last executing test programs: 32m4.354401405s ago: executing program 32 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000240)=""/48, 0x11) 31m18.926517683s ago: executing program 1 (id=409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xe2e8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) 31m15.930353362s ago: executing program 1 (id=410): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0xfe}, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x5}, 0xff3f) openat$ptmx(0xffffffffffffff9c, 0x0, 0x30801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[], 0xf5, 0x2d6, &(0x7f00000000c0)="$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") 31m12.159351242s ago: executing program 1 (id=415): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c005}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) setresuid(0xee00, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000080)=0x1) 31m10.918665541s ago: executing program 1 (id=417): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000440)={0x0, 0x4, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x100000005833, 0x8, 0x2, 0x4000000000000e51, 0x100, 0x5479, 0x103d, 0x200000000006, 0x80000000, 0x5, 0x1, 0xf3c, 0x0, 0x40000000009, 0x8000000010005, 0x5], 0xe000, 0x1869c1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31m9.027505392s ago: executing program 1 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) setrlimit(0xd, &(0x7f0000000100)={0x8000000000000003, 0xcb7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x20042000) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x220000, 0x12d) read(r6, &(0x7f00000002c0)=""/10, 0x5b) io_setup(0x6, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x80040, 0x111) read(r7, &(0x7f0000000240)=""/93, 0x24) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 31m7.607803193s ago: executing program 1 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(r0) 30m51.399115795s ago: executing program 33 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(r0) 29m27.1758346s ago: executing program 3 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000840)={@broadcast, @remote, @val, {@mpls_mc={0x8848, {[], @ipv4=@dccp={{0x5, 0x4, 0x1, 0x1, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @remote, @multicast2}, {{0x4e22, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0x1, 0x4, "5df48e", 0x2, "e5043d"}}}}}}}, 0x0) read(r1, &(0x7f0000000000)=""/149, 0xaa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) socket$netlink(0x10, 0x3, 0x0) 29m22.146617313s ago: executing program 3 (id=581): r0 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10000, &(0x7f0000000040)={[{@debug_want_extra_isize}, {@auto_da_alloc}, {@errors_remount}, {@dioread_nolock}]}, 0x7, 0x4d4, &(0x7f0000000680)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000ebff00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000150000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100002085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = fcntl$dupfd(r0, 0x406, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r4, r8, 0x0, 0x7ffff004) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000280)=""/43, &(0x7f00000002c0)=0x2b) 29m19.900493889s ago: executing program 3 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) 29m19.334614798s ago: executing program 3 (id=586): gettid() capset(0x0, &(0x7f0000000040)={0x6, 0x9, 0x5, 0x3, 0x1001, 0x3}) r0 = syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x2, 0x237, &(0x7f0000000fc0)="$eJzsmL9rFEEUx78zt7feivijSWFjYcCI5i63h5Lm0AiClQiJvyo9zBpiLjm5rGACYoKNjXYWShoL/wGLFFYWdv4DghYqCBZeYWFjM/J2ZvcmmTtWl+t8n2L4zsybH+/N21csGIb5b/n65dfnJ+em504C2Idx7DHj30uAEFqLjb79p+f3Tjxrnt96/fHVu5X9D97s3o+WKLVzoDLscAV4AN7OlBAnA9Je/ZvEuOnMQWb6MiSOG30VAlWjb0LiitERBK4bfcfSHbKvVm8vtqPqrU57nsQUNXVqQmoa9hXpfr1Ngfn0ykqpA9b86tr6UqvdjrqW8MzcgKlCIjtsacwJYRk+ejMSTet+FMVrjx9tUj+NzZQVvzok6uZtGxCYNePT2Epjo0Ni+X/Y6+9fcvwf4K0wyQDkOVnRovlzJMGyxaHJYssnyJ2z7tRBFLkGdq4qoz9FkXRX+QDZDEuvf0udRHj5uXjGPGiBsy7u9kI9HPwBPA0AjPyVXVHIi1SM9cR7d+qbFnJoPiuRf4RIM+HFgHdPK68eqfztndMPsXjEApBf2Yg3orcAPmzr+qFeChyz6pNn1Y9avHy3trq2Prm43FqIFqKVMGycFsDGqbCWFCLdOnWvX5+DpD7tRZDtXx5i60sf91tx3K3r1hc+AsRxN0z6ofXZzG53ftwwy2JcAHBUd6ik+dmOJecM4WsbmdiSmnCNGIZhGIZhGIZhGIZhGIZhCnEEIvkLmkN4KbH+EwAA//94BVRa") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lchown(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4c000) llistxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 29m18.159275589s ago: executing program 3 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000194c0)={{0x90, 0x2, 0x6, 0xf, 'syz1\x00', 0x9}, 0x3, 0x200, 0xe, r0, 0xa, 0xfffffffa, 'syz0\x00', &(0x7f00000000c0)=['\x00', '\x00', '/dev/cpu/#/msr\x00', '/dev/bus/usb/00#/00#\x00', 'squashfs\x00', 'squashfs\x00', '/dev/cpu/#/msr\x00', '/dev/cpu/#/msr\x00', ')*[\x00', '\x00'], 0x5b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}]}}) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r8, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x80) ioctl$IOC_PR_RELEASE(r9, 0x401070ca, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1d3, &(0x7f0000000280)="$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") 29m14.895557296s ago: executing program 3 (id=591): prlimit64(0x0, 0xe, 0x0, 0x0) msgget$private(0x0, 0x193) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f0000000200)={0x1}) 28m59.600262318s ago: executing program 34 (id=591): prlimit64(0x0, 0xe, 0x0, 0x0) msgget$private(0x0, 0x193) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f0000000200)={0x1}) 25m38.260678407s ago: executing program 5 (id=858): mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ptrace(0x8, r0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80800) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_PIM(r2, 0x0, 0xcf, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 25m31.893163011s ago: executing program 5 (id=866): inotify_init1(0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) syslog(0x4, &(0x7f0000000080)=""/113, 0x71) 25m29.925323088s ago: executing program 5 (id=868): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x2004c8f6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(r4, 0xfffffffffffffff5, 0x1) 25m23.067315833s ago: executing program 5 (id=877): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) 25m22.530453626s ago: executing program 5 (id=878): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 25m18.10501466s ago: executing program 5 (id=883): unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) 25m1.448542429s ago: executing program 35 (id=883): unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) 18m57.002125912s ago: executing program 7 (id=1316): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000080)=ANY=[], 0x1, 0x1a0, &(0x7f0000000680)="$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") 18m56.386685284s ago: executing program 7 (id=1318): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect(0x5, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24053629da0985578d0d3461beee58c8fcba"], 0x0) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x14) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) 18m52.658749526s ago: executing program 7 (id=1321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 18m50.878045417s ago: executing program 7 (id=1322): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000107702000000100000008000540efffffff0500010001000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0xf4, 0x8, 0x8, 0x2, 0x2, 0x8, 0xf7, 0x8, 0x81, 0x9, 0x9, 0x81, 0xb0, 0x0, 0x96}}) syz_open_procfs(0x0, &(0x7f00000002c0)='net/stat\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000840)={0x2, 0x0, @pic={0x0, 0x2c, 0x7, 0x1, 0x96, 0xf, 0x17, 0x1, 0x5, 0x6, 0xf, 0x8, 0x9, 0x77, 0x0, 0x81}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000a80)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000001200)={'wlan1\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000108a25886a00000000000109022400010000a006090400050103000200092100004001221805810320000215870000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, 0x0) close(0x3) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) 18m38.057103096s ago: executing program 7 (id=1333): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3c, 0x3000001, 0x10010, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000240)=[@clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 18m34.568252609s ago: executing program 7 (id=1338): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x1000}, 0x101, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0xfffffffc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '*\x002', 0x30, 0x2c, 0xff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x40, 0x0, 0x0, 0xfffe, {[@mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0xe2, 0x9, 0x2474c46}, @timestamp={0x8, 0xa, 0x6, 0xf}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 18m18.630925469s ago: executing program 36 (id=1338): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x1000}, 0x101, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0xfffffffc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '*\x002', 0x30, 0x2c, 0xff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x40, 0x0, 0x0, 0xfffe, {[@mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0xe2, 0x9, 0x2474c46}, @timestamp={0x8, 0xa, 0x6, 0xf}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 13m4.582515505s ago: executing program 6 (id=1681): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4010}, {0xffffffffffffffff, 0x104}], 0x2, 0x8) 13m2.772062831s ago: executing program 6 (id=1683): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") open(&(0x7f0000000100)='./bus\x00', 0x4eca82, 0x106) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) 13m1.739157339s ago: executing program 6 (id=1684): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 12m59.462293291s ago: executing program 6 (id=1687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f0000000600), 0x4, 0x524, &(0x7f0000001900)="$eJzs3e9rI2kdAPDvTJtee9uzORVZD7w7vJPdQzdpr55WkbsTRF8dqOf7tbZpKU2b0qTnthzawz9AEFHBP8A3gi98Kcj+CSIs6HtRUUR39aXuyCRT7Y+kjW3arOnnA9M8T56Z5/t9hmaSmTxMAri2XoyINyNiLCJeiYiZ4vm0WGK/s+TrPXr47lK+JJFlb/81iaR47qCvvD4eETeKzSYj4qtfivhGcjJuc3dvfbFer20X9WprY6va3N27s7axuFpbrW3Oz8/9PCJeW5jNChcaZzkiXv/CH3/w3Z988fVffuKbv7v759vfytP63Ic6eUfE0oUC9NDpu9TeFwfyfbR9GcGGJB9PaWzYWQAA0I/8M/77I+Kj7c//MzHW/jQHAAAAjJLsjen4ZxKRAQAAACMrjYjpSNJKMRdgOtK0UunM4f1gPJ3WG83Wx1caO5vLeVtEOUrpylq9NlvMFS5HKcnrc8Uc24P6q8fq8xHxbER8f2aqXa8sNerLw774AQAAANfEjReOnv//YyZtlwEAAIARU+5ZAQAAAEaFU34AAAAYfc7/AQAAYKR9+a238iU7+B3v5Xd2d9Yb79xZrjXXKxs7S5WlxvZWZbXRWG3fs2/jrP7qjcbWJ2Nz5161VWu2qs3dvbsbjZ3N1t21Iz+BDQAAAFyhZ1+4/9skIvY/O9VeorgPIMARfxh2AsAgjQ07AWBoxoedADA0pTPXcISAUZec0X5y8k7nWmH86nLyAQAABu/Wh09+/z9RtJ19bQD4f2auDwBcP0e/3ZsaWh7A1SuddwbgzUFnAgzL+zoPT/Vq73nzjj6+/+9cY8iycyUGAAAMzHR7SdJKcQ4wHWlaqUQ8E4+zcpSSlbV6bbZo+81M6am8PtfeMjlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcWvm5emjVweO/erXj9/+4b3FVmt7LmIi+dtM/tRERLR+VDz/auYnAQAAAGC4pvI/nfP04nFu2CkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEqejohHD99dOliuMvZfPh8R5W7xx2Oy/TgZpTzHvycxfmi7JCLGBhB//72IuNktfhKPsywrF1l0iz91yfHL7V3TPX4aETcGEB+us/v58efNbq+/NF5sP3Z//Y0Xy0X1Pv6l/zn+jfU4/jxzrN7Lcw9+Vu0Z/72I58a7H38O4ied+EdC5JWX+hzj17+2t9e14VCX3eIfjlVtbWxVm7t7d9Y2Fldrq7XN+fm5Ty18euG1hdnqylq9VvztGuZ7H/nF49PG3/39r3P8PTT+E/v/5b5Gn8W/Htx7+IFOpdQt/u2Xur//3uwRPy3e+z5WlPP2Wwfl/U75sOd/+uvnTxv/co/xT54x/tt9jT8+88pXvvP7ri0n9gYAcBWau3vri/V6bfuUwmQf6/xPhYiL9vPGQPN5Egpx9jqTT0iql1HIvt35f7xYPxfc/EQhu8jm4zGANCZOvE7H4rwdJhH7eV99/kMCAAAj5r8f+k/7BgkAAAAAAAAAAAAAAAAAAAC4TOe8LdlkRPS98vGY+8MZKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqf4dAAD///G60iU=") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x2d, 0x1001, r4, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x22, 0x40001017, r4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080), &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035529030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xfffffffffffffffc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x107, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000001080)=0xa) 12m58.221922265s ago: executing program 6 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10}, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) 12m56.123840465s ago: executing program 6 (id=1689): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = timerfd_create(0x0, 0x80000) timerfd_gettime(r2, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) 12m40.670366727s ago: executing program 37 (id=1689): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = timerfd_create(0x0, 0x80000) timerfd_gettime(r2, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) 12m25.666694345s ago: executing program 2 (id=1725): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1000, &(0x7f0000000340)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@noacl, 0x2e}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x40}}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getgroups(0x0, 0x0) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 12m23.990858939s ago: executing program 2 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "d13e41eb5698c023926aec567268e7476fddc4815932b43bc053b5893f2837ed", 0xf, 0x7, 0x8, 0x3312}, 0x3c) syz_open_dev$usbfs(&(0x7f0000000080), 0x202, 0x82) readv(0xffffffffffffffff, 0x0, 0x0) 12m12.07046021s ago: executing program 2 (id=1739): mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ptrace(0x8, r0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80800) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_PIM(r2, 0x0, 0xcf, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0x4, 0x8, 0x8, 0x6}]}, 0x10) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000) munmap(&(0x7f000099a000/0x1000)=nil, 0x1000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 12m11.646588787s ago: executing program 2 (id=1741): syz_extract_tcp_res(0x0, 0x4, 0xfffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000040)={r6, 0x0, 0x2000, 0x8000}) poll(&(0x7f00000000c0)=[{r7, 0x4010}, {r7, 0x104}], 0x2, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x40}}, 0x0) 12m8.256963884s ago: executing program 2 (id=1744): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 12m6.958505472s ago: executing program 2 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "d13e41eb5698c023926aec567268e7476fddc4815932b43bc053b5893f2837ed", 0xf, 0x7, 0x8, 0x3312}, 0x3c) syz_open_dev$usbfs(&(0x7f0000000080), 0x202, 0x82) readv(0xffffffffffffffff, 0x0, 0x0) 11m50.982334583s ago: executing program 38 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "d13e41eb5698c023926aec567268e7476fddc4815932b43bc053b5893f2837ed", 0xf, 0x7, 0x8, 0x3312}, 0x3c) syz_open_dev$usbfs(&(0x7f0000000080), 0x202, 0x82) readv(0xffffffffffffffff, 0x0, 0x0) 32.280960143s ago: executing program 0 (id=2898): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 31.098705865s ago: executing program 0 (id=2901): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 30.850972731s ago: executing program 0 (id=2903): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 29.776650688s ago: executing program 0 (id=2908): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x20, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 27.71447671s ago: executing program 0 (id=2913): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000001040)="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", 0x3eb}, {&(0x7f0000001b80)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa9cb227694f5b326544c9c1d4563f937db955e0373639d6292234c292c5615d82c851b91585b7ad8748faf0d8e5d65994adbb137c7851edbb4a3485ffd64e1caf3117861898d4ba6e04c15a94496cc8c23793136c93ba88db52f098b37fcf3f6c16df2f500f5b2005def16d46d96544649249c26098820ed60c94032f6fc134664ae10a613d15d140a948b4b45471dea34c0f527fca192dfa77f262ec22b914476238014687f231fe251b57f7689e4850e2c1eaf49ad1773a1f971ba9d8a900e5e2121370ebf1a0c8af1eca3921046277767b7740008731fdcffcddbc2cb867ea2959a735c164e4c650454d43dd6034dd22e31d94df846ab6d1b1e7c2463e349ffda978a5e783bdda9e6fafb2ca73fb02ccc54ab9309988741fdfbef9000b605a2d3890468834f7d7f705f8da1905283343b78f30bc48c2c3c351e955823ca8e6e82f695252f0aecc64025cf1e26d4be77f4b4f96d9b45226436aa43cc78afe578fe8c44047eb9f66bfbc3f3daeaadda3c088299586d35c7a868a8122428161cff48106cd5529695a27ba78f1d124cab474705be18a40ad26131f48d25f1e1c7a19e23433ff6d6284cf70278d53d12b41a171ec23143601a31732cf145fee69e318997e791c10af3a4a3f2d8afdd131cdee0e6aebfdc1fef1831abaa01741cf774eeed7a043d6368c2fd43371633089fa9fa50c7e41185d32cdbc49c0bec369fdd7ab788bbe8cc87676f8597dc626556bbaef0bcd5e1a43bcc4e2c59f310e1c2bf2fea0f360b33408fb2e1a1024e3d88dff19496f384b0b4ea97c0281904010a7eb34a3d6bec959f6d59a0016d28da834b382e6e2c606236dcd17925b95f667e899a6b59ef20c1a96f0053ffb7c5a07b8ac6f20fa791d15c19b814f049e0b2da6f5799daf4d345aa475766367f99c160e8a08fd7f1e42e5b38eacba4f40eed3fccbfb89f4b644afb1e76eb4913e27e1540e2d4ec8ed8748b4756824a65c933d4120d1c2fc7f343ce0958478a97aa352fc2ddaf917fb2ae7bcce4d6f9d4b32387baff970a701ce01a73937cf0f12f6e41b86a06ea1b971d1ad7f92c0562a7778ec33a1ec93717217834e25b4b25f06134bbfc29f125c36c7e80e92a13127c70b377dce60f7bfffe3f3da8f1be6a3948593a6693fa07a91b00405d8ea47c88ccd02e7a64e0bd31d115c93f7c0dfe1c51d338b08c9825a29802ba8bc5c4655072da6dd2c27ce6684e1c2dd7dc95dcf90f934ade45fe5377a813975aefe4006ddb535f03db5a82f71f50cc7935c6809c73e705e84a959f70ff71df55ecce6a4a182fe3ef45a506fcd0f49b6eb9e9cbc8cd553481b9162a9086bf31c8cab7b1c3c7f703cd26d96b48dee0771b4a6d2513a37fec94a6649cfdbafc26b17a7bb2adb72477d34a74e4165850f76473f41c116e7adec0bdafae8aff515c781092e2d2f70fefebbd36d0e1cf5a01ea61f142756b8195e1fc400ca73162eb51d3a14a1c8ea2be43d3bbc230c7011273c1c9f035895fa45e8ba5eb8bef0660e952f3327720bd3817d098277b01ee0d8394a4d7752866da8f3258f243150df19ddb87ea24bc2f5de0394870e23a0f723013a226caa72e896e9f986e9aa40a6a4a21cfb6cebbbeb334ed7c0996c827c6790bf2323df6ab44f3aaceef33bbf9f89c915eda91a6e2aa5015a68235006cdb7f6759e734dd5368124d72157933add614947339323746ff9fdba836fc39e5cf85c8727d624f52bdf5ccde7b4c94e8989c0b845dd7ee12c7766f9b37d2a7f2439ce7fa05741e9fd4f7ab3c691261913bc3196802f9513b3a87500913f9760dd837b1248550e837e2b4d83c1f557d16a09424d7ca76597d9eb201b43340754acb32dc6b4b8f4c41806dd5436e70bc83f5f97d968d13cd445f3b58fbb2cba65299edda4412a0b8e9274f01fc3f4485e9e72998f74c4ef3eba0e948797023bb49e04ce901785b59782b77e15f1bdd50bae89c43361ea78e1f0b6f6e0b985cc9d1b35c088c08ff17e615572ef52514a71885552d787aff1e1525b9d45800b0497539749a9f7b2c74ef9326e83b591a47bae8a143dcaa5a1f3b362a9f33da53855175a2aa716c38c57225359e3f2fdf0fc140af79c8e058b5ae5699505fc58a9d5161de529c20c1cef3fb021c0f0c37548758305", 0x614}, {&(0x7f0000000240)='\'', 0x1}, {&(0x7f0000000380)="2d9f28eb5907570ca68ddf36b625c8ea7d3037f6b95304442b56f5e41fff2cd2db37275ad4c1f13a7449d9079e4c63", 0x2f}, {&(0x7f0000000680)="3c68dd0118fcf2092a657921", 0xc}], 0x5, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) 26.312682162s ago: executing program 0 (id=2922): syz_usb_connect(0x3, 0x36, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x27e1, 0x40, 0x7, 0x20002f9}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010065bd7037650000250800000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x24880}, 0x800) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000bc0008801400078008000600540000000800050034bfd86e2c008780080006004800000008000600b900000008000600c2000000080005007f00000008000500e477c64744000780080005009c12fc0308000602fb000000080006007000000008000600d50000000800060061400000080005001154a90808000600c300000008000600030000000c0007800800050002555b20240007800800060003000000080005003c3c74360800050034912e6f08000600d20000000400078004000480080002000100000008000100"], 0xe4}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x14, r4, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/61, 0x3d}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f00000008c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) pwrite64(r6, &(0x7f0000000180)="95", 0xffaf, 0x10001) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff5, @empty, 0xfffffffe}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r9}, 0x38) 10.485086648s ago: executing program 39 (id=2922): syz_usb_connect(0x3, 0x36, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x27e1, 0x40, 0x7, 0x20002f9}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010065bd7037650000250800000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x24880}, 0x800) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000bc0008801400078008000600540000000800050034bfd86e2c008780080006004800000008000600b900000008000600c2000000080005007f00000008000500e477c64744000780080005009c12fc0308000602fb000000080006007000000008000600d50000000800060061400000080005001154a90808000600c300000008000600030000000c0007800800050002555b20240007800800060003000000080005003c3c74360800050034912e6f08000600d20000000400078004000480080002000100000008000100"], 0xe4}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x14, r4, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/61, 0x3d}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f00000008c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) pwrite64(r6, &(0x7f0000000180)="95", 0xffaf, 0x10001) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff5, @empty, 0xfffffffe}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r9}, 0x38) 6.846635552s ago: executing program 8 (id=3018): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 6.031629658s ago: executing program 4 (id=3019): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, &(0x7f00000003c0)="e3af2a0b14f50d84", 0x0, 0x1, 0x0, 0x8}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x280) 5.131430185s ago: executing program 4 (id=3022): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@obj_type}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4.735770156s ago: executing program 8 (id=3024): sched_setscheduler(0x0, 0x2, 0x0) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) inotify_init() syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x8}, {0xffbd, 0xff46, [0x8e, 0x5]}}}}, 0x15) 4.724393748s ago: executing program 4 (id=3025): mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) 4.463404278s ago: executing program 9 (id=3026): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80207450, 0x0) 4.386617475s ago: executing program 4 (id=3027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x20, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 2.857199326s ago: executing program 4 (id=3028): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x60) write$char_usb(r0, &(0x7f0000000d40)="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", 0x1d2) 2.696668593s ago: executing program 8 (id=3029): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}}}, &(0x7f0000000500)=0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') 2.558039945s ago: executing program 9 (id=3030): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.455766678s ago: executing program 8 (id=3031): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 2.078597204s ago: executing program 9 (id=3032): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16], 0x1, 0x25c, &(0x7f0000000a00)="$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") creat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x148) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.709239939s ago: executing program 9 (id=3033): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030000001801000020786c2500000000002020207b0000ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000652b00"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x81013a2b81548ea4}, 0x94) 1.157974175s ago: executing program 9 (id=3034): r0 = timerfd_create(0x9, 0x0) read(r0, &(0x7f0000000080)=""/17, 0x11) timerfd_settime(r0, 0x1, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, 0x0) 547.283495ms ago: executing program 9 (id=3035): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x20, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 250.622033ms ago: executing program 4 (id=3036): sched_setscheduler(0x0, 0x2, 0x0) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) inotify_init() syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x8}, {0xffbd, 0xff46, [0x8e, 0x5]}}}}, 0x15) 250.445623ms ago: executing program 8 (id=3037): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80207450, 0x0) 0s ago: executing program 8 (id=3038): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}}}, &(0x7f0000000500)=0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') kernel console output (not intermixed with test programs): erialNumber: syz [ 1130.956505][T12721] usb 7-1: USB disconnect, device number 17 [ 1131.177966][T12838] udevd[12838]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1134.270041][T12854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1429'. [ 1140.710594][T12721] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1140.943243][T12721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1140.957934][T12721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.970547][T12721] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1140.980178][T12721] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1141.104078][T12721] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1141.123172][T12721] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1141.136038][T12721] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1141.162821][T12721] usb 5-1: string descriptor 0 read error: -22 [ 1141.172259][T12721] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1141.183190][T12721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.637905][T12721] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1143.735983][T12721] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1143.810911][T12721] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1143.911488][T12721] usb 5-1: USB disconnect, device number 5 [ 1146.426582][T12930] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1446'. [ 1148.555671][T12942] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12942] [ 1155.480824][T12989] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12989] [ 1158.318218][T13008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1158.931059][T13010] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1457'. [ 1161.680422][T11326] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1161.938021][T11326] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1161.996239][T11326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.050368][T11326] usb 7-1: Product: syz [ 1162.054619][T11326] usb 7-1: Manufacturer: syz [ 1162.059245][T11326] usb 7-1: SerialNumber: syz [ 1162.404538][T13026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.450706][T13026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.683239][T11326] usb 7-1: USB disconnect, device number 18 [ 1163.051424][T13048] udevd[13048]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1166.751048][T13068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1468'. [ 1172.990183][T13113] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8708] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13113] [ 1174.791509][T13139] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13139] [ 1178.400869][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.407219][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.865341][T13194] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13194] [ 1189.965420][T13193] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13193] [ 1194.763477][T13209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1199.941075][T13229] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13229] [ 1202.549641][T13237] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8708] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13237] [ 1206.962918][T13255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1216.129175][T13296] hub 8-0:1.0: USB hub found [ 1216.134634][T13296] hub 8-0:1.0: 1 port detected [ 1216.737602][T13294] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13294] [ 1220.190598][T12721] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1220.457976][T12721] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1220.467370][T12721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.476430][T12721] usb 5-1: Product: syz [ 1220.492919][T12721] usb 5-1: Manufacturer: syz [ 1220.513565][T12721] usb 5-1: SerialNumber: syz [ 1220.870085][T13309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.922274][T13309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.170683][T12721] usb 5-1: USB disconnect, device number 6 [ 1222.697772][T13325] udevd[13325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1224.881436][T13341] hub 8-0:1.0: USB hub found [ 1224.886690][T13341] hub 8-0:1.0: 1 port detected [ 1227.172949][T13353] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13353] [ 1231.324121][T13370] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13370] [ 1232.150364][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1234.613220][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1234.642300][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.681632][ T8] usb 3-1: config 0 descriptor?? [ 1234.701951][ T8] cp210x 3-1:0.0: cp210x converter detected [ 1234.923363][ T8] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1234.960380][ T8] cp210x 3-1:0.0: querying part number failed [ 1234.996654][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1235.051878][ T8] usb 3-1: USB disconnect, device number 17 [ 1235.084474][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1236.591391][ T8] cp210x 3-1:0.0: device disconnected [ 1239.421060][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.640724][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.141016][T13425] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13425] [ 1256.837441][T13460] Bluetooth: hci2: command 0x0406 tx timeout [ 1272.655157][T13528] hub 8-0:1.0: USB hub found [ 1272.660007][T13528] hub 8-0:1.0: 1 port detected [ 1275.039987][T13547] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13547] [ 1282.161666][T13582] hub 8-0:1.0: USB hub found [ 1282.166687][T13582] hub 8-0:1.0: 1 port detected [ 1285.521352][ T5821] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1285.772066][T13598] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13598] [ 1286.794170][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 1286.842794][ T5821] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 1286.863821][ T5821] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1286.880408][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.896593][ T5821] usb 3-1: Product: syz [ 1286.902980][ T5821] usb 3-1: Manufacturer: syz [ 1286.907628][ T5821] usb 3-1: SerialNumber: syz [ 1286.942443][T13595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1287.225372][T13595] Bluetooth: MGMT ver 1.22 [ 1289.072011][ T5821] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1289.117513][ T5821] usb 3-1: MIDIStreaming interface descriptor not found [ 1289.200830][ T5821] usb 3-1: USB disconnect, device number 18 [ 1290.739123][T13628] udevd[13628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.850363][ T5845] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1291.073363][ T5845] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1291.100167][ T5845] usb 5-1: config 0 has no interface number 0 [ 1291.122324][ T5845] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1291.137503][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.160381][ T5845] usb 5-1: Product: syz [ 1291.164608][ T5845] usb 5-1: Manufacturer: syz [ 1291.187442][ T5845] usb 5-1: SerialNumber: syz [ 1291.207960][ T5845] usb 5-1: config 0 descriptor?? [ 1291.442351][ T5845] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1291.478789][ T5845] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1291.497848][ T5845] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1292.452612][ T5845] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1292.476375][ T5845] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1292.516625][ T5845] usb 5-1: USB disconnect, device number 7 [ 1292.545398][ T5845] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1292.581255][ T5845] keyspan 5-1:0.133: device disconnected [ 1293.061714][T13645] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13645] [ 1298.540332][ T5821] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1298.793532][ T5821] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.822830][ T5821] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.850436][ T5821] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1298.890297][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1298.899606][T13678] netlink: 'syz.8.1605': attribute type 8 has an invalid length. [ 1298.935090][ T5821] usb 5-1: New USB device found, idVendor=045e, idProduct=6bdb, bcdDevice= 0.00 [ 1298.970642][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.001687][ T5821] usb 5-1: config 0 descriptor?? [ 1299.471614][ T5821] hid (null): report_id 13821 is invalid [ 1299.524036][ T5821] hid-generic 0003:045E:6BDB.0008: report_id 13821 is invalid [ 1299.559045][ T5821] hid-generic 0003:045E:6BDB.0008: item 0 2 1 8 parsing failed [ 1299.597950][ T5821] hid-generic: probe of 0003:045E:6BDB.0008 failed with error -22 [ 1299.741743][T13685] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13685] [ 1299.871422][ T5821] usb 5-1: USB disconnect, device number 8 [ 1301.256230][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.264946][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.750443][T12757] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1306.391215][T12757] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1306.420295][T12757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.428359][T12757] usb 5-1: Product: syz [ 1306.470264][T12757] usb 5-1: Manufacturer: syz [ 1306.490290][T12757] usb 5-1: SerialNumber: syz [ 1308.590857][T13722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.610597][T13722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.905756][T12757] usb 5-1: USB disconnect, device number 9 [ 1309.172406][T13735] udevd[13735]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1312.082278][T13750] netlink: 'syz.2.1620': attribute type 8 has an invalid length. [ 1314.157014][T13762] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13762] [ 1320.970454][T12721] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1321.164981][T12721] usb 5-1: config 4 has an invalid interface number: 46 but max is 0 [ 1321.177187][T12721] usb 5-1: config 4 has no interface number 0 [ 1321.190442][T12721] usb 5-1: config 4 interface 46 altsetting 9 endpoint 0x86 has invalid maxpacket 41532, setting to 64 [ 1321.214759][T12721] usb 5-1: config 4 interface 46 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1321.236232][T12721] usb 5-1: config 4 interface 46 has no altsetting 0 [ 1321.246310][T12721] usb 5-1: New USB device found, idVendor=0af0, idProduct=6150, bcdDevice=a8.15 [ 1321.256366][T12721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.265537][T12721] usb 5-1: Product: syz [ 1321.270270][T12721] usb 5-1: Manufacturer: syz [ 1321.275120][T12721] usb 5-1: SerialNumber: syz [ 1321.304410][T13785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1321.320998][T13785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1323.403752][T12721] option 5-1:4.46: GSM modem (1-port) converter detected [ 1323.427192][T12721] usb 5-1: USB disconnect, device number 10 [ 1323.467899][T12721] option 5-1:4.46: device disconnected [ 1325.197989][T13804] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13804] [ 1328.307920][ T27] audit: type=1804 audit(1790441320.545:67): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1636" name="/newroot/65/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=67 res=1 errno=0 [ 1330.345802][T13833] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13833] [ 1333.240521][ T42] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1334.902328][ T42] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.951511][ T42] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.986909][ T42] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1335.042195][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1335.051412][ T42] usb 3-1: New USB device found, idVendor=045e, idProduct=6bdb, bcdDevice= 0.00 [ 1335.072885][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.105769][ T42] usb 3-1: config 0 descriptor?? [ 1337.519134][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1337.553762][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 1337.605285][ T42] usb 3-1: USB disconnect, device number 19 [ 1338.114497][T13875] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13875] [ 1339.301866][T13878] binder: 13876:13878 ioctl 4018620d 0 returned -22 [ 1340.848868][ T5821] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1344.490777][ T5821] usb 3-1: unable to read config index 0 descriptor/all [ 1344.497869][ T5821] usb 3-1: can't read configurations, error -71 [ 1345.291494][T13908] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8708] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13908] [ 1345.386853][T13910] netlink: 'syz.2.1664': attribute type 8 has an invalid length. [ 1347.132349][T13920] binder: 13918:13920 ioctl 4018620d 0 returned -22 [ 1354.531831][T13949] binder: 13945:13949 ioctl 4018620d 0 returned -22 [ 1354.752900][T13952] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8708] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13952] [ 1362.501846][T13981] binder: 13979:13981 ioctl 4018620d 0 returned -22 [ 1362.608043][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.671744][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.260788][T12721] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1366.452400][T12721] usb 5-1: device descriptor read/all, error -71 [ 1368.816722][T14018] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14018] [ 1371.042326][T14026] binder: 14022:14026 ioctl 4018620d 0 returned -22 [ 1379.160324][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1380.857465][ T42] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1380.875161][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.900283][ T42] usb 9-1: Product: syz [ 1380.910315][ T42] usb 9-1: Manufacturer: syz [ 1380.914971][ T42] usb 9-1: SerialNumber: syz [ 1381.295707][T14046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.342064][T14046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.415779][T14060] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14060] [ 1381.495750][ T42] usb 9-1: USB disconnect, device number 2 [ 1381.721473][T14063] udevd[14063]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1383.890317][T13460] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1383.900914][T13460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1383.909789][T13460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1383.923364][T13460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1383.931257][T13460] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1383.939547][T13460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1386.912343][T13460] Bluetooth: hci0: command tx timeout [ 1387.752254][T14075] chnl_net:caif_netlink_parms(): no params data found [ 1388.184129][T14075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.211529][T14075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.218841][T14075] bridge_slave_0: entered allmulticast mode [ 1388.235683][T14075] bridge_slave_0: entered promiscuous mode [ 1388.254139][T14075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.262041][T14097] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14097] [ 1388.267266][T14075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.295170][T14075] bridge_slave_1: entered allmulticast mode [ 1388.306212][T14075] bridge_slave_1: entered promiscuous mode [ 1388.363858][T14075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.383581][T14075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.431338][T14075] team0: Port device team_slave_0 added [ 1388.482156][T14075] team0: Port device team_slave_1 added [ 1388.568281][ T77] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.597178][T14075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.604850][T14075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.632557][T14075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.135603][T14075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.142720][T14075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.150279][T13460] Bluetooth: hci0: command tx timeout [ 1390.179278][T14075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.267560][ T77] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.330380][ T5889] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1390.381653][ T77] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.446031][T14075] hsr_slave_0: entered promiscuous mode [ 1390.473339][T14075] hsr_slave_1: entered promiscuous mode [ 1390.488852][T14075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1390.498330][T14075] Cannot create hsr debugfs directory [ 1390.526429][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.544237][ T77] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.544317][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.566966][ T5889] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1390.576574][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1390.586279][ T5889] usb 3-1: SerialNumber: syz [ 1390.836810][ T5889] usb 3-1: 0:2 : does not exist [ 1390.913559][ T5889] usb 3-1: USB disconnect, device number 22 [ 1391.036912][T14064] udevd[14064]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1392.817579][T13460] Bluetooth: hci0: command tx timeout [ 1393.056054][T14075] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1393.221865][T14075] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1393.342195][T14075] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1393.367490][T14075] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1394.558040][T14144] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14144] [ 1394.940534][T13460] Bluetooth: hci0: command tx timeout [ 1395.176014][T14075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.434051][T14075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.487872][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.495208][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.571031][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.578235][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.510813][ T77] hsr_slave_0: left promiscuous mode [ 1398.560464][ T77] hsr_slave_1: left promiscuous mode [ 1398.567002][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.582146][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.611989][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.619612][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.671358][ T77] bridge_slave_1: left allmulticast mode [ 1398.677068][ T77] bridge_slave_1: left promiscuous mode [ 1398.710758][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.791180][ T77] bridge_slave_0: left allmulticast mode [ 1398.796899][ T77] bridge_slave_0: left promiscuous mode [ 1398.831588][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.941275][ T77] veth1_macvtap: left promiscuous mode [ 1398.949693][ T77] veth0_macvtap: left promiscuous mode [ 1398.970669][ T77] veth1_vlan: left promiscuous mode [ 1398.976065][ T77] veth0_vlan: left promiscuous mode [ 1399.060472][T13460] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1399.553833][T14179] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14179] [ 1405.564349][ T77] team0 (unregistering): Port device team_slave_1 removed [ 1405.721142][ T77] team0 (unregistering): Port device team_slave_0 removed [ 1405.852230][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1405.952927][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.869319][ T77] bond0 (unregistering): Released all slaves [ 1414.012614][T14075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.178451][T14075] veth0_vlan: entered promiscuous mode [ 1416.233878][T14075] veth1_vlan: entered promiscuous mode [ 1416.349168][T14075] veth0_macvtap: entered promiscuous mode [ 1417.861578][T14075] veth1_macvtap: entered promiscuous mode [ 1417.953527][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.000327][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.030731][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.060207][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.070079][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1418.115755][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.141979][T14075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.187415][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.241670][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.260352][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.299927][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1418.485058][T14075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1418.521804][T14075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.402552][T14075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.436136][T14075] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.483109][T14075] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.510291][T14075] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.519048][T14075] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.853498][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.890457][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.987075][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.020325][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.458123][T14298] block device autoloading is deprecated and will be removed. [ 1423.400702][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.413594][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.650342][ T5840] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1425.895612][ T5840] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1425.914963][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.936446][ T5840] usb 9-1: Product: syz [ 1425.945357][ T5840] usb 9-1: Manufacturer: syz [ 1425.960287][ T5840] usb 9-1: SerialNumber: syz [ 1427.602132][T14329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.662388][T14329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.921917][ T5840] usb 9-1: USB disconnect, device number 3 [ 1428.284524][T14349] udevd[14349]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.230894][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1434.243980][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1434.252854][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1434.276984][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1434.303777][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1434.311935][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1436.431069][ T5787] Bluetooth: hci3: command tx timeout [ 1437.443844][T14388] chnl_net:caif_netlink_parms(): no params data found [ 1439.449928][ T5787] Bluetooth: hci3: command tx timeout [ 1440.309373][T14388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.350805][T14388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.371106][T14388] bridge_slave_0: entered allmulticast mode [ 1440.404270][T14388] bridge_slave_0: entered promiscuous mode [ 1440.500345][T12757] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1440.568118][T14388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.601927][T14388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.620588][T14388] bridge_slave_1: entered allmulticast mode [ 1440.641804][T14388] bridge_slave_1: entered promiscuous mode [ 1440.732272][T12757] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1440.744880][T12757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.770431][T12757] usb 5-1: Product: syz [ 1440.774671][T12757] usb 5-1: Manufacturer: syz [ 1440.779299][T12757] usb 5-1: SerialNumber: syz [ 1440.878739][T14388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.321492][ T5787] Bluetooth: hci3: command tx timeout [ 1442.410908][T14437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.430949][T14437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.441725][T14388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.663634][T12757] usb 5-1: USB disconnect, device number 13 [ 1442.793255][T14388] team0: Port device team_slave_0 added [ 1442.881368][T14447] udevd[14447]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1442.883207][T14388] team0: Port device team_slave_1 added [ 1443.051409][T14388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.060657][T14388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.136987][T14388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.229859][T14388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.257992][T14388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.345070][T14388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.537195][T14388] hsr_slave_0: entered promiscuous mode [ 1443.571080][T14388] hsr_slave_1: entered promiscuous mode [ 1443.577603][T14388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.600211][T14388] Cannot create hsr debugfs directory [ 1445.312113][ T5787] Bluetooth: hci3: command tx timeout [ 1453.252002][T14388] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1453.300515][T14388] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1453.393980][T14388] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1453.467852][T14388] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1453.852712][T14388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.890901][T14388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.919072][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.926317][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1453.985896][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.993136][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.161068][T14388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1456.355583][T14388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.974582][T14388] veth0_vlan: entered promiscuous mode [ 1458.046923][T14388] veth1_vlan: entered promiscuous mode [ 1458.190877][T14388] veth0_macvtap: entered promiscuous mode [ 1458.233617][T14388] veth1_macvtap: entered promiscuous mode [ 1458.292874][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.341556][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.380361][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.400436][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.440677][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.472481][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.510298][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.540265][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.593897][T14388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.619021][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.650237][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.701946][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.726772][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.768852][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.820333][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.850202][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.890198][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.923383][T14388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.964442][T14388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.993936][T14388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.020391][T14388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.029151][T14388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.227919][T14552] kernel profiling enabled (shift: 23) [ 1459.448122][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.494910][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.569169][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.598479][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.791599][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1801'. [ 1485.694118][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.705804][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.755289][T14338] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1486.036125][T14338] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1486.119365][T14338] usb 5-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 1486.150035][T14338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1486.181330][T14338] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1486.242858][T14338] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1486.252093][T14338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1486.309040][T14338] usb 5-1: Manufacturer: 幤橎὎삆埌毷艹唶哶䚱挥┅䥯쑶⌊骵颮쵮价恰贓㑘䕟앃ꅈܬ㇙ᷖͽ藥䎇䘆悀㽉ᆔ팡븰╽좐氳ፂ職緧荴瞗㸚嗎䪬➧∼牽굙갑⛸ᔃ䱯⩏틹졉ҏ缦俖ꀰ烞輕윏欑ﲥ鎰ᰉ꛷ﭑ펳먄跨䄃憧帚쵻淥傝馶紼彈遱怕閩鎖 [ 1486.718707][T14338] usb 5-1: Found UVC 1.00 device (8086:0ad2) [ 1486.743168][T14338] usb 5-1: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 1486.792776][T14338] usb 5-1: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 1486.859479][T14338] usb 5-1: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 1486.916355][T14338] usb 5-1: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 1486.976213][T14338] usb 5-1: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 1487.037832][T14338] usb 5-1: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 1487.115510][T14338] usb 5-1: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 1487.923099][T14338] usb 5-1: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 1487.943135][T14338] usb 5-1: No streaming interface found for terminal 2. [ 1487.967475][T14338] usb 5-1: USB disconnect, device number 14 [ 1494.727978][ T5889] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1494.976570][ T5889] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.030171][ T5889] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1495.085668][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1495.112172][ T5889] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1495.148073][ T5889] usb 9-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1495.208226][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.301369][ T5889] usb 9-1: config 0 descriptor?? [ 1495.334418][ T42] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1495.415156][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.480669][ T42] usb 10-1: Product: syz [ 1495.514382][ T42] usb 10-1: Manufacturer: syz [ 1495.541033][ T42] usb 10-1: SerialNumber: syz [ 1495.647549][ T5889] usbhid 9-1:0.0: can't add hid device: -71 [ 1495.966106][ T5889] usbhid: probe of 9-1:0.0 failed with error -71 [ 1496.007909][T14817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.030008][T14817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.031370][ T5889] usb 9-1: USB disconnect, device number 4 [ 1496.268908][ T42] usb 10-1: USB disconnect, device number 2 [ 1496.584071][T14845] udevd[14845]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1505.772467][T14889] hub 8-0:1.0: USB hub found [ 1505.823420][T14889] hub 8-0:1.0: 1 port detected [ 1507.960353][T13460] Bluetooth: hci0: command 0x0406 tx timeout [ 1533.256043][T15051] ip_tables: iptables: counters copy to user failed while replacing table [ 1538.111079][ T5845] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1538.218639][T15076] hub 8-0:1.0: USB hub found [ 1538.223534][T15076] hub 8-0:1.0: 1 port detected [ 1538.489931][ T5845] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1538.510181][ T5845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.518240][ T5845] usb 9-1: Product: syz [ 1538.557436][ T5845] usb 9-1: Manufacturer: syz [ 1538.575846][ T5845] usb 9-1: SerialNumber: syz [ 1538.853286][T15081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.870557][T15081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.975317][ T5845] usb 9-1: USB disconnect, device number 5 [ 1540.428037][T15111] udevd[15111]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1541.504314][ T5787] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1541.784730][T15124] Bluetooth: MGMT ver 1.22 [ 1545.959920][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.973095][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.425207][T15167] binder: 15162:15167 ioctl 4018620d 0 returned -22 [ 1549.445370][T15167] binder: 15162:15167 ioctl c0306201 0 returned -14 [ 1554.634756][T14338] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1556.665892][T15229] binder: 15220:15229 ioctl 4018620d 0 returned -22 [ 1556.678667][T15229] binder: 15220:15229 ioctl c0306201 0 returned -14 [ 1559.648084][ T5787] Bluetooth: hci3: command tx timeout [ 1564.862114][T15274] binder: 15268:15274 ioctl 4018620d 0 returned -22 [ 1564.882300][T15274] binder: 15268:15274 ioctl c0306201 0 returned -14 [ 1577.244149][T15367] binder: 15362:15367 ioctl 4018620d 0 returned -22 [ 1580.440233][ T27] audit: type=1326 audit(1790441573.100:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1580.513630][ T27] audit: type=1326 audit(1790441573.100:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1580.584365][ T27] audit: type=1326 audit(1790441573.100:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1580.663405][ T27] audit: type=1326 audit(1790441573.100:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1580.757165][ T27] audit: type=1326 audit(1790441573.100:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1580.841140][ T27] audit: type=1326 audit(1790441573.100:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1580.960334][ T27] audit: type=1326 audit(1790441573.100:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1581.036545][ T27] audit: type=1326 audit(1790441573.130:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1581.148327][ T27] audit: type=1326 audit(1790441573.130:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1582.067480][ T27] audit: type=1326 audit(1790441573.130:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15383 comm="syz.4.1917" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa76ab9e159 code=0x7ffc0000 [ 1584.095227][T15413] binder: 15404:15413 ioctl 4018620d 0 returned -22 [ 1588.793870][T12721] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1589.454470][T12721] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1589.475104][T12721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1589.505169][T12721] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1589.546208][T12721] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1589.582583][T12721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.620698][T15449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1592.060276][T13460] Bluetooth: hci1: Reading Intel version command failed (-110) [ 1592.069240][T15463] Bluetooth: hci1: command 0xfc05 tx timeout [ 1592.078436][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 1592.135551][ T7583] usb 1-1: USB disconnect, device number 4 [ 1592.590234][T15475] binder: 15467:15475 ioctl 4018620d 0 returned -22 [ 1599.824188][T15519] binder: 15513:15519 ioctl 4018620d 0 returned -22 [ 1607.284428][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.305521][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.826730][T15579] binder: 15575:15579 ioctl 4018620d 0 returned -22 [ 1625.332370][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 1628.208914][T14337] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1628.730848][T14337] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1628.738586][T14337] usb 10-1: can't read configurations, error -71 [ 1632.580934][T15701] binder: 15696:15701 ioctl 4018620d 0 returned -22 [ 1633.802220][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1633.802236][ T27] audit: type=1326 audit(1790441626.506:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.0.1968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc899e159 code=0x7ffc0000 [ 1633.949159][ T27] audit: type=1326 audit(1790441626.506:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.0.1968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc899e159 code=0x7ffc0000 [ 1634.037134][ T27] audit: type=1326 audit(1790441626.556:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.0.1968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f8dc899e159 code=0x7ffc0000 [ 1635.046677][ T27] audit: type=1326 audit(1790441626.556:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.0.1968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc899e159 code=0x7ffc0000 [ 1635.468483][ T27] audit: type=1326 audit(1790441626.556:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.0.1968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc899e159 code=0x7ffc0000 [ 1636.967052][ T27] audit: type=1326 audit(1790441626.556:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.0.1968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f8dc899e159 code=0x7ffc0000 [ 1637.055646][ T27] audit: type=1326 audit(1790441626.556:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.0.1968" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc899e159 code=0x7ffc0000 [ 1643.817460][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.394379][T15761] binder: 15756:15761 ioctl 4018620d 0 returned -22 [ 1645.605277][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.213902][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.503407][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.829106][T15831] hub 8-0:1.0: USB hub found [ 1654.837400][T15831] hub 8-0:1.0: 1 port detected [ 1656.206776][ C0] net_ratelimit: 33 callbacks suppressed [ 1657.903049][ T49] hsr_slave_0: left promiscuous mode [ 1657.956662][ T49] hsr_slave_1: left promiscuous mode [ 1658.011873][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1658.046951][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.099513][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.126732][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.189383][ T49] bridge_slave_1: left allmulticast mode [ 1658.195343][ T49] bridge_slave_1: left promiscuous mode [ 1658.236453][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.269621][ T49] bridge_slave_0: left allmulticast mode [ 1658.275326][ T49] bridge_slave_0: left promiscuous mode [ 1658.306713][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.456724][ T49] veth1_macvtap: left promiscuous mode [ 1658.462347][ T49] veth0_macvtap: left promiscuous mode [ 1658.496370][ T49] veth1_vlan: left promiscuous mode [ 1658.501779][ T49] veth0_vlan: left promiscuous mode [ 1660.886842][T15864] binder: 15860:15864 ioctl 4018620d 0 returned -22 [ 1661.744388][ C0] net_ratelimit: 41 callbacks suppressed [ 1666.786694][ C0] net_ratelimit: 30 callbacks suppressed [ 1668.748236][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.795815][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.574975][T15897] hub 8-0:1.0: USB hub found [ 1671.583940][T15897] hub 8-0:1.0: 1 port detected [ 1671.871382][ C0] net_ratelimit: 28 callbacks suppressed [ 1673.083300][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1674.223760][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1674.411091][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.566329][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.985955][T15908] mmap: syz.9.2004 (15908) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1675.579283][ T27] audit: type=1800 audit(1790441668.303:98): pid=15912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2006" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 1675.604669][T15912] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2037591854 (only 8 groups) [ 1675.882151][ T49] bond0 (unregistering): Released all slaves [ 1677.079865][ C0] net_ratelimit: 29 callbacks suppressed [ 1682.108600][ C0] net_ratelimit: 41 callbacks suppressed [ 1682.357297][T15956] futex_wake_op: syz.8.2016 tries to shift op by 144; fix this program [ 1684.146215][T15975] Bluetooth: hci0: invalid len left 7, exp >= 115 [ 1687.147250][ C1] net_ratelimit: 36 callbacks suppressed [ 1689.785571][T16020] hub 8-0:1.0: USB hub found [ 1689.792263][T16020] hub 8-0:1.0: 1 port detected [ 1692.186258][ C1] net_ratelimit: 37 callbacks suppressed [ 1697.464297][ C0] net_ratelimit: 19 callbacks suppressed [ 1702.634654][ C1] net_ratelimit: 28 callbacks suppressed [ 1703.423831][T16122] hub 8-0:1.0: USB hub found [ 1703.432100][T16122] hub 8-0:1.0: 1 port detected [ 1707.643391][ C1] net_ratelimit: 38 callbacks suppressed [ 1712.822205][ C1] net_ratelimit: 26 callbacks suppressed [ 1718.003876][ T12] net_ratelimit: 35 callbacks suppressed [ 1719.241191][T14338] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1719.595201][T14338] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1719.611239][T14338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.619413][T14338] usb 10-1: Product: syz [ 1719.651129][T14338] usb 10-1: Manufacturer: syz [ 1719.655882][T14338] usb 10-1: SerialNumber: syz [ 1719.941201][T16249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.980601][T16249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.231387][T14338] usb 10-1: USB disconnect, device number 5 [ 1720.506005][T16274] udevd[16274]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1720.871085][T16282] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2056'. [ 1723.540608][ C1] net_ratelimit: 25 callbacks suppressed [ 1727.290274][ T5821] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1727.496347][ T5821] usb 10-1: Using ep0 maxpacket: 32 [ 1727.524724][ T5821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 1727.544510][ T5821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 10 [ 1727.568118][ T5821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 1727.598883][ T5821] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1727.613549][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.650192][ T5821] usb 10-1: Product: syz [ 1727.670393][ T5821] usb 10-1: Manufacturer: syz [ 1727.682833][ T5821] usb 10-1: SerialNumber: syz [ 1727.709284][ T5821] usb 10-1: config 0 descriptor?? [ 1727.730311][ T5821] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input13 [ 1727.944064][ C1] xpad 10-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 1727.983032][ T5889] usb 10-1: USB disconnect, device number 6 [ 1729.059996][ C1] net_ratelimit: 37 callbacks suppressed [ 1730.540392][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.547654][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.561337][T16380] hub 8-0:1.0: USB hub found [ 1731.569672][T16380] hub 8-0:1.0: 1 port detected [ 1734.579240][ C1] net_ratelimit: 30 callbacks suppressed [ 1736.543842][T16423] Invalid option length (0) for dns_resolver key [ 1739.788667][ C0] net_ratelimit: 36 callbacks suppressed [ 1745.548073][ C0] net_ratelimit: 24 callbacks suppressed [ 1750.577618][ C1] net_ratelimit: 33 callbacks suppressed [ 1751.957802][ T5821] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1752.281771][ T5821] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1752.312856][ T5821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.333165][ T5821] usb 10-1: Product: syz [ 1752.353455][ T5821] usb 10-1: Manufacturer: syz [ 1752.377715][ T5821] usb 10-1: SerialNumber: syz [ 1752.640717][T16531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.678267][T16531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.732734][ T5821] usb 10-1: USB disconnect, device number 7 [ 1754.031261][T16557] udevd[16557]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1756.257212][ C1] net_ratelimit: 33 callbacks suppressed [ 1760.576282][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2125'. [ 1761.696745][ C1] net_ratelimit: 44 callbacks suppressed [ 1761.829540][T16610] hub 8-0:1.0: USB hub found [ 1761.836751][T16610] hub 8-0:1.0: 1 port detected [ 1762.687907][T13460] Bluetooth: hci0: unexpected event for opcode 0x202a [ 1766.736398][ C0] net_ratelimit: 39 callbacks suppressed [ 1771.790274][ C0] net_ratelimit: 38 callbacks suppressed [ 1772.438696][T16673] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16673] [ 1772.679361][T15623] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1772.714374][T13460] Bluetooth: Frame is too long (len 16, expected len 4) [ 1773.214858][T15623] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.253245][T15623] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1773.287127][T15623] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1773.300024][T15623] usb 1-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 1774.234121][T16679] netlink: 'syz.8.2147': attribute type 11 has an invalid length. [ 1774.365021][T15623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.507048][T15623] usb 1-1: config 0 descriptor?? [ 1774.981104][T15623] wacom 0003:056A:00C6.0009: hidraw0: USB HID v0.06 Device [HID 056a:00c6] on usb-dummy_hcd.0-1/input0 [ 1775.156738][T15623] usb 1-1: USB disconnect, device number 5 [ 1775.219428][T16695] fido_id[16695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1777.456822][T15476] net_ratelimit: 36 callbacks suppressed [ 1778.823111][T16719] binder_alloc: 16718: binder_alloc_buf, no vma [ 1782.575421][ C0] net_ratelimit: 33 callbacks suppressed [ 1784.963762][T14338] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1785.250211][T14338] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1785.602394][T14338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.766339][T14338] usb 10-1: Product: syz [ 1785.806447][T14338] usb 10-1: Manufacturer: syz [ 1785.853655][T14338] usb 10-1: SerialNumber: syz [ 1786.259527][T14338] usb 10-1: USB disconnect, device number 8 [ 1786.444793][T16752] udevd[16752]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1787.654267][ C0] net_ratelimit: 21 callbacks suppressed [ 1792.216165][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.222507][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.422902][T16792] binder_alloc: 16785: binder_alloc_buf, no vma [ 1792.896549][ T77] net_ratelimit: 33 callbacks suppressed [ 1797.942288][T14932] net_ratelimit: 34 callbacks suppressed [ 1801.365891][T16833] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14388] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16833] [ 1803.134451][ C1] net_ratelimit: 43 callbacks suppressed [ 1808.333531][ T12] net_ratelimit: 33 callbacks suppressed [ 1813.624206][ C0] net_ratelimit: 34 callbacks suppressed [ 1818.347071][T16927] binder: BINDER_SET_CONTEXT_MGR already set [ 1818.378809][T16927] binder: 16926:16927 ioctl 4018620d 200000004a80 returned -16 [ 1819.133911][ C1] net_ratelimit: 38 callbacks suppressed [ 1824.707245][ C0] net_ratelimit: 35 callbacks suppressed [ 1825.340054][T16971] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14075] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16971] [ 1829.933606][ C1] net_ratelimit: 26 callbacks suppressed [ 1831.126249][T16992] binder: BINDER_SET_CONTEXT_MGR already set [ 1831.132385][T16992] binder: 16991:16992 ioctl 4018620d 200000004a80 returned -16 [ 1834.973458][ C1] net_ratelimit: 44 callbacks suppressed [ 1835.156593][T17017] hub 8-0:1.0: USB hub found [ 1835.165508][T17017] hub 8-0:1.0: 1 port detected [ 1837.565836][T17026] binder: BINDER_SET_CONTEXT_MGR already set [ 1837.571896][T17026] binder: 17025:17026 ioctl 4018620d 200000004a80 returned -16 [ 1840.164200][ C1] net_ratelimit: 27 callbacks suppressed [ 1842.483326][T14338] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1842.573108][T17066] Invalid option length (0) for dns_resolver key [ 1842.693307][T14338] usb 10-1: Using ep0 maxpacket: 8 [ 1842.701448][T14338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 1842.744153][T14338] usb 10-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1842.771144][T14338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.797104][T14338] usb 10-1: config 0 descriptor?? [ 1844.008745][T14338] holtek_mouse 0003:04D9:A081.000A: unknown main item tag 0x2 [ 1844.036740][T14338] holtek_mouse 0003:04D9:A081.000A: unknown main item tag 0x1 [ 1844.057100][T14338] holtek_mouse 0003:04D9:A081.000A: unknown main item tag 0x0 [ 1844.084271][T14338] holtek_mouse 0003:04D9:A081.000A: unknown main item tag 0x0 [ 1844.102051][T14338] holtek_mouse 0003:04D9:A081.000A: unknown main item tag 0x0 [ 1844.112200][T14338] holtek_mouse 0003:04D9:A081.000A: ignoring exceeding usage max [ 1844.125560][T14338] holtek_mouse 0003:04D9:A081.000A: unknown main item tag 0x5 [ 1844.133436][T14338] holtek_mouse 0003:04D9:A081.000A: unknown main item tag 0x6 [ 1844.146194][T14338] holtek_mouse 0003:04D9:A081.000A: hidraw0: USB HID v0.c4 Device [HID 04d9:a081] on usb-dummy_hcd.9-1/input0 [ 1844.634779][ T5819] usb 10-1: USB disconnect, device number 9 [ 1844.680959][T17083] binder: BINDER_SET_CONTEXT_MGR already set [ 1844.720519][T17083] binder: 17082:17083 ioctl 4018620d 200000004a80 returned -16 [ 1845.293512][ C1] net_ratelimit: 26 callbacks suppressed [ 1846.104917][ T7583] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1847.953661][T14338] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1848.166297][T14338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1848.192319][T14338] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1848.225919][T14338] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1848.264353][T14338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.272562][T14338] usb 1-1: Product: syz [ 1848.298317][T14338] usb 1-1: Manufacturer: syz [ 1848.303268][T14338] usb 1-1: SerialNumber: syz [ 1848.332204][T14338] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1848.372627][T14338] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1848.372627][T14338] Please send a copy of this message to and [ 1849.469065][T14338] ums-sddr09: probe of 1-1:1.0 failed with error -32 [ 1849.512842][T14338] usb 1-1: USB disconnect, device number 6 [ 1850.419574][ T11] net_ratelimit: 27 callbacks suppressed [ 1853.299534][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.306207][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.453050][ C0] net_ratelimit: 39 callbacks suppressed [ 1860.653002][ C1] net_ratelimit: 40 callbacks suppressed [ 1863.019154][T17203] hub 8-0:1.0: USB hub found [ 1863.028474][T17203] hub 8-0:1.0: 1 port detected [ 1864.147717][T17205] binder: BINDER_SET_CONTEXT_MGR already set [ 1865.075013][T17205] binder: 17197:17205 ioctl 4018620d 200000004a80 returned -16 [ 1866.022641][ C0] net_ratelimit: 35 callbacks suppressed [ 1871.503130][T17228] FAULT_INJECTION: forcing a failure. [ 1871.503130][T17228] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.518123][T15476] net_ratelimit: 30 callbacks suppressed [ 1871.558002][T17228] CPU: 0 PID: 17228 Comm: syz.0.2306 Not tainted syzkaller #0 [ 1871.565502][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1871.565518][T17228] Call Trace: [ 1871.565527][T17228] [ 1871.565538][T17228] dump_stack_lvl+0x18c/0x250 [ 1871.578898][T17228] ? show_regs_print_info+0x20/0x20 [ 1871.586498][T17228] ? load_image+0x420/0x420 [ 1871.586528][T17228] ? __might_sleep+0xe0/0xe0 [ 1871.586553][T17228] ? __lock_acquire+0x7d80/0x7d80 [ 1871.606268][T17228] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1871.612300][T17228] should_fail_ex+0x394/0x4c0 [ 1871.617010][T17228] should_failslab+0x9/0x20 [ 1871.621540][T17228] slab_pre_alloc_hook+0x59/0x300 [ 1871.621571][T17228] ? lockdep_hardirqs_on+0x98/0x150 [ 1871.621595][T17228] kmem_cache_alloc+0x5a/0x2c0 [ 1871.626785][T17228] ? taskstats_exit+0x14d/0xce0 [ 1871.641713][T17228] taskstats_exit+0x14d/0xce0 [ 1871.646415][T17228] ? sysctl_delayacct+0x220/0x220 [ 1871.646440][T17228] ? rcu_read_lock_any_held+0xb4/0x140 [ 1871.646463][T17228] ? rcu_read_lock_bh_held+0x100/0x100 [ 1871.646506][T17228] do_exit+0x8fc/0x2530 [ 1871.646546][T17228] ? put_task_struct+0xc0/0xc0 [ 1871.646580][T17228] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1871.646602][T17228] ? get_signal+0x100e/0x1390 [ 1871.646622][T17228] ? lock_chain_count+0x20/0x20 [ 1871.646653][T17228] do_group_exit+0x22d/0x2f0 [ 1871.646672][T17228] ? lockdep_hardirqs_on+0x98/0x150 [ 1871.646697][T17228] get_signal+0x12a6/0x1390 [ 1871.646740][T17228] arch_do_signal_or_restart+0xc2/0x7b0 [ 1871.646771][T17228] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1871.646792][T17228] ? slab_free_freelist_hook+0x130/0x1a0 [ 1871.646814][T17228] ? get_sigframe_size+0x20/0x20 [ 1871.646862][T17228] ? exit_to_user_mode_loop+0x3b/0x110 [ 1871.646895][T17228] exit_to_user_mode_loop+0x70/0x110 [ 1871.646923][T17228] exit_to_user_mode_prepare+0xee/0x180 [ 1871.646950][T17228] syscall_exit_to_user_mode+0x1a/0x50 [ 1871.646972][T17228] do_syscall_64+0x61/0xb0 [ 1871.646995][T17228] ? clear_bhb_loop+0x40/0x90 [ 1871.647022][T17228] ? clear_bhb_loop+0x40/0x90 [ 1871.647051][T17228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.647076][T17228] RIP: 0033:0x7f8dc899e159 [ 1871.647098][T17228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.647115][T17228] RSP: 002b:00007f8dc6bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1871.647139][T17228] RAX: fffffffffffffe00 RBX: 00007f8dc8c25fa8 RCX: 00007f8dc899e159 [ 1871.647154][T17228] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8dc8c25fa8 [ 1871.647168][T17228] RBP: 00007f8dc8c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1871.647181][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.647194][T17228] R13: 00007f8dc8c26038 R14: 00007fff326a8be0 R15: 00007fff326a8cc8 [ 1871.647225][T17228] [ 1876.182763][T13460] Bluetooth: hci2: command 0x0406 tx timeout [ 1877.212816][ C1] net_ratelimit: 27 callbacks suppressed [ 1879.180653][ T5819] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1879.378851][ T5819] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1879.408806][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.433884][ T5819] usb 9-1: Product: syz [ 1879.438289][ T5819] usb 9-1: Manufacturer: syz [ 1879.462793][ T5819] usb 9-1: SerialNumber: syz [ 1879.677514][T17268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.694600][T17268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.876723][ T5819] usb 9-1: USB disconnect, device number 8 [ 1880.095512][T17277] udevd[17277]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1883.056832][ T77] net_ratelimit: 40 callbacks suppressed [ 1888.103214][ T1143] net_ratelimit: 29 callbacks suppressed [ 1888.823745][T17325] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1889.853537][T14338] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1893.135035][ T12] net_ratelimit: 34 callbacks suppressed [ 1893.159356][ T27] audit: type=1800 audit(1790441885.901:99): pid=17340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2340" name="no_out_endpoint" dev="configfs" ino=45831 res=0 errno=0 [ 1893.450923][T17343] hub 8-0:1.0: USB hub found [ 1893.462834][T17343] hub 8-0:1.0: 1 port detected [ 1894.616189][ T27] audit: type=1800 audit(1790441885.951:100): pid=17340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2340" name="report_desc" dev="configfs" ino=45832 res=0 errno=0 [ 1894.645317][T14338] usb 9-1: device not accepting address 9, error -71 [ 1897.105543][T17365] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 1897.654967][T17368] hub 8-0:1.0: USB hub found [ 1897.663505][T17368] hub 8-0:1.0: 1 port detected [ 1898.693981][ C1] net_ratelimit: 17 callbacks suppressed [ 1898.836069][ T27] audit: type=1800 audit(1790441891.581:101): pid=17370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2346" name="file1" dev="overlay" ino=828 res=0 errno=0 [ 1901.223052][ T5840] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1901.512355][ T5840] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1901.549113][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.582446][ T5840] usb 9-1: Product: syz [ 1901.586674][ T5840] usb 9-1: Manufacturer: syz [ 1901.622431][ T5840] usb 9-1: SerialNumber: syz [ 1901.912689][T17392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.932801][T17392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.123412][ T5840] usb 9-1: USB disconnect, device number 11 [ 1902.331614][T17412] udevd[17412]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1902.370738][T17413] overlayfs: failed to clone upperpath [ 1903.852476][ C1] net_ratelimit: 34 callbacks suppressed [ 1906.791782][ T27] audit: type=1800 audit(1790441899.531:102): pid=17470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2385" name="no_out_endpoint" dev="configfs" ino=46617 res=0 errno=0 [ 1909.052418][ C1] net_ratelimit: 40 callbacks suppressed [ 1913.398665][ T27] audit: type=1800 audit(1790441906.141:103): pid=17520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2404" name="no_out_endpoint" dev="configfs" ino=47115 res=0 errno=0 [ 1914.262394][ C0] net_ratelimit: 26 callbacks suppressed [ 1914.620009][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.628674][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.945596][ T1143] net_ratelimit: 30 callbacks suppressed [ 1920.962690][T17564] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1924.981892][ C1] net_ratelimit: 41 callbacks suppressed [ 1925.859196][T17589] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1930.418608][ T11] net_ratelimit: 32 callbacks suppressed [ 1935.452266][ C0] net_ratelimit: 30 callbacks suppressed [ 1939.705618][T17650] binfmt_misc: register: failed to install interpreter file ./file0 [ 1940.655164][ T3523] net_ratelimit: 47 callbacks suppressed [ 1943.085138][T17666] overlay: Unknown parameter '/file0' [ 1943.388956][ T27] audit: type=1800 audit(1790441936.131:104): pid=17689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2461" name="no_out_endpoint" dev="configfs" ino=46923 res=0 errno=0 [ 1943.476046][ T27] audit: type=1800 audit(1790441936.161:105): pid=17689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2461" name="report_desc" dev="configfs" ino=46924 res=0 errno=0 [ 1944.072527][T17693] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1946.064015][ C1] net_ratelimit: 31 callbacks suppressed [ 1947.504769][T17725] binder: BINDER_SET_CONTEXT_MGR already set [ 1947.522817][T17725] binder: 17724:17725 ioctl 4018620d 200000004a80 returned -16 [ 1948.328354][T17732] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17732] [ 1948.762528][T17731] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1951.084354][ C1] net_ratelimit: 29 callbacks suppressed [ 1952.562441][T17755] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1955.625293][T17782] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14075] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17782] [ 1956.092213][ C1] net_ratelimit: 43 callbacks suppressed [ 1960.335100][T17807] overlayfs: failed to clone upperpath [ 1960.892471][T17815] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17815] [ 1961.132171][ C1] net_ratelimit: 29 callbacks suppressed [ 1964.615526][T17830] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1964.994922][ T27] audit: type=1800 audit(1790441957.741:106): pid=17839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2519" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 1964.995758][T17839] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2037591854 (only 8 groups) [ 1965.757627][T17848] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17848] [ 1966.494663][ C0] net_ratelimit: 42 callbacks suppressed [ 1967.852625][T17864] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1970.382156][T15623] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1970.620365][T15623] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1970.641367][T15623] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.652211][T15623] usb 10-1: Product: syz [ 1970.656507][T15623] usb 10-1: Manufacturer: syz [ 1970.681528][T15623] usb 10-1: SerialNumber: syz [ 1970.962571][T17875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.983621][T17875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.136371][T15623] usb 10-1: USB disconnect, device number 10 [ 1971.351855][T17891] udevd[17891]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1971.412530][T17890] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2037591854 (only 8 groups) [ 1971.423988][ T27] audit: type=1800 audit(1790441964.151:107): pid=17890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2529" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 1971.739271][T17898] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17898] [ 1971.782106][ C1] net_ratelimit: 30 callbacks suppressed [ 1973.622610][T17908] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1975.794797][ T27] audit: type=1800 audit(1790441968.541:108): pid=17926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2543" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 1975.816791][T17926] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2037591854 (only 8 groups) [ 1975.860339][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.866864][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.132088][ C0] net_ratelimit: 33 callbacks suppressed [ 1978.809141][T17934] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1978.977901][ T27] audit: type=1800 audit(1790441971.711:109): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2548" name="no_out_endpoint" dev="configfs" ino=48303 res=0 errno=0 [ 1979.038634][ T27] audit: type=1800 audit(1790441971.721:110): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2548" name="report_desc" dev="configfs" ino=48304 res=0 errno=0 [ 1981.352415][T17977] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 1982.732079][ C1] net_ratelimit: 32 callbacks suppressed [ 1988.172080][ C0] net_ratelimit: 43 callbacks suppressed [ 1989.499662][ T27] audit: type=1800 audit(1790441982.241:111): pid=18031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2581" name="no_out_endpoint" dev="configfs" ino=47695 res=0 errno=0 [ 1989.602170][ T27] audit: type=1800 audit(1790441982.301:112): pid=18031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2581" name="report_desc" dev="configfs" ino=47696 res=0 errno=0 [ 1991.926098][T18045] CacheFiles: Failed to register: -95 [ 1993.212070][ C1] net_ratelimit: 26 callbacks suppressed [ 1996.622254][ T5840] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1996.854437][ T5840] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1996.888810][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.909335][ T5840] usb 1-1: Product: syz [ 1996.952309][ T5840] usb 1-1: Manufacturer: syz [ 1996.957068][ T5840] usb 1-1: SerialNumber: syz [ 1998.206460][T18077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.227763][T18077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.252068][ C0] net_ratelimit: 40 callbacks suppressed [ 1998.362719][ T5840] usb 1-1: USB disconnect, device number 7 [ 1998.557153][T18096] udevd[18096]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2003.532138][ C1] net_ratelimit: 30 callbacks suppressed [ 2008.812024][ C0] net_ratelimit: 27 callbacks suppressed [ 2009.044995][ T27] audit: type=1800 audit(1790442001.791:113): pid=18156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2626" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 2009.081433][T18156] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2037591854 (only 8 groups) [ 2009.129322][T18160] xt_hashlimit: size too large, truncated to 1048576 [ 2014.042618][ C1] net_ratelimit: 34 callbacks suppressed [ 2015.962637][T18201] FAULT_INJECTION: forcing a failure. [ 2015.962637][T18201] name failslab, interval 1, probability 0, space 0, times 0 [ 2016.022072][T18201] CPU: 0 PID: 18201 Comm: syz.9.2634 Not tainted syzkaller #0 [ 2016.029610][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2016.039779][T18201] Call Trace: [ 2016.043070][T18201] [ 2016.046016][T18201] dump_stack_lvl+0x18c/0x250 [ 2016.050717][T18201] ? show_regs_print_info+0x20/0x20 [ 2016.055938][T18201] ? load_image+0x420/0x420 [ 2016.055971][T18201] ? __might_sleep+0xe0/0xe0 [ 2016.060698][T18201] ? __lock_acquire+0x7d80/0x7d80 [ 2016.070400][T18201] should_fail_ex+0x394/0x4c0 [ 2016.070441][T18201] should_failslab+0x9/0x20 [ 2016.079652][T18201] slab_pre_alloc_hook+0x59/0x300 [ 2016.084693][T18201] ? zone_statistics+0x170/0x170 [ 2016.084716][T18201] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 2016.084739][T18201] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 2016.089859][T18201] __kmem_cache_alloc_node+0x53/0x250 [ 2016.089896][T18201] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 2016.101249][T18201] __kmalloc_node+0xa6/0x240 [ 2016.112251][T18201] ? lock_chain_count+0x20/0x20 [ 2016.112283][T18201] memcg_alloc_slab_cgroups+0x85/0x120 [ 2016.121744][T18201] new_slab+0xc3/0x2d0 [ 2016.121769][T18201] ___slab_alloc+0xc5c/0x12f0 [ 2016.121791][T18201] ? sk_prot_alloc+0x57/0x210 [ 2016.131563][T18201] kmem_cache_alloc+0x109/0x2c0 [ 2016.140900][T18201] ? sk_prot_alloc+0x57/0x210 [ 2016.140930][T18201] sk_prot_alloc+0x57/0x210 [ 2016.140950][T18201] ? sk_alloc+0x24/0x350 [ 2016.155052][T18201] sk_alloc+0x3a/0x350 [ 2016.163368][T18201] inet_create+0x7a9/0xfe0 [ 2016.163391][T18201] ? inet_create+0x9d/0xfe0 [ 2016.163418][T18201] __sock_create+0x49e/0x940 [ 2016.177135][T18201] __sys_socket+0xd7/0x1b0 [ 2016.181567][T18201] __x64_sys_socket+0x7a/0x90 [ 2016.186258][T18201] do_syscall_64+0x55/0xb0 [ 2016.190695][T18201] ? clear_bhb_loop+0x40/0x90 [ 2016.195477][T18201] ? clear_bhb_loop+0x40/0x90 [ 2016.200170][T18201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2016.206081][T18201] RIP: 0033:0x7f490c79e159 [ 2016.210515][T18201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2016.230132][T18201] RSP: 002b:00007f490d657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2016.238654][T18201] RAX: ffffffffffffffda RBX: 00007f490ca25fa0 RCX: 00007f490c79e159 [ 2016.246641][T18201] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 2016.254641][T18201] RBP: 00007f490c83506b R08: 0000000000000000 R09: 0000000000000000 [ 2016.262623][T18201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2016.270601][T18201] R13: 00007f490ca26038 R14: 00007f490ca25fa0 R15: 00007ffdc1ef25c8 [ 2016.278746][T18201] [ 2019.382127][T15476] net_ratelimit: 37 callbacks suppressed [ 2024.491997][ C0] net_ratelimit: 55 callbacks suppressed [ 2024.855004][T18249] hub 8-0:1.0: USB hub found [ 2024.862116][T18249] hub 8-0:1.0: 1 port detected [ 2029.936605][ T1099] net_ratelimit: 26 callbacks suppressed [ 2031.121656][T18278] block device autoloading is deprecated and will be removed. [ 2031.603252][T18289] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2664'. [ 2032.799681][T18282] netlink: 'syz.8.2662': attribute type 29 has an invalid length. [ 2032.812125][T18282] netlink: 'syz.8.2662': attribute type 29 has an invalid length. [ 2033.463284][T18303] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 2033.471095][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'. [ 2035.701985][ C1] net_ratelimit: 37 callbacks suppressed [ 2035.803881][T18315] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2037.299716][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.306254][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.203360][T18339] syzkaller0: entered promiscuous mode [ 2038.222317][T18339] syzkaller0: entered allmulticast mode [ 2038.322147][T18340] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2040.811966][ C0] net_ratelimit: 30 callbacks suppressed [ 2041.263811][T18361] hub 8-0:1.0: USB hub found [ 2041.272078][T18361] hub 8-0:1.0: 1 port detected [ 2043.833480][T18370] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2045.851978][ C1] net_ratelimit: 30 callbacks suppressed [ 2049.477781][T18359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2675'. [ 2049.922878][T18405] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2050.891991][ C1] net_ratelimit: 19 callbacks suppressed [ 2052.381463][T14490] IPVS: starting estimator thread 0... [ 2052.502796][T18427] IPVS: using max 19 ests per chain, 45600 per kthread [ 2055.919925][ T77] net_ratelimit: 24 callbacks suppressed [ 2058.922153][T18459] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2059.040013][T18464] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2059.051629][T18464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2059.084389][T18464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2059.093711][T18464] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2059.122631][T18464] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2059.130388][T18464] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2060.972228][ C1] net_ratelimit: 27 callbacks suppressed [ 2061.212172][T13460] Bluetooth: hci1: command tx timeout [ 2062.058755][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.433446][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.680294][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.759171][T18463] chnl_net:caif_netlink_parms(): no params data found [ 2062.935108][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.240809][T18463] bridge0: port 1(bridge_slave_0) entered blocking state [ 2063.248196][T18463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.262748][T18463] bridge_slave_0: entered allmulticast mode [ 2063.287106][T18463] bridge_slave_0: entered promiscuous mode [ 2063.292062][T13460] Bluetooth: hci1: command tx timeout [ 2063.334836][T18463] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.387090][T18463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.415990][T18463] bridge_slave_1: entered allmulticast mode [ 2063.435357][T18463] bridge_slave_1: entered promiscuous mode [ 2063.717879][T18463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2063.770980][T18463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2064.036995][T18463] team0: Port device team_slave_0 added [ 2064.078322][T18463] team0: Port device team_slave_1 added [ 2065.462697][T13460] Bluetooth: hci1: command tx timeout [ 2066.012604][ T3523] net_ratelimit: 30 callbacks suppressed [ 2066.067387][T18506] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2735'. [ 2066.233196][T18463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2066.240167][T18463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.332902][T18463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2066.361519][ T27] audit: type=1800 audit(1790442059.101:114): pid=18512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2737" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 2066.384806][T18463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2066.398351][T18512] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2037591854 (only 8 groups) [ 2066.412848][T18463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.487193][T18463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2067.443773][T18521] hub 8-0:1.0: USB hub found [ 2067.452050][T18521] hub 8-0:1.0: 1 port detected [ 2067.863633][T13460] Bluetooth: hci1: command tx timeout [ 2068.197057][T18531] (null): rxe_set_mtu: Set mtu to 1024 [ 2068.308514][T18463] hsr_slave_0: entered promiscuous mode [ 2068.323892][T18463] hsr_slave_1: entered promiscuous mode [ 2068.332122][T14338] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2068.360502][T18463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2068.372065][T18463] Cannot create hsr debugfs directory [ 2069.336200][T18531] infiniband syz1: set active [ 2069.352112][T18531] infiniband syz1: added bond0 [ 2069.360073][T18531] syz1: rxe_create_cq: returned err = -12 [ 2069.372202][T14338] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2069.392323][T14338] usb 1-1: no configurations [ 2069.397085][T14338] usb 1-1: can't read configurations, error -22 [ 2069.420079][T18531] infiniband syz1: Couldn't create ib_mad CQ [ 2069.436105][T18531] infiniband syz1: Couldn't open port 1 [ 2069.577064][T18531] RDS/IB: syz1: added [ 2069.586990][T18531] smc: adding ib device syz1 with port count 1 [ 2069.601515][T18531] smc: ib device syz1 port 1 has pnetid [ 2071.132076][T14932] net_ratelimit: 23 callbacks suppressed [ 2071.407104][T18463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2071.459201][T18463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2071.517227][T18463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2071.547361][T18463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2071.885357][T18463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2072.047418][T18463] 8021q: adding VLAN 0 to HW filter on device team0 [ 2072.119109][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.126419][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2072.240294][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.247782][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.317191][T18463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2074.584047][T18463] veth0_vlan: entered promiscuous mode [ 2074.678146][T18463] veth1_vlan: entered promiscuous mode [ 2074.905983][ T12] hsr_slave_0: left promiscuous mode [ 2074.937975][ T12] hsr_slave_1: left promiscuous mode [ 2075.006365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2075.029708][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2075.054225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2075.104293][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2075.163746][ T12] bridge_slave_1: left allmulticast mode [ 2075.169650][ T12] bridge_slave_1: left promiscuous mode [ 2075.204634][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.300150][ T12] bridge_slave_0: left allmulticast mode [ 2075.322311][ T12] bridge_slave_0: left promiscuous mode [ 2075.341218][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.558202][ T12] veth1_macvtap: left promiscuous mode [ 2075.584440][ T12] veth0_macvtap: left promiscuous mode [ 2075.590241][ T12] veth1_vlan: left promiscuous mode [ 2075.615627][ T12] veth0_vlan: left promiscuous mode [ 2076.332004][ C1] net_ratelimit: 24 callbacks suppressed [ 2076.769404][ T27] audit: type=1326 audit(1790442069.511:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2076.832517][T18659] FAULT_INJECTION: forcing a failure. [ 2076.832517][T18659] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2076.865876][ T27] audit: type=1326 audit(1790442069.551:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2076.914390][T18659] CPU: 1 PID: 18659 Comm: syz.9.2759 Not tainted syzkaller #0 [ 2076.921923][T18659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2076.932015][T18659] Call Trace: [ 2076.935330][T18659] [ 2076.938290][T18659] dump_stack_lvl+0x18c/0x250 [ 2076.943027][T18659] ? show_regs_print_info+0x20/0x20 [ 2076.948274][T18659] ? load_image+0x420/0x420 [ 2076.952820][T18659] ? stack_trace_save+0xaa/0x100 [ 2076.957290][ T27] audit: type=1326 audit(1790442069.551:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2076.957783][T18659] ? stack_trace_snprint+0xf0/0xf0 [ 2076.987170][T18659] ? __stack_depot_save+0x1f/0x660 [ 2076.992325][T18659] should_fail_ex+0x394/0x4c0 [ 2076.997064][T18659] get_futex_key+0x136/0x1030 [ 2077.001774][T18659] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2077.007868][T18659] ? futex_setup_timer+0xc0/0xc0 [ 2077.012826][T18659] futex_wait_setup+0xbc/0x270 [ 2077.017607][T18659] ? futex_wait_multiple+0x920/0x920 [ 2077.022906][T18659] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2077.028904][T18659] futex_wait+0x1bc/0x5c0 [ 2077.033328][T18659] ? kasan_quarantine_put+0xd8/0x220 [ 2077.038631][T18659] ? futex_wait_setup+0x270/0x270 [ 2077.043665][T18659] ? slab_free_freelist_hook+0x130/0x1a0 [ 2077.049313][T18659] ? kmem_cache_free+0xf8/0x290 [ 2077.054196][T18659] do_futex+0x2ff/0x3e0 [ 2077.058386][T18659] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2077.064310][T18659] ? __lock_acquire+0x7d80/0x7d80 [ 2077.069359][T18659] __se_sys_futex+0x3a9/0x440 [ 2077.074052][T18659] ? __x64_sys_futex+0xf0/0xf0 [ 2077.078829][T18659] ? __x64_sys_futex+0x21/0xf0 [ 2077.083605][T18659] do_syscall_64+0x55/0xb0 [ 2077.088034][T18659] ? clear_bhb_loop+0x40/0x90 [ 2077.092731][T18659] ? clear_bhb_loop+0x40/0x90 [ 2077.097423][T18659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2077.103418][T18659] RIP: 0033:0x7f490c79e159 [ 2077.107847][T18659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2077.127460][T18659] RSP: 002b:00007f490d6570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2077.135888][T18659] RAX: ffffffffffffffda RBX: 00007f490ca25fa8 RCX: 00007f490c79e159 [ 2077.143873][T18659] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f490ca25fa8 [ 2077.151868][T18659] RBP: 00007f490ca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2077.159847][T18659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2077.167915][T18659] R13: 00007f490ca26038 R14: 00007ffdc1ef24e0 R15: 00007ffdc1ef25c8 [ 2077.176022][T18659] [ 2077.209287][ T27] audit: type=1326 audit(1790442069.551:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2077.274488][ T27] audit: type=1326 audit(1790442069.551:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2077.362062][ T27] audit: type=1326 audit(1790442069.561:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2077.421747][ T27] audit: type=1326 audit(1790442069.561:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2077.531332][ T27] audit: type=1326 audit(1790442069.561:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2077.605154][ T27] audit: type=1326 audit(1790442069.561:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2077.678696][ T27] audit: type=1326 audit(1790442069.561:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.9.2759" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490c79e159 code=0x7ffc0000 [ 2080.533587][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2080.730806][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2080.942988][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2081.130873][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2081.771968][ C1] net_ratelimit: 20 callbacks suppressed [ 2082.558433][ T12] bond0 (unregistering): Released all slaves [ 2083.017059][T18463] veth0_macvtap: entered promiscuous mode [ 2083.092959][T18463] veth1_macvtap: entered promiscuous mode [ 2083.181153][T18463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.219649][T18463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.241971][T18463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.269039][T18463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.296906][T18463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2083.318736][T18463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.334303][T18463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2083.350908][T18463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.388383][T18732] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2037591854 (only 8 groups) [ 2083.397457][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 2083.397474][ T27] audit: type=1800 audit(1790442076.131:152): pid=18732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2779" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 2083.428967][T18463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.444950][T18463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.457989][T18463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.472466][T18463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2083.483423][T18463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2083.501692][T18463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2083.527449][T18463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.536875][T18463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.555506][T18463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2083.570119][T18463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2084.013503][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.074245][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.226631][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.256985][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.942063][T18754] fuse: Bad value for 'fd' [ 2084.976987][T18759] binder: 18758:18759 ioctl c0306201 0 returned -14 [ 2085.541805][T14338] wiimote 0005:057E:0330.000B: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 2085.622945][T14338] wiimote 0005:057E:0330.000B: New device registered [ 2085.682715][T18766] wiimote 0005:057E:0330.000B: Device removed [ 2085.841805][T18770] fido_id[18770]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2086.658807][ T5845] wiimote 0005:057E:0330.000B: detected device: Nintendo Wii Remote Plus (Gen 2) [ 2086.811912][ C1] net_ratelimit: 66 callbacks suppressed [ 2086.931288][ T5845] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input18 [ 2087.039959][ T5845] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input19 [ 2087.149653][ T5845] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input17 [ 2088.588703][ T27] audit: type=1326 audit(1790442081.331:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.623710][ T27] audit: type=1326 audit(1790442081.331:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.648801][ T27] audit: type=1326 audit(1790442081.361:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.675110][ T27] audit: type=1326 audit(1790442081.361:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.699449][ T27] audit: type=1326 audit(1790442081.361:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.723795][ T27] audit: type=1326 audit(1790442081.361:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.749165][ T27] audit: type=1326 audit(1790442081.361:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.790790][ T27] audit: type=1326 audit(1790442081.361:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.892020][ T27] audit: type=1326 audit(1790442081.361:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2088.935140][ T27] audit: type=1326 audit(1790442081.361:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18793 comm="syz.8.2800" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380719e159 code=0x7ffc0000 [ 2090.997512][T18816] device-mapper: ioctl: device name cannot contain '/' [ 2091.903780][T18831] hub 8-0:1.0: USB hub found [ 2091.911963][T18831] hub 8-0:1.0: 1 port detected [ 2092.331930][ C0] net_ratelimit: 49 callbacks suppressed [ 2095.850301][T18889] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2837'. [ 2097.372135][ C1] net_ratelimit: 33 callbacks suppressed [ 2097.804332][T18920] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2098.741514][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.756560][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.624453][T18943] FAULT_INJECTION: forcing a failure. [ 2099.624453][T18943] name failslab, interval 1, probability 0, space 0, times 0 [ 2099.672047][T18943] CPU: 1 PID: 18943 Comm: syz.9.2855 Not tainted syzkaller #0 [ 2099.679580][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2099.689689][T18943] Call Trace: [ 2099.693004][T18943] [ 2099.695964][T18943] dump_stack_lvl+0x18c/0x250 [ 2099.700693][T18943] ? show_regs_print_info+0x20/0x20 [ 2099.705938][T18943] ? load_image+0x420/0x420 [ 2099.710569][T18943] ? __might_sleep+0xe0/0xe0 [ 2099.715211][T18943] ? __lock_acquire+0x7d80/0x7d80 [ 2099.720368][T18943] should_fail_ex+0x394/0x4c0 [ 2099.725098][T18943] should_failslab+0x9/0x20 [ 2099.729649][T18943] slab_pre_alloc_hook+0x59/0x300 [ 2099.734719][T18943] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2099.740925][T18943] ? alloc_tty_struct+0xa7/0x790 [ 2099.745908][T18943] __kmem_cache_alloc_node+0x53/0x250 [ 2099.751330][T18943] ? rcu_is_watching+0x15/0xb0 [ 2099.756143][T18943] ? alloc_tty_struct+0xa7/0x790 [ 2099.761130][T18943] kmalloc_trace+0x2a/0xe0 [ 2099.765597][T18943] alloc_tty_struct+0xa7/0x790 [ 2099.770414][T18943] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2099.776086][T18943] ? ptmx_open+0xd0/0x2c0 [ 2099.780450][T18943] ? tty_init_dev+0x4c0/0x4c0 [ 2099.785159][T18943] ? devpts_acquire+0x22f/0x280 [ 2099.790165][T18943] ? devpts_mntget+0x310/0x310 [ 2099.794952][T18943] tty_init_dev+0x59/0x4c0 [ 2099.799924][T18943] ptmx_open+0xdf/0x2c0 [ 2099.804091][T18943] ? pty_start+0x140/0x140 [ 2099.808534][T18943] chrdev_open+0x58c/0x600 [ 2099.812971][T18943] ? cd_forget+0x160/0x160 [ 2099.817488][T18943] ? fsnotify_perm+0x3ed/0x5e0 [ 2099.822271][T18943] do_dentry_open+0x880/0x14b0 [ 2099.827052][T18943] ? cd_forget+0x160/0x160 [ 2099.831504][T18943] path_openat+0x284f/0x3270 [ 2099.836142][T18943] ? do_sys_openat2+0xda/0x1d0 [ 2099.840934][T18943] ? __x64_sys_openat+0x139/0x160 [ 2099.845991][T18943] ? verify_lock_unused+0x140/0x140 [ 2099.851225][T18943] ? do_filp_open+0x430/0x430 [ 2099.855934][T18943] do_filp_open+0x1f2/0x430 [ 2099.860456][T18943] ? vfs_tmpfile+0x620/0x620 [ 2099.865084][T18943] ? _raw_spin_unlock+0x28/0x40 [ 2099.869948][T18943] ? alloc_fd+0x590/0x640 [ 2099.874301][T18943] do_sys_openat2+0x134/0x1d0 [ 2099.878993][T18943] ? do_sys_open+0xe0/0xe0 [ 2099.883424][T18943] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2099.889420][T18943] ? lock_chain_count+0x20/0x20 [ 2099.894294][T18943] __x64_sys_openat+0x139/0x160 [ 2099.899163][T18943] do_syscall_64+0x55/0xb0 [ 2099.903681][T18943] ? clear_bhb_loop+0x40/0x90 [ 2099.908374][T18943] ? clear_bhb_loop+0x40/0x90 [ 2099.913071][T18943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2099.918982][T18943] RIP: 0033:0x7f490c79e159 [ 2099.923416][T18943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2099.943207][T18943] RSP: 002b:00007f490d657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2099.951648][T18943] RAX: ffffffffffffffda RBX: 00007f490ca25fa0 RCX: 00007f490c79e159 [ 2099.959628][T18943] RDX: 0000000000183001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 2099.967610][T18943] RBP: 00007f490c83506b R08: 0000000000000000 R09: 0000000000000000 [ 2099.975587][T18943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.983571][T18943] R13: 00007f490ca26038 R14: 00007f490ca25fa0 R15: 00007ffdc1ef25c8 [ 2099.991566][T18943] [ 2100.235223][T18946] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2102.757176][T18975] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18975] [ 2102.990175][T18981] binder: 18980:18981 ioctl c0306201 0 returned -14 [ 2103.131901][ C1] net_ratelimit: 36 callbacks suppressed [ 2103.572611][T18986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2106.420092][T19011] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14388] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19011] [ 2108.030588][T19036] binder: 19034:19036 ioctl c0306201 0 returned -14 [ 2108.331954][ C1] net_ratelimit: 35 callbacks suppressed [ 2108.494501][T19041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2110.881935][T19045] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2112.925768][T19082] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19082] [ 2113.451915][ C1] net_ratelimit: 35 callbacks suppressed [ 2114.194923][T19080] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2114.597176][T19094] FAULT_INJECTION: forcing a failure. [ 2114.597176][T19094] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2114.643735][T19094] CPU: 1 PID: 19094 Comm: syz.9.2911 Not tainted syzkaller #0 [ 2114.651285][T19094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2114.661385][T19094] Call Trace: [ 2114.664696][T19094] [ 2114.667656][T19094] dump_stack_lvl+0x18c/0x250 [ 2114.672400][T19094] ? show_regs_print_info+0x20/0x20 [ 2114.677647][T19094] ? load_image+0x420/0x420 [ 2114.682195][T19094] ? verify_lock_unused+0x140/0x140 [ 2114.687430][T19094] should_fail_ex+0x394/0x4c0 [ 2114.692154][T19094] get_futex_key+0x136/0x1030 [ 2114.696879][T19094] ? kasan_save_stack+0x3e/0x60 [ 2114.701786][T19094] ? __se_sys_close+0x15c/0x1e0 [ 2114.706678][T19094] ? futex_setup_timer+0xc0/0xc0 [ 2114.711645][T19094] futex_wake+0x127/0x4f0 [ 2114.711674][T19094] ? task_mm_cid_work+0x31d/0x770 [ 2114.711707][T19094] ? futex_wake_mark+0x150/0x150 [ 2114.721320][T19094] do_futex+0x35d/0x3e0 [ 2114.721362][T19094] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2114.730457][T19094] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 2114.742450][T19094] ? _raw_spin_unlock_irq+0x23/0x50 [ 2114.742493][T19094] __se_sys_futex+0x3a9/0x440 [ 2114.752374][T19094] ? __x64_sys_futex+0xf0/0xf0 [ 2114.752415][T19094] ? __x64_sys_futex+0x21/0xf0 [ 2114.762010][T19094] do_syscall_64+0x55/0xb0 [ 2114.766466][T19094] ? clear_bhb_loop+0x40/0x90 [ 2114.771171][T19094] ? clear_bhb_loop+0x40/0x90 [ 2114.775876][T19094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2114.781801][T19094] RIP: 0033:0x7f490c79e159 [ 2114.786673][T19094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2114.806289][T19094] RSP: 002b:00007f490d6570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2114.814715][T19094] RAX: ffffffffffffffda RBX: 00007f490ca25fa8 RCX: 00007f490c79e159 [ 2114.822694][T19094] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f490ca25fac [ 2114.830673][T19094] RBP: 00007f490ca25fa0 R08: 0000000000745d20 R09: 0000000000000000 [ 2114.838647][T19094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2114.846624][T19094] R13: 00007f490ca26038 R14: 00007ffdc1ef24e0 R15: 00007ffdc1ef25c8 [ 2114.854617][T19094] [ 2115.393629][T19109] netlink: 'syz.9.2918': attribute type 8 has an invalid length. [ 2115.763125][T19111] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[18463] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19111] [ 2116.975951][T19116] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2117.266877][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'. [ 2117.413694][T19132] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2117.423266][T19132] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2117.432781][T19132] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2117.441873][T19132] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2117.454019][T19132] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2117.849963][T19142] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19142] [ 2118.481252][T19154] FAULT_INJECTION: forcing a failure. [ 2118.481252][T19154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2118.495408][T19154] CPU: 1 PID: 19154 Comm: syz.8.2937 Not tainted syzkaller #0 [ 2118.502923][T19154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2118.513015][T19154] Call Trace: [ 2118.516314][T19154] [ 2118.519369][T19154] dump_stack_lvl+0x18c/0x250 [ 2118.524066][T19154] ? show_regs_print_info+0x20/0x20 [ 2118.529273][T19154] ? load_image+0x420/0x420 [ 2118.533786][T19154] ? __lock_acquire+0x7d80/0x7d80 [ 2118.538813][T19154] ? __kasan_slab_alloc+0x6c/0x80 [ 2118.543852][T19154] should_fail_ex+0x394/0x4c0 [ 2118.548558][T19154] strncpy_from_user+0x36/0x2f0 [ 2118.553436][T19154] getname_flags+0xf6/0x500 [ 2118.557986][T19154] __x64_sys_unlinkat+0xae/0xe0 [ 2118.562941][T19154] do_syscall_64+0x55/0xb0 [ 2118.567389][T19154] ? clear_bhb_loop+0x40/0x90 [ 2118.572079][T19154] ? clear_bhb_loop+0x40/0x90 [ 2118.576781][T19154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2118.582785][T19154] RIP: 0033:0x7f380719e159 [ 2118.587306][T19154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2118.606944][T19154] RSP: 002b:00007f380814b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 2118.615388][T19154] RAX: ffffffffffffffda RBX: 00007f3807425fa0 RCX: 00007f380719e159 [ 2118.623468][T19154] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000003 [ 2118.631458][T19154] RBP: 00007f380723506b R08: 0000000000000000 R09: 0000000000000000 [ 2118.639445][T19154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2118.647447][T19154] R13: 00007f3807426038 R14: 00007f3807425fa0 R15: 00007fffbeb23788 [ 2118.655456][T19154] [ 2119.051919][ C1] net_ratelimit: 44 callbacks suppressed [ 2119.213878][T19162] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2119.879428][T19172] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19172] [ 2120.917484][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 2120.917498][ T27] audit: type=1800 audit(1790442113.661:165): pid=19189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2952" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 2120.919426][T19189] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2037591854 (only 8 groups) [ 2122.509875][T19204] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19204] [ 2124.171925][ C0] net_ratelimit: 42 callbacks suppressed [ 2126.860667][T19248] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19248] [ 2128.652408][T19279] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19279] [ 2129.452837][ T77] net_ratelimit: 30 callbacks suppressed [ 2129.535165][T19294] syzkaller0: entered promiscuous mode [ 2129.544793][T19294] syzkaller0: entered allmulticast mode [ 2129.561673][T19294] tipc: Started in network mode [ 2129.569715][T19294] tipc: Node identity b67e564441e4, cluster identity 4711 [ 2129.585935][T19294] tipc: Enabled bearer , priority 0 [ 2129.618726][T19293] tipc: Resetting bearer [ 2129.710566][T19293] tipc: Disabling bearer [ 2129.984735][ T27] audit: type=1800 audit(1790442122.731:166): pid=19301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2995" name=05 dev="sda1" ino=2062 res=0 errno=0 [ 2130.273394][T19307] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[18463] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19307] [ 2132.215022][T19331] binder: BINDER_SET_CONTEXT_MGR already set [ 2132.229509][T19331] binder: 19330:19331 ioctl 4018620d 200000004a80 returned -16 [ 2132.701779][T18464] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2132.762279][T18464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2132.773718][T18464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2132.788069][T18464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2132.800409][T18464] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2132.811063][T18464] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2134.550862][ C0] net_ratelimit: 27 callbacks suppressed [ 2134.574767][T19348] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19348] [ 2134.902031][T13460] Bluetooth: hci4: command tx timeout [ 2135.680008][T19355] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2135.759804][T19336] chnl_net:caif_netlink_parms(): no params data found [ 2136.660894][T19336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2136.702495][T19336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2136.709996][T19336] bridge_slave_0: entered allmulticast mode [ 2136.711577][T19373] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3020'. [ 2136.741225][T19336] bridge_slave_0: entered promiscuous mode [ 2136.784730][T19336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2136.822433][T19336] bridge0: port 2(bridge_slave_1) entered disabled state [ 2136.830031][T19336] bridge_slave_1: entered allmulticast mode [ 2136.873796][T19336] bridge_slave_1: entered promiscuous mode [ 2136.971977][T13460] Bluetooth: hci4: command tx timeout [ 2137.194573][T19336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2137.263814][T19336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2137.556890][T19336] team0: Port device team_slave_0 added [ 2137.637366][T19336] team0: Port device team_slave_1 added [ 2137.663444][T19384] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12343] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19384] [ 2137.959791][T19336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2137.986127][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2138.508920][T19395] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2139.421981][T13460] Bluetooth: hci4: command tx timeout [ 2139.468393][T19336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2139.482899][T19336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2139.491586][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2139.521030][T19336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2139.692019][ C0] net_ratelimit: 30 callbacks suppressed [ 2139.778916][T19336] hsr_slave_0: entered promiscuous mode [ 2139.812812][T19336] hsr_slave_1: entered promiscuous mode [ 2139.860669][T19336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2139.882753][T19336] Cannot create hsr debugfs directory [ 2141.452044][T18464] Bluetooth: hci4: command tx timeout [ 2142.124780][T19431] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[18463] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19431] [ 2142.203068][T18464] Bluetooth: hci1: link tx timeout [ 2142.209024][T18464] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 2142.673568][T19437] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 0 [ 2143.812871][T19336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2143.864081][T19336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2143.903651][T19336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2144.004257][T19336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2144.265744][T18464] Bluetooth: hci1: command 0x0406 tx timeout [ 2144.398674][T19336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2144.449864][T19336] 8021q: adding VLAN 0 to HW filter on device team0 [ 2144.484231][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.491419][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2144.529209][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.536371][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2144.732185][ C1] net_ratelimit: 32 callbacks suppressed [ 2145.339418][T19336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2145.481613][T19336] veth0_vlan: entered promiscuous mode [ 2145.511775][T19336] veth1_vlan: entered promiscuous mode [ 2145.599441][T19336] veth0_macvtap: entered promiscuous mode [ 2145.628378][T19336] veth1_macvtap: entered promiscuous mode [ 2145.681763][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2145.696221][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.706747][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2145.732250][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.751978][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2145.780922][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.805102][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2145.828710][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.853873][T19336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2145.901040][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2145.933918][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.953457][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2145.972199][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2146.000896][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2146.031099][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2146.058884][T19336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2146.082403][T19336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2146.113817][T19336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2146.169794][T19336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.190765][T19336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.211963][T19336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.220812][T19336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.545828][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.588544][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.669177][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.681993][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.790254][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.924005][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.013819][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.107154][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.891729][ T77] hsr_slave_0: left promiscuous mode [ 2148.914089][ T77] hsr_slave_1: left promiscuous mode [ 2148.920778][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2148.942118][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2148.963286][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2148.970771][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2148.993163][ T77] bridge_slave_1: left promiscuous mode [ 2148.998980][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.031091][ T77] bridge_slave_0: left allmulticast mode [ 2149.050746][ T77] bridge_slave_0: left promiscuous mode [ 2149.060093][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 2149.100246][ T77] veth1_macvtap: left promiscuous mode [ 2149.106788][ T77] veth0_macvtap: left promiscuous mode [ 2149.112530][ T77] veth1_vlan: left promiscuous mode [ 2149.117928][ T77] veth0_vlan: left promiscuous mode [ 2149.858708][ C1] net_ratelimit: 88 callbacks suppressed [ 2150.155012][ T77] team0 (unregistering): Port device team_slave_1 removed [ 2150.229860][ T77] team0 (unregistering): Port device team_slave_0 removed [ 2150.302687][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2150.380918][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2151.005220][ T77] bond0 (unregistering): Released all slaves [ 2151.458118][ T77] IPVS: stop unused estimator thread 0... [ 2155.052129][ C0] net_ratelimit: 41 callbacks suppressed [ 2160.172099][ C1] net_ratelimit: 36 callbacks suppressed [ 2160.181070][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.187682][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.451941][ C1] net_ratelimit: 43 callbacks suppressed [ 2170.572035][ C0] net_ratelimit: 40 callbacks suppressed [ 2175.851950][ C1] net_ratelimit: 42 callbacks suppressed [ 2180.972024][ C0] net_ratelimit: 37 callbacks suppressed [ 2186.251907][ C1] net_ratelimit: 58 callbacks suppressed [ 2191.452014][ C1] net_ratelimit: 42 callbacks suppressed [ 2196.652109][ C1] net_ratelimit: 43 callbacks suppressed [ 2201.851873][ C1] net_ratelimit: 47 callbacks suppressed [ 2207.051904][ C1] net_ratelimit: 52 callbacks suppressed [ 2212.251939][ C1] net_ratelimit: 60 callbacks suppressed [ 2217.451852][ C1] net_ratelimit: 35 callbacks suppressed [ 2221.616799][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.623364][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.651913][ C1] net_ratelimit: 49 callbacks suppressed [ 2227.851905][ C1] net_ratelimit: 42 callbacks suppressed [ 2233.051878][ C1] net_ratelimit: 37 callbacks suppressed [ 2238.251849][ C1] net_ratelimit: 37 callbacks suppressed [ 2243.451870][ C1] net_ratelimit: 57 callbacks suppressed [ 2248.651898][ C1] net_ratelimit: 44 callbacks suppressed [ 2253.851871][ C1] net_ratelimit: 44 callbacks suppressed [ 2259.051935][ C1] net_ratelimit: 51 callbacks suppressed [ 2259.531975][T18464] Bluetooth: hci4: command 0x0406 tx timeout [ 2264.091864][ C0] net_ratelimit: 42 callbacks suppressed [ 2269.132070][ C0] net_ratelimit: 38 callbacks suppressed [ 2274.251836][ C1] net_ratelimit: 40 callbacks suppressed [ 2279.291890][ C0] net_ratelimit: 56 callbacks suppressed [ 2283.057060][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.069515][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.331845][ C0] net_ratelimit: 37 callbacks suppressed [ 2286.252109][ T28] INFO: task syz-executor:5764 blocked for more than 143 seconds. [ 2286.260004][ T28] Not tainted syzkaller #0 [ 2286.269173][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2286.278340][ T28] task:syz-executor state:D stack:22152 pid:5764 ppid:5763 flags:0x00004002 [ 2286.287852][ T28] Call Trace: [ 2286.291135][ T28] [ 2286.294210][ T28] __schedule+0x15ae/0x4660 [ 2286.298772][ T28] ? mark_lock+0x94/0x320 [ 2286.303177][ T28] ? asan.module_dtor+0x20/0x20 [ 2286.308078][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2286.313506][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2286.319429][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2286.324822][ T28] schedule+0xbd/0x170 [ 2286.328959][ T28] io_schedule+0x80/0xd0 [ 2286.333635][ T28] bit_wait_io+0x11/0xd0 [ 2286.337930][ T28] __wait_on_bit+0x9f/0x2c0 [ 2286.343778][ T28] ? bit_wait+0xd0/0xd0 [ 2286.348099][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 2286.355130][ T28] ? bit_wait+0xd0/0xd0 [ 2286.359311][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 2286.365790][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 2286.370872][ T28] ? bit_waitqueue+0x30/0x30 [ 2286.375734][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 2286.380975][ T28] do_get_write_access+0x5c9/0xe00 [ 2286.386211][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 2286.392303][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 2286.398558][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 2286.404994][ T28] ? __might_sleep+0xe0/0xe0 [ 2286.409631][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 2286.410749][ C0] virtqueue callback for ffff888143260a00 (ffffffff84a02460) [ 2286.415423][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 2286.422684][ C0] virtqueue interrupt with no work for ffff888143260800 [ 2286.422701][ C0] virtqueue interrupt with no work for ffff888143260600 [ 2286.422978][T14338] Added buffer head 0 to ffff888143260a00 [ 2286.428419][ T28] ext4_dirty_inode+0xcb/0x110 [ 2286.452948][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 2286.458793][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 2286.463922][ T28] file_update_time+0x187/0x1a0 [ 2286.469605][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 2286.474768][ T28] ? do_wp_page+0x4ce/0x34d0 [ 2286.479386][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 2286.485686][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2286.490762][ T28] do_page_mkwrite+0x153/0x3f0 [ 2286.495828][ T28] do_wp_page+0xd4d/0x34d0 [ 2286.500279][ T28] ? folio_put+0xd0/0xd0 [ 2286.504592][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 2286.509654][ T28] ? __rwlock_init+0x150/0x150 [ 2286.514550][ T28] handle_mm_fault+0x1306/0x4a50 [ 2286.519535][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 2286.524773][ T28] ? numa_migrate_prep+0x350/0x350 [ 2286.529947][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 2286.535615][ T28] do_user_addr_fault+0x736/0x12d0 [ 2286.540749][ T28] exc_page_fault+0x64/0x100 [ 2286.545400][ T28] ? clear_bhb_loop+0x40/0x90 [ 2286.550109][ T28] asm_exc_page_fault+0x26/0x30 [ 2286.555095][ T28] RIP: 0033:0x7f3fbda7c6e2 [ 2286.559536][ T28] RSP: 002b:00007ffe910b6180 EFLAGS: 00010202 [ 2286.565704][ T28] RAX: 00007f3fbb8dc000 RBX: 000055555f823ea0 RCX: 0000000000000004 [ 2286.575835][ T28] RDX: 0000000000000c92 RSI: 000055555f82e0e0 RDI: 0000000000000010 [ 2286.583922][ T28] RBP: 00007ffe910b6680 R08: 000055555f82e188 R09: 0000000000000093 [ 2286.592015][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe910b64c0 [ 2286.600010][ T28] R13: 00007ffe910b62b0 R14: 585858582e7a7973 R15: 00007ffe910b6200 [ 2286.608077][ T28] [ 2286.611162][ T28] INFO: task syz.9.3035:19426 blocked for more than 143 seconds. [ 2286.618977][ T28] Not tainted syzkaller #0 [ 2286.624026][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2286.632794][ T28] task:syz.9.3035 state:D stack:27048 pid:19426 ppid:14075 flags:0x00004004 [ 2286.642410][ T28] Call Trace: [ 2286.645724][ T28] [ 2286.648781][ T28] __schedule+0x15ae/0x4660 [ 2286.653517][ T28] ? asan.module_dtor+0x20/0x20 [ 2286.658772][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2286.663947][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2286.669881][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2286.676043][ T28] schedule+0xbd/0x170 [ 2286.680156][ T28] io_schedule+0x80/0xd0 [ 2286.684497][ T28] bit_wait_io+0x11/0xd0 [ 2286.688857][ T28] __wait_on_bit+0x9f/0x2c0 [ 2286.693451][ T28] ? bit_wait+0xd0/0xd0 [ 2286.697660][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 2286.703208][ T28] ? bit_wait+0xd0/0xd0 [ 2286.707390][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 2286.712256][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 2286.717401][ T28] ? bit_waitqueue+0x30/0x30 [ 2286.722088][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 2286.727320][ T28] do_get_write_access+0x5c9/0xe00 [ 2286.732890][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 2286.738895][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 2286.747090][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 2286.755695][ T28] ? ext4_reserve_inode_write+0x1a7/0x2a0 [ 2286.761445][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 2286.767044][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 2286.777339][ T28] ext4_dirty_inode+0xcb/0x110 [ 2286.784329][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 2286.790469][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 2286.795677][ T28] file_update_time+0x187/0x1a0 [ 2286.800751][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 2286.806022][ T28] ? filemap_fault+0x103c/0x1540 [ 2286.811048][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 2286.816904][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 2286.823383][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2286.829570][ T28] ? __pte_offset_map+0x20d/0x280 [ 2286.834699][ T28] do_page_mkwrite+0x153/0x3f0 [ 2286.839539][ T28] handle_mm_fault+0x1a2c/0x4a50 [ 2286.844542][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 2286.849546][ T28] ? numa_migrate_prep+0x350/0x350 [ 2286.854875][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 2286.860207][ T28] do_user_addr_fault+0x736/0x12d0 [ 2286.865395][ T28] exc_page_fault+0x64/0x100 [ 2286.870015][ T28] asm_exc_page_fault+0x26/0x30 [ 2286.874940][ T28] RIP: 0033:0x7f490c6727a9 [ 2286.879752][ T28] RSP: 002b:00007ffdc1ef2610 EFLAGS: 00010202 [ 2286.886092][ T28] RAX: 0000001b33e23000 RBX: ffffffff816bfd12 RCX: 0000001b33e22ff8 [ 2286.894247][ T28] RDX: 0000001b33a24220 RSI: 0000000000000008 RDI: 00007f490d555720 [ 2286.902289][ T28] RBP: 00000000000001e5 R08: 00007f490ca10000 R09: 00007f490ca12000 [ 2286.910290][ T28] R10: 00000000816bfd16 R11: 000000000000000d R12: 00007f490ca26128 [ 2286.918342][ T28] R13: 00000000000008c4 R14: ffffffff816bfca1 R15: 00007f490d555720 [ 2286.926366][ T28] ? __down_trylock_console_sem+0x181/0x1f0 [ 2286.933105][ T28] ? is_console_locked+0x2/0x20 [ 2286.938009][ T28] [ 2286.941151][ T28] INFO: task syz.8.3038:19438 blocked for more than 144 seconds. [ 2286.951268][ T28] Not tainted syzkaller #0 [ 2286.956927][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2286.965853][ T28] task:syz.8.3038 state:D stack:27048 pid:19438 ppid:12343 flags:0x00004004 [ 2286.976099][ T28] Call Trace: [ 2286.980313][ T28] [ 2286.983416][ T28] __schedule+0x15ae/0x4660 [ 2286.988072][ T28] ? asan.module_dtor+0x20/0x20 [ 2286.993074][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2286.998250][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2287.004377][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 2287.009625][ T28] schedule+0xbd/0x170 [ 2287.013858][ T28] io_schedule+0x80/0xd0 [ 2287.018224][ T28] bit_wait_io+0x11/0xd0 [ 2287.022664][ T28] __wait_on_bit+0x9f/0x2c0 [ 2287.027209][ T28] ? bit_wait+0xd0/0xd0 [ 2287.031400][ T28] out_of_line_wait_on_bit+0x13c/0x190 [ 2287.037027][ T28] ? bit_wait+0xd0/0xd0 [ 2287.041210][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 2287.046216][ T28] ? do_raw_spin_lock+0x11f/0x2b0 [ 2287.051275][ T28] ? bit_waitqueue+0x30/0x30 [ 2287.055965][ T28] ? do_raw_spin_unlock+0x121/0x230 [ 2287.061207][ T28] do_get_write_access+0x5c9/0xe00 [ 2287.066559][ T28] jbd2_journal_get_write_access+0x10c/0x140 [ 2287.072677][ T28] __ext4_journal_get_write_access+0x208/0x6d0 [ 2287.078871][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 2287.086355][ T28] ? __might_sleep+0xe0/0xe0 [ 2287.091001][ T28] ext4_reserve_inode_write+0x205/0x2a0 [ 2287.096649][ T28] __ext4_mark_inode_dirty+0x13f/0x720 [ 2287.102322][ T28] ext4_dirty_inode+0xcb/0x110 [ 2287.107111][ T28] ? __ext4_expand_extra_isize+0x400/0x400 [ 2287.112985][ T28] __mark_inode_dirty+0x2cc/0xc90 [ 2287.118486][ T28] file_update_time+0x187/0x1a0 [ 2287.123480][ T28] ext4_page_mkwrite+0x1f9/0x11a0 [ 2287.128552][ T28] ? filemap_fault+0x103c/0x1540 [ 2287.134220][ T28] ? mapping_seek_hole_data+0x1330/0x1330 [ 2287.139983][ T28] ? pte_alloc_one+0x3b6/0x540 [ 2287.144888][ T28] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 2287.151206][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 2287.156603][ T28] do_page_mkwrite+0x153/0x3f0 [ 2287.161424][ T28] handle_mm_fault+0x1a2c/0x4a50 [ 2287.166562][ T28] ? handle_mm_fault+0xe6/0x4a50 [ 2287.171564][ T28] ? numa_migrate_prep+0x350/0x350 [ 2287.176818][ T28] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 2287.182247][ T28] do_user_addr_fault+0x736/0x12d0 [ 2287.188431][ T28] exc_page_fault+0x64/0x100 [ 2287.193464][ T28] asm_exc_page_fault+0x26/0x30 [ 2287.198375][ T28] RIP: 0033:0x7f3807072809 [ 2287.203016][ T28] RSP: 002b:00007fffbeb237d0 EFLAGS: 00010202 [ 2287.209118][ T28] RAX: 0000001b2f724000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 2287.217676][ T28] RDX: 0000001b2f723ffc RSI: 00000000003ffde8 RDI: 00007f3807f55700 [ 2287.225970][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f3807412000 [ 2287.234157][ T28] R10: 00007f3807f55700 R11: 0000000000000000 R12: 0000000000000000 [ 2287.242261][ T28] R13: 000000000000000a R14: ffffffff81321df0 R15: 00007f3807f55720 [ 2287.250262][ T28] ? fpregs_assert_state_consistent+0xb0/0xe0 [ 2287.256459][ T28] [ 2287.259890][ T28] [ 2287.259890][ T28] Showing all locks held in the system: [ 2287.267826][ T28] 1 lock held by khungtaskd/28: [ 2287.280520][ T28] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2287.291647][ T28] 2 locks held by getty/5529: [ 2287.296677][ T28] #0: ffff88802d2670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2287.306840][ T28] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 2287.317096][ T28] 3 locks held by syz-executor/5764: [ 2287.323504][ T28] #0: ffff88802e3b60a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 2287.333821][ T28] #1: ffff88814e490510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 2287.343705][ T28] #2: ffff88814e494990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 2287.353773][ T28] 2 locks held by kworker/0:8/14338: [ 2287.359070][ T28] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2287.370092][ T28] #1: ffffc90003a67d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2287.382210][ T28] 3 locks held by syz.9.3035/19426: [ 2287.387509][ T28] #0: ffff8880210ed720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 2287.400092][ T28] #1: ffff88814e490510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 2287.409991][ T28] #2: ffff88814e494990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 2287.410730][ C0] virtqueue callback for ffff888143260a00 (ffffffff84a02460) [ 2287.420117][ T28] 3 locks held by syz.8.3038/19438: [ 2287.427196][ C0] virtqueue interrupt with no work for ffff888143260800 [ 2287.427212][ C0] virtqueue interrupt with no work for ffff888143260600 [ 2287.434248][T19445] Added buffer head 0 to ffff888143260a00 [ 2287.439587][ T28] #0: ffff8880210e94a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 2287.462971][ T28] #1: ffff88814e490510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 2287.472872][ T28] #2: ffff88814e494990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 2287.482867][ T28] 2 locks held by dhcpcd/20109: [ 2287.487730][ T28] #0: ffff88807823ac20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 2287.501839][ T28] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 2287.514345][ T28] 2 locks held by dhcpcd/20110: [ 2287.519230][ T28] #0: ffff88807e6bc130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 2287.529267][ T28] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 2287.540459][ T28] [ 2287.543124][ T28] ============================================= [ 2287.543124][ T28] [ 2287.552403][ T28] NMI backtrace for cpu 1 [ 2287.556787][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2287.564016][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2287.574179][ T28] Call Trace: [ 2287.577481][ T28] [ 2287.580429][ T28] dump_stack_lvl+0x18c/0x250 [ 2287.585136][ T28] ? __wake_up_klogd+0xd9/0x100 [ 2287.590004][ T28] ? show_regs_print_info+0x20/0x20 [ 2287.595225][ T28] ? load_image+0x420/0x420 [ 2287.599768][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2287.604738][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2287.610911][ T28] ? load_image+0x420/0x420 [ 2287.615428][ T28] ? wq_watchdog_touch+0xef/0x170 [ 2287.620473][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2287.626556][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2287.632555][ T28] watchdog+0xf59/0xfa0 [ 2287.636731][ T28] ? watchdog+0x1e1/0xfa0 [ 2287.641105][ T28] kthread+0x2fa/0x390 [ 2287.645193][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2287.650230][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2287.654830][ T28] ret_from_fork+0x48/0x80 [ 2287.659347][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2287.663948][ T28] ret_from_fork_asm+0x11/0x20 [ 2287.668735][ T28] [ 2287.672913][ T28] Sending NMI from CPU 1 to CPUs 0: [ 2287.678171][ C0] NMI backtrace for cpu 0 [ 2287.678183][ C0] CPU: 0 PID: 1099 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 2287.678199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2287.678209][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2287.678234][ C0] RIP: 0010:arch_stack_walk+0x4/0x190 [ 2287.678253][ C0] Code: 6c 54 00 31 c0 e6 d4 48 c7 c7 a0 60 15 8d 48 89 de 5b 41 5e 41 5f 5d e9 2a e3 67 09 cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 <55> 48 89 e5 41 57 41 56 41 54 53 48 83 ec 68 49 89 cf 49 89 d4 48 [ 2287.678267][ C0] RSP: 0018:ffffc900046a76d8 EFLAGS: 00000246 [ 2287.678280][ C0] RAX: ffffc900046a7700 RBX: 1ffff920008d4edc RCX: 0000000000000000 [ 2287.678292][ C0] RDX: ffff888023ae8000 RSI: ffffc900046a7700 RDI: ffffffff81762710 [ 2287.678304][ C0] RBP: ffffc900046a7780 R08: ffffc900046a7a70 R09: 0000000000000000 [ 2287.678314][ C0] R10: ffffc900046a7790 R11: fffff520008d4f50 R12: 0000000000000001 [ 2287.678324][ C0] R13: 00000000000000f0 R14: dffffc0000000000 R15: ffffc900046a7790 [ 2287.678335][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2287.678348][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2287.678360][ C0] CR2: 0000555aef0f5168 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2287.678376][ C0] Call Trace: [ 2287.678382][ C0] [ 2287.678388][ C0] stack_trace_save+0xaa/0x100 [ 2287.678409][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2287.678426][ C0] ? mark_lock+0x94/0x320 [ 2287.678445][ C0] ? __lock_acquire+0x1336/0x7d80 [ 2287.678462][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2287.678481][ C0] kasan_set_track+0x4e/0x70 [ 2287.678524][ C0] __kasan_slab_alloc+0x6c/0x80 [ 2287.678542][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 2287.678568][ C0] kmem_cache_alloc_node+0x1af/0x310 [ 2287.678589][ C0] ? __alloc_skb+0x103/0x2c0 [ 2287.678609][ C0] __alloc_skb+0x103/0x2c0 [ 2287.678636][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 2287.678660][ C0] ? process_scheduled_works+0x975/0x1600 [ 2287.678680][ C0] process_scheduled_works+0xa60/0x1600 [ 2287.678712][ C0] ? worker_attach_to_pool+0x370/0x370 [ 2287.678734][ C0] ? assign_work+0x3cc/0x5d0 [ 2287.678754][ C0] worker_thread+0xa5e/0xfe0 [ 2287.678778][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2287.678795][ C0] ? __kthread_parkme+0x71/0x1c0 [ 2287.678814][ C0] kthread+0x2fa/0x390 [ 2287.678829][ C0] ? pr_cont_work+0x550/0x550 [ 2287.678847][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2287.678862][ C0] ret_from_fork+0x48/0x80 [ 2287.678879][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2287.678894][ C0] ret_from_fork_asm+0x11/0x20 [ 2287.678921][ C0] [ 2287.939156][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2287.946134][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2287.953358][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2287.963432][ T28] Call Trace: [ 2287.966808][ T28] [ 2287.969750][ T28] dump_stack_lvl+0x18c/0x250 [ 2287.974450][ T28] ? show_regs_print_info+0x20/0x20 [ 2287.979657][ T28] ? load_image+0x420/0x420 [ 2287.984177][ T28] panic+0x2ca/0x720 [ 2287.988085][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2287.992600][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 2287.998173][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 2288.003561][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2288.009745][ T28] watchdog+0xf98/0xfa0 [ 2288.013917][ T28] ? watchdog+0x1e1/0xfa0 [ 2288.018355][ T28] kthread+0x2fa/0x390 [ 2288.022445][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2288.027479][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2288.032076][ T28] ret_from_fork+0x48/0x80 [ 2288.036505][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2288.041109][ T28] ret_from_fork_asm+0x11/0x20 [ 2288.045903][ T28] [ 2288.049205][ T28] Kernel Offset: disabled [ 2288.054861][ T28] Rebooting in 86400 seconds..