a2a4728051187ee632d23a6bb2058be33763e25e749bffd8dcb4cb36bb08b1f6cc76bc835906f0209789385a05082b240c468c055ebe6de902b85137b005f3eba95521a1da52fd966647c5725a5b461f4f8eb6a10501777ebcfabe851718acc2e4ed491c3c8e896b0fd222d4f69786432ef4651ab0438a5f9dd9a6ba47b92ea74cbb40acff06f324f3c2ea4af858b3811406fc2c00ebd6e3f221446dd5f0af28652dbe1ae5a96effaae1f8ad379e21199b33d05a8bcfbee9d296d17fc0dbb06937ca0186a966ac1a89f5e3349ea6e877d2142ac4d34f3af3ae98b059b46bd64d3d42c1ef94be989dd6c59eeae94e5ba1d7e1029d8a1f974e29a4a9bc826d49b40c2d094a8743d3b89860fe2d8bdd36b50656d300c95c2da82feb3dbeceb3a10f9cfb170084f8991fdecab451b081ca7c91459d506cca4d41eff4dc4821c1ccd8591bc4c515f9bebdc396a6c6bcb823185568e064548a5d3c9852d584c25db47c55938a395c52e651c74346419b8521efd7c119d2001af75b9c559f46819f8dccc6be2117a1387f9ac2d0c7b513857083243dacaaa8f6635681ee5f216afc5ce0760a2f24a96505da90181e804766abc6de1a80eb07fe8bca2a752b8e87a4537a9a54adb5c4ce7636ad798cb345a79aa1ac1d078f1d992972b56e94723b1f3293a150ceab3c0963a9965fe0ca5b7b26b6d91804ee8e2008ca7683a9b91ecc688e99fce0312e24c27c6d6741f219d41faff40bfe2a13609daa03285a4ad5448fae22fc65932bf9aeeb20a3caeb72a82df5a500fb0d8ae09ccbd31bc107b39a25f466537a77852980a1c93b60fb505621e56e47c473c406aa9a0f6682f6f5b15ec5bdc7e9317dd2718f0ed2bd88894e41ebdf37f1fed55c2ac306927901494d7ced65934572d9f03a8fe5d4b0a44eacc39a1253c480d60f218153130877ba06701ad946de86fca68cc99d4661b97cb01cab6f2cab342520e3c1d44e9d3598f4298fb42836bc7a91699b9c4d4a22260de7816f006f5ef94e2e140f5334d46c734fe75cecc9069611be1c35a0b98dcaeea147999e7ccf9612ec55cadbcdb6bb0ba38ce49732ea97fd1fb3ac6f30e05740e604c16a576b01ec0e94123ee702ceca3d577af691a791c07b27a0e75df8f1bdbc62c24cc138e265ed5c83d1fd7e5648f56a3766ef8fcc227e72917106aa560e3bfcd568f105961d78aa4672f7e268990b2d1377914bb697", 0x1000}], 0x1}}], 0x1, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2, {0x5, 0xf}, {0xfff3, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x480bc}, 0x20000000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x4000) syslog(0x3, &(0x7f0000000180)=""/21, 0x15) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x401, 0x3, 0x65e, 0x40, 0x81, 0x7fff, 0xc}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06000000e964eadab347df3a46d28c84084dfab907000000d526ba677dad6cafc7755baeafe93bff2c527ce848b3f04f1a9fb29307b23a3adcf481bac81a0b7ebcbacc69c8cf776a387d8d05fe4c21b574777e3b8df55006358ba9d4ddbd7cf60cd3", @ANYRES32=0x0, @ANYBLOB], 0x20) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0xeef9, 0x0, 0x3, 0x3b, 0x4}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x4, 0xb, 0x60000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 3.340828771s ago: executing program 5 (id=7297): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) close(r0) 3.15585623s ago: executing program 5 (id=7298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0x2, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x110}, 0x8080) 2.919504071s ago: executing program 5 (id=7299): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) sendmsg$NL80211_CMD_STOP_AP(r2, 0x0, 0x4004004) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, 0x0, 0x80) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 2.538415879s ago: executing program 7 (id=7300): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'lblcr\x00', 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000400)={{0x6, @loopback, 0x15, 0x0, 'none\x00'}, {@loopback, 0x15}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000500)={{0x6, @loopback, 0x15, 0x0, 'none\x00'}, {@loopback, 0x15}}, 0x44) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000600)={0x6, @loopback, 0x15, 0x0, 'none\x00'}, 0x2c) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x3e0000000000}], 0x0) 1.759479827s ago: executing program 5 (id=7301): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000280)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x40000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r4 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) syz_open_dev$vim2m(&(0x7f0000001080), 0x6, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 1.720833018s ago: executing program 7 (id=7302): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x2, 0x200000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1.095321418s ago: executing program 2 (id=7303): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) 0s ago: executing program 5 (id=7304): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x58}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x14) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x42300, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$igmp(0x2, 0x3, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): syz.1.6977'. [ 3061.218408][T30099] usb 3-1: reset high-speed USB device number 118 using dummy_hcd [ 3061.235321][T30099] usb 3-1: device reset changed ep0 maxpacket size! [ 3061.256416][T30099] usb 3-1: USB disconnect, device number 118 [ 3063.294966][ T28] audit: type=1326 audit(1789705795.179:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14908 comm="syz.5.6978" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aacf9e159 code=0x0 [ 3063.464093][T30099] usblp0: removed [ 3064.704444][T11967] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 3064.924391][T11967] usb 5-1: Using ep0 maxpacket: 32 [ 3064.946083][T11967] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3064.960288][T11967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3064.985233][T11967] usb 5-1: config 0 descriptor?? [ 3065.112641][T14957] fuse: Bad value for 'group_id' [ 3065.115332][ T1142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3065.192196][T11968] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3065.216003][T11967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3065.269304][T11967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3065.432324][T11968] usb 3-1: Using ep0 maxpacket: 8 [ 3065.451274][T11967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3065.460377][T11968] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3065.469077][T11968] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 3065.477757][T11967] usb 5-1: media controller created [ 3065.488338][T11968] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3065.516190][T11968] usb 3-1: config 250 has no interface number 0 [ 3065.528131][T11967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3065.560673][T11968] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 3065.593940][T11968] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3065.636466][T11967] az6027: usb out operation failed. (-71) [ 3065.642669][T11968] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3065.669902][T11967] az6027: usb out operation failed. (-71) [ 3065.675902][T11968] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 3065.686893][T11967] stb0899_attach: Driver disabled by Kconfig [ 3065.694372][T11967] az6027: no front-end attached [ 3065.694372][T11967] [ 3065.701703][T11968] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 3065.716754][T11967] az6027: usb out operation failed. (-71) [ 3065.722538][T11967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3065.730595][T11968] usb 3-1: config 250 interface 228 has no altsetting 0 [ 3065.740698][T11968] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3065.750238][T11968] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3065.766348][T11967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input136 [ 3065.788198][T11968] usb 3-1: Product: syz [ 3065.792435][T11968] usb 3-1: SerialNumber: syz [ 3065.841801][T11968] hub 3-1:250.228: bad descriptor, ignoring hub [ 3065.854874][T11967] dvb-usb: schedule remote query interval to 400 msecs. [ 3065.881139][T11968] hub: probe of 3-1:250.228 failed with error -5 [ 3065.890484][T11967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3065.939753][T11967] usb 5-1: USB disconnect, device number 107 [ 3066.055895][T11968] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 119 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 3067.686401][T11967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3069.146085][T11968] usb 3-1: USB disconnect, device number 119 [ 3069.158217][T11968] usblp0: removed [ 3070.019270][T15042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3070.547608][ T28] audit: type=1326 audit(1789705803.269:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.4.6990" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea7a79e159 code=0x0 [ 3071.114785][T14970] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 3071.288800][T15064] netlink: 'syz.4.6997': attribute type 39 has an invalid length. [ 3071.330235][T14970] usb 6-1: Using ep0 maxpacket: 32 [ 3071.355961][T14970] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3071.392374][T14970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3071.427261][T14970] usb 6-1: config 0 descriptor?? [ 3071.670054][T14970] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3071.722279][T14970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3071.736779][T14970] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3071.764081][T14970] usb 6-1: media controller created [ 3071.875211][T14970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3071.966228][T14970] az6027: usb out operation failed. (-71) [ 3071.984628][T14970] az6027: usb out operation failed. (-71) [ 3072.004430][T14970] stb0899_attach: Driver disabled by Kconfig [ 3072.076031][T14970] az6027: no front-end attached [ 3072.076031][T14970] [ 3072.109522][T14970] az6027: usb out operation failed. (-71) [ 3072.148237][T14970] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3072.164854][T14970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input137 [ 3072.191592][T14970] dvb-usb: schedule remote query interval to 400 msecs. [ 3072.204449][T14970] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3072.286569][T14970] usb 6-1: USB disconnect, device number 111 [ 3072.564699][T14970] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3072.594534][ T28] audit: type=1326 audit(1789705805.299:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15073 comm="syz.1.6998" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f599959e159 code=0x0 [ 3073.674364][T11968] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3073.892775][T11968] usb 3-1: Using ep0 maxpacket: 32 [ 3073.900463][T11968] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3073.921771][T11968] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 3073.934466][T11721] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 3073.964413][T11968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3073.997370][T11968] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3074.007078][T11968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3074.018779][T11968] usb 3-1: Product: syz [ 3074.023021][T11968] usb 3-1: Manufacturer: syz [ 3074.033434][T11968] usb 3-1: SerialNumber: syz [ 3074.041461][T11968] usb 3-1: config 0 descriptor?? [ 3074.190019][T11721] usb 6-1: Using ep0 maxpacket: 16 [ 3074.226762][T11721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3074.272103][T11721] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3074.299231][T11721] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 3074.308919][T11721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3074.324337][T11721] usb 6-1: SerialNumber: syz [ 3074.352363][T11721] usb 6-1: 0:2 : does not exist [ 3074.535899][T15149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3076.755381][T11721] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 3076.872345][T11721] usb 6-1: USB disconnect, device number 112 [ 3076.957854][ T5818] usb 3-1: USB disconnect, device number 120 [ 3077.263162][T15184] Invalid option length (655638) for dns_resolver key [ 3077.434896][T14002] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 3077.654306][T14002] usb 5-1: Using ep0 maxpacket: 32 [ 3077.662869][T14002] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3077.691211][T14002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3077.702722][T14002] usb 5-1: config 0 descriptor?? [ 3077.988860][T14002] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3078.039417][T14002] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3078.154410][T14002] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3078.184480][T14002] usb 5-1: media controller created [ 3078.270274][T14002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3080.352453][T14002] az6027: usb out operation failed. (-71) [ 3080.461719][T14002] az6027: usb out operation failed. (-71) [ 3080.484329][T14002] stb0899_attach: Driver disabled by Kconfig [ 3080.540673][T14002] az6027: no front-end attached [ 3080.540673][T14002] [ 3080.551324][T14002] az6027: usb out operation failed. (-71) [ 3080.560911][T14002] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3080.573232][T14002] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input138 [ 3080.658857][T14002] dvb-usb: schedule remote query interval to 400 msecs. [ 3080.734389][T14002] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3080.747551][T14002] usb 5-1: USB disconnect, device number 108 [ 3080.933502][T14002] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3082.291411][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.334351][T11721] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 3082.634335][T11721] usb 5-1: Using ep0 maxpacket: 32 [ 3082.669627][T11721] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 3082.679816][T11721] usb 5-1: config 0 has no interface number 0 [ 3083.210090][T11721] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3083.453917][T11721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3083.526181][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x54b3 instead [ 3083.534582][T11721] usb 5-1: Product: syz [ 3083.564465][T11721] usb 5-1: Manufacturer: syz [ 3083.568689][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xde45 instead [ 3083.569116][T11721] usb 5-1: SerialNumber: syz [ 3083.631783][T15255] FAULT_INJECTION: forcing a failure. [ 3083.631783][T15255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3083.633937][T11721] usb 5-1: config 0 descriptor?? [ 3083.684701][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x4e3e instead [ 3083.731661][T11721] smsc95xx v2.0.0 [ 3083.738833][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x3007 instead [ 3083.770539][T15255] CPU: 0 PID: 15255 Comm: syz.1.7020 Not tainted syzkaller #0 [ 3083.778112][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3083.788220][T15255] Call Trace: [ 3083.791541][T15255] [ 3083.794509][T15255] dump_stack_lvl+0x18c/0x250 [ 3083.799256][T15255] ? show_regs_print_info+0x20/0x20 [ 3083.804592][T15255] ? load_image+0x420/0x420 [ 3083.809150][T15255] ? __lock_acquire+0x7d80/0x7d80 [ 3083.814229][T15255] ? verify_lock_unused+0x140/0x140 [ 3083.819454][T15255] should_fail_ex+0x394/0x4c0 [ 3083.824155][T15255] prepare_alloc_pages+0x1e1/0x5b0 [ 3083.824422][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x3988 instead [ 3083.829304][T15255] __alloc_pages+0x134/0x460 [ 3083.844281][T15255] ? zone_statistics+0x170/0x170 [ 3083.849253][T15255] ? blk_cgroup_congested+0x1f/0x220 [ 3083.854576][T15255] pte_alloc_one+0x84/0x540 [ 3083.859081][T15255] ? pfn_modify_allowed+0x560/0x560 [ 3083.864288][T15255] ? blk_cgroup_congested+0x1f/0x220 [ 3083.869614][T15255] ? blk_cgroup_congested+0x211/0x220 [ 3083.874993][T15255] ? __folio_throttle_swaprate+0xac/0x1a0 [ 3083.880713][T15255] do_huge_pmd_anonymous_page+0x5a8/0x18b0 [ 3083.886549][T15255] ? count_memcg_event_mm+0x36f/0x3c0 [ 3083.891921][T15255] ? count_memcg_event_mm+0x8e/0x3c0 [ 3083.897199][T15255] ? vma_thp_gfp_mask+0x160/0x160 [ 3083.902223][T15255] ? hugepage_vma_check+0x47d/0x560 [ 3083.907425][T15255] handle_mm_fault+0x1184/0x4a50 [ 3083.912362][T15255] ? handle_mm_fault+0xe6/0x4a50 [ 3083.917304][T15255] ? numa_migrate_prep+0x350/0x350 [ 3083.922429][T15255] __get_user_pages+0x604/0x1580 [ 3083.927384][T15255] ? populate_vma_page_range+0x380/0x380 [ 3083.933024][T15255] populate_vma_page_range+0x2c1/0x380 [ 3083.938486][T15255] ? fixup_user_fault+0x750/0x750 [ 3083.943514][T15255] ? down_read+0x1ac/0x2e0 [ 3083.947934][T15255] __mm_populate+0x260/0x390 [ 3083.952533][T15255] ? faultin_page_range+0x8a0/0x8a0 [ 3083.957735][T15255] ? up_write+0x1be/0x410 [ 3083.962074][T15255] do_mlock+0x5d2/0x740 [ 3083.966236][T15255] ? lru_gen_add_folio+0xe00/0xe00 [ 3083.971351][T15255] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3083.977362][T15255] ? lock_chain_count+0x20/0x20 [ 3083.982214][T15255] ? syscall_enter_from_user_mode+0x25/0x80 [ 3083.988112][T15255] __x64_sys_mlock+0x60/0x70 [ 3083.992704][T15255] do_syscall_64+0x55/0xb0 [ 3083.997118][T15255] ? clear_bhb_loop+0x40/0x90 [ 3084.001815][T15255] ? clear_bhb_loop+0x40/0x90 [ 3084.006495][T15255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3084.012387][T15255] RIP: 0033:0x7f599959e159 [ 3084.016805][T15255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3084.036414][T15255] RSP: 002b:00007f599a52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 3084.044833][T15255] RAX: ffffffffffffffda RBX: 00007f5999826090 RCX: 00007f599959e159 [ 3084.052824][T15255] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 3084.060832][T15255] RBP: 00007f599963506b R08: 0000000000000000 R09: 0000000000000000 [ 3084.068812][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3084.076782][T15255] R13: 00007f5999826128 R14: 00007f5999826090 R15: 00007ffee4ed1b98 [ 3084.084766][T15255] [ 3084.178834][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x9ca4 instead [ 3084.258222][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x19a3 instead [ 3084.309866][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xf00b instead [ 3084.350878][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x70ac instead [ 3084.357288][T11721] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 3084.402387][T11721] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3085.371625][ T28] audit: type=1326 audit(1789705817.719:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15256 comm="syz.5.7021" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aacf9e159 code=0x0 [ 3085.378616][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xf3d6 instead [ 3085.443664][T15253] jffs2: Further such events for this erase block will not be printed [ 3085.452942][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xe2da instead [ 3085.469015][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x5718 instead [ 3085.480667][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xe316 instead [ 3085.598955][T11721] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3085.624503][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x6c97 instead [ 3085.640587][T11721] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 3085.654548][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x2c23 instead [ 3085.670040][T11721] usb 5-1: USB disconnect, device number 109 [ 3085.750775][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x8da8 instead [ 3085.769969][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xe028 instead [ 3085.783250][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x66aa instead [ 3085.834434][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x2bda instead [ 3085.845208][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x1668 instead [ 3085.855738][T15253] jffs2: Further such events for this erase block will not be printed [ 3085.864944][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x5460 instead [ 3085.904282][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xf021 instead [ 3085.968868][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xe49a instead [ 3086.039741][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xbc3b instead [ 3086.094744][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xe4bc instead [ 3086.111533][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xc204 instead [ 3086.122409][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x8bc0 instead [ 3086.133091][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x99a5 instead [ 3086.143783][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x1712 instead [ 3086.159691][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xbe43 instead [ 3086.170389][T15253] jffs2: Further such events for this erase block will not be printed [ 3086.181081][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xe714 instead [ 3086.199911][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xfc07 instead [ 3086.237937][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x883c instead [ 3086.304502][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x9e02 instead [ 3086.369893][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x777c instead [ 3086.439791][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xda4e instead [ 3086.478082][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xe7fa instead [ 3086.537824][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xa7ba instead [ 3086.570371][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xdfb3 instead [ 3086.604466][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xea3e instead [ 3086.653654][T15253] jffs2: Further such events for this erase block will not be printed [ 3086.704407][T11967] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3086.720353][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x358b instead [ 3086.797267][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x97a5 instead [ 3087.547870][ T28] audit: type=1326 audit(1789705820.239:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15279 comm="syz.4.7024" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea7a79e159 code=0x0 [ 3087.583637][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x41c4 instead [ 3087.594978][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x559c instead [ 3087.615012][T11967] usb 3-1: Using ep0 maxpacket: 32 [ 3087.621523][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x8fba instead [ 3087.638220][T11967] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3087.734384][T11967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3087.775218][T11967] usb 3-1: config 0 descriptor?? [ 3087.782479][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x0cd3 instead [ 3087.864814][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x6923 instead [ 3087.934914][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xfe74 instead [ 3087.947186][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xbd0c instead [ 3087.983557][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x6cea instead [ 3088.009686][T11967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3088.017123][T15253] jffs2: Further such events for this erase block will not be printed [ 3088.036128][T11967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3088.063841][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x3669 instead [ 3088.085461][T11967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3088.092692][T11967] usb 3-1: media controller created [ 3088.140023][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x007a instead [ 3088.152449][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xf72e instead [ 3088.163059][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x6798 instead [ 3088.173806][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xbb68 instead [ 3088.174023][T15293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3088.192707][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xaf21 instead [ 3088.203462][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x7a06 instead [ 3088.214246][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x8bea instead [ 3088.225395][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x368e instead [ 3088.236370][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x4e58 instead [ 3088.252373][T15253] jffs2: Further such events for this erase block will not be printed [ 3088.304501][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x6140 instead [ 3088.307429][T11967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3088.340701][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xd9e3 instead [ 3088.374559][T11967] az6027: usb out operation failed. (-71) [ 3088.432131][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x05e3 instead [ 3088.470337][T11967] az6027: usb out operation failed. (-71) [ 3088.487171][T11967] stb0899_attach: Driver disabled by Kconfig [ 3088.493229][T11967] az6027: no front-end attached [ 3088.493229][T11967] [ 3088.522663][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xd3e4 instead [ 3088.570357][T11967] az6027: usb out operation failed. (-71) [ 3088.577128][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x496d instead [ 3088.594564][T11967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3088.610797][T11967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input139 [ 3088.626432][T15306] netlink: 'syz.5.7027': attribute type 39 has an invalid length. [ 3088.627731][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0xae1f instead [ 3088.662671][T11967] dvb-usb: schedule remote query interval to 400 msecs. [ 3088.670682][T11967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3088.688368][T11967] usb 3-1: USB disconnect, device number 121 [ 3088.699538][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xcd3f instead [ 3088.710734][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xe3a1 instead [ 3088.726686][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x5c1b instead [ 3088.738857][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x266a instead [ 3088.750905][T15253] jffs2: Further such events for this erase block will not be printed [ 3088.821738][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xe621 instead [ 3088.884119][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xf5d6 instead [ 3088.943766][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x3868 instead [ 3088.969910][T11967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3089.010387][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x559d instead [ 3089.073526][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x45b4 instead [ 3089.095774][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xcaa9 instead [ 3089.179460][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x752f instead [ 3089.835980][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xdd0e instead [ 3089.928779][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xc8da instead [ 3090.004500][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x5d44 instead [ 3090.050766][T15253] jffs2: Further such events for this erase block will not be printed [ 3090.104107][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x50fa instead [ 3090.171648][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0f4d instead [ 3090.252466][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x1856 instead [ 3090.273021][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x4867 instead [ 3090.290888][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x0c0b instead [ 3090.317485][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xae64 instead [ 3090.332046][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8a36 instead [ 3090.343096][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x6853 instead [ 3090.358118][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x276a instead [ 3090.369148][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xfc98 instead [ 3090.519921][T15253] jffs2: Further such events for this erase block will not be printed [ 3090.529906][T15253] jffs2: Old JFFS2 bitmask found at 0x00008724 [ 3090.536340][T15253] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 3090.546490][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x9dfa instead [ 3090.562553][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x4c93 instead [ 3090.585016][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xd44f instead [ 3091.314442][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x7653 instead [ 3091.641552][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x1c78 instead [ 3091.653347][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x7a27 instead [ 3091.665640][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xb81b instead [ 3091.678712][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x22f8 instead [ 3091.689547][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xcd8e instead [ 3091.733634][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xc2cb instead [ 3091.785212][T15253] jffs2: Further such events for this erase block will not be printed [ 3091.793917][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x0ee3 instead [ 3091.828108][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x6ca1 instead [ 3091.841411][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xded2 instead [ 3091.856332][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x82cd instead [ 3091.867427][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x3d8b instead [ 3092.105982][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x2c4a instead [ 3092.413663][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x26b4 instead [ 3092.844880][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x9432 instead [ 3092.920509][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xaa4b instead [ 3092.973260][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x25e7 instead [ 3092.987385][T15253] jffs2: Further such events for this erase block will not be printed [ 3092.999185][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x1335 instead [ 3093.013174][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xe98e instead [ 3093.028863][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x9923 instead [ 3093.052475][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x8e73 instead [ 3093.080419][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x568b instead [ 3095.150485][ T28] audit: type=1326 audit(1789705826.359:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15360 comm="syz.4.7035" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea7a79e159 code=0x0 [ 3095.264446][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x7a22 instead [ 3095.327329][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3ca1 instead [ 3095.342835][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xc159 instead [ 3095.385833][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x0891 instead [ 3095.406908][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x36b2 instead [ 3095.420526][T15253] jffs2: Further such events for this erase block will not be printed [ 3095.444108][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x3c4d instead [ 3095.460166][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xe6af instead [ 3095.471351][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xeb1f instead [ 3095.482538][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x1daf instead [ 3095.493609][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xe620 instead [ 3095.519719][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0xa5cc instead [ 3095.551291][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x6833 instead [ 3095.574313][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x1229 instead [ 3095.614595][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xe23e instead [ 3095.664227][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x2225 instead [ 3095.685054][T15253] jffs2: Further such events for this erase block will not be printed [ 3095.716094][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2037 instead [ 3095.749056][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x8c5a instead [ 3096.506885][ T28] audit: type=1326 audit(1789705829.199:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15359 comm="syz.5.7034" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aacf9e159 code=0x0 [ 3096.665620][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xee46 instead [ 3096.724239][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x3d23 instead [ 3096.744215][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xa22c instead [ 3096.758842][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xc0b0 instead [ 3096.794228][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf1d4 instead [ 3096.834349][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x361a instead [ 3096.864492][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x2fea instead [ 3096.904237][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xc2c1 instead [ 3096.934264][T15253] jffs2: Further such events for this erase block will not be printed [ 3096.942962][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x5a2e instead [ 3096.994270][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x6dd8 instead [ 3097.034256][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xdbc1 instead [ 3097.074240][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xff74 instead [ 3097.114224][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x0a0c instead [ 3097.139783][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xb697 instead [ 3097.172097][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x7ae0 instead [ 3097.204466][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x4bb5 instead [ 3097.244671][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x226a instead [ 3097.265297][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x498c instead [ 3097.287317][T15253] jffs2: Further such events for this erase block will not be printed [ 3097.796365][T15372] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7038'. [ 3097.825802][T15372] input: syz0 as /devices/virtual/input/input140 [ 3098.981881][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x18bd instead [ 3099.020913][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3099.084840][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x5e6f instead [ 3099.134206][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xd870 instead [ 3099.213486][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xec77 instead [ 3099.225828][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xfa22 instead [ 3099.236838][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xc704 instead [ 3099.248070][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0ca9 instead [ 3099.259311][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xed7b instead [ 3099.274868][T11721] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3099.280915][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x3754 instead [ 3099.304582][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x5e57 instead [ 3099.334302][T15253] jffs2: Further such events for this erase block will not be printed [ 3099.344839][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x28fb instead [ 3099.374417][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xb2a3 instead [ 3099.388750][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xf024 instead [ 3099.414683][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xf006 instead [ 3099.434370][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xb0e8 instead [ 3099.464361][T17058] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 3099.467633][T11721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3099.472931][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x3bd3 instead [ 3099.490315][T11721] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 3099.511431][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x66ea instead [ 3099.514200][T11721] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 3099.532987][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x5d5f instead [ 3099.533016][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x6423 instead [ 3099.533034][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xbbb5 instead [ 3099.533051][T15253] jffs2: Further such events for this erase block will not be printed [ 3099.533460][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xf8f6 instead [ 3099.594586][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x72f3 instead [ 3099.614526][T11721] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3099.625052][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0xdf83 instead [ 3099.646974][T11721] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 3099.660918][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x515a instead [ 3099.685082][T17058] usb 5-1: Using ep0 maxpacket: 32 [ 3099.687581][T11721] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 3099.692865][T17058] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3099.709446][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x33c5 instead [ 3099.733774][T17058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3099.741926][T11721] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 3099.741963][T11721] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 3099.741991][T11721] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 3099.745852][T11721] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 3099.786786][T11721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3099.794369][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x4f9c instead [ 3099.818516][T17058] usb 5-1: config 0 descriptor?? [ 3099.824315][T11721] usb 3-1: Product: syz [ 3099.828542][T11721] usb 3-1: Manufacturer: syz [ 3099.831719][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xb647 instead [ 3099.854270][T11721] usb 3-1: SerialNumber: syz [ 3099.875659][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x567a instead [ 3099.910869][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x5097 instead [ 3099.923875][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x5717 instead [ 3099.936296][T12107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3099.950717][T12107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3099.961799][T12107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3099.971897][T12107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3099.984579][T15253] jffs2: Further such events for this erase block will not be printed [ 3099.994523][T12107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3100.000073][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x23a3 instead [ 3100.017785][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x9ddc instead [ 3100.019028][T12107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3100.037783][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x16e9 instead [ 3100.057515][T17058] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3100.071821][T17058] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3100.096376][T17058] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3100.103891][T17058] usb 5-1: media controller created [ 3100.145056][T17058] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3100.150820][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x3b72 instead [ 3100.167226][T11721] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 3100.191623][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x4cd4 instead [ 3100.205242][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x0276 instead [ 3100.243954][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xadfd instead [ 3100.263590][T11721] usb 3-1: USB disconnect, device number 122 [ 3100.282538][T17058] az6027: usb out operation failed. (-71) [ 3100.314236][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xe872 instead [ 3100.331233][T17058] az6027: usb out operation failed. (-71) [ 3100.343358][T17058] stb0899_attach: Driver disabled by Kconfig [ 3100.349975][T17058] az6027: no front-end attached [ 3100.349975][T17058] [ 3100.352299][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x534a instead [ 3100.384347][T17058] az6027: usb out operation failed. (-71) [ 3100.390143][T17058] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3100.391476][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0xee7b instead [ 3100.457373][T15253] jffs2: Further such events for this erase block will not be printed [ 3100.496447][T17058] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input141 [ 3100.499048][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4817 instead [ 3100.531190][T15436] udevd[15436]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 3100.558314][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xfd04 instead [ 3100.559089][T17058] dvb-usb: schedule remote query interval to 400 msecs. [ 3100.578370][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x35a1 instead [ 3100.590384][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x78eb instead [ 3100.601204][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x92d4 instead [ 3100.638691][T17058] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3100.675371][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0xd086 instead [ 3100.699887][T17058] usb 5-1: USB disconnect, device number 110 [ 3100.722918][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x2410 instead [ 3100.825076][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x22a1 instead [ 3100.845910][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x064f instead [ 3100.874240][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x8826 instead [ 3100.912105][T15253] jffs2: Further such events for this erase block will not be printed [ 3100.944911][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x7f75 instead [ 3100.984435][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xf1fc instead [ 3101.004738][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x53a5 instead [ 3101.013542][T17058] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3101.074671][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xe4ca instead [ 3101.124311][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x07ed instead [ 3101.164866][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x824a instead [ 3101.204290][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x7c53 instead [ 3101.225117][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xf2b2 instead [ 3101.285480][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x2920 instead [ 3101.314827][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x7575 instead [ 3101.367365][T15253] jffs2: Further such events for this erase block will not be printed [ 3101.394775][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xc650 instead [ 3101.420387][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0xe069 instead [ 3101.444110][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x0dcd instead [ 3101.480642][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x77d8 instead [ 3101.503551][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0xf88e instead [ 3101.514624][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x1afb instead [ 3101.525642][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x6521 instead [ 3101.537159][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x2b0f instead [ 3101.548658][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x2511 instead [ 3101.559458][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xed9d instead [ 3101.571302][T15253] jffs2: Further such events for this erase block will not be printed [ 3101.580442][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x528c instead [ 3101.584345][T17058] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 3101.591562][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xe8d0 instead [ 3101.654338][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x6207 instead [ 3101.672343][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x1dde instead [ 3101.706996][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xb192 instead [ 3101.739286][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x1b9c instead [ 3101.798351][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x0116 instead [ 3101.828194][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xdeb9 instead [ 3101.846963][T17058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3101.874243][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x43b7 instead [ 3101.886923][T17058] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3101.911118][T15397] chnl_net:caif_netlink_parms(): no params data found [ 3101.913828][T17058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.927665][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x346e instead [ 3101.964112][T15253] jffs2: Further such events for this erase block will not be printed [ 3101.966666][T17058] usb 5-1: config 0 descriptor?? [ 3101.986424][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x1de3 instead [ 3102.034457][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xb056 instead [ 3102.076395][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x24f8 instead [ 3102.110946][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x1f00 instead [ 3102.174522][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0xaef9 instead [ 3102.207587][T20510] Bluetooth: hci3: command tx timeout [ 3102.243822][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xc024 instead [ 3102.268051][T17058] usbhid 5-1:0.0: can't add hid device: -71 [ 3102.287531][T17058] usbhid: probe of 5-1:0.0 failed with error -71 [ 3102.306976][T17058] usb 5-1: USB disconnect, device number 111 [ 3102.338626][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xa8d7 instead [ 3102.363381][T15397] bridge0: port 1(bridge_slave_0) entered blocking state [ 3102.378164][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x9a78 instead [ 3102.401600][T15397] bridge0: port 1(bridge_slave_0) entered disabled state [ 3102.415070][T15397] bridge_slave_0: entered allmulticast mode [ 3102.421902][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x4870 instead [ 3102.434537][T15397] bridge_slave_0: entered promiscuous mode [ 3102.442719][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x0b75 instead [ 3102.455496][T15397] bridge0: port 2(bridge_slave_1) entered blocking state [ 3102.463181][T15397] bridge0: port 2(bridge_slave_1) entered disabled state [ 3102.474854][T15253] jffs2: Further such events for this erase block will not be printed [ 3102.495728][T15397] bridge_slave_1: entered allmulticast mode [ 3102.496409][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xc500 instead [ 3102.503117][T15397] bridge_slave_1: entered promiscuous mode [ 3102.551353][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x3682 instead [ 3102.606300][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x6ffa instead [ 3102.629924][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xe988 instead [ 3102.639616][T15397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3102.674481][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x23f8 instead [ 3102.676987][T15397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3102.714480][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x3bdb instead [ 3102.744451][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x0138 instead [ 3102.774237][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xf7b4 instead [ 3102.809475][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x2459 instead [ 3102.850615][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0xa146 instead [ 3102.863618][T15397] team0: Port device team_slave_0 added [ 3102.879251][T15253] jffs2: Further such events for this erase block will not be printed [ 3102.888137][T15397] team0: Port device team_slave_1 added [ 3102.904672][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xa95f instead [ 3102.914871][T17058] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 3102.944710][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x4c05 instead [ 3102.974310][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0xa1e6 instead [ 3102.994272][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x4cb7 instead [ 3103.013638][T15397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3103.041471][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x2d4d instead [ 3103.043594][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3103.067734][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0xfd6a instead [ 3103.835263][ T28] audit: type=1326 audit(1789705836.529:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.7045" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aacf9e159 code=0x0 [ 3103.868317][T15397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3103.874648][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5f0d instead [ 3103.888748][T15397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3103.897257][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3103.912081][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x8326 instead [ 3103.924555][T15397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3103.948059][T17058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3103.979682][T17058] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3104.002982][T17058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3104.024247][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xdc86 instead [ 3104.027011][T17058] usb 5-1: config 0 descriptor?? [ 3104.063583][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xe9c8 instead [ 3104.105685][T15253] jffs2: Further such events for this erase block will not be printed [ 3104.139893][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x490d instead [ 3104.169190][T15397] hsr_slave_0: entered promiscuous mode [ 3104.177000][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x39c8 instead [ 3104.202172][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xa82f instead [ 3104.221333][T15397] hsr_slave_1: entered promiscuous mode [ 3104.243280][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x2126 instead [ 3104.259148][T15397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3104.268918][T15397] Cannot create hsr debugfs directory [ 3104.285130][T20510] Bluetooth: hci3: command tx timeout [ 3104.294418][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x5c66 instead [ 3104.310172][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x624a instead [ 3104.376491][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x906c instead [ 3104.419301][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x504d instead [ 3104.457005][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x5449 instead [ 3104.484254][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x2fdc instead [ 3104.528841][T15253] jffs2: Further such events for this erase block will not be printed [ 3104.550859][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0xfc53 instead [ 3104.574881][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xefc9 instead [ 3104.594230][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x2962 instead [ 3104.624676][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x7daf instead [ 3104.645683][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x7e9b instead [ 3104.675063][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x6bc3 instead [ 3104.694595][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc54d instead [ 3104.714306][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xb698 instead [ 3104.734866][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x09ef instead [ 3104.774267][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xfbc3 instead [ 3104.791531][T15253] jffs2: Further such events for this erase block will not be printed [ 3104.824687][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x0ae7 instead [ 3104.865567][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x65cf instead [ 3104.888575][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x4551 instead [ 3104.900598][T17058] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 3104.907144][T15397] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3104.909015][T15474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3104.933174][T17058] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input142 [ 3104.947574][T15397] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3104.966313][T15474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3104.974734][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x71ad instead [ 3105.002867][T15397] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3105.012647][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0xbe0e instead [ 3105.033923][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x020c instead [ 3105.078505][T15397] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3105.094319][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xc515 instead [ 3105.142416][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x3125 instead [ 3105.188704][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xad39 instead [ 3105.214702][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x5dcc instead [ 3105.241392][T15253] jffs2: Further such events for this erase block will not be printed [ 3105.262130][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x19cd instead [ 3105.283269][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x6f98 instead [ 3105.320639][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xb89f instead [ 3105.348400][T15397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3105.357526][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xf1b8 instead [ 3105.371809][T11721] usb 5-1: USB disconnect, device number 112 [ 3105.371890][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 3105.386177][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xf223 instead [ 3105.397087][T15397] 8021q: adding VLAN 0 to HW filter on device team0 [ 3105.412496][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0xb5ae instead [ 3105.437114][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 3105.444475][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3105.445442][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x31d7 instead [ 3105.475515][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 3105.482722][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3105.524612][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x77fd instead [ 3105.572716][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xe55d instead [ 3105.604581][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xfb98 instead [ 3105.644810][T15253] jffs2: Further such events for this erase block will not be printed [ 3105.653501][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x0f1f instead [ 3105.684264][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0375 instead [ 3105.705588][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xe625 instead [ 3105.719660][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xd249 instead [ 3105.744690][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xcade instead [ 3105.775609][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x95c5 instead [ 3105.795398][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xcb00 instead [ 3105.814057][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x3688 instead [ 3105.854270][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x30fb instead [ 3105.893552][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xdbf5 instead [ 3105.914420][T15253] jffs2: Further such events for this erase block will not be printed [ 3105.925776][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x2aff instead [ 3105.937539][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0a1b instead [ 3105.948546][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x09d6 instead [ 3105.967809][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0xdc67 instead [ 3105.994694][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x5ca9 instead [ 3106.014536][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x4b3c instead [ 3106.050443][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x96aa instead [ 3106.062194][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x4a80 instead [ 3106.082758][T15397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3106.104967][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x404d instead [ 3106.134294][T15253] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x3801 instead [ 3106.155613][T15253] jffs2: Further such events for this erase block will not be printed [ 3106.175612][T15253] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 3106.205170][T15253] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 3106.365572][T20510] Bluetooth: hci3: command tx timeout [ 3106.560467][T15397] veth0_vlan: entered promiscuous mode [ 3106.576345][T15397] veth1_vlan: entered promiscuous mode [ 3106.653578][T15397] veth0_macvtap: entered promiscuous mode [ 3106.682035][T15397] veth1_macvtap: entered promiscuous mode [ 3106.737040][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3106.754307][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3106.779214][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3106.805101][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3106.817568][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3106.843715][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3106.877863][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3106.937270][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3106.972429][T15397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3107.001616][T15253] infiniband syz0: set down [ 3107.027846][T17058] syz0: rxe_query_port: returned err = -19 [ 3107.033755][T17058] infiniband syz0: ib_query_port failed (-19) [ 3107.074426][T11084] smc: removing ib device syz0 [ 3107.083859][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3107.102615][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.126688][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3107.141037][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.153658][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3107.164931][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.184346][T15397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3107.197008][T15397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.209561][T15397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3107.246175][T15397] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.261345][T15397] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.272842][T15397] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.289501][T15397] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.465030][T25172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.472927][T25172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3107.597903][T25172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.621204][T25172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3108.445225][T20510] Bluetooth: hci3: command tx timeout [ 3130.134516][ T3477] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3143.732095][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3161.059347][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3191.984536][T11084] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3205.171328][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3222.612343][T20510] Bluetooth: hci3: command 0x0406 tx timeout [ 3223.011199][T11084] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3253.936157][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3266.609635][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3284.860889][T11078] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3315.787920][ T1900] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3327.266633][T15911] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7051'. [ 3327.295752][T15911] input: syz0 as /devices/virtual/input/input143 [ 3328.559413][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.944330][T14970] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 3329.144577][T14970] usb 5-1: Using ep0 maxpacket: 32 [ 3329.166008][T14970] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3329.187679][T14970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3329.274933][T14970] usb 5-1: config 0 descriptor?? [ 3330.979283][ T28] audit: type=1326 audit(1789706063.699:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.6.7054" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd99699e159 code=0x0 [ 3331.934415][T14970] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3331.966161][T14970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3331.994922][T14970] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3332.010452][T14970] usb 5-1: media controller created [ 3332.070914][T14970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3332.176909][T14970] az6027: usb out operation failed. (-71) [ 3332.189101][T14970] az6027: usb out operation failed. (-71) [ 3332.210925][T14970] stb0899_attach: Driver disabled by Kconfig [ 3332.220619][T14970] az6027: no front-end attached [ 3332.220619][T14970] [ 3332.246899][T14970] az6027: usb out operation failed. (-71) [ 3332.269361][T14970] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3332.304561][T14970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input144 [ 3332.340771][T14970] dvb-usb: schedule remote query interval to 400 msecs. [ 3332.369051][T14970] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3332.411067][T14970] usb 5-1: USB disconnect, device number 113 [ 3332.621076][T14970] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3334.134442][T14970] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 3334.334247][T14970] usb 5-1: Using ep0 maxpacket: 8 [ 3334.349251][T14970] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 3334.359265][T14970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3334.390267][T14970] usb 5-1: Product: syz [ 3334.408308][T14970] usb 5-1: Manufacturer: syz [ 3334.425878][T14970] usb 5-1: SerialNumber: syz [ 3334.442922][T14970] usb 5-1: config 0 descriptor?? [ 3334.461534][T14970] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 3334.476024][T14970] pctv452e: pctv452e_power_ctrl: 1 [ 3334.476024][T14970] [ 3334.604271][T11967] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3335.490198][T14970] usb 5-1: selecting invalid altsetting 3 [ 3335.578116][T14970] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 3335.578116][T14970] [ 3335.599292][T14970] dvb-usb: bulk message failed: -22 (5/0) [ 3335.625482][T14970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3335.651357][T14970] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 3335.670916][T14970] usb 5-1: media controller created [ 3335.702653][T14970] dvb-usb: bulk message failed: -22 (8/0) [ 3335.739259][T14970] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 3335.741389][T11967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3335.775446][T14970] dvb-usb: MAC address reading failed. [ 3335.780552][T11967] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3335.800796][T11967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3335.824268][T11967] usb 3-1: config 0 descriptor?? [ 3335.885121][T14970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3336.064444][T14970] DVB: Unable to find symbol stb0899_attach() [ 3336.070614][T14970] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 3336.214259][T11967] usbhid 3-1:0.0: can't add hid device: -71 [ 3336.220607][T11967] usbhid: probe of 3-1:0.0 failed with error -71 [ 3336.238884][T11967] usb 3-1: USB disconnect, device number 123 [ 3336.271549][T16016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3337.980658][ T28] audit: type=1326 audit(1789706070.689:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16029 comm="syz.4.7065" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea7a79e159 code=0x0 [ 3338.659512][T11967] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3338.682216][T14970] rc_core: IR keymap rc-tt-1500 not found [ 3338.699798][T14970] Registered IR keymap rc-empty [ 3338.804978][T14970] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 3338.829549][T14970] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input145 [ 3338.853462][T14970] dvb-usb: schedule remote query interval to 100 msecs. [ 3338.860732][T14970] pctv452e: pctv452e_power_ctrl: 0 [ 3338.860732][T14970] [ 3338.894559][T14970] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 3338.954807][T14970] usb 5-1: USB disconnect, device number 114 [ 3339.201014][T14970] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 3339.571806][T16062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3339.580405][T11967] usb 3-1: device descriptor read/64, error -71 [ 3339.874267][T11967] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3340.121464][T11967] usb 3-1: Using ep0 maxpacket: 32 [ 3340.721506][T11967] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3340.925072][T11967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3340.976444][T11967] usb 3-1: config 0 descriptor?? [ 3341.010797][T16074] syz.5.7069: attempt to access beyond end of device [ 3341.010797][T16074] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3341.267417][T11967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3344.182968][T11967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3344.244764][T11967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3344.258926][T11967] usb 3-1: media controller created [ 3344.399423][T11967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3344.475555][T11967] az6027: usb out operation failed. (-71) [ 3344.518413][T11967] az6027: usb out operation failed. (-71) [ 3344.555326][T11967] stb0899_attach: Driver disabled by Kconfig [ 3344.562554][T11967] az6027: no front-end attached [ 3344.562554][T11967] [ 3344.602681][T11967] az6027: usb out operation failed. (-71) [ 3344.624125][T11967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3344.652694][T11967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input146 [ 3344.711964][T11967] dvb-usb: schedule remote query interval to 400 msecs. [ 3344.729403][T11967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3344.768720][T11967] usb 3-1: USB disconnect, device number 125 [ 3344.869489][T16109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3345.018847][T11967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3345.232685][T16123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3347.186743][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7078'. [ 3348.082152][ T1900] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3350.009923][ T28] audit: type=1326 audit(1789706081.959:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16128 comm="syz.2.7076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8e919e159 code=0x0 [ 3350.555962][ T3477] nci: nci_rx_work: unknown MT 0x6 [ 3351.063406][T16160] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3353.425806][T16145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3353.804434][T17054] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 3353.986779][T17054] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3354.028285][T17054] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 3354.085843][T17054] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3354.095731][T17054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3354.103772][T17054] usb 7-1: SerialNumber: syz [ 3354.148414][T17054] hub 7-1:1.0: bad descriptor, ignoring hub [ 3354.164117][T17054] hub: probe of 7-1:1.0 failed with error -5 [ 3354.170902][T17054] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 3354.499112][T16203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3354.664276][T17054] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 3354.854543][T17054] usb 5-1: Using ep0 maxpacket: 8 [ 3354.867805][T17054] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 3354.885269][T17054] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 3354.904147][T17054] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3354.923336][T17054] usb 5-1: config 250 has no interface number 0 [ 3354.937770][T17054] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 3354.962255][T17054] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3354.984105][T17054] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3354.984322][T14002] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3355.009563][T17054] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 3355.131255][T17054] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 3355.148250][T17054] usb 5-1: config 250 interface 228 has no altsetting 0 [ 3355.166571][T17054] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3355.184284][T17054] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3355.192648][T17054] usb 5-1: Product: syz [ 3355.215006][T14002] usb 3-1: Using ep0 maxpacket: 32 [ 3355.216053][T17054] usb 5-1: SerialNumber: syz [ 3355.246327][T14002] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3355.267876][T17054] hub 5-1:250.228: bad descriptor, ignoring hub [ 3355.284159][T17054] hub: probe of 5-1:250.228 failed with error -5 [ 3355.284562][T14002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3355.338755][T14002] usb 3-1: config 0 descriptor?? [ 3356.064819][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7088'. [ 3357.851038][T14002] usb 3-1: can't set config #0, error -71 [ 3357.966334][T11968] usb 7-1: USB disconnect, device number 2 [ 3357.967256][T14002] usb 3-1: USB disconnect, device number 126 [ 3358.877347][T16239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3359.386149][T17054] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 115 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 3359.506127][T17054] usb 5-1: USB disconnect, device number 115 [ 3359.563548][T17054] usblp0: removed [ 3362.815711][T16287] syz.4.7096: attempt to access beyond end of device [ 3362.815711][T16287] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3362.863800][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7098'. [ 3362.875721][T16288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3362.915277][ T5818] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 3363.222085][ T5818] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3366.085187][ T5818] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 3366.099533][ T5818] usb 7-1: string descriptor 0 read error: -71 [ 3366.106888][ T5818] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3366.116461][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3366.222618][ T5818] usb 7-1: can't set config #1, error -71 [ 3366.283762][ T5818] usb 7-1: USB disconnect, device number 3 [ 3366.323856][T16288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3366.630076][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7099'. [ 3366.782499][T16328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3367.934342][T17054] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 3370.454316][T17054] usb 5-1: Using ep0 maxpacket: 16 [ 3370.509461][T17054] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3370.530162][T17054] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3370.564914][T17054] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 3370.598147][T17054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3370.615694][T17054] usb 5-1: SerialNumber: syz [ 3370.678942][T17054] usb 5-1: can't set config #1, error -71 [ 3370.724550][T17054] usb 5-1: USB disconnect, device number 116 [ 3370.864366][T17058] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3370.903572][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7110'. [ 3370.923885][T16379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3371.056737][T17058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3371.085102][T17058] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 3371.459049][T16386] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 3371.492106][T16386] rtrs_client L2075: : Failed to resolve address, err: -19 [ 3371.502583][T16386] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 3372.030231][T17058] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3373.717318][T17058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3373.726299][T17058] usb 3-1: SerialNumber: syz [ 3373.835023][T17058] usb 3-1: can't set config #1, error -71 [ 3373.885493][T17058] usb 3-1: USB disconnect, device number 127 [ 3373.991607][T16379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3374.818794][T16419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3375.523866][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7111'. [ 3377.601605][T16448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3378.147951][T16454] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 3378.178624][T16454] rtrs_client L2075: : Failed to resolve address, err: -19 [ 3378.187556][T16454] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 3378.658959][T14002] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 3378.866472][T14002] usb 7-1: Using ep0 maxpacket: 16 [ 3378.886575][T14002] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3378.923799][T14002] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3378.942299][T14002] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 3378.962296][T14002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3378.985508][T14002] usb 7-1: SerialNumber: syz [ 3379.038241][T14002] usb 7-1: 0:2 : does not exist [ 3379.145038][T11721] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 3379.431923][T11721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3379.442747][T11721] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 3379.459380][T11721] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3379.470513][T11721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3379.487621][T11721] usb 6-1: SerialNumber: syz [ 3379.505142][T11721] hub 6-1:1.0: bad descriptor, ignoring hub [ 3379.517953][T11721] hub: probe of 6-1:1.0 failed with error -5 [ 3379.538522][T11721] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 3382.053490][ T1900] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3382.292826][T14002] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 3382.364746][T14002] usb 7-1: USB disconnect, device number 4 [ 3382.516569][T11968] usb 6-1: USB disconnect, device number 113 [ 3382.566500][T15925] udevd[15925]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 3382.635117][T16515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3383.215307][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7125'. [ 3389.919723][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3390.334272][T17058] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 3390.539575][T17058] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3390.560020][T17058] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3390.567611][T17058] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 3390.583500][T17058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3390.603922][T17058] usb 6-1: config 0 descriptor?? [ 3390.614469][T14002] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3390.624311][T11721] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 3390.758368][T17058] usbhid 6-1:0.0: can't add hid device: -71 [ 3390.782894][T17058] usbhid: probe of 6-1:0.0 failed with error -71 [ 3390.809028][T17058] usb 6-1: USB disconnect, device number 114 [ 3390.835986][T14002] usb 3-1: Using ep0 maxpacket: 16 [ 3390.859608][T11721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3390.876680][T11721] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 3390.876948][T14002] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3390.911275][T11721] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3390.922331][T11721] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3390.930952][T14002] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3390.940544][T11721] usb 7-1: SerialNumber: syz [ 3390.953127][T11721] hub 7-1:1.0: bad descriptor, ignoring hub [ 3390.970082][T11721] hub: probe of 7-1:1.0 failed with error -5 [ 3390.978603][T14002] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 3390.994973][T11721] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 3391.002182][T14002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3391.036735][T14002] usb 3-1: SerialNumber: syz [ 3391.091282][T14002] usb 3-1: 0:2 : does not exist [ 3393.119746][ T28] audit: type=1326 audit(1789706125.469:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16602 comm="syz.5.7138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aacf9e159 code=0x0 [ 3393.227219][T14002] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 3393.285848][T14002] usb 3-1: USB disconnect, device number 2 [ 3393.347565][T16540] udevd[16540]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 3393.525066][T21084] usb 7-1: USB disconnect, device number 5 [ 3395.651075][ T3477] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3396.117341][ T3477] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3396.328223][ T3477] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3396.507237][ T3477] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.524785][T20510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3397.545472][T20510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3397.564738][T20510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3397.596602][T20510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3397.607438][T20510] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3397.608885][ T3477] tipc: Disabling bearer [ 3397.640305][T14970] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 3397.648362][T20510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3397.653862][ T3477] tipc: Disabling bearer [ 3397.685136][ T3477] tipc: Left network mode [ 3397.854249][T14970] usb 7-1: Using ep0 maxpacket: 8 [ 3397.901631][T14970] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 3398.126835][T14970] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 3398.148853][T14970] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3398.175209][T14970] usb 7-1: config 250 has no interface number 0 [ 3398.181588][T14970] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 3398.764666][T14970] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3398.856975][T14970] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3398.943615][T14970] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 3398.988767][T14970] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 3399.872378][T12107] Bluetooth: hci1: command tx timeout [ 3399.874093][ T28] audit: type=1326 audit(1789706132.559:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16697 comm="syz.5.7147" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aacf9e159 code=0x0 [ 3399.901830][ C0] vkms_vblank_simulate: vblank timer overrun [ 3399.918481][T14970] usb 7-1: config 250 interface 228 has no altsetting 0 [ 3399.930542][T14970] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3399.955898][T14970] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3400.048198][T14970] usb 7-1: Product: syz [ 3400.052435][T14970] usb 7-1: SerialNumber: syz [ 3400.120178][T14970] hub 7-1:250.228: bad descriptor, ignoring hub [ 3401.594458][T14970] hub: probe of 7-1:250.228 failed with error -5 [ 3402.046913][T12107] Bluetooth: hci1: command tx timeout [ 3402.399112][T11967] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3402.900061][T11967] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3402.975616][T11967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3403.025909][T11967] usb 3-1: Product: syz [ 3403.051827][T11967] usb 3-1: Manufacturer: syz [ 3403.108201][T11967] usb 3-1: SerialNumber: syz [ 3403.554344][T14970] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 3404.275634][T12107] Bluetooth: hci1: command tx timeout [ 3406.477706][T20510] Bluetooth: hci1: command tx timeout [ 3407.469956][T14970] usb 7-1: USB disconnect, device number 6 [ 3407.533125][T11967] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 3407.711897][T11967] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 3407.899460][T11967] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 3408.007436][T11967] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 3408.101691][T11967] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3408.388295][T11967] lan78xx: probe of 3-1:1.0 failed with error -71 [ 3408.740327][T11967] usb 3-1: USB disconnect, device number 3 [ 3409.700390][T16658] chnl_net:caif_netlink_parms(): no params data found [ 3409.861930][T14970] usblp0: removed [ 3410.436897][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7149'. [ 3411.715253][ T28] audit: type=1326 audit(1789706143.699:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16889 comm="syz.2.7156" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8e919e159 code=0x0 [ 3411.871190][ T3477] hsr_slave_0: left promiscuous mode [ 3411.909599][ T3477] hsr_slave_1: left promiscuous mode [ 3411.927005][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3411.951543][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3411.972261][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3411.990609][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3412.006415][ T3477] bridge_slave_1: left allmulticast mode [ 3412.022320][ T3477] bridge_slave_1: left promiscuous mode [ 3412.044825][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 3412.105195][ T3477] bridge_slave_0: left allmulticast mode [ 3412.110973][ T3477] bridge_slave_0: left promiscuous mode [ 3412.125164][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 3412.203587][ T3477] veth1_macvtap: left promiscuous mode [ 3412.209577][ T3477] veth0_macvtap: left promiscuous mode [ 3412.222780][ T3477] veth1_vlan: left promiscuous mode [ 3412.229649][ T3477] veth0_vlan: left promiscuous mode [ 3412.321795][T16907] [U]  [ 3413.375249][ T1900] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3414.685116][T16927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3416.149157][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 3416.232572][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 3416.313373][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3416.394858][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3416.880098][ T3477] team0 (unregistering): Port device bond0 removed [ 3416.961764][ T3477] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3416.971052][ T3477] bond0 (unregistering): Released all slaves [ 3417.110521][T16658] bridge0: port 1(bridge_slave_0) entered blocking state [ 3417.117821][T16658] bridge0: port 1(bridge_slave_0) entered disabled state [ 3417.126033][T16658] bridge_slave_0: entered allmulticast mode [ 3417.133259][T16658] bridge_slave_0: entered promiscuous mode [ 3417.145933][T16905] netlink: 'syz.5.7159': attribute type 1 has an invalid length. [ 3417.166440][T16905] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 3417.211121][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7159'. [ 3417.233922][T16658] bridge0: port 2(bridge_slave_1) entered blocking state [ 3417.245557][T16658] bridge0: port 2(bridge_slave_1) entered disabled state [ 3417.252860][T16658] bridge_slave_1: entered allmulticast mode [ 3417.287288][T16658] bridge_slave_1: entered promiscuous mode [ 3417.398696][T16658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3417.459587][T16959] syz.2.7165: attempt to access beyond end of device [ 3417.459587][T16959] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 3417.473318][T16959] F2FS-fs (nbd2): Unable to read 1th superblock [ 3417.481399][T16959] syz.2.7165: attempt to access beyond end of device [ 3417.481399][T16959] nbd2: rw=0, sector=8, nr_sectors = 8 limit=0 [ 3417.503193][T16658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3417.523488][T16959] F2FS-fs (nbd2): Unable to read 2th superblock [ 3417.819935][T16658] team0: Port device team_slave_0 added [ 3417.929682][T16658] team0: Port device team_slave_1 added [ 3418.115880][T16658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3418.131255][T16658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3418.207835][T16658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3418.407147][T16658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3418.429983][T16658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3418.515415][T16658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3418.617418][ T3477] IPVS: stop unused estimator thread 0... [ 3418.704996][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7167'. [ 3419.593050][T16658] hsr_slave_0: entered promiscuous mode [ 3419.676380][T16658] hsr_slave_1: entered promiscuous mode [ 3419.714777][T16658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3419.764400][T16658] Cannot create hsr debugfs directory [ 3422.063564][T17130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3424.231432][T11721] IPVS: starting estimator thread 0... [ 3424.334425][T17146] IPVS: using max 18 ests per chain, 43200 per kthread [ 3424.591808][T16658] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3424.611364][T16658] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3424.633537][T16658] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3424.665796][T16658] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3425.240743][T16658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3425.440752][T16658] 8021q: adding VLAN 0 to HW filter on device team0 [ 3425.485614][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 3425.492964][ T1900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3425.753709][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 3425.761019][ T1900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3426.484713][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7179'. [ 3426.535972][T17193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3426.988499][T17193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3427.881288][T16658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3427.938907][T16658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3428.671695][T16658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3428.826397][T17251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3429.437672][T16658] veth0_vlan: entered promiscuous mode [ 3429.625351][T16658] veth1_vlan: entered promiscuous mode [ 3429.925406][T16658] veth0_macvtap: entered promiscuous mode [ 3429.984124][T17280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3430.547147][T16658] veth1_macvtap: entered promiscuous mode [ 3430.660575][T16658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3430.746548][T16658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3430.790887][T16658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3430.842665][T16658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3430.896718][T16658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3430.940846][T16658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3430.967196][T16658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3431.013602][T16658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3431.034597][T16658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3431.047616][T16658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3431.059155][T16658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3431.091675][T16658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3431.133831][T16658] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3431.144560][T14002] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 3431.166241][T16658] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3431.175984][T16658] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3431.195802][T16658] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3431.232660][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7189'. [ 3431.347481][T14002] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3431.374325][T14002] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3431.413194][T14002] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3431.432895][T14002] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3431.483154][T14002] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3431.536889][T14002] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3431.555734][T14002] usb 6-1: Product: syz [ 3431.559984][T14002] usb 6-1: Manufacturer: syz [ 3433.739233][T14002] cdc_wdm 6-1:1.0: skipping garbage [ 3433.774283][T14002] cdc_wdm 6-1:1.0: skipping garbage [ 3433.810200][T14002] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 3433.816852][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3433.844105][T14002] cdc_wdm 6-1:1.0: Unknown control protocol [ 3433.874108][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3433.922851][T14002] usb 6-1: USB disconnect, device number 115 [ 3434.010846][T11084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3434.052000][T11084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3435.044495][T17362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3435.072192][T17361] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.7196'. [ 3439.106494][T12107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3439.120092][T12107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3439.129155][T12107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3439.137418][T12107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3439.145814][T12107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3439.153214][T12107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3439.337915][T11084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3439.475905][T17412] netlink: 'syz.5.7204': attribute type 1 has an invalid length. [ 3441.048839][T11084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3441.245299][T17403] Bluetooth: hci0: command tx timeout [ 3441.419339][T11084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3441.680893][T11084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3442.758498][ T5818] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 3442.831035][T17401] chnl_net:caif_netlink_parms(): no params data found [ 3442.974385][ T5818] usb 8-1: Using ep0 maxpacket: 16 [ 3442.988424][ T5818] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3442.990501][T17533] macsec1: entered allmulticast mode [ 3443.001569][ T5818] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3443.015323][T17533] veth1_macvtap: entered allmulticast mode [ 3443.016843][ T5818] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 3443.052802][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3443.061960][ T5818] usb 8-1: SerialNumber: syz [ 3443.073804][T11084] tipc: Left network mode [ 3443.090881][ T5818] usb 8-1: 0:2 : does not exist [ 3443.344130][T17403] Bluetooth: hci0: command tx timeout [ 3443.843360][ T5818] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 3443.965650][ T5818] usb 8-1: USB disconnect, device number 2 [ 3444.060580][T16540] udevd[16540]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 3444.610074][ T1900] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3444.842675][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 3444.865151][T17401] bridge0: port 1(bridge_slave_0) entered disabled state [ 3444.888713][T17401] bridge_slave_0: entered allmulticast mode [ 3445.025523][T17401] bridge_slave_0: entered promiscuous mode [ 3445.073007][T17401] bridge0: port 2(bridge_slave_1) entered blocking state [ 3445.086165][T17401] bridge0: port 2(bridge_slave_1) entered disabled state [ 3445.102424][T17401] bridge_slave_1: entered allmulticast mode [ 3445.133045][T17401] bridge_slave_1: entered promiscuous mode [ 3445.494308][T17403] Bluetooth: hci0: command tx timeout [ 3445.999602][T17401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3446.159619][T17401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3446.187588][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7221'. [ 3446.210020][T17662] input: syz1 as /devices/virtual/input/input148 [ 3446.401617][T17401] team0: Port device team_slave_0 added [ 3446.464831][T17401] team0: Port device team_slave_1 added [ 3446.593712][T17401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3446.611562][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3446.649211][T17401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3446.684320][T17401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3446.691322][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3446.731743][T17401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3447.130659][T17401] hsr_slave_0: entered promiscuous mode [ 3447.194790][T17401] hsr_slave_1: entered promiscuous mode [ 3447.229868][T17401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3447.239646][T17401] Cannot create hsr debugfs directory [ 3447.564167][T17403] Bluetooth: hci0: command tx timeout [ 3448.320994][T11084] hsr_slave_0: left promiscuous mode [ 3448.443746][T11084] hsr_slave_1: left promiscuous mode [ 3448.454666][T17741] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7224'. [ 3448.546196][T11084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3448.567120][T11084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3448.583635][T11084] bridge_slave_1: left allmulticast mode [ 3448.621152][T11084] bridge_slave_1: left promiscuous mode [ 3448.704198][T11967] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 3448.744382][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 3448.767961][T11084] bridge_slave_0: left allmulticast mode [ 3448.773694][T11084] bridge_slave_0: left promiscuous mode [ 3448.806110][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 3448.864863][T11084] veth1_macvtap: left promiscuous mode [ 3448.870481][T11084] veth0_macvtap: left promiscuous mode [ 3448.884283][T11084] veth1_vlan: left promiscuous mode [ 3448.904200][T11967] usb 8-1: Using ep0 maxpacket: 8 [ 3448.923523][T11967] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 3448.952138][T11967] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 3448.974145][T11967] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3448.983259][T11967] usb 8-1: config 250 has no interface number 0 [ 3449.025229][T11967] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 3449.054191][T11967] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3449.076607][T11967] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3449.144091][T11967] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 3449.175494][T11967] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 3449.235094][T11967] usb 8-1: config 250 interface 228 has no altsetting 0 [ 3449.255529][T11967] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3449.266768][T11084] pim6reg (unregistering): left allmulticast mode [ 3449.285221][T11967] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3449.293547][T11967] usb 8-1: Product: syz [ 3449.318579][T11967] usb 8-1: SerialNumber: syz [ 3449.376428][T11967] hub 8-1:250.228: bad descriptor, ignoring hub [ 3449.414235][T11967] hub: probe of 8-1:250.228 failed with error -5 [ 3450.138302][T11967] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 3450.630848][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7230'. [ 3451.037796][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3451.904170][ T5818] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 3452.129286][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 3452.151427][ T5818] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 3452.694329][T17833] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7233'. [ 3452.727406][T17833] input: syz0 as /devices/virtual/input/input149 [ 3454.247469][ T5818] usb 6-1: string descriptor 0 read error: -71 [ 3454.253858][ T5818] usb 6-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=b8.83 [ 3454.304440][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.341751][T17054] usb 8-1: USB disconnect, device number 3 [ 3454.364573][T14002] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 3454.547018][T17054] usblp0: removed [ 3454.620897][ T5818] usb 6-1: can't set config #4, error -71 [ 3454.713074][T14002] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3454.992036][ T5818] usb 6-1: USB disconnect, device number 116 [ 3455.001593][T14002] usb 7-1: config index 0 descriptor too short (expected 40744, got 96) [ 3455.010598][T14002] usb 7-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 3455.022414][T14002] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3455.036941][T14002] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 3455.049591][T14002] usb 7-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 3455.060472][T14002] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 226 [ 3455.112064][T14002] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 3455.166302][T14002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.192109][T14002] usb 7-1: Product: syz [ 3455.201256][T14002] usb 7-1: Manufacturer: syz [ 3455.212105][T14002] usb 7-1: SerialNumber: syz [ 3455.327225][T14002] usb 7-1: can't set config #1, error -71 [ 3455.345867][T14002] usb 7-1: USB disconnect, device number 7 [ 3459.469996][T11084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3460.034743][T11084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3460.780584][T17938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3461.841939][T11084] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3461.855340][T11084] bond0 (unregistering): Released all slaves [ 3462.371816][T18002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3462.398656][T18002] fuse: Bad value for 'fd' [ 3464.360328][T11084] IPVS: stop unused estimator thread 0... [ 3467.139592][T17401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3467.213888][T17401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3467.386833][T17401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3468.174469][T17401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3468.698795][T17401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3468.780641][T17401] 8021q: adding VLAN 0 to HW filter on device team0 [ 3468.816651][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 3468.823871][ T1900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3468.885025][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state [ 3468.892305][ T1900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3469.034370][T14002] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 3469.244662][T14002] usb 7-1: Using ep0 maxpacket: 8 [ 3469.258892][T14002] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 3469.274133][T14002] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 3469.296683][T14002] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3469.317379][T14002] usb 7-1: config 250 has no interface number 0 [ 3469.323734][T14002] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 3469.364462][T14002] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3469.398367][T14002] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3469.440291][T14002] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 3469.474297][T14002] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 3469.514392][T14002] usb 7-1: config 250 interface 228 has no altsetting 0 [ 3469.527106][T17401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3469.546843][T14002] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3469.574326][T14002] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3469.602445][T14002] usb 7-1: Product: syz [ 3469.611782][T14002] usb 7-1: SerialNumber: syz [ 3469.617000][T17401] veth0_vlan: entered promiscuous mode [ 3469.655625][T14002] hub 7-1:250.228: bad descriptor, ignoring hub [ 3469.661963][T14002] hub: probe of 7-1:250.228 failed with error -5 [ 3469.693416][T18121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3469.705141][T17401] veth1_vlan: entered promiscuous mode [ 3469.800286][T17401] veth0_macvtap: entered promiscuous mode [ 3469.845117][T17401] veth1_macvtap: entered promiscuous mode [ 3469.869468][T14002] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 3469.928132][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3469.962233][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3470.000954][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3470.075906][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3471.064246][T17401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3471.770602][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3471.824263][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3471.858985][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3471.870038][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3471.882034][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3471.895337][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3471.911593][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3471.932709][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3471.936004][T18144] tmpfs: Unknown parameter 'grpquota_b' [ 3471.953722][T17401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3471.988461][T17401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3471.997961][T17401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3472.007021][T17401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3472.016507][T17401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3472.342783][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3472.366408][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3472.431824][ T1900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3472.456447][T17060] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 3472.474456][ T1900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3472.652535][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7198'. [ 3472.665274][T17060] usb 8-1: Using ep0 maxpacket: 16 [ 3472.669519][T18170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3472.676804][T17060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3472.750766][T17060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3472.774387][T17060] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3472.834593][T17060] usb 8-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 3472.854875][T16933] usb 7-1: USB disconnect, device number 8 [ 3472.861184][T17060] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3472.882025][T16933] usblp0: removed [ 3472.902159][T17060] usb 8-1: config 0 descriptor?? [ 3473.121044][T18170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3473.413530][T17060] input: HID 04f2:0618 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:04F2:0618.000F/input/input150 [ 3473.556293][T17060] topseed 0003:04F2:0618.000F: input,hidraw0: USB HID v0.05 Joystick [HID 04f2:0618] on usb-dummy_hcd.7-1/input0 [ 3473.629281][T17060] usb 8-1: USB disconnect, device number 4 [ 3473.898372][T18215] fido_id[18215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 3476.153015][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3476.591122][T18249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3477.242342][T17054] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3477.561199][T17054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3477.572724][T17054] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3477.583221][T17054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3477.593512][T17054] usb 3-1: config 0 descriptor?? [ 3477.822526][T17054] usbhid 3-1:0.0: can't add hid device: -71 [ 3477.829294][T17054] usbhid: probe of 3-1:0.0 failed with error -71 [ 3477.840401][T17054] usb 3-1: USB disconnect, device number 4 [ 3478.043207][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7281'. [ 3478.059395][T18284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3478.164983][T18284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3478.414482][T17054] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 3478.607034][T17054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3481.365441][T17054] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3481.384228][T17054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3481.395009][T17054] usb 3-1: config 0 descriptor?? [ 3481.425505][T17054] usb 3-1: can't set config #0, error -71 [ 3481.448913][T17054] usb 3-1: USB disconnect, device number 5 [ 3483.083959][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7289'. [ 3483.113794][ T5818] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 3483.122027][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7289'. [ 3483.142502][T18347] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3483.151890][T18347] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3483.161036][T18347] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3483.170196][T18347] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3483.316483][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7289'. [ 3483.326128][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7289'. [ 3483.516782][ T5818] usb 8-1: Using ep0 maxpacket: 16 [ 3483.532579][ T5818] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3483.545186][ T5818] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3483.575685][ T5818] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 3483.596314][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3483.625655][ T5818] usb 8-1: SerialNumber: syz [ 3483.701950][ T5818] usb 8-1: 0:2 : does not exist [ 3486.080544][ T5818] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 3486.142607][ T5818] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 3486.220417][ T5818] usb 8-1: USB disconnect, device number 5 [ 3486.254358][T17054] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 3486.272034][T16540] udevd[16540]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 3486.344255][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7296'. [ 3486.476306][T18405] [U]  [ 3486.484854][T17054] usb 3-1: Using ep0 maxpacket: 8 [ 3486.531973][T17054] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 3486.551619][T17054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3486.593393][T17054] usb 3-1: config 0 descriptor?? [ 3486.655223][T17054] usb 3-1: probing VID:PID(0424:012C) [ 3486.663865][T17054] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 3486.672190][T17054] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 3486.679588][T17054] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 3486.693178][T17054] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 3486.703060][T17054] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 3487.098252][T17054] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 3487.752048][T17054] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 3487.847576][T17060] IPVS: starting estimator thread 0... [ 3487.989861][T18427] IPVS: using max 19 ests per chain, 45600 per kthread [ 3488.610286][T17054] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 3488.790918][T11968] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 3488.872291][T17054] usb 3-1: USB disconnect, device number 6 [ 3489.011853][T11968] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 3489.308866][T17054] USB vub300 remote SDIO host controller[0] now disconnected [ 3489.964476][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 3489.982080][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 18450, name: syz.6.7295 [ 3489.991361][ C1] preempt_count: 101, expected: 0 [ 3489.996487][ C1] RCU nest depth: 0, expected: 0 [ 3490.001471][ C1] 3 locks held by syz.6.7295/18450: [ 3490.006779][ C1] #0: ffff8880581a0b20 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 3490.016004][ C1] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 3490.025747][ C1] #2: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 3490.036344][ C1] Preemption disabled at: [ 3490.036361][ C1] [] preempt_schedule+0xc0/0xd0 [ 3490.047353][ C1] CPU: 1 PID: 18450 Comm: syz.6.7295 Not tainted syzkaller #0 [ 3490.054856][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3490.064967][ C1] Call Trace: [ 3490.068292][ C1] [ 3490.071181][ C1] dump_stack_lvl+0x18c/0x250 [ 3490.075925][ C1] ? show_regs_print_info+0x20/0x20 [ 3490.081173][ C1] ? load_image+0x420/0x420 [ 3490.085734][ C1] ? preempt_schedule+0xc0/0xd0 [ 3490.090646][ C1] __might_resched+0x48d/0x5f0 [ 3490.095473][ C1] ? preempt_schedule+0xc0/0xd0 [ 3490.100377][ C1] ? __might_sleep+0xe0/0xe0 [ 3490.105020][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3490.110967][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3490.115871][ C1] ? kasan_set_track+0x5f/0x70 [ 3490.120694][ C1] ? kasan_save_free_info+0x28/0x40 [ 3490.125953][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 3490.131297][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 3490.136991][ C1] __flush_work+0x10f/0xac0 [ 3490.141555][ C1] ? flush_work+0x20/0x20 [ 3490.145936][ C1] ? __timer_delete+0x6b/0x290 [ 3490.150756][ C1] ? mark_lock+0x94/0x320 [ 3490.155147][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3490.161179][ C1] ? mod_delayed_work_on+0x1c0/0x1c0 [ 3490.166519][ C1] ? lock_chain_count+0x20/0x20 [ 3490.171431][ C1] ? __cancel_work_timer+0x36e/0x560 [ 3490.176769][ C1] __cancel_work_timer+0x3f8/0x560 [ 3490.181945][ C1] ? cancel_work_sync+0x20/0x20 [ 3490.186845][ C1] ? kobject_put+0x260/0x450 [ 3490.191488][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 3490.196573][ C1] ? kobject_put+0x421/0x450 [ 3490.201221][ C1] mmc_free_host+0x19/0x30 [ 3490.205786][ C1] call_timer_fn+0x189/0x540 [ 3490.210451][ C1] ? kref_get+0x70/0x70 [ 3490.214727][ C1] ? call_timer_fn+0xd2/0x540 [ 3490.219462][ C1] ? __run_timers+0x810/0x810 [ 3490.224201][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3490.229453][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3490.234704][ C1] ? kref_get+0x70/0x70 [ 3490.238915][ C1] __run_timers+0x570/0x810 [ 3490.243486][ C1] ? detach_timer+0x2b0/0x2b0 [ 3490.248219][ C1] ? lock_chain_count+0x20/0x20 [ 3490.253134][ C1] run_timer_softirq+0x67/0xf0 [ 3490.257954][ C1] handle_softirqs+0x27d/0x820 [ 3490.262769][ C1] ? read_tsc+0x9/0x20 [ 3490.266899][ C1] ? ktime_get+0x24b/0x280 [ 3490.271372][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3490.276201][ C1] ? do_softirq+0x1a0/0x1a0 [ 3490.280758][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3490.286020][ C1] __irq_exit_rcu+0xd3/0x190 [ 3490.290664][ C1] ? irq_exit_rcu+0x20/0x20 [ 3490.295233][ C1] irq_exit_rcu+0x9/0x20 [ 3490.299568][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3490.305251][ C1] [ 3490.308224][ C1] [ 3490.311202][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3490.317243][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 3490.323107][ C1] Code: 33 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 53 28 3d 09 e8 0e 23 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 3490.342773][ C1] RSP: 0018:ffffc9000459ee00 EFLAGS: 00000286 [ 3490.348909][ C1] RAX: 1d77e7f2a0f35100 RBX: 0000000000000000 RCX: 1d77e7f2a0f35100 [ 3490.356932][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 3490.364961][ C1] RBP: ffffc9000459ee50 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 3490.373001][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: ffff888058d51e00 [ 3490.381025][ C1] R13: ffff8880b8f3cf88 R14: dffffc0000000000 R15: ffff8880b8f3cd08 [ 3490.389076][ C1] __schedule+0x15b6/0x4660 [ 3490.393673][ C1] ? asan.module_dtor+0x20/0x20 [ 3490.398593][ C1] ? try_to_wake_up+0x680/0x10e0 [ 3490.403594][ C1] ? preempt_schedule+0xc0/0xd0 [ 3490.408507][ C1] preempt_schedule_common+0x82/0xc0 [ 3490.413860][ C1] preempt_schedule+0xc0/0xd0 [ 3490.418587][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 3490.424275][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3490.430311][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3490.435408][ C1] ? lock_chain_count+0x20/0x20 [ 3490.440318][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3490.445593][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 3490.451455][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3490.456373][ C1] ? swake_up_one+0x78/0x140 [ 3490.461038][ C1] rcu_preempt_deferred_qs_irqrestore+0x9a9/0xc30 [ 3490.467541][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 3490.473221][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3490.479263][ C1] ? rcu_is_watching+0x15/0xb0 [ 3490.484093][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 3490.489605][ C1] ? preempt_schedule+0xc0/0xd0 [ 3490.494517][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3490.499503][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3490.504585][ C1] ? add_mm_rss_vec+0xac/0x310 [ 3490.509426][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 3490.514860][ C1] __rcu_read_unlock+0x7c/0xd0 [ 3490.519678][ C1] unmap_page_range+0x29c6/0x32f0 [ 3490.524787][ C1] ? copy_page_range+0x3700/0x3700 [ 3490.529974][ C1] unmap_vmas+0x286/0x3f0 [ 3490.534369][ C1] ? unmap_page_range+0x32f0/0x32f0 [ 3490.539626][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3490.544719][ C1] exit_mmap+0x238/0xb90 [ 3490.549016][ C1] ? exit_mm_release+0x1a/0x30 [ 3490.553839][ C1] ? vm_brk+0x30/0x30 [ 3490.557877][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3490.563587][ C1] ? uprobe_clear_state+0x278/0x290 [ 3490.568857][ C1] __mmput+0x118/0x3a0 [ 3490.572978][ C1] exit_mm+0x23f/0x340 [ 3490.577105][ C1] ? sysctl_delayacct+0x220/0x220 [ 3490.582182][ C1] ? do_exit+0x2530/0x2530 [ 3490.586661][ C1] ? tty_audit_exit+0x14d/0x1f0 [ 3490.591573][ C1] do_exit+0x909/0x2530 [ 3490.595801][ C1] ? put_task_struct+0xc0/0xc0 [ 3490.600646][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3490.606698][ C1] ? get_signal+0x100e/0x1390 [ 3490.611448][ C1] ? lock_chain_count+0x20/0x20 [ 3490.616358][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3490.621452][ C1] do_group_exit+0x22d/0x2f0 [ 3490.626093][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3490.631346][ C1] get_signal+0x12a6/0x1390 [ 3490.635933][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 3490.641588][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3490.647542][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 3490.653672][ C1] ? get_sigframe_size+0x20/0x20 [ 3490.658690][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 3490.664221][ C1] exit_to_user_mode_loop+0x70/0x110 [ 3490.669571][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 3490.675175][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 3490.680691][ C1] do_syscall_64+0x61/0xb0 [ 3490.685163][ C1] ? clear_bhb_loop+0x40/0x90 [ 3490.689898][ C1] ? clear_bhb_loop+0x40/0x90 [ 3490.694722][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3490.700687][ C1] RIP: 0033:0x7fd99699e159 [ 3490.705157][ C1] Code: Unable to access opcode bytes at 0x7fd99699e12f. [ 3490.712296][ C1] RSP: 002b:00007fd99791d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3490.720772][ C1] RAX: fffffffffffffe00 RBX: 00007fd996c26098 RCX: 00007fd99699e159 [ 3490.728802][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd996c26098 [ 3490.736825][ C1] RBP: 00007fd996c26090 R08: 0000000000000000 R09: 0000000000000000 [ 3490.744855][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3490.752873][ C1] R13: 00007fd996c26128 R14: 00007ffec626ce50 R15: 00007ffec626cf38 [ 3490.760910][ C1] [ 3490.764539][ C1] [ 3490.766999][ C1] ============================= [ 3490.771884][ C1] WARNING: suspicious RCU usage [ 3490.776835][ C1] syzkaller #0 Tainted: G W [ 3490.782768][ C1] ----------------------------- [ 3490.787726][ C1] kernel/rcu/srcutree.c:1377 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 3490.799799][ C1] [ 3490.799799][ C1] other info that might help us debug this: [ 3490.799799][ C1] [ 3490.810188][ C1] [ 3490.810188][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 3490.818433][ C1] 3 locks held by syz.6.7295/18450: [ 3490.823685][ C1] #0: ffff8880581a0b20 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 3490.832949][ C1] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 3490.842648][ C1] #2: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 3490.853298][ C1] [ 3490.853298][ C1] stack backtrace: [ 3490.859288][ C1] CPU: 1 PID: 18450 Comm: syz.6.7295 Tainted: G W syzkaller #0 [ 3490.868288][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3490.878395][ C1] Call Trace: [ 3490.881720][ C1] [ 3490.884605][ C1] dump_stack_lvl+0x18c/0x250 [ 3490.889356][ C1] ? show_regs_print_info+0x20/0x20 [ 3490.894619][ C1] ? load_image+0x420/0x420 [ 3490.899192][ C1] lockdep_rcu_suspicious+0x1e1/0x300 [ 3490.904628][ C1] __synchronize_srcu+0x150/0x3d0 [ 3490.909719][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3490.915674][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 3490.921460][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3490.927423][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3490.932336][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3490.938281][ C1] ? read_tsc+0x9/0x20 [ 3490.942404][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 3490.948006][ C1] ? synchronize_srcu+0x25a/0x280 [ 3490.953089][ C1] wakeup_source_unregister+0x116/0x190 [ 3490.958704][ C1] mmc_host_classdev_release+0x47/0x100 [ 3490.964316][ C1] ? mmc_free_host+0x30/0x30 [ 3490.968972][ C1] device_release+0xbc/0x1e0 [ 3490.973622][ C1] kobject_put+0x21b/0x450 [ 3490.978089][ C1] call_timer_fn+0x189/0x540 [ 3490.982731][ C1] ? kref_get+0x70/0x70 [ 3490.986939][ C1] ? call_timer_fn+0xd2/0x540 [ 3490.991670][ C1] ? __run_timers+0x810/0x810 [ 3490.996415][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3491.001698][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3491.006967][ C1] ? kref_get+0x70/0x70 [ 3491.011180][ C1] __run_timers+0x570/0x810 [ 3491.015763][ C1] ? detach_timer+0x2b0/0x2b0 [ 3491.020521][ C1] ? lock_chain_count+0x20/0x20 [ 3491.025439][ C1] run_timer_softirq+0x67/0xf0 [ 3491.030273][ C1] handle_softirqs+0x27d/0x820 [ 3491.035093][ C1] ? read_tsc+0x9/0x20 [ 3491.039221][ C1] ? ktime_get+0x24b/0x280 [ 3491.043700][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3491.048528][ C1] ? do_softirq+0x1a0/0x1a0 [ 3491.053083][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3491.058340][ C1] __irq_exit_rcu+0xd3/0x190 [ 3491.062980][ C1] ? irq_exit_rcu+0x20/0x20 [ 3491.067552][ C1] irq_exit_rcu+0x9/0x20 [ 3491.071844][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3491.077532][ C1] [ 3491.080509][ C1] [ 3491.083497][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3491.089534][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 3491.095391][ C1] Code: 33 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 53 28 3d 09 e8 0e 23 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 3491.115053][ C1] RSP: 0018:ffffc9000459ee00 EFLAGS: 00000286 [ 3491.121184][ C1] RAX: 1d77e7f2a0f35100 RBX: 0000000000000000 RCX: 1d77e7f2a0f35100 [ 3491.129217][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 3491.137248][ C1] RBP: ffffc9000459ee50 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 3491.145270][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: ffff888058d51e00 [ 3491.153289][ C1] R13: ffff8880b8f3cf88 R14: dffffc0000000000 R15: ffff8880b8f3cd08 [ 3491.161339][ C1] __schedule+0x15b6/0x4660 [ 3491.165933][ C1] ? asan.module_dtor+0x20/0x20 [ 3491.170873][ C1] ? try_to_wake_up+0x680/0x10e0 [ 3491.175887][ C1] ? preempt_schedule+0xc0/0xd0 [ 3491.180806][ C1] preempt_schedule_common+0x82/0xc0 [ 3491.186172][ C1] preempt_schedule+0xc0/0xd0 [ 3491.190917][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 3491.196608][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3491.202648][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3491.207735][ C1] ? lock_chain_count+0x20/0x20 [ 3491.212643][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3491.217915][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 3491.223785][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3491.228703][ C1] ? swake_up_one+0x78/0x140 [ 3491.233444][ C1] rcu_preempt_deferred_qs_irqrestore+0x9a9/0xc30 [ 3491.239938][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 3491.245631][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3491.251685][ C1] ? rcu_is_watching+0x15/0xb0 [ 3491.256505][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 3491.262024][ C1] ? preempt_schedule+0xc0/0xd0 [ 3491.266963][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3491.271951][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3491.277030][ C1] ? add_mm_rss_vec+0xac/0x310 [ 3491.281849][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 3491.287280][ C1] __rcu_read_unlock+0x7c/0xd0 [ 3491.292098][ C1] unmap_page_range+0x29c6/0x32f0 [ 3491.297207][ C1] ? copy_page_range+0x3700/0x3700 [ 3491.302411][ C1] unmap_vmas+0x286/0x3f0 [ 3491.306809][ C1] ? unmap_page_range+0x32f0/0x32f0 [ 3491.312071][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3491.317163][ C1] exit_mmap+0x238/0xb90 [ 3491.321461][ C1] ? exit_mm_release+0x1a/0x30 [ 3491.326283][ C1] ? vm_brk+0x30/0x30 [ 3491.330313][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3491.336031][ C1] ? uprobe_clear_state+0x278/0x290 [ 3491.341290][ C1] __mmput+0x118/0x3a0 [ 3491.345418][ C1] exit_mm+0x23f/0x340 [ 3491.349542][ C1] ? sysctl_delayacct+0x220/0x220 [ 3491.354620][ C1] ? do_exit+0x2530/0x2530 [ 3491.359102][ C1] ? tty_audit_exit+0x14d/0x1f0 [ 3491.364014][ C1] do_exit+0x909/0x2530 [ 3491.368238][ C1] ? put_task_struct+0xc0/0xc0 [ 3491.373061][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3491.379101][ C1] ? get_signal+0x100e/0x1390 [ 3491.383832][ C1] ? lock_chain_count+0x20/0x20 [ 3491.388739][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3491.393819][ C1] do_group_exit+0x22d/0x2f0 [ 3491.398461][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3491.403713][ C1] get_signal+0x12a6/0x1390 [ 3491.408297][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 3491.413915][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3491.419867][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 3491.425992][ C1] ? get_sigframe_size+0x20/0x20 [ 3491.431012][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 3491.436538][ C1] exit_to_user_mode_loop+0x70/0x110 [ 3491.441881][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 3491.447490][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 3491.453004][ C1] do_syscall_64+0x61/0xb0 [ 3491.457473][ C1] ? clear_bhb_loop+0x40/0x90 [ 3491.462467][ C1] ? clear_bhb_loop+0x40/0x90 [ 3491.467209][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3491.473162][ C1] RIP: 0033:0x7fd99699e159 [ 3491.477624][ C1] Code: Unable to access opcode bytes at 0x7fd99699e12f. [ 3491.484686][ C1] RSP: 002b:00007fd99791d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3491.493160][ C1] RAX: fffffffffffffe00 RBX: 00007fd996c26098 RCX: 00007fd99699e159 [ 3491.501185][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd996c26098 [ 3491.509303][ C1] RBP: 00007fd996c26090 R08: 0000000000000000 R09: 0000000000000000 [ 3491.517348][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3491.525463][ C1] R13: 00007fd996c26128 R14: 00007ffec626ce50 R15: 00007ffec626cf38 [ 3491.533507][ C1] [ 3491.536703][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381 [ 3491.546079][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 18450, name: syz.6.7295 [ 3491.555311][ C1] preempt_count: 101, expected: 0 [ 3491.560391][ C1] RCU nest depth: 0, expected: 0 [ 3491.565434][ C1] 3 locks held by syz.6.7295/18450: [ 3491.570680][ C1] #0: ffff8880581a0b20 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 3491.580474][ C1] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 3491.590134][ C1] #2: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 3491.600715][ C1] Preemption disabled at: [ 3491.600732][ C1] [] preempt_schedule+0xc0/0xd0 [ 3491.611669][ C1] CPU: 1 PID: 18450 Comm: syz.6.7295 Tainted: G W syzkaller #0 [ 3491.620654][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3491.630760][ C1] Call Trace: [ 3491.634086][ C1] [ 3491.636973][ C1] dump_stack_lvl+0x18c/0x250 [ 3491.641719][ C1] ? show_regs_print_info+0x20/0x20 [ 3491.646973][ C1] ? load_image+0x420/0x420 [ 3491.651538][ C1] ? preempt_schedule+0xc0/0xd0 [ 3491.656451][ C1] __might_resched+0x48d/0x5f0 [ 3491.661277][ C1] ? show_regs_print_info+0x20/0x20 [ 3491.666539][ C1] ? preempt_schedule+0xc0/0xd0 [ 3491.671452][ C1] ? __might_sleep+0xe0/0xe0 [ 3491.676112][ C1] __synchronize_srcu+0x197/0x3d0 [ 3491.681189][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3491.687130][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 3491.692918][ C1] ? read_tsc+0x9/0x20 [ 3491.697034][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 3491.702638][ C1] ? synchronize_srcu+0x25a/0x280 [ 3491.707722][ C1] wakeup_source_unregister+0x116/0x190 [ 3491.713321][ C1] mmc_host_classdev_release+0x47/0x100 [ 3491.718939][ C1] ? mmc_free_host+0x30/0x30 [ 3491.723584][ C1] device_release+0xbc/0x1e0 [ 3491.728231][ C1] kobject_put+0x21b/0x450 [ 3491.732705][ C1] call_timer_fn+0x189/0x540 [ 3491.737372][ C1] ? kref_get+0x70/0x70 [ 3491.741663][ C1] ? call_timer_fn+0xd2/0x540 [ 3491.746394][ C1] ? __run_timers+0x810/0x810 [ 3491.751130][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3491.756388][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3491.761633][ C1] ? kref_get+0x70/0x70 [ 3491.765844][ C1] __run_timers+0x570/0x810 [ 3491.770414][ C1] ? detach_timer+0x2b0/0x2b0 [ 3491.775150][ C1] ? lock_chain_count+0x20/0x20 [ 3491.780057][ C1] run_timer_softirq+0x67/0xf0 [ 3491.784872][ C1] handle_softirqs+0x27d/0x820 [ 3491.789688][ C1] ? read_tsc+0x9/0x20 [ 3491.793813][ C1] ? ktime_get+0x24b/0x280 [ 3491.798283][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3491.803103][ C1] ? do_softirq+0x1a0/0x1a0 [ 3491.807662][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3491.812924][ C1] __irq_exit_rcu+0xd3/0x190 [ 3491.817570][ C1] ? irq_exit_rcu+0x20/0x20 [ 3491.822131][ C1] irq_exit_rcu+0x9/0x20 [ 3491.826423][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3491.832117][ C1] [ 3491.835089][ C1] [ 3491.838065][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3491.844105][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 3491.849964][ C1] Code: 33 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 53 28 3d 09 e8 0e 23 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 3491.869719][ C1] RSP: 0018:ffffc9000459ee00 EFLAGS: 00000286 [ 3491.875861][ C1] RAX: 1d77e7f2a0f35100 RBX: 0000000000000000 RCX: 1d77e7f2a0f35100 [ 3491.883895][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 3491.891919][ C1] RBP: ffffc9000459ee50 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 3491.899944][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: ffff888058d51e00 [ 3491.907970][ C1] R13: ffff8880b8f3cf88 R14: dffffc0000000000 R15: ffff8880b8f3cd08 [ 3491.916028][ C1] __schedule+0x15b6/0x4660 [ 3491.920632][ C1] ? asan.module_dtor+0x20/0x20 [ 3491.925554][ C1] ? try_to_wake_up+0x680/0x10e0 [ 3491.930551][ C1] ? preempt_schedule+0xc0/0xd0 [ 3491.935520][ C1] preempt_schedule_common+0x82/0xc0 [ 3491.940882][ C1] preempt_schedule+0xc0/0xd0 [ 3491.945636][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 3491.951339][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3491.957381][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3491.962467][ C1] ? lock_chain_count+0x20/0x20 [ 3491.967401][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3491.972687][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 3491.978562][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3491.983491][ C1] ? swake_up_one+0x78/0x140 [ 3491.988141][ C1] rcu_preempt_deferred_qs_irqrestore+0x9a9/0xc30 [ 3491.994842][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 3492.000551][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3492.006600][ C1] ? rcu_is_watching+0x15/0xb0 [ 3492.011424][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 3492.016939][ C1] ? preempt_schedule+0xc0/0xd0 [ 3492.021863][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3492.026850][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3492.031935][ C1] ? add_mm_rss_vec+0xac/0x310 [ 3492.036760][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 3492.042206][ C1] __rcu_read_unlock+0x7c/0xd0 [ 3492.047033][ C1] unmap_page_range+0x29c6/0x32f0 [ 3492.052152][ C1] ? copy_page_range+0x3700/0x3700 [ 3492.057341][ C1] unmap_vmas+0x286/0x3f0 [ 3492.061739][ C1] ? unmap_page_range+0x32f0/0x32f0 [ 3492.067094][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3492.072197][ C1] exit_mmap+0x238/0xb90 [ 3492.076505][ C1] ? exit_mm_release+0x1a/0x30 [ 3492.081334][ C1] ? vm_brk+0x30/0x30 [ 3492.085370][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3492.091096][ C1] ? uprobe_clear_state+0x278/0x290 [ 3492.096356][ C1] __mmput+0x118/0x3a0 [ 3492.100490][ C1] exit_mm+0x23f/0x340 [ 3492.104612][ C1] ? sysctl_delayacct+0x220/0x220 [ 3492.109687][ C1] ? do_exit+0x2530/0x2530 [ 3492.114169][ C1] ? tty_audit_exit+0x14d/0x1f0 [ 3492.119089][ C1] do_exit+0x909/0x2530 [ 3492.123318][ C1] ? put_task_struct+0xc0/0xc0 [ 3492.128150][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3492.134249][ C1] ? get_signal+0x100e/0x1390 [ 3492.138986][ C1] ? lock_chain_count+0x20/0x20 [ 3492.143899][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3492.148991][ C1] do_group_exit+0x22d/0x2f0 [ 3492.153671][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3492.159022][ C1] get_signal+0x12a6/0x1390 [ 3492.163606][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 3492.169228][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3492.175177][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 3492.181340][ C1] ? get_sigframe_size+0x20/0x20 [ 3492.186358][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 3492.191899][ C1] exit_to_user_mode_loop+0x70/0x110 [ 3492.197261][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 3492.202883][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 3492.208392][ C1] do_syscall_64+0x61/0xb0 [ 3492.212922][ C1] ? clear_bhb_loop+0x40/0x90 [ 3492.217667][ C1] ? clear_bhb_loop+0x40/0x90 [ 3492.222420][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3492.228484][ C1] RIP: 0033:0x7fd99699e159 [ 3492.232958][ C1] Code: Unable to access opcode bytes at 0x7fd99699e12f. [ 3492.240207][ C1] RSP: 002b:00007fd99791d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3492.248696][ C1] RAX: fffffffffffffe00 RBX: 00007fd996c26098 RCX: 00007fd99699e159 [ 3492.256813][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd996c26098 [ 3492.264843][ C1] RBP: 00007fd996c26090 R08: 0000000000000000 R09: 0000000000000000 [ 3492.272869][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3492.280897][ C1] R13: 00007fd996c26128 R14: 00007ffec626ce50 R15: 00007ffec626cf38 [ 3492.289123][ C1] [ 3492.292364][ C1] ODEBUG: object ffffc900001f09c0 is NOT on stack ffffc90004598000, but annotated. [ 3492.295770][ C1] [ 3492.295778][ C1] ====================================================== [ 3492.295785][ C1] WARNING: possible circular locking dependency detected [ 3492.295791][ C1] syzkaller #0 Tainted: G W [ 3492.295801][ C1] ------------------------------------------------------ [ 3492.295807][ C1] syz.6.7295/18450 is trying to acquire lock: [ 3492.295817][ C1] ffffffff8d1263e0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 3492.295870][ C1] [ 3492.295870][ C1] but task is already holding lock: [ 3492.295876][ C1] ffffffff9750c388 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 3492.295923][ C1] [ 3492.295923][ C1] which lock already depends on the new lock. [ 3492.295923][ C1] [ 3492.295929][ C1] [ 3492.295929][ C1] the existing dependency chain (in reverse order) is: [ 3492.295943][ C1] [ 3492.295943][ C1] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 3492.295969][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 3492.295993][ C1] debug_object_activate+0x6c/0x500 [ 3492.296017][ C1] insert_work+0x35/0x310 [ 3492.296036][ C1] __queue_work+0xbfd/0xfd0 [ 3492.296054][ C1] queue_work_on+0x128/0x1f0 [ 3492.296072][ C1] start_poll_synchronize_rcu_expedited+0x105/0x140 [ 3492.296100][ C1] rcu_init+0x10d/0x160 [ 3492.296209][ C1] start_kernel+0x1fd/0x4e0 [ 3492.296234][ C1] x86_64_start_reservations+0x2a/0x30 [ 3492.296252][ C1] copy_bootdata+0x0/0xd0 [ 3492.296277][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 3492.296301][ C1] [ 3492.296301][ C1] -> #2 (&pool->lock){-.-.}-{2:2}: [ 3492.296336][ C1] _raw_spin_lock+0x2e/0x40 [ 3492.296355][ C1] __queue_work+0x72f/0xfd0 [ 3492.296373][ C1] queue_work_on+0x128/0x1f0 [ 3492.296390][ C1] serial8250_handle_irq+0x4a7/0x730 [ 3492.296414][ C1] serial8250_default_handle_irq+0xb8/0x1a0 [ 3492.296441][ C1] serial8250_interrupt+0x9f/0x1c0 [ 3492.296461][ C1] __handle_irq_event_percpu+0x271/0x940 [ 3492.296487][ C1] handle_irq_event+0x8b/0x1e0 [ 3492.296512][ C1] handle_edge_irq+0x246/0xb20 [ 3492.296531][ C1] __common_interrupt+0x13b/0x230 [ 3492.296553][ C1] common_interrupt+0xb4/0xd0 [ 3492.296577][ C1] asm_common_interrupt+0x26/0x40 [ 3492.296601][ C1] finish_task_switch+0x267/0x8f0 [ 3492.296619][ C1] __schedule+0x15b6/0x4660 [ 3492.296644][ C1] preempt_schedule_common+0x82/0xc0 [ 3492.296670][ C1] preempt_schedule+0xc0/0xd0 [ 3492.296694][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3492.296718][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 3492.296740][ C1] uart_write+0x45b/0x5d0 [ 3492.296756][ C1] n_tty_write+0xd3d/0x11e0 [ 3492.296781][ C1] file_tty_write+0x529/0x960 [ 3492.296801][ C1] do_iter_write+0x747/0xc50 [ 3492.296824][ C1] iter_file_splice_write+0x6b6/0xcf0 [ 3492.296839][ C1] direct_splice_actor+0xe8/0x130 [ 3492.296856][ C1] splice_direct_to_actor+0x30b/0x8e0 [ 3492.296872][ C1] do_splice_direct+0x1d5/0x2f0 [ 3492.296889][ C1] do_sendfile+0x52b/0xe80 [ 3492.296904][ C1] __se_sys_sendfile64+0x145/0x1a0 [ 3492.296921][ C1] do_syscall_64+0x55/0xb0 [ 3492.296943][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3492.296967][ C1] [ 3492.296967][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 3492.296993][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 3492.297014][ C1] serial8250_console_write+0x181/0x18b0 [ 3492.297038][ C1] console_flush_all+0x6ad/0xcf0 [ 3492.297061][ C1] console_unlock+0xad/0x350 [ 3492.297082][ C1] vprintk_emit+0x497/0x610 [ 3492.297103][ C1] _printk+0xde/0x130 [ 3492.297123][ C1] register_console+0xb96/0xf00 [ 3492.297144][ C1] univ8250_console_init+0x45/0x50 [ 3492.297182][ C1] console_init+0x17b/0x5d0 [ 3492.297199][ C1] start_kernel+0x2c8/0x4e0 [ 3492.297217][ C1] x86_64_start_reservations+0x2a/0x30 [ 3492.297233][ C1] copy_bootdata+0x0/0xd0 [ 3492.297258][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 3492.297281][ C1] [ 3492.297281][ C1] -> #0 (console_owner){-.-.}-{0:0}: [ 3492.297306][ C1] __lock_acquire+0x37ef/0x7d80 [ 3492.297334][ C1] lock_acquire+0x19e/0x420 [ 3492.297355][ C1] console_flush_all+0x676/0xcf0 [ 3492.297377][ C1] console_unlock+0xad/0x350 [ 3492.297398][ C1] vprintk_emit+0x497/0x610 [ 3492.297418][ C1] _printk+0xde/0x130 [ 3492.297437][ C1] __debug_object_init+0x18d/0x450 [ 3492.297459][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 3492.297481][ C1] wakeup_source_unregister+0x116/0x190 [ 3492.297505][ C1] mmc_host_classdev_release+0x47/0x100 [ 3492.297533][ C1] device_release+0xbc/0x1e0 [ 3492.297556][ C1] kobject_put+0x21b/0x450 [ 3492.297573][ C1] call_timer_fn+0x189/0x540 [ 3492.297593][ C1] __run_timers+0x570/0x810 [ 3492.297610][ C1] run_timer_softirq+0x67/0xf0 [ 3492.297627][ C1] handle_softirqs+0x27d/0x820 [ 3492.297646][ C1] __irq_exit_rcu+0xd3/0x190 [ 3492.297664][ C1] irq_exit_rcu+0x9/0x20 [ 3492.297681][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3492.297699][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3492.297723][ C1] finish_task_switch+0x267/0x8f0 [ 3492.297741][ C1] __schedule+0x15b6/0x4660 [ 3492.297767][ C1] preempt_schedule_common+0x82/0xc0 [ 3492.297792][ C1] preempt_schedule+0xc0/0xd0 [ 3492.297816][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3492.297839][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 3492.297859][ C1] rcu_preempt_deferred_qs_irqrestore+0x9a9/0xc30 [ 3492.297878][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 3492.297895][ C1] __rcu_read_unlock+0x7c/0xd0 [ 3492.297911][ C1] unmap_page_range+0x29c6/0x32f0 [ 3492.297937][ C1] unmap_vmas+0x286/0x3f0 [ 3492.297961][ C1] exit_mmap+0x238/0xb90 [ 3492.297984][ C1] __mmput+0x118/0x3a0 [ 3492.298002][ C1] exit_mm+0x23f/0x340 [ 3492.298026][ C1] do_exit+0x909/0x2530 [ 3492.298050][ C1] do_group_exit+0x22d/0x2f0 [ 3492.298066][ C1] get_signal+0x12a6/0x1390 [ 3492.298084][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 3492.298111][ C1] exit_to_user_mode_loop+0x70/0x110 [ 3492.298135][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 3492.298159][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 3492.298178][ C1] do_syscall_64+0x61/0xb0 [ 3492.298200][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3492.298223][ C1] [ 3492.298223][ C1] other info that might help us debug this: [ 3492.298223][ C1] [ 3492.298229][ C1] Chain exists of: [ 3492.298229][ C1] console_owner --> &pool->lock --> &obj_hash[i].lock [ 3492.298229][ C1] [ 3492.298258][ C1] Possible unsafe locking scenario: [ 3492.298258][ C1] [ 3492.298264][ C1] CPU0 CPU1 [ 3492.298269][ C1] ---- ---- [ 3492.298274][ C1] lock(&obj_hash[i].lock); [ 3492.298285][ C1] lock(&pool->lock); [ 3492.298298][ C1] lock(&obj_hash[i].lock); [ 3492.298311][ C1] lock(console_owner); [ 3492.298330][ C1] [ 3492.298330][ C1] *** DEADLOCK *** [ 3492.298330][ C1] [ 3492.298335][ C1] 6 locks held by syz.6.7295/18450: [ 3492.298347][ C1] #0: ffff8880581a0b20 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x182/0xb90 [ 3492.298400][ C1] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 3492.298447][ C1] #2: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 3492.298494][ C1] #3: ffffffff9750c388 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450 [ 3492.298544][ C1] #4: ffffffff8d1264c0 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 3492.298590][ C1] #5: ffffffff8d00dcd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 3492.298641][ C1] [ 3492.298641][ C1] stack backtrace: [ 3492.298648][ C1] CPU: 1 PID: 18450 Comm: syz.6.7295 Tainted: G W syzkaller #0 [ 3492.298668][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3492.298679][ C1] Call Trace: [ 3492.298687][ C1] [ 3492.298695][ C1] dump_stack_lvl+0x18c/0x250 [ 3492.298721][ C1] ? load_image+0x420/0x420 [ 3492.298743][ C1] ? show_regs_print_info+0x20/0x20 [ 3492.298773][ C1] ? print_circular_bug+0x12b/0x1a0 [ 3492.298799][ C1] check_noncircular+0x2fc/0x400 [ 3492.298824][ C1] ? print_deadlock_bug+0x5d0/0x5d0 [ 3492.298847][ C1] ? lockdep_lock+0xf5/0x230 [ 3492.298874][ C1] __lock_acquire+0x37ef/0x7d80 [ 3492.298909][ C1] ? verify_lock_unused+0x140/0x140 [ 3492.298941][ C1] lock_acquire+0x19e/0x420 [ 3492.298963][ C1] ? console_flush_all+0x10b/0xcf0 [ 3492.298991][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3492.299012][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 3492.299037][ C1] ? read_lock_is_recursive+0x20/0x20 [ 3492.299060][ C1] ? __rwlock_init+0x150/0x150 [ 3492.299084][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 3492.299108][ C1] console_flush_all+0x676/0xcf0 [ 3492.299130][ C1] ? console_flush_all+0x10b/0xcf0 [ 3492.299151][ C1] ? console_flush_all+0x10b/0xcf0 [ 3492.299175][ C1] ? is_console_locked+0x20/0x20 [ 3492.299202][ C1] console_unlock+0xad/0x350 [ 3492.299223][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 3492.299252][ C1] vprintk_emit+0x497/0x610 [ 3492.299275][ C1] ? printk_sprint+0x460/0x460 [ 3492.299300][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 3492.299336][ C1] _printk+0xde/0x130 [ 3492.299359][ C1] ? load_image+0x420/0x420 [ 3492.299384][ C1] ? alloc_object+0x1c/0x640 [ 3492.299413][ C1] __debug_object_init+0x18d/0x450 [ 3492.299437][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 3492.299461][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3492.299483][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 3492.299511][ C1] ? read_tsc+0x9/0x20 [ 3492.299532][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 3492.299555][ C1] ? synchronize_srcu+0x25a/0x280 [ 3492.299581][ C1] wakeup_source_unregister+0x116/0x190 [ 3492.299603][ C1] mmc_host_classdev_release+0x47/0x100 [ 3492.299632][ C1] ? mmc_free_host+0x30/0x30 [ 3492.299658][ C1] device_release+0xbc/0x1e0 [ 3492.299683][ C1] kobject_put+0x21b/0x450 [ 3492.299705][ C1] call_timer_fn+0x189/0x540 [ 3492.299725][ C1] ? kref_get+0x70/0x70 [ 3492.299743][ C1] ? call_timer_fn+0xd2/0x540 [ 3492.299762][ C1] ? __run_timers+0x810/0x810 [ 3492.299786][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3492.299808][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3492.299825][ C1] ? kref_get+0x70/0x70 [ 3492.299843][ C1] __run_timers+0x570/0x810 [ 3492.299870][ C1] ? detach_timer+0x2b0/0x2b0 [ 3492.299892][ C1] ? lock_chain_count+0x20/0x20 [ 3492.299916][ C1] run_timer_softirq+0x67/0xf0 [ 3492.299936][ C1] handle_softirqs+0x27d/0x820 [ 3492.299955][ C1] ? read_tsc+0x9/0x20 [ 3492.299973][ C1] ? ktime_get+0x24b/0x280 [ 3492.299994][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3492.300016][ C1] ? do_softirq+0x1a0/0x1a0 [ 3492.300038][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3492.300064][ C1] __irq_exit_rcu+0xd3/0x190 [ 3492.300084][ C1] ? irq_exit_rcu+0x20/0x20 [ 3492.300105][ C1] irq_exit_rcu+0x9/0x20 [ 3492.300124][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3492.300144][ C1] [ 3492.300151][ C1] [ 3492.300158][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3492.300184][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 3492.300207][ C1] Code: 33 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 53 28 3d 09 e8 0e 23 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 3492.300225][ C1] RSP: 0018:ffffc9000459ee00 EFLAGS: 00000286 [ 3492.300243][ C1] RAX: 1d77e7f2a0f35100 RBX: 0000000000000000 RCX: 1d77e7f2a0f35100 [ 3492.300258][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 3492.300273][ C1] RBP: ffffc9000459ee50 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 3492.300287][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: ffff888058d51e00 [ 3492.300300][ C1] R13: ffff8880b8f3cf88 R14: dffffc0000000000 R15: ffff8880b8f3cd08 [ 3492.300337][ C1] __schedule+0x15b6/0x4660 [ 3492.300374][ C1] ? asan.module_dtor+0x20/0x20 [ 3492.300405][ C1] ? try_to_wake_up+0x680/0x10e0 [ 3492.300425][ C1] ? preempt_schedule+0xc0/0xd0 [ 3492.300452][ C1] preempt_schedule_common+0x82/0xc0 [ 3492.300478][ C1] preempt_schedule+0xc0/0xd0 [ 3492.300504][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 3492.300530][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3492.300551][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3492.300572][ C1] ? lock_chain_count+0x20/0x20 [ 3492.300593][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3492.300620][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 3492.300643][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3492.300665][ C1] ? swake_up_one+0x78/0x140 [ 3492.300685][ C1] rcu_preempt_deferred_qs_irqrestore+0x9a9/0xc30 [ 3492.300711][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 3492.300728][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3492.300752][ C1] ? rcu_is_watching+0x15/0xb0 [ 3492.300775][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 3492.300793][ C1] ? preempt_schedule+0xc0/0xd0 [ 3492.300818][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3492.300834][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3492.300857][ C1] ? add_mm_rss_vec+0xac/0x310 [ 3492.300876][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 3492.300902][ C1] __rcu_read_unlock+0x7c/0xd0 [ 3492.300920][ C1] unmap_page_range+0x29c6/0x32f0 [ 3492.300959][ C1] ? copy_page_range+0x3700/0x3700 [ 3492.300990][ C1] unmap_vmas+0x286/0x3f0 [ 3492.301018][ C1] ? unmap_page_range+0x32f0/0x32f0 [ 3492.301046][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3492.301074][ C1] exit_mmap+0x238/0xb90 [ 3492.301098][ C1] ? exit_mm_release+0x1a/0x30 [ 3492.301119][ C1] ? vm_brk+0x30/0x30 [ 3492.301139][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3492.301166][ C1] ? uprobe_clear_state+0x278/0x290 [ 3492.301189][ C1] __mmput+0x118/0x3a0 [ 3492.301207][ C1] exit_mm+0x23f/0x340 [ 3492.301228][ C1] ? sysctl_delayacct+0x220/0x220 [ 3492.301246][ C1] ? do_exit+0x2530/0x2530 [ 3492.301269][ C1] ? tty_audit_exit+0x14d/0x1f0 [ 3492.301295][ C1] do_exit+0x909/0x2530 [ 3492.301332][ C1] ? put_task_struct+0xc0/0xc0 [ 3492.301359][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3492.301379][ C1] ? get_signal+0x100e/0x1390 [ 3492.301397][ C1] ? lock_chain_count+0x20/0x20 [ 3492.301418][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3492.301439][ C1] do_group_exit+0x22d/0x2f0 [ 3492.301456][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3492.301474][ C1] get_signal+0x12a6/0x1390 [ 3492.301501][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 3492.301527][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3492.301543][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 3492.301562][ C1] ? get_sigframe_size+0x20/0x20 [ 3492.301588][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 3492.301609][ C1] exit_to_user_mode_loop+0x70/0x110 [ 3492.301629][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 3492.301649][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 3492.301665][ C1] do_syscall_64+0x61/0xb0 [ 3492.301682][ C1] ? clear_bhb_loop+0x40/0x90 [ 3492.301701][ C1] ? clear_bhb_loop+0x40/0x90 [ 3492.301721][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3492.301740][ C1] RIP: 0033:0x7fd99699e159 [ 3492.301753][ C1] Code: Unable to access opcode bytes at 0x7fd99699e12f. [ 3492.301760][ C1] RSP: 002b:00007fd99791d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3492.301779][ C1] RAX: fffffffffffffe00 RBX: 00007fd996c26098 RCX: 00007fd99699e159 [ 3492.301793][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd996c26098 [ 3492.301806][ C1] RBP: 00007fd996c26090 R08: 0000000000000000 R09: 0000000000000000 [ 3492.301817][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3492.301828][ C1] R13: 00007fd996c26128 R14: 00007ffec626ce50 R15: 00007ffec626cf38 [ 3492.301848][ C1] [ 3493.868701][ C1] ------------[ cut here ]------------ [ 3493.874171][ C1] WARNING: CPU: 1 PID: 18450 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 3493.883899][ C1] Modules linked in: [ 3493.887793][ C1] CPU: 1 PID: 18450 Comm: syz.6.7295 Tainted: G W syzkaller #0 [ 3493.896782][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3493.906885][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 3493.912787][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 3493.932401][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 3493.938468][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 1d77e7f2a0f35100 [ 3493.946452][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 3493.954439][ C1] RBP: dffffc0000000000 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 3493.962679][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff888058d51e20 [ 3493.970650][ C1] R13: ffff88807bc2acb0 R14: 0000000000000001 R15: ffffffff8acbe000 [ 3493.978624][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3493.987553][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3493.994143][ C1] CR2: 00007f9aade2eff8 CR3: 0000000051a36000 CR4: 00000000003506e0 [ 3494.002141][ C1] Call Trace: [ 3494.005424][ C1] [ 3494.008270][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 3494.013323][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3494.019223][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 3494.024972][ C1] ? read_tsc+0x9/0x20 [ 3494.029102][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 3494.034703][ C1] ? synchronize_srcu+0x25a/0x280 [ 3494.039780][ C1] wakeup_source_unregister+0x116/0x190 [ 3494.045385][ C1] mmc_host_classdev_release+0x47/0x100 [ 3494.051008][ C1] ? mmc_free_host+0x30/0x30 [ 3494.055651][ C1] device_release+0xbc/0x1e0 [ 3494.060293][ C1] kobject_put+0x21b/0x450 [ 3494.064762][ C1] call_timer_fn+0x189/0x540 [ 3494.069392][ C1] ? kref_get+0x70/0x70 [ 3494.073588][ C1] ? call_timer_fn+0xd2/0x540 [ 3494.078308][ C1] ? __run_timers+0x810/0x810 [ 3494.083032][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3494.088280][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3494.093519][ C1] ? kref_get+0x70/0x70 [ 3494.097722][ C1] __run_timers+0x570/0x810 [ 3494.102286][ C1] ? detach_timer+0x2b0/0x2b0 [ 3494.107017][ C1] ? lock_chain_count+0x20/0x20 [ 3494.111919][ C1] run_timer_softirq+0x67/0xf0 [ 3494.116730][ C1] handle_softirqs+0x27d/0x820 [ 3494.121538][ C1] ? read_tsc+0x9/0x20 [ 3494.125671][ C1] ? ktime_get+0x24b/0x280 [ 3494.130132][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3494.134940][ C1] ? do_softirq+0x1a0/0x1a0 [ 3494.139492][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3494.144742][ C1] __irq_exit_rcu+0xd3/0x190 [ 3494.149384][ C1] ? irq_exit_rcu+0x20/0x20 [ 3494.153935][ C1] irq_exit_rcu+0x9/0x20 [ 3494.158220][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3494.163904][ C1] [ 3494.166876][ C1] [ 3494.169838][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3494.175982][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 3494.181875][ C1] Code: 33 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 53 28 3d 09 e8 0e 23 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 3494.201797][ C1] RSP: 0018:ffffc9000459ee00 EFLAGS: 00000286 [ 3494.207912][ C1] RAX: 1d77e7f2a0f35100 RBX: 0000000000000000 RCX: 1d77e7f2a0f35100 [ 3494.215933][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 3494.223950][ C1] RBP: ffffc9000459ee50 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 3494.231964][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: ffff888058d51e00 [ 3494.239981][ C1] R13: ffff8880b8f3cf88 R14: dffffc0000000000 R15: ffff8880b8f3cd08 [ 3494.248012][ C1] __schedule+0x15b6/0x4660 [ 3494.252587][ C1] ? asan.module_dtor+0x20/0x20 [ 3494.257499][ C1] ? try_to_wake_up+0x680/0x10e0 [ 3494.262485][ C1] ? preempt_schedule+0xc0/0xd0 [ 3494.267664][ C1] preempt_schedule_common+0x82/0xc0 [ 3494.273028][ C1] preempt_schedule+0xc0/0xd0 [ 3494.277859][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 3494.283551][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3494.289585][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3494.294661][ C1] ? lock_chain_count+0x20/0x20 [ 3494.299563][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3494.304829][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 3494.310689][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3494.315600][ C1] ? swake_up_one+0x78/0x140 [ 3494.320237][ C1] rcu_preempt_deferred_qs_irqrestore+0x9a9/0xc30 [ 3494.326718][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 3494.332397][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3494.338431][ C1] ? rcu_is_watching+0x15/0xb0 [ 3494.343253][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 3494.348766][ C1] ? preempt_schedule+0xc0/0xd0 [ 3494.353685][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3494.358672][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3494.363792][ C1] ? add_mm_rss_vec+0xac/0x310 [ 3494.368562][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 3494.373941][ C1] __rcu_read_unlock+0x7c/0xd0 [ 3494.378738][ C1] unmap_page_range+0x29c6/0x32f0 [ 3494.383784][ C1] ? copy_page_range+0x3700/0x3700 [ 3494.388909][ C1] unmap_vmas+0x286/0x3f0 [ 3494.393247][ C1] ? unmap_page_range+0x32f0/0x32f0 [ 3494.398459][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3494.403486][ C1] exit_mmap+0x238/0xb90 [ 3494.407733][ C1] ? exit_mm_release+0x1a/0x30 [ 3494.412500][ C1] ? vm_brk+0x30/0x30 [ 3494.416479][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3494.422114][ C1] ? uprobe_clear_state+0x278/0x290 [ 3494.427314][ C1] __mmput+0x118/0x3a0 [ 3494.431381][ C1] exit_mm+0x23f/0x340 [ 3494.435508][ C1] ? sysctl_delayacct+0x220/0x220 [ 3494.440530][ C1] ? do_exit+0x2530/0x2530 [ 3494.445044][ C1] ? tty_audit_exit+0x14d/0x1f0 [ 3494.449897][ C1] do_exit+0x909/0x2530 [ 3494.454060][ C1] ? put_task_struct+0xc0/0xc0 [ 3494.458847][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3494.464825][ C1] ? get_signal+0x100e/0x1390 [ 3494.469495][ C1] ? lock_chain_count+0x20/0x20 [ 3494.474345][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3494.479369][ C1] do_group_exit+0x22d/0x2f0 [ 3494.483957][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3494.489167][ C1] get_signal+0x12a6/0x1390 [ 3494.493705][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 3494.499259][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3494.505149][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 3494.511215][ C1] ? get_sigframe_size+0x20/0x20 [ 3494.516157][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 3494.521618][ C1] exit_to_user_mode_loop+0x70/0x110 [ 3494.526904][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 3494.532450][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 3494.537905][ C1] do_syscall_64+0x61/0xb0 [ 3494.542320][ C1] ? clear_bhb_loop+0x40/0x90 [ 3494.546995][ C1] ? clear_bhb_loop+0x40/0x90 [ 3494.551671][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3494.557560][ C1] RIP: 0033:0x7fd99699e159 [ 3494.561977][ C1] Code: Unable to access opcode bytes at 0x7fd99699e12f. [ 3494.569013][ C1] RSP: 002b:00007fd99791d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3494.577427][ C1] RAX: fffffffffffffe00 RBX: 00007fd996c26098 RCX: 00007fd99699e159 [ 3494.585398][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd996c26098 [ 3494.593364][ C1] RBP: 00007fd996c26090 R08: 0000000000000000 R09: 0000000000000000 [ 3494.601333][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3494.609300][ C1] R13: 00007fd996c26128 R14: 00007ffec626ce50 R15: 00007ffec626cf38 [ 3494.617313][ C1] [ 3494.620449][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3494.627746][ C1] CPU: 1 PID: 18450 Comm: syz.6.7295 Tainted: G W syzkaller #0 [ 3494.636682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3494.646760][ C1] Call Trace: [ 3494.650060][ C1] [ 3494.652910][ C1] dump_stack_lvl+0x18c/0x250 [ 3494.657684][ C1] ? show_regs_print_info+0x20/0x20 [ 3494.662882][ C1] ? load_image+0x420/0x420 [ 3494.667396][ C1] panic+0x2ca/0x720 [ 3494.671300][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 3494.675804][ C1] __warn+0x2e0/0x470 [ 3494.679789][ C1] ? __debug_object_init+0x18d/0x450 [ 3494.685080][ C1] ? __debug_object_init+0x18d/0x450 [ 3494.690366][ C1] report_bug+0x2be/0x4f0 [ 3494.694806][ C1] ? __debug_object_init+0x18d/0x450 [ 3494.700212][ C1] ? __debug_object_init+0x18d/0x450 [ 3494.705511][ C1] ? __debug_object_init+0x18f/0x450 [ 3494.710802][ C1] handle_bug+0xcf/0x120 [ 3494.715052][ C1] exc_invalid_op+0x1a/0x50 [ 3494.719737][ C1] asm_exc_invalid_op+0x1a/0x20 [ 3494.724588][ C1] RIP: 0010:__debug_object_init+0x18d/0x450 [ 3494.730491][ C1] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 3494.750098][ C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046 [ 3494.756164][ C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: 1d77e7f2a0f35100 [ 3494.764135][ C1] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 3494.772129][ C1] RBP: dffffc0000000000 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 3494.780115][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff888058d51e20 [ 3494.788111][ C1] R13: ffff88807bc2acb0 R14: 0000000000000001 R15: ffffffff8acbe000 [ 3494.796106][ C1] ? __debug_object_init+0x18d/0x450 [ 3494.801396][ C1] __synchronize_srcu+0x2ae/0x3d0 [ 3494.806509][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3494.812399][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 3494.818131][ C1] ? read_tsc+0x9/0x20 [ 3494.822192][ C1] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 3494.827827][ C1] ? synchronize_srcu+0x25a/0x280 [ 3494.832857][ C1] wakeup_source_unregister+0x116/0x190 [ 3494.838412][ C1] mmc_host_classdev_release+0x47/0x100 [ 3494.843967][ C1] ? mmc_free_host+0x30/0x30 [ 3494.848583][ C1] device_release+0xbc/0x1e0 [ 3494.853176][ C1] kobject_put+0x21b/0x450 [ 3494.857593][ C1] call_timer_fn+0x189/0x540 [ 3494.862375][ C1] ? kref_get+0x70/0x70 [ 3494.866546][ C1] ? call_timer_fn+0xd2/0x540 [ 3494.871244][ C1] ? __run_timers+0x810/0x810 [ 3494.875916][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3494.881179][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3494.886441][ C1] ? kref_get+0x70/0x70 [ 3494.890640][ C1] __run_timers+0x570/0x810 [ 3494.895161][ C1] ? detach_timer+0x2b0/0x2b0 [ 3494.899849][ C1] ? lock_chain_count+0x20/0x20 [ 3494.904758][ C1] run_timer_softirq+0x67/0xf0 [ 3494.909568][ C1] handle_softirqs+0x27d/0x820 [ 3494.914345][ C1] ? read_tsc+0x9/0x20 [ 3494.918438][ C1] ? ktime_get+0x24b/0x280 [ 3494.922909][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3494.927726][ C1] ? do_softirq+0x1a0/0x1a0 [ 3494.932510][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3494.937711][ C1] __irq_exit_rcu+0xd3/0x190 [ 3494.942561][ C1] ? irq_exit_rcu+0x20/0x20 [ 3494.947065][ C1] irq_exit_rcu+0x9/0x20 [ 3494.951309][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3494.956972][ C1] [ 3494.959898][ C1] [ 3494.962825][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3494.968810][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 3494.974648][ C1] Code: 33 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 53 28 3d 09 e8 0e 23 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 3494.994264][ C1] RSP: 0018:ffffc9000459ee00 EFLAGS: 00000286 [ 3495.000331][ C1] RAX: 1d77e7f2a0f35100 RBX: 0000000000000000 RCX: 1d77e7f2a0f35100 [ 3495.008309][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 3495.016289][ C1] RBP: ffffc9000459ee50 R08: ffffffff911eb537 R09: 1ffffffff223d6a6 [ 3495.024263][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a7 R12: ffff888058d51e00 [ 3495.032420][ C1] R13: ffff8880b8f3cf88 R14: dffffc0000000000 R15: ffff8880b8f3cd08 [ 3495.040438][ C1] __schedule+0x15b6/0x4660 [ 3495.045039][ C1] ? asan.module_dtor+0x20/0x20 [ 3495.049935][ C1] ? try_to_wake_up+0x680/0x10e0 [ 3495.054901][ C1] ? preempt_schedule+0xc0/0xd0 [ 3495.059755][ C1] preempt_schedule_common+0x82/0xc0 [ 3495.065044][ C1] preempt_schedule+0xc0/0xd0 [ 3495.069769][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 3495.075434][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3495.081608][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3495.086684][ C1] ? lock_chain_count+0x20/0x20 [ 3495.091573][ C1] preempt_schedule_thunk+0x1a/0x30 [ 3495.096838][ C1] _raw_spin_unlock_irqrestore+0x111/0x120 [ 3495.102731][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3495.107599][ C1] ? swake_up_one+0x78/0x140 [ 3495.112242][ C1] rcu_preempt_deferred_qs_irqrestore+0x9a9/0xc30 [ 3495.118673][ C1] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 3495.124331][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3495.130361][ C1] ? rcu_is_watching+0x15/0xb0 [ 3495.135154][ C1] rcu_read_unlock_special+0x3ca/0x4d0 [ 3495.140664][ C1] ? preempt_schedule+0xc0/0xd0 [ 3495.145535][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 3495.150472][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3495.155495][ C1] ? add_mm_rss_vec+0xac/0x310 [ 3495.160251][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 3495.165620][ C1] __rcu_read_unlock+0x7c/0xd0 [ 3495.170379][ C1] unmap_page_range+0x29c6/0x32f0 [ 3495.175425][ C1] ? copy_page_range+0x3700/0x3700 [ 3495.180551][ C1] unmap_vmas+0x286/0x3f0 [ 3495.184889][ C1] ? unmap_page_range+0x32f0/0x32f0 [ 3495.190110][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 3495.195280][ C1] exit_mmap+0x238/0xb90 [ 3495.199541][ C1] ? exit_mm_release+0x1a/0x30 [ 3495.204322][ C1] ? vm_brk+0x30/0x30 [ 3495.208308][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3495.213943][ C1] ? uprobe_clear_state+0x278/0x290 [ 3495.219177][ C1] __mmput+0x118/0x3a0 [ 3495.223242][ C1] exit_mm+0x23f/0x340 [ 3495.227358][ C1] ? sysctl_delayacct+0x220/0x220 [ 3495.232418][ C1] ? do_exit+0x2530/0x2530 [ 3495.236870][ C1] ? tty_audit_exit+0x14d/0x1f0 [ 3495.241719][ C1] do_exit+0x909/0x2530 [ 3495.245910][ C1] ? put_task_struct+0xc0/0xc0 [ 3495.250712][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3495.256711][ C1] ? get_signal+0x100e/0x1390 [ 3495.261381][ C1] ? lock_chain_count+0x20/0x20 [ 3495.266227][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 3495.271270][ C1] do_group_exit+0x22d/0x2f0 [ 3495.275876][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3495.281069][ C1] get_signal+0x12a6/0x1390 [ 3495.285572][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 3495.291131][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3495.297047][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 3495.303138][ C1] ? get_sigframe_size+0x20/0x20 [ 3495.308106][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 3495.313611][ C1] exit_to_user_mode_loop+0x70/0x110 [ 3495.318923][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 3495.324483][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 3495.329955][ C1] do_syscall_64+0x61/0xb0 [ 3495.334396][ C1] ? clear_bhb_loop+0x40/0x90 [ 3495.339080][ C1] ? clear_bhb_loop+0x40/0x90 [ 3495.343758][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3495.349693][ C1] RIP: 0033:0x7fd99699e159 [ 3495.354155][ C1] Code: Unable to access opcode bytes at 0x7fd99699e12f. [ 3495.361187][ C1] RSP: 002b:00007fd99791d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3495.369605][ C1] RAX: fffffffffffffe00 RBX: 00007fd996c26098 RCX: 00007fd99699e159 [ 3495.377574][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd996c26098 [ 3495.385561][ C1] RBP: 00007fd996c26090 R08: 0000000000000000 R09: 0000000000000000 [ 3495.393538][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3495.401590][ C1] R13: 00007fd996c26128 R14: 00007ffec626ce50 R15: 00007ffec626cf38 [ 3495.409575][ C1] [ 3495.412731][ C1] Kernel Offset: disabled [ 3495.417067][ C1] Rebooting in 86400 seconds..