last executing test programs: 20m56.563273287s ago: executing program 32 (id=483): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 3m3.497507808s ago: executing program 33 (id=8317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}}], {0x14}}, 0x3c}}, 0x0) 2m49.092438605s ago: executing program 0 (id=8369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 2m48.938469436s ago: executing program 0 (id=8370): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 2m47.983563366s ago: executing program 0 (id=8374): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 2m47.784081703s ago: executing program 0 (id=8376): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m47.720840987s ago: executing program 0 (id=8377): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) 2m46.564148533s ago: executing program 0 (id=8383): socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r2], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m46.312259894s ago: executing program 4 (id=8384): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) 2m45.981835013s ago: executing program 4 (id=8386): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m45.91986966s ago: executing program 4 (id=8387): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2m43.216222796s ago: executing program 4 (id=8392): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) unlinkat(r3, &(0x7f0000000700)='./file0\x00', 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r4, 0x4010744d, &(0x7f0000000080)=0xc) 2m42.263318059s ago: executing program 4 (id=8393): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) 2m41.643297192s ago: executing program 34 (id=8338): r0 = socket(0x4, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x2, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 2m36.239478485s ago: executing program 4 (id=8404): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x8c, 0x44, 0x1, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x4, 0x48}, @nested={0x71, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1e2fc71ca09de48d27f4529f315fa1aeab3018edc394863c02db7fc8d899cc5ec2cfc8a94d"]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m32.558815376s ago: executing program 3 (id=8407): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 2m32.533549106s ago: executing program 3 (id=8408): openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40600, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="88000000", @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf254b00000008000300", @ANYRES32=r1, @ANYBLOB="0c009900f1a20d51420000000400091a020000000400ec0006009800f9ff00003c002c8008000000070000000800000005000000080000000000000008000000020000000000008008000000000008007700070000000400ff0000002ef84db2f00ff0c21a10d1cd41b577d7e5a299adadc2da471818c17ba31e6de5f2a0494a3b1831276dd9f72f3b73b2811eea2351fb99a116ef13cc19a06ec9daba5966ad2c7fff8c89f14b7ef1033e149b9b4498b5d66abfcd89acf7415c030f"], 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x80) mq_open(&(0x7f0000000300)='3\\m\xcd\xef\xf2%D\xc2\xd8\x1b\x15y]\x0e\x1f\xd9\x16\x94\xf4\f\x12z_\xce\xf6\\\xaaz\x99PZ\xc3.\xce\xdc\xd1{\xb9\xb5\x96\xea\xab\x8eR\xff\xd3H\"B\xa0\x89\x94\x1a\x9e\x16\x04\x19\x8a&\xc1\x88y\x12\xba\xac\x9c\xdb\x12%\xcbbY\xd1\xe4o\xbb \x05\x00\x00\x00\x00\x00\x00\x00\xd5Gf\xc4\xb1G\xd4\xa4k\x1d\x15{\xe6\x86\x95\xa0\xd7?\x99\xa1\x88t\xaf`N\xfe<\xb9\xbd\xc1\xd1\x06\xac\xe2\xa9z\xd1\x00\xad\xa7\xe0\xc3Y#\xf1\a\xef\xc5\x05D{\xc5\xf1U=!\x8f\n*\xe1\xd2@\x15\xff \xe7\xca\xa07\xeft\xc4I\xa1\xb8\x9bUW\xceX\xd0\xf69MK\x11\xa1\x8c\xa5.`\xfd\xbek\xa4\xca\x80\xaf\x10\x9e\xc9\xeb6\xaf;\x1f\xa8\xf1\x95\x9b\x11:\xe5\xc9\vM[y\xcb#z\x99)\x02\xeeQ\x85N\xdb\xcb\xffl\'\x1dC\xfe3\xb4\v\xd3r\xa8\x7f\x82\xaa[\xf9\x19L\x8f\xaa\xd3a\x95\x9d\xe0\xae\xaf\x8f\x05\xb3\xcd\x8e\x17\xb7\xebK\xe5P\x16\xe3\xc0\xfc\xbe\xc8\xc2', 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f0000000800)=[{0x63, 0xc810, 0x0, 0x0}], 0x1}) 2m31.361706874s ago: executing program 35 (id=8383): socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r2], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m31.354869559s ago: executing program 3 (id=8413): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, &(0x7f0000000080)=0xc) 2m30.528884725s ago: executing program 6 (id=8415): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)={0xc0, 0xa1, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000200)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)={0xc0, 0xa1, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000640)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)={0xc0, 0xa1, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000840)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000940)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a00)={0x34, &(0x7f0000000a40)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000c00)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m30.188035434s ago: executing program 3 (id=8416): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m28.535295341s ago: executing program 3 (id=8424): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2m28.159879327s ago: executing program 3 (id=8418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 2m27.377152344s ago: executing program 6 (id=8420): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 2m27.311822218s ago: executing program 6 (id=8421): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x3a) 2m26.786686746s ago: executing program 6 (id=8425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a40)={0x28, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 2m26.785848486s ago: executing program 6 (id=8426): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2m26.648474698s ago: executing program 6 (id=8427): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m25.682935238s ago: executing program 7 (id=8433): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x3a) 2m25.111682183s ago: executing program 7 (id=8434): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2m22.414677191s ago: executing program 7 (id=8435): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x8c, 0x44, 0x1, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x4, 0x48}, @nested={0x71, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1e2fc71ca09de48d27f4529f315fa1aeab3018edc394863c02db7fc8d899cc5ec2cfc8a94d"]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 2m22.392924692s ago: executing program 7 (id=8436): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r2, 0x4010744d, &(0x7f0000000080)=0xc) 2m21.45473676s ago: executing program 7 (id=8437): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2m21.355416967s ago: executing program 7 (id=8438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m20.343157003s ago: executing program 36 (id=8404): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x8c, 0x44, 0x1, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x4, 0x48}, @nested={0x71, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1e2fc71ca09de48d27f4529f315fa1aeab3018edc394863c02db7fc8d899cc5ec2cfc8a94d"]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m12.887667027s ago: executing program 37 (id=8418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 2m11.521918908s ago: executing program 38 (id=8427): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m6.321716624s ago: executing program 39 (id=8438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m4.375043673s ago: executing program 9 (id=8453): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 2m4.078389763s ago: executing program 9 (id=8468): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m48.696376356s ago: executing program 40 (id=8468): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 7.295859467s ago: executing program 5 (id=9821): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)="310a42d7", 0x4) 7.1197598s ago: executing program 5 (id=9824): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.983999253s ago: executing program 5 (id=9831): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x25, 0xe5, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/83, 0x53}]}, &(0x7f00000000c0)="e6cb69ed0800319138c38c5ceb19412412ce5ca0dde7134eefa0c7dfcc002cd4332e038c98", 0x0, 0xffffffff, 0x40, 0x800003, 0x0}) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)="18000000140081044e81f782db44b9042d02200802110000", 0x18}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) r2 = memfd_create(&(0x7f0000000280)='-E\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2va}knh\x02\x00)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xdde)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN.%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x6) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000380), 0x4a0001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0x12) sendfile(r7, r10, 0x0, 0x101) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r11, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r12, 0x40f, 0x8000003d) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000"], 0x68}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="8ee60d00669ca108000000000000004bc862998c7625f2f9f1fbcfb8471a7e8bd0ae5900b978c6ce9c4572b05164b2c937e92bafc39e39ccdd43259a57b08fd9a26178ec91ad9d34b7934d8fd2417b4b5a86af5ea442c6ed0c9c55871b9bab6f51a7024ac01490be2cb630b58b", @ANYRES16=r5, @ANYBLOB="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"], 0x158}}, 0x4044040) r13 = dup(r2) execveat(r13, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$SG_SET_RESERVED_SIZE(r13, 0x2275, &(0x7f0000000040)=0x5) 5.695453983s ago: executing program 5 (id=9836): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00') 5.600260692s ago: executing program 1 (id=9838): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000014) unshare(0x6020400) fsopen(0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @multicast}, 0x10) r4 = syz_open_dev$usbfs(0x0, 0x1, 0x14080) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000040)=0x9) 5.430580027s ago: executing program 8 (id=9840): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x7, 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r0, 0x0, 0x0, 0x6, 0x0, 0x5, r2}]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.223854716s ago: executing program 8 (id=9841): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x268082, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x8, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) connect$packet(r2, &(0x7f00000000c0)={0x11, 0x9, r3, 0x1, 0x7, 0x6, @link_local}, 0x14) read$FUSE(r2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') 2.215893878s ago: executing program 8 (id=9845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010427bd70000a0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="05003400000000002400fe"], 0x64}}, 0x0) 1.907913671s ago: executing program 5 (id=9849): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341", 0x2}], 0x1, &(0x7f00000007c0)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x4}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.907741604s ago: executing program 8 (id=9850): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.907544156s ago: executing program 1 (id=9851): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='0', 0x1) 1.805259349s ago: executing program 1 (id=9853): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x1, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f00000004c0)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x29, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f0000000080)) r9 = socket(0x29, 0x5, 0x0) setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000140)=0xc, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000b31000/0x4000)=nil, 0x4000) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000001c0)='#^\xe7P[.,[*^\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff) munlockall() r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x400448ca, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r7) 1.759921055s ago: executing program 5 (id=9854): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 1.11499515s ago: executing program 8 (id=9860): close(0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(0x0, 0x1) syz_fuse_handle_req(r0, &(0x7f0000004380)="afe1b0a996775868391181b871ea09afb8639d886d7e6a93208bfaf110777da0ad6d2e8fffe28bf0ab778be95c1af09b7899d8488b6c93dcb70dae27dfd4f440a78a8d75d483a0e9bbb38e8c0293a89e82eda33d11bc7c3c7e974db0ce4596d96e5ee43d78a2919e6b3f930b523c479082ebd81214d52843acb4288a9c79a6fe84e8109eac84adf1af416d5765c5dd698df54864b59a09357ba6d3594e30a66f6cf9c96e472a954e5c766a6e5d2b18374eca2c040736bd7cac53bb7055b888514f2284f177f02b493e6a6ca8a3add98a5d5992a76bfb7d034287c6a773a50a007adb2a872ced0874ba8fa23996b6b676252912c92aa464cfcd13a50edc39ecc5e07c44d88bf22cc045583a2cd4276ebbb8e9170213feafb4750aff54f15481c2d5eb62539ef5f2b9e1de797073eb2696f599e4a931ad8793ef6ef4de0f3e02841ba538f3d1cb658be3c7b9504c2e3632c7765d40bfe0454e1c6f3fad17124e658bb338ecd28c1edd547030a730cab24a9fc424b8b15ceef0fc275d2eb602076f132f10d2a023703606514286d19de42bdcbbcc2dd63e5bc6221c36cae9879a84c9abd671f509dcd7f4f249843639f46d7f19201f886813e939ddf89ec5fae30cc3fc87903ab05ffa2ac75bba0ae725605cb9198ef8c77d63a83b35309df1b27fa5805120f8739ebbdbb0d9d514e5aa7481198ff181ca559d1ae8ea28c9cf5e9ed1468469d269f315eb5213bec1f55eb247d8b567964a351b8103477654ed443a1de61b31aba918614f9bab10b36bfd31a0bd8fd245005d348c1d9e26836ea09d8adb4f097aa3696fa27fa6aa47a4363116c6fa63449d5c1c8fad49564f4d84e6147720f3b717497f5f9d27b09821c107c9283ca66b3d1f3f684e62411eae6a5fb8ce54239b3c4c9a678711b949a79e7f08eb779c3f34002844b578225ac5dd8cb56931a1b077281679b1a8385e91261d716ce8e72d72455a6f42a218cacd1363cc645798c119077e29cde84adb0d8b66f79b0e9b6663f40caf5351f834b0e6aa496c57c613a6b82da516939bf67a5b4074eee506ba02a81961ae092805bb54176e4a87d61c1619b11385564853e207ad68fd4a8c9f90e59f69a6c269774a46aed5cbc92c57c1937486eeabea242e78a194b08e872c28ac5ae815421fb6bd6c770cca44bbbf4e7517c32e5634dd3ae4c6c79da57aaedf723683488d82e3346a17ad5a9f8556715ea274c9da1d7ebd083cd02b7a33f166ccbe8a5ef218051ae397f22b7cda9b5ef6001ee2bfd52c454560f89c7885d022cf3c085b6520f84c2cba2541df4968a5bfe3effd05c55091f7a50212a9f081f5c54485b95fbf4badf6b1d0aa59bb734c4f9acba0e9d3e27c18b228f01c08f4af0904a687fb9f4de27d9e96086eafbfd799fb5df1d9229519dbc266169a2d056f6cdb49dce17c2290ff24ec4a5fdb1096d99d0caa334061fa28d4308e69103f2fff538f0b231c4237eecba9ef8e853dff8b1066c461cd509caba267ee5ac2f4d5253cafbb1e49dbd6ad1e22e6d087facbe4870bc1eb57046032ed909cbcc58614eb9000ae561f043bd8b50c4c0778e3a1f45d8996074f7741e6b2ef62c235d08b8cdfa5bc3f2f0ac2f82622eb5c25dc0ac71b59356fa584024b835482fdc1dbf992821dbc094344cde2d03c48a6f2283a9272bcae06adc52e7d42811fa424e6c4c14e9138535413d4770b1d23066108cb7525e1ad6af8e10db4bfd90c51c5f8928bb8e92ee108814ddbd1817c13b845414a718bb7414547eb62868a0ea5ade3c0ffddb0d61434e872a5912c97b74aa52d85e68df1153f0d49ad7091d5328d4e55f149dfafc3fe0d745df53888272b2a47ad29207756ff2acd9ee666b78bf5e9320b3a63b8bc967d3746f50fbfb46e68ad02ca52425715c43716210d08ec8b89a3e5453614e9f1125877a0371773d9db9fc6ff1557f6aa010ce940b357d8a609c9415e044cff7e9abeefbb7eb98f19f763ff12cd51a6635d83648dd6b172894e8965b0319c542563f079574e993ebc0f511055b073f1e67d2894a96de2c355d29b7115ba4a31e9e130452b9d21a5fb95446736186c55d2121c1047379757f7c7d489ff83d3c56f12c4a4a7eb55e7ed23ef93aa9aa8030e4dc7add46ef902e4da157e52cdf1d8399273a687c76a570d53a3a3eedab69c64c6e018a8a3d68739406a710b9fecb160ed04fa7e1bea90a6d99ef0bde9c982a57a252786e555901bdb344b53b01c17a4e2a76c34efd4674acc822e692c3ddb51af58f9ac0ba9edb9ddd5884ca734bf7aa6c35b026c6de4fc226341f1f069554beb3b2da82fa128b208dbf3560b397339e2f0d7933042dd16a594d9a7226619501a466057a9d97b83ef1ca0afceec9a823a0aa28773a7386d55321170721cf3588695de0af30b5fc4d1fae110040693f62255dea0f5745aa7f6c6f9faacc199a92bc7e2358d5f56758621240cf2579b60940a42333393bd34028ff0e334f3794a725d48f929e816c3e6b571b067a4eb48dc2f97e91d15ec2b1e6c883a01d39f9e6810b627a76c8e3ed214f135272e0aaf393eeb35cba9379004b58f53b809e4926da2c4d38b6caf89396456d9ebcbd104f256f7a803f90dd65d25a5d70bf2615e90442df64294824b0acb60de3f4072c4c455e92644c3f492e663bb163ebc74ccc35434ecd79ffa325214ac20a1b36762bf4930663056cc52fab60513ce61389e0680d73e4bbb38c648b1cf3d60dffc9687613b70165e47e430f2e7f3f125025fb9502caf906033c2113a7848855b0e06b1fd35152167e43b6498faf667fbb095020c9692f8ce1b63703724fe47ab4034671b8361ef1d794ed98634f25d99bbf8e4f99819e5a61d0bbd673f217f8819dc3becb5969268a52614f60b2124588a697170d905cce06abec79082438533bd80ceae3b53484c6723823a4b0aa27c001dcb498623cc22a1ff658eb513277e78f7571249af287259d378cc0ef182efd91ecba02b65a205dde7ecdb7873c9e32bf4d236cbf5609aa2d5eeaeba3b94dca539a4dcfd8dfcccfc35fc586f5a02ef1c61d1bdd24fd76845d3d043d296e92359e288e7d015bbc172a786450ab52fe5061a4673b4c612b2060448761bfb7b3b31acef810d4619031725b9b93e8e27b09fa8221553981c745d5625522c68b1daa7f941dea564b64a19ed1657ef052fdb349285d99fc6d5d5e4c1f84adf476460fc5a7ac8722c3a6aa0686a793502dff81bf50286810bc11d14733ecfd7b13e73e09f7119f6a9a1f22d7721f6071028b74eadbe4f10cf7926886085c08a2e051fdde848b1e4c9b39fc2ee45a7463d623ddd95280e7db9b78a56a48f5571e907a0c9eb549f0b73973f364088e97d75956e38b54e6289497a8e31fc547516794668829404885e7361eed875eae0e4e16a9f8bde779011c937345c01eb8cab2863e7828a0395905dbc87f17f38261cbd61bb274b397f90d30fc898cfcd2c1c15a89144965e7369f75b95fd11d0a9555a3cedfff602d9a7510a0e95fe8875cf7d4b9c7d63fc57012b3817a6af6ad273cd1c193c67437244d5ba839c14a31b6bbd67687a3b135d17ea810d9b2d73c7873f2761f784bcb638898a824fd15b526d2728e157d5462f35116bf4e025adb6175c0d4c79919ca72e1810862d92101bed6f0bd94c51b954e2089e958af898a9bed2da45534404cb12d3e62ced9b747999a4d61d36c18fc0276260d495140bce76f171207d04d709359edc3c664b36940ba1ce20d7a9252867562ae44cf88cd6b89bad04e8504240dca7c0c8125aaf35ea865e6abc5728fdb3deecd933c18fa0a0d3a6dcded99c4d44b9d0165a6a4b47189fad3bd9f3eb65e532d9ecb084ab459fe5f9d38616cd2a68c991fe6bebc08be4ea36e126a4d20067a41d06439256f8cfd26c68fd4e20cfa7d9937eea76f23c685df175fcc54e138800972d2b2259add19ba26d82c0aec7232a9c8712e3a38ec3027b580de705c9fd528ca2a7098b9ae195d8c88979ea99c85285c84a0578da1fc936b446bb70420be5622a7343eaff201c4b3f6cd22b581bb7dd8256834278f12332d6a0ce0d76f74d3e87955815aa7c789cf212394710cce9807447d4e3e280b56452bfee1dcdb3d79009b387413ea434581dcd96f936f7e17cb245d1b91705bdbb8aed300126098f4782b65702f6734cc43b00e465a5b76a68437dc2170189a7736fc83379a8c1dcf90656e353c8bdad0de5f0275675ae5fc00be905f9c2bee64e7b688a9f2b9ecab8697355cca46c4e8ac2c09e34e4c99ed87a082e1f022033baeff201e4b12c636085fd239d0ffaca1819c13645dee797c92ffcf84f76c3792de704e13418be7fc09a99e28df9e800f07b4e10c1ad1b076022a1307e5a172c31562b86d1ebc500692b78b5d7eba73be3731b892db518c669fe3e165f55bc8885c57b7f2f43429cc478afc94bcab818842a5a5c8545ff82cf8d58f0ab83d2a45af3c758687d2137dd609af58bfa3f8e01dee45c954ce5c35dbd9bc4a32eaeaf0da46f87ebdb3e957707aade7b78e9df030ecef1fc14faefbc351e2bd09b9a4a69fafd8fa58d08183ffe5788918ef2fbc7f0749f3dae479d195f518d775f698ccde58f154fbdcbd8440d0376dcb25d6bea36ccaaca7bd35e92cac4238bb62bcbb94619e89ce7c2b6780c3b97cfbfd5c71099c98f4f296afd7abbef496ab5afa805f20cad9b2a11c0847ab3a73dee5cbd4db3fdd10c9de14f7d2b85596d72e31fe2171f21102852390ea3b5f7294d2d84942ea54b5578c5587e54a26bf2404999b1df386a9db5b5aff3942197c431f15ff507862947526ddf24d65c53580fcd34719212602682978c257796e38a8c18ab6ce46db1f230cfa600286612cfaac47543479a549ea13247edd00185c3c44bf9ef7a779adf06931c18cd8aed566d9c1cb6a3dddb67f4613876518d34d54c14363c7c34449f7176898c87d23b6b1243574d87df916cf086d8a6cde792cc1c93c2a99b7c884b479f488a89dfbd8ee16f19f6d867ced1d30b1ae04821c61afe03ef06b92b7e8e53522bf9f6ce529858674937d8cc423710056403d09f43122862bd8ef51962224a89d2cc6e80ad69fcd5aa39b53d9cfcaa679ab9f18051fedac16de1a2b65405d9c72ab316d2d4fa4981e873873089fc82dc25de7c773f7bec0a62b272167e49854d7fdef08c700e88ab1e46f9e9ba4106d22d79bdb9ea4c400fbdafc0a2d30e4289f7aec6a8143ea1b94901976a3e9db73138d279de3dfd77e6a7e95fd1c80ab7689b452ce761db7f4cd0bf6af9a6dd22a35795c897d5b70f85204711006221677731c6cf4239b7a8f16f2a04d59cc2c1a954ea267c5e36aaa1443532e475de52b3e39642918ac17acba067182267638add164f35685a3578c17327c4c963e2cbc3c74fff73f261b4496cea0449d10b976c9129507f60e18b542e3aab7709f07fad1fc3555e16a27cb430a21d0b6920ee22cedfcfe45c5fc768bfe105600818d008f9657d140b0829a57ab4fb8b523bc8904036efaea194d01091813c167fb2677f56e1cec6e2f42a941054be1fb1a85a46d1f99298ca5f6a45f9d144caf55823554f58ff17275c3060f2d5cfe1b3fc607c979a64bed1626c254e78a6e3c0b76210b08c74e5d07e4711978722c96f7dc0665c3067c4ab93ccdf42d7469441f94a01c72ef11cefe48443f7b3597127e4b8f39ca85cb3ccc5d0545d5398b5c8cd9168aa7c50394c08fa20e48ccf8683171099a1b498c7544e0c74ba1adeb3026ef6a6f6e4da22bfc8d295771705a0315844043918dd33493f76eb85e91f49e9428220f818fc8bea7324e2a1b61a3de4fa775754ecaae82a33353e5ecb1ea557b1c037ad57bf8d723ecfe05e9848d332dc23eae94287432e0a0b19ac34e07a1aa68ef38936054246f9fb1a476a4d7e4e90b8cb83278011d80a57e722066e2142fc322c123f793f02c634157eaf0fe1c7a0bfbe0f40d95116021d9e42958b23e78dc38b30ae6d39b81ae45499d5a830df429388ef2c04b460bd89a9c30a9da013f4cb3f454dbcd8d2333fea253bc100d647cb787b85e8dc6930f442f2b7562d806a6eb0a2625171f26e7e1955f4bed65280feca3a235b8e37c4efa109435d97913a7facdfce9bf9a3d49adc332514849024124e3bbf7cb0dace4df2dc881867c299cf75ca095a17ebf230e5168abfbb0baaecd60a1f955ac195146917d49b8f1b36ae5bed977d34a9a4fed6a677ee8609e18fd687e3c01ac3ea0042082361acb6fe9fea3ae8b679a5e3547804b17eb186b1121f1ddab56523d24e2a54f3e2576fce3ed78fd88597b354bf878a4011d842311f000ce224d69fca2ff4f6831017f998a8b9238c55e5593fa898523d21dd5fb01d03c1205c0ecd892b75d5d5ec28e347c2ea69bdf2e6a88b5199fd82294f486d3a9c39d7e587373d7838bc6906b659fa9d1ad17a9d10389991e617c2990929e0e6064b072022d45e93cd92fcd77e8eb490ae56af092b0c7ed587282b0dcd1551a0dcdc4692478d6fb3ddb479b9557ddb26d97d2ddb6b945f1145a636fa3f4c7b8c6b1e27bc27dcbb468d39ae3f87899c1296535a58e163bcb5f8f5e75a1ea62cd0500f865fd283b618b9f0842af0f5008885bb61057fe2957f77590ec49304fa02d903181cffb91ccfda6223fa67f408d10b371965a0d948b4f0e16f30c652e62592c339c1afcae8921e53a9e568890268cc58cc6f96156eab8d8c3f5742f31d8392fbaacf84ef645954cd33b83b83eda3a63ac763a308c9a373e023543bb89b134511eacecaf10073749f6ca36c4b7a9a4cdcb317e84e6b52f7e7cb4ace5618b8ac5baacbb3125637d37ca3e68096ec6b16b4b840d93db8b32da23b2db7c1213c7fdb5a636ae895279991c5cb21c1e090e629991f657bcc5ad918757a8f9c4953a15f6609449c89a104fcfd637aa9bb2b2fce6f98ae955bd59c82f785910787664dbaaee88fa6525dbf3c537fec5826d8af1eab7f02a61e924cdf0509ba15074fc4443711e04d30885c007176862cd370cde25e2f07f2ea01e56421df0511e0dedb2bcc732735edb1cbc47cfe4bfd00421329416e6a54c9bf39954230ef4a19d8efb018e6328115b0b4b1eeeb0e419307be7bb124756744dd5d054be43eec960dc180ef2d867556f3f866c27bc309f673a21e9781811fb087feb4b044e69d6a7ba72e008ab6b27d5f487bf7e34466ffd1dc38b08f24f3baee8a119d804530b4f02d3610c60e62682e89028f6310ff830ca63ccd410cf63a2e251bbb15148ffb7dcabd0e2156a2f40416431f2cd3893a63251cfd7642de2d70b9c696068c5b8fc17636ef926d0d292867985a7513469836bdfdc3daf50e7cda86ea4a20953df902b5f6b1f30d715afb46c6985a87953be1cdf120a3a63f5f752e92fab1c201b93f8ff49f850cc338783a93a3a968a12476313683aed7e4ebe5a6b31f9aa578cd5052998813f2216d83afbdc03225efd29e9351b597c8c7018d0ac27581f008436d0bd698b1de91361e3f81ffb3d846bea145dae68f06cf2946d5679689ceaa2f8937dcdf464c6ab2cfdba79a19cee80537d3739d979f245d0bec88d33ad661ea92cc8708357f894c0fbcbdc9d80433d45a2af499b3cfd706db0ead57cb1cac12c91d900a98320c69afce92bf27608f2948597dd4f76fc1f5ebece18dee83ec42e6becfe7b088981501ec5cac179d78c6a6752f76c8cf26c056cba2c611363583171118602ec38a36156c4cb66be176cedf2b4f15166ed9cb3314bc4128f7d0e9dd4133fb643f30e163722cf5755a7d2ce80dfe8d4d1b6798d4fa311835b0f0087231e01e13552a42aa22fa330bf3cc517d6ffe198bba10b3ba62b5c77a472d3e96e3ca6396e5f8505e8d7c38fbaec479104f6a069fa3c8921b82606005c5b92599cc124e0ec5f380f50a5166e286ceed43b3794b4a9b1529eb641dd88964e7c1f5e7eb59d018b5d512bcda73e17b6a69a80e7eab7d9cc367aa1507a208c49a4096db1a21202825cbfe41d0281bd51320b5e7b5128cb8e39468647fd6a5c5cb0ad1765a088ba9ed213e66e4c4d25583bd1e1f6f5f0ca44286a01389ddf2475169f3dd85f6852b375449595b06d610ba412954df596d24feb95c302761cbfaddf3989d3a706cb862dee17634e815b232340ef93eaa3d426da09a2a083281d0ea3fa31ffc91fa5a4590ff6d54a72b7b4926c56ff4bb1322d104c8956c1ac848edce067420f126fc150cfa80fb104f10830e0c88036e0ad5446e7ef0882dfbfc67030805eff01262dc40cdaf2509c9a6e92f57cf50c026f2b0d927a829ec0c5a541f3fdd3c8d3d6b0898d9a92450fe78368654469d8322981a42e0d4315b63e9bfd7757fa62f8a0ed3e1a62c15bb7b4e823c8570c1aa27ef516ca066d759f7c5049c5791c7fc5ef76ab26f0ffe99a58dca03dd4514f1a8af07f80dc63a1e9b343f158aa527a4df96f052425ddd61e2251cac94e87739c55c311363f6b026228323835fb95f788b798ead87eef04fc15a24264d167232df2eae4dcac304226b01f518f3dee1ef32d5586e8cf7d71fd0fa9791b4d296c560201b9c5ba13366de60fe6138ddd0227e9e58e670144cd8fc3e17cdfa568a365f00c84820b6c224071ffa61503f8368ad3ab6a8e0aae5fe887929501007923c0b7afab03bffc75abab9af5c6137ee641650345bfb21db35dfd8abd18e3df6c7474d1fc2fa8e709f982bb7cd691faa33691ae878d05c0d2d092763d027df8546d352a1ef64078c1a8034731c0897bfd06f1a704676f2ccbae0c5b34850d0dc1297732155178de788fd8c4fc0eac99fe50a5d8519b5e8391b9a069de7230951a441a3fd9b674affe5267d66b287af099761ea273054331fcbfb35a3d86a14cbec306f0df61207c595148d64f69ca71ffddbcc4fecb4af88d677eebf1337623eee93755cf88216d5c96722648b6e3ac81bf1987565f5b7a70a7698a228b518373d477c57b417987617d3da32b06a35c6f6efc2deaabf549fd7d63a54095b8ee9c1ab1ada51d2e9dd67cf73b8cc700d988d97500bfa1e8fa6f3d603e075cb55f20286e754fdf1683ca47ecda7b246ae2e1dc45c591943f69ebfb01b3ac3566d8db409ae886769598a0829712b6bd516cf98a9af936e9f891056c16a64caec5958e5c220f497efa0ded81435e4f2258c5d197da00cfbff3cdde6013413a307884dc17d25a065eee7449d0559dd1366ca38dbb21584a3c77c057a33a9b9eb2349593187b356c8962c8d169100d2fb6a321029e49a217d0510a06a23df90423bb199c7ade3c55db2eecd230bb7044ab95f071d8484c79e565f78b7ef84cff873e5748d7823abd85ca6ddca8e9a1b01e21590c2b6d52adfa308e83872f80080c7dd67a5249d10a86ec3770bd9cb5347e73c7d1c9603896749a909ae6266046d9f06d3f8aeb3ec679b52f58554d56419539b7871a0dfcec5123d4139e2959aa108d0e58e1d8da57ad0051aa6dfaa7d8a03dad63beec05669124f58128153c13c726853da13a460ce6e66e4cb1070c6c502dbbd6e36f67befb9cbd5beb1c00673301c54a5679d63068a6fdb7511b8027cc3b1bcb6dc659d71c1fb144ec5682a05f2ec100c2e5405e8ab549686afa7c6c283e319c94cf7facdbb63e66edc444922cb4744a79d05f0390aed999df7729f7b0cda96a32432fc7b46ec0a6829a89e28530a0349c0821f2fe956449e35553657a77d7dd578a053ff0c7c71d9ff31728615ad01c132c4cb3ce7689dfdc5d6ee9d28e6da4372738ac557f69aeffa98df8aaa252b1192f2fc0b7d1e7370d1c6f173a86822c4902318e21e435c6c1df6fd1a318ad8bfedf893e65d88551413154505d7cec6d450fc3764cf70ddf0e033b3d819ed9b8156c9112952f0b627863a1f31490bf5eb2b1e9e7f5d155abacff0e5911bf5dd43568af46d57f56f538b58724d225e391902c1b7a6fd282f8b914b7c58ea5166c66465cd07ca4c033ebff0d3ff1cc184b9bcc1c2a472bbaa57f01372b21bdcc9dce9408fe96e993cfba3c1376eaf2961c248a901ef75e8d39ad20a16a603599b13c8c497ea628a8a0fc207bb05f28ce6b65e4526e7abefd07848ee415aa001ae0489cf68ea2c9a9203dad12cddb826d7e55c5341d14c87d2c1dc55192a4ec1ad882638d13db42519a5a6fee298eab143b0955991526bf5d662f4a0bf65591cf59ae73cfc7488fc0deb0638f8df2fc14d8f9417d836ee46c0c70c14950ce23f74ea7261a5a527467bb6bc347a9b1597093285df315bd35b9f188d8ba7bf381c03a39e18863ad1539aae90340a382d93667e22244f06aa992e52e926fa7b1d07ed57a6a83c87ac17cf0e360ed68032c08d5486bbcedf56225e8592812c46676f9c985d1c8f310b5687bac8b6d9758ed94affd3653048b44458edbbaa34678a03cfc85fabb08b5f505de553d487da58c0107879663559e577d85077ec0caef10298140a632ed13b427580200eb1c53dbacafbfc839c234d13096f4823f4f824fcce75eb4c8d4cbee625ca347cd02505e565d2ba23b3172abe8e434e452735a3eefa0332b4887aa9b0940bb82bf866e2d6f26e3a3b3c08f0fad60d1c79be0e8d31827f535f54c09f8c43869efbb1bdf3bd82e75efc26fd9cc235754f9cbf24c140a89b2582ebae7946cc70df7ffe4f275ae194c7b7fba47d2ebfb7a58d4f3bc206535477b60aad8e00ad41672e2cd14ae4dc3e53dd0c0bf78a07b042eae7ef6dce42e31e98e421d00d49e5bfb2b376515d5bc8b7fb9bed46651157abae48f46a6c1da089c7d2883d2398e4462df756c6c41dd28a1652adb48edcef31cf2d712cbe8675dd476d00a5e9b698414bec286f76bb54d6cd07a08de59a659393c1cda10796b33c8b6d0bbd890eac307f92a32285be161fec3c02349280f7d44b23d47fa0f82e97520e16a2b4cd504a0a4a19c289a45949589b34697928ddfaf985986891db7b3da32668a383feb0df495677346516dfd39530a147724e20dcb826007fa146a920303ada23b667db743134a9d604f13df5b6d557a44fa9c1119ee4576b1df5c9d0c32b84a18b19c5f09d6d7efd1095e86c50edf8f44fc8ba55fd3b0f11bece4e9ff98334517341c4e4bd86fd877600c8c34ff3b87d6f26d7706671eb935500f9e13d356d41e014a18bb5e67588d1ea40c5d9cd7d216c76810a40a9155db31cc37ac69effc4849d13fd074f5f32b9130d31ab27c423046e48196e9254980c0f197165fe12f714a0621b6d0850a6eb0669186cd4214f1577c95765e71ca7f24e1dc2cf789c539278d3cc5b267b948f187295cdabf48e7b05443d57b83c1c5a9dafbc772ad776dffa49ecacbfc353328dd7ffdac7737bacf346d4d3427a7302da022b60e1ef876d3c829dacdd2be5e47300ccd4486498b1f9b5209b67d897d10823f27e317e07395b61ec0905c62e5d8b30050ccc1c7f7799363fafabfaaf808fe948c0108d8538d567b507ba2fcc93a62d4bc6f620f787e99060a3e2473d2f12254aaffe6dfe4adf05566fb5984674e9c7b1dce2b39b0098b92fdaf0a97bdc26", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x7f, 0x7, 0x2, 0x8, {0x0, 0xf, 0x5, 0xfffffffffffffff2, 0x8, 0x4, 0x2, 0x5, 0xfffffc00, 0x8000, 0xffe, r2, 0x0, 0x0, 0x2}}, {0x0, 0x64b82d24ba95f80}}}, 0x0, 0x0}) 1.063760284s ago: executing program 2 (id=9861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100000ffffdd0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a310000000009000300030000000000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) recvmsg(r0, &(0x7f0000000600)={0x0, 0x8, 0x0}, 0x0) 855.190797ms ago: executing program 2 (id=9862): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/ftrace_dump_on_oops\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 827.496496ms ago: executing program 1 (id=9863): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) r3 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x4}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r8, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$vcs(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000000}, 0xc) writev(r8, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 695.908972ms ago: executing program 2 (id=9864): shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x7, 0x1ff, 0x0, 0x80000001, 0x0, 0x0, 0x150a}) 399.917957ms ago: executing program 2 (id=9865): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000300)) 362.97596ms ago: executing program 1 (id=9866): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 163.922429ms ago: executing program 2 (id=9867): fsopen(&(0x7f0000000040)='qnx6\x00', 0x0) 111.6838ms ago: executing program 1 (id=9868): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 94.657353ms ago: executing program 8 (id=9869): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="060008050000010b1eaf"], 0xa) 0s ago: executing program 2 (id=9870): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0)=0x5, 0x4) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='dummy_udc.0', 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) migrate_pages(0x0, 0xfc, &(0x7f0000000080)=0xffffffffffff6df7, &(0x7f0000000240)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 74.435674][ T5575] cgroup: Unknown subsys name 'net' [ 74.685343][ T5575] cgroup: Unknown subsys name 'cpuset' [ 74.731873][ T5575] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.382591][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.572009][ T5589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.576309][ T5589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.591662][ T5589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.593540][ T5589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.594276][ T5589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.672201][ T5589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.685230][ T5589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.686334][ T5589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.688883][ T5589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.690316][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.815078][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.845419][ T4904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.854346][ T4904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.867440][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.874171][ T4904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.876318][ T4904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.878407][ T4904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.879732][ T4904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.879947][ T4904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.887243][ T4904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.600097][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.600283][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.600602][ T5597] bridge_slave_0: entered allmulticast mode [ 80.606565][ T5597] bridge_slave_0: entered promiscuous mode [ 80.633928][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.634117][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.634252][ T5587] bridge_slave_0: entered allmulticast mode [ 80.636036][ T5587] bridge_slave_0: entered promiscuous mode [ 80.643296][ T4904] Bluetooth: hci0: command tx timeout [ 80.659262][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.659566][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.659804][ T5597] bridge_slave_1: entered allmulticast mode [ 80.664825][ T5597] bridge_slave_1: entered promiscuous mode [ 80.689025][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.689332][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.689560][ T5587] bridge_slave_1: entered allmulticast mode [ 80.695041][ T5587] bridge_slave_1: entered promiscuous mode [ 80.712022][ T4904] Bluetooth: hci1: command tx timeout [ 80.745825][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.746012][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.746146][ T5591] bridge_slave_0: entered allmulticast mode [ 80.747918][ T5591] bridge_slave_0: entered promiscuous mode [ 80.799265][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.799577][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.799811][ T5591] bridge_slave_1: entered allmulticast mode [ 80.802883][ T5591] bridge_slave_1: entered promiscuous mode [ 80.846835][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.868787][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.869186][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.869500][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.869762][ T5596] bridge_slave_0: entered allmulticast mode [ 80.874674][ T5596] bridge_slave_0: entered promiscuous mode [ 80.884522][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.916074][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.929476][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.929702][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.929847][ T5596] bridge_slave_1: entered allmulticast mode [ 80.934261][ T5596] bridge_slave_1: entered promiscuous mode [ 80.952134][ T4904] Bluetooth: hci3: command tx timeout [ 80.965727][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.013817][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.033580][ T4904] Bluetooth: hci2: command tx timeout [ 81.051379][ T5597] team0: Port device team_slave_0 added [ 81.075880][ T5587] team0: Port device team_slave_0 added [ 81.080389][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.084825][ T5597] team0: Port device team_slave_1 added [ 81.108349][ T5587] team0: Port device team_slave_1 added [ 81.113214][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.135368][ T5591] team0: Port device team_slave_0 added [ 81.626995][ T5591] team0: Port device team_slave_1 added [ 81.682002][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.682022][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.682048][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.709669][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.709684][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.709708][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.716437][ T5596] team0: Port device team_slave_0 added [ 81.719345][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.719357][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.719380][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.747829][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.747842][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.747866][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.752963][ T5596] team0: Port device team_slave_1 added [ 81.773978][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.773991][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.774028][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.822310][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.822324][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.822348][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.877466][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.877481][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.877505][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.932522][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.932537][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.932562][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.012981][ T5597] hsr_slave_0: entered promiscuous mode [ 82.015476][ T5597] hsr_slave_1: entered promiscuous mode [ 82.069914][ T5587] hsr_slave_0: entered promiscuous mode [ 82.072517][ T5587] hsr_slave_1: entered promiscuous mode [ 82.074375][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 82.074487][ T5587] Cannot create hsr debugfs directory [ 82.121892][ T5591] hsr_slave_0: entered promiscuous mode [ 82.123766][ T5591] hsr_slave_1: entered promiscuous mode [ 82.124708][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 82.124731][ T5591] Cannot create hsr debugfs directory [ 82.405136][ T5596] hsr_slave_0: entered promiscuous mode [ 82.406359][ T5596] hsr_slave_1: entered promiscuous mode [ 82.407349][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 82.407372][ T5596] Cannot create hsr debugfs directory [ 82.713717][ T4904] Bluetooth: hci0: command tx timeout [ 82.792557][ T4904] Bluetooth: hci1: command tx timeout [ 83.031248][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.037453][ T4904] Bluetooth: hci3: command tx timeout [ 83.074006][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.088449][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.111848][ T4904] Bluetooth: hci2: command tx timeout [ 83.129661][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.139180][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.166982][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.184718][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.222773][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.320086][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.345917][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.361663][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.396040][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.401013][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.437345][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.458154][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.486945][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.645295][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.686574][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.705618][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.749896][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.764650][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.805715][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.832980][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.875672][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.000645][ T5587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.029343][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.041112][ T5587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.074727][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.078984][ T5587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.099950][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.110803][ T5587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.136116][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.215765][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.316602][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.365061][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.365209][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.399683][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.427894][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.428567][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.498420][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.539384][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.554494][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.554586][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.609919][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.610047][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.671193][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.704781][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.728875][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.729097][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.791685][ T4904] Bluetooth: hci0: command tx timeout [ 84.797599][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.797759][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.871901][ T4904] Bluetooth: hci1: command tx timeout [ 84.899443][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.951064][ T3060] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.954858][ T3060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.022646][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.022756][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.112540][ T4904] Bluetooth: hci3: command tx timeout [ 85.192747][ T4904] Bluetooth: hci2: command tx timeout [ 85.891394][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.325776][ T5597] veth0_vlan: entered promiscuous mode [ 86.356084][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.390191][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.448023][ T5597] veth1_vlan: entered promiscuous mode [ 86.533143][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.626015][ T5597] veth0_macvtap: entered promiscuous mode [ 86.676470][ T10] cfg80211: failed to load regulatory.db [ 86.727997][ T5596] veth0_vlan: entered promiscuous mode [ 86.733968][ T5597] veth1_macvtap: entered promiscuous mode [ 86.754615][ T5591] veth0_vlan: entered promiscuous mode [ 86.799687][ T5596] veth1_vlan: entered promiscuous mode [ 86.818581][ T5591] veth1_vlan: entered promiscuous mode [ 86.850531][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.869879][ T5587] veth0_vlan: entered promiscuous mode [ 86.872728][ T4904] Bluetooth: hci0: command tx timeout [ 86.890816][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.936984][ T2401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.944134][ T2401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.952309][ T4904] Bluetooth: hci1: command tx timeout [ 86.954523][ T5587] veth1_vlan: entered promiscuous mode [ 86.963100][ T2401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.979852][ T2401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.085115][ T5596] veth0_macvtap: entered promiscuous mode [ 87.129728][ T5591] veth0_macvtap: entered promiscuous mode [ 87.163825][ T5596] veth1_macvtap: entered promiscuous mode [ 87.202207][ T4904] Bluetooth: hci3: command tx timeout [ 87.224015][ T5591] veth1_macvtap: entered promiscuous mode [ 87.275288][ T4904] Bluetooth: hci2: command tx timeout [ 87.397127][ T5587] veth0_macvtap: entered promiscuous mode [ 87.407458][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.440607][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.464339][ T5587] veth1_macvtap: entered promiscuous mode [ 87.473031][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.499407][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.510902][ T2401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.510923][ T2401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.544856][ T1305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.567771][ T1305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.591176][ T1305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.618327][ T1305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.634878][ T1305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.655625][ T1305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.659333][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.659925][ T1305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.660772][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.660787][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.708196][ T1305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.802362][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.306714][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.315420][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.358580][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.422045][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.734354][ T5740] evm: overlay not supported [ 88.875634][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.875652][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.065651][ T212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.065667][ T212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.244412][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.244431][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.400643][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.400659][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.590757][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.590777][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.854912][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.854929][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.212885][ T5748] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.251247][ T5803] process 'syz.3.21' launched './file0' with NULL argv: empty string added [ 94.003960][ T37] audit: type=1800 audit(1785936801.875:2): pid=5803 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.21" name="/" dev="fuse" ino=4 res=0 errno=0 [ 95.457217][ T5861] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 95.819731][ T37] audit: type=1800 audit(1785936803.705:3): pid=5850 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.37" name="/" dev="fuse" ino=4 res=0 errno=0 [ 96.555126][ T5897] capability: warning: `syz.1.58' uses 32-bit capabilities (legacy support in use) [ 101.975052][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 106.069551][ T6155] overlayfs: failed to resolve './file2': -2 [ 107.016495][ T6184] overlayfs: failed to resolve './file2': -2 [ 109.067514][ T6227] mmap: syz.0.194 (6227) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.838382][ T37] audit: type=1326 audit(1785936817.705:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 109.838427][ T37] audit: type=1326 audit(1785936817.725:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 109.893602][ T37] audit: type=1326 audit(1785936817.725:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 109.894178][ T37] audit: type=1326 audit(1785936817.785:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 109.894218][ T37] audit: type=1326 audit(1785936817.785:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 109.894257][ T37] audit: type=1326 audit(1785936817.785:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 109.894515][ T37] audit: type=1326 audit(1785936817.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 109.895020][ T37] audit: type=1326 audit(1785936817.785:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 109.895283][ T37] audit: type=1326 audit(1785936817.785:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6255 comm="syz.1.206" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 113.563032][ T6352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.817068][ T6594] kvm: emulating exchange as write [ 120.817140][ T6594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.398632][ T6647] overlayfs: failed to resolve './file1': -2 [ 122.791232][ T6652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.259726][ T6694] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.466957][ T6701] overlayfs: failed to resolve './file1': -2 [ 125.821148][ T6731] overlayfs: failed to resolve './file0': -2 [ 126.310528][ T6746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.397057][ T6749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1998365705 (63947702560 ns) > initial count (22508260192 ns). Using initial count to start timer. [ 126.697496][ T6760] fuse: Bad value for 'fd' [ 127.670031][ T6785] overlayfs: failed to resolve './file0': -2 [ 128.150843][ T6803] overlayfs: failed to resolve './file0': -2 [ 128.784560][ T6834] overlayfs: failed to resolve './file0': -2 [ 129.011769][ T37] audit: type=1326 audit(1785936836.895:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6838 comm="syz.0.448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e0b0e0d9 code=0x7ffc0000 [ 129.012275][ T37] audit: type=1326 audit(1785936836.905:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6838 comm="syz.0.448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93e0b0e0d9 code=0x7ffc0000 [ 129.078767][ T37] audit: type=1326 audit(1785936836.965:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6838 comm="syz.0.448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e0b0e0d9 code=0x7ffc0000 [ 129.079005][ T37] audit: type=1326 audit(1785936836.965:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6838 comm="syz.0.448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e0b0e0d9 code=0x7ffc0000 [ 129.079605][ T37] audit: type=1326 audit(1785936836.965:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6838 comm="syz.0.448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93e0b0e0d9 code=0x7ffc0000 [ 129.099953][ T37] audit: type=1326 audit(1785936836.985:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6838 comm="syz.0.448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e0b0e0d9 code=0x7ffc0000 [ 129.102782][ T37] audit: type=1326 audit(1785936836.985:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6838 comm="syz.0.448" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e0b0e0d9 code=0x7ffc0000 [ 129.494246][ T6856] overlayfs: failed to resolve './file0': -2 [ 130.024787][ T6880] overlayfs: failed to resolve './file1': -2 [ 130.365204][ T6894] [ 130.453884][ T5597] do_umount: task=syz-executor[5597] propagate_mount_busy()!=0 [ 130.454537][ T5597] do_umount: task=syz-executor[5597] propagate_mount_busy()!=0 [ 130.691363][ T6897] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.033228][ T6910] overlayfs: failed to resolve './file1': -2 [ 131.748484][ T1305] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.157679][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.178107][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.187337][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.199395][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.210344][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.566473][ T6938] overlayfs: failed to resolve './file1': -2 [ 132.627302][ T1305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.725320][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.725445][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.036193][ T1305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.396850][ T6957] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.418932][ T1305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.392220][ T4904] Bluetooth: hci2: command tx timeout [ 135.093801][ T1305] bridge_slave_1: left allmulticast mode [ 135.093936][ T1305] bridge_slave_1: left promiscuous mode [ 135.133126][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.405955][ T1305] bridge_slave_0: left allmulticast mode [ 135.405993][ T1305] bridge_slave_0: left promiscuous mode [ 135.406234][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.166753][ T7029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.471632][ T4904] Bluetooth: hci2: command tx timeout [ 136.522543][ T7038] fuse: Bad value for 'fd' [ 136.906708][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.045172][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.095491][ T1305] bond0 (unregistering): Released all slaves [ 137.154056][ T7051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.212556][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 137.420634][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.425383][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.425636][ T6928] bridge_slave_0: entered allmulticast mode [ 137.439423][ T6928] bridge_slave_0: entered promiscuous mode [ 137.531612][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.531940][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.532089][ T6928] bridge_slave_1: entered allmulticast mode [ 137.540010][ T6928] bridge_slave_1: entered promiscuous mode [ 137.607387][ T7065] fuse: Bad value for 'fd' [ 137.828970][ T6928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.852953][ T6928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.551626][ T4904] Bluetooth: hci2: command tx timeout [ 138.740441][ T7103] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 138.958029][ T7092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 138.998694][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 139.019556][ T6928] team0: Port device team_slave_0 added [ 139.199065][ T6928] team0: Port device team_slave_1 added [ 139.253772][ T7117] fuse: Bad value for 'fd' [ 139.834062][ T7132] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.161026][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.161042][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.161088][ T6928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.228126][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.228136][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.228149][ T6928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.572955][ T7134] md/raid:md0: not clean -- starting background reconstruction [ 140.572973][ T7134] md/raid:md0: invalid chunk size 0 [ 140.572984][ T7134] md: pers->run() failed ... [ 140.632468][ T4904] Bluetooth: hci2: command tx timeout [ 141.061643][ T1305] hsr_slave_0: left promiscuous mode [ 141.101602][ T1305] hsr_slave_1: left promiscuous mode [ 141.119428][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.119526][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.189642][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.189669][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.539699][ T1305] veth1_macvtap: left promiscuous mode [ 141.539958][ T1305] veth0_macvtap: left promiscuous mode [ 141.540289][ T1305] veth1_vlan: left promiscuous mode [ 141.575871][ T1305] veth0_vlan: left promiscuous mode [ 141.891940][ T7199] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 142.024431][ T7199] md: could not open device unknown-block(1,0). [ 142.064380][ T7199] md: could not open device unknown-block(1,1). [ 142.104815][ T7199] md: could not open device unknown-block(1,2). [ 142.277973][ T7199] md/raid:md0: not clean -- starting background reconstruction [ 142.277992][ T7199] md/raid:md0: invalid chunk size 0 [ 142.278003][ T7199] md: pers->run() failed ... [ 142.690144][ T7228] overlayfs: missing 'lowerdir' [ 143.332260][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 143.403048][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 143.650546][ T7255] overlayfs: missing 'lowerdir' [ 143.948552][ T6928] hsr_slave_0: entered promiscuous mode [ 143.950830][ T6928] hsr_slave_1: entered promiscuous mode [ 143.958248][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 144.540712][ T7280] overlayfs: missing 'lowerdir' [ 145.034223][ T7291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.121793][ T7298] fuse: Bad value for 'fd' [ 145.672154][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4 [ 145.714384][ T7312] overlayfs: missing 'lowerdir' [ 145.780504][ T6928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.828442][ T6928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.833189][ T6928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.930667][ T6928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.943618][ T6928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.040709][ T6928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.054591][ T6928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.098039][ T7324] fuse: Bad value for 'fd' [ 146.110072][ T6928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.440351][ T7337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.573961][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.607428][ T6928] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.623136][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.623887][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.670546][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.670780][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.428261][ T7370] fuse: Bad value for 'fd' [ 147.465980][ T6928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.744680][ T7380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.213491][ T6928] veth0_vlan: entered promiscuous mode [ 148.229483][ T6928] veth1_vlan: entered promiscuous mode [ 148.286583][ T6928] veth0_macvtap: entered promiscuous mode [ 148.309815][ T6928] veth1_macvtap: entered promiscuous mode [ 148.398898][ T6928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.440612][ T6928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.480770][ T1305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.496020][ T1305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.496804][ T1305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.498591][ T1305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.268370][ T7412] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.317405][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.317423][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.430758][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.430776][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.184738][ T7441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.241486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.261472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.271475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.281468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.291485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.301472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.311476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.321477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.341475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.351472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.152910][ T5688] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 153.361593][ T5688] usb 2-1: Using ep0 maxpacket: 8 [ 153.405228][ T5688] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 153.405256][ T5688] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 153.405275][ T5688] usb 2-1: config 0 has no interface number 0 [ 153.405320][ T5688] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.405345][ T5688] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.405369][ T5688] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.476279][ T5688] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 153.476308][ T5688] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 153.476326][ T5688] usb 2-1: Product: syz [ 153.476340][ T5688] usb 2-1: Manufacturer: syz [ 153.564747][ T5688] usb 2-1: config 0 descriptor?? [ 154.360472][ T5688] usb 2-1: USB disconnect, device number 2 [ 155.613491][ T7486] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 155.808224][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 155.808844][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 155.813259][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 155.817726][ T7511] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 155.817758][ T7511] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 155.817796][ T7511] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 155.822840][ T7511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.835563][ T7511] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 155.885754][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 155.888819][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 155.892009][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 155.895007][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 155.898021][ T7511] wlan0 speed is unknown, defaulting to 1000 [ 157.284759][ T7541] siw: device registration error -23 [ 157.936971][ T1305] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.949907][ T5600] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.158385][ T5600] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.171797][ T5600] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 158.171824][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.171844][ T5600] usb 5-1: Product: syz [ 158.171858][ T5600] usb 5-1: Manufacturer: syz [ 158.171871][ T5600] usb 5-1: SerialNumber: syz [ 158.355765][ T5600] usb 5-1: 1:1 : unsupported format bits 0x20000 [ 158.398986][ T7565] netlink: 256 bytes leftover after parsing attributes in process `syz.1.692'. [ 158.399007][ T7565] netlink: 80 bytes leftover after parsing attributes in process `syz.1.692'. [ 158.531748][ T5600] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 158.531773][ T5600] usb 5-1: 2:1 : unsupported format bits 0x20000 [ 159.553279][ T37] audit: type=1800 audit(1785936867.405:20): pid=7594 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.700" name="local" dev="configfs" ino=26181 res=0 errno=0 [ 159.654181][ T5600] usb 5-1: USB disconnect, device number 2 [ 160.556903][ T7626] 9p: Bad value for 'wfdno' [ 163.299177][ T7682] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.579072][ T7706] loop2: detected capacity change from 0 to 7 [ 164.662317][ T7706] Dev loop2: unable to read RDB block 7 [ 164.662347][ T7706] loop2: AHDI p1 p2 p3 [ 164.662367][ T7706] loop2: partition table partially beyond EOD, truncated [ 164.762449][ T7706] loop2: p1 start 1601398130 is beyond EOD, truncated [ 164.762477][ T7706] loop2: p2 start 1702059890 is beyond EOD, truncated [ 164.808997][ T5749] Flush: task=udevd[5749] dev=loop2 state=2 [ 164.919911][ T5749] Teardown: task=udevd[5749] dev=loop2 state=2 [ 166.126432][ T4904] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 166.126468][ T4904] CPU: 0 UID: 0 PID: 4904 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.126491][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.126503][ T4904] Workqueue: hci0 hci_rx_work [ 166.126543][ T4904] Call Trace: [ 166.126558][ T4904] [ 166.126567][ T4904] dump_stack_lvl+0xe8/0x150 [ 166.126596][ T4904] sysfs_create_dir_ns+0x271/0x2a0 [ 166.126620][ T4904] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 166.126647][ T4904] ? rt_spin_unlock+0x163/0x200 [ 166.126678][ T4904] kobject_add_internal+0x62c/0xce0 [ 166.126711][ T4904] kobject_add+0x163/0x240 [ 166.126733][ T4904] ? rt_spin_unlock+0x157/0x200 [ 166.126763][ T4904] ? __pfx_kobject_add+0x10/0x10 [ 166.126793][ T4904] ? get_device_parent+0x370/0x3a0 [ 166.126819][ T4904] device_add+0x3fa/0xb80 [ 166.126843][ T4904] hci_conn_add_sysfs+0xd5/0x210 [ 166.126875][ T4904] le_conn_complete_evt+0xfef/0x1580 [ 166.126907][ T4904] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 166.126931][ T4904] ? lockdep_hardirqs_on+0x7a/0x110 [ 166.126953][ T4904] ? rt_mutex_slowunlock+0x219/0x460 [ 166.126980][ T4904] ? skb_pull_data+0xf0/0x200 [ 166.127005][ T4904] hci_le_enh_conn_complete_evt+0x189/0x490 [ 166.127030][ T4904] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 166.127056][ T4904] hci_event_packet+0x67a/0xf10 [ 166.127086][ T4904] ? reacquire_held_locks+0x117/0x1a0 [ 166.127114][ T4904] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 166.127134][ T4904] ? __pfx_hci_event_packet+0x10/0x10 [ 166.127164][ T4904] ? rt_spin_unlock+0x157/0x200 [ 166.127200][ T4904] ? hci_send_to_monitor+0xe2/0x590 [ 166.127225][ T4904] hci_rx_work+0x3ee/0x1020 [ 166.127258][ T4904] ? process_one_work+0x7fd/0x1480 [ 166.127279][ T4904] process_one_work+0xaaf/0x1480 [ 166.127323][ T4904] ? __pfx_process_one_work+0x10/0x10 [ 166.127340][ T4904] ? do_raw_spin_lock+0x12b/0x2f0 [ 166.127374][ T4904] ? assign_work+0x3cf/0x5d0 [ 166.127398][ T4904] worker_thread+0xb05/0x10d0 [ 166.127440][ T4904] kthread+0x388/0x470 [ 166.127464][ T4904] ? __pfx_worker_thread+0x10/0x10 [ 166.127483][ T4904] ? __pfx_kthread+0x10/0x10 [ 166.127507][ T4904] ret_from_fork+0x514/0xb70 [ 166.127536][ T4904] ? __pfx_ret_from_fork+0x10/0x10 [ 166.127570][ T4904] ? __switch_to+0xc89/0x1420 [ 166.127598][ T4904] ? __pfx_kthread+0x10/0x10 [ 166.127626][ T4904] ret_from_fork_asm+0x1a/0x30 [ 166.127667][ T4904] [ 166.129359][ T4904] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 166.129401][ T4904] Bluetooth: hci0: failed to register connection device [ 166.171367][ T7736] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.330835][ T7769] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.756323][ T5749] Flush: task=udevd[5749] dev=loop2 state=2 [ 169.847693][ T5749] Teardown: task=udevd[5749] dev=loop2 state=2 [ 173.296854][ T5749] Flush: task=udevd[5749] dev=loop2 state=2 [ 173.391588][ T5749] Teardown: task=udevd[5749] dev=loop2 state=2 [ 173.632351][ T7845] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 174.069462][ T37] audit: type=1326 audit(1785936881.955:21): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.069756][ T37] audit: type=1326 audit(1785936881.955:22): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.089778][ T7859] Flush: task=syz.4.792[7859] dev=loop2 state=2 [ 174.125556][ T37] audit: type=1326 audit(1785936882.015:23): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.125746][ T37] audit: type=1326 audit(1785936882.015:24): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.127340][ T37] audit: type=1326 audit(1785936882.015:25): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.127445][ T37] audit: type=1326 audit(1785936882.015:26): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.127573][ T37] audit: type=1326 audit(1785936882.015:27): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.127915][ T37] audit: type=1326 audit(1785936882.015:28): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.128026][ T37] audit: type=1326 audit(1785936882.015:29): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7858 comm="syz.1.793" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47fbbfe0d9 code=0x7ffc0000 [ 174.303435][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.791'. [ 174.324333][ T7859] Teardown: task=syz.4.792[7859] dev=loop2 state=2 [ 174.921526][ T5720] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 175.081338][ T7887] UDC core: g1: couldn't find an available UDC or it's busy [ 175.104626][ T5720] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 175.136939][ T5720] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 175.136967][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.136985][ T5720] usb 2-1: Product: syz [ 175.136993][ T5720] usb 2-1: Manufacturer: syz [ 175.137000][ T5720] usb 2-1: SerialNumber: syz [ 175.497625][ T7894] gadgetfs: bound to dummy_udc driver [ 175.517812][ T7628] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 175.960876][ T7901] md/raid:md0: not clean -- starting background reconstruction [ 175.960894][ T7901] md/raid:md0: invalid chunk size 0 [ 175.960905][ T7901] md: pers->run() failed ... [ 176.732597][ T5577] usb 2-1: USB disconnect, device number 3 [ 176.758200][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 176.794532][ T7628] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 176.865160][ T7628] ath9k_htc: Failed to initialize the device [ 176.895693][ T5577] usb 2-1: ath9k_htc: USB layer deinitialized [ 177.155299][ T7923] md/raid:md0: not clean -- starting background reconstruction [ 177.155312][ T7923] md/raid:md0: invalid chunk size 0 [ 177.155319][ T7923] md: pers->run() failed ... [ 177.244583][ T4904] Bluetooth: hci0: hcon ffff88804032c000 sent 1 < count 65279 [ 177.256411][ T5681] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 177.461719][ T5681] usb 4-1: Using ep0 maxpacket: 32 [ 177.496515][ T5681] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 177.499481][ T5681] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 177.499503][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 177.499514][ T5681] usb 4-1: Product: syz [ 177.499521][ T5681] usb 4-1: Manufacturer: syz [ 177.499528][ T5681] usb 4-1: SerialNumber: syz [ 177.579431][ T5681] usb 4-1: config 0 descriptor?? [ 177.580257][ T7921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 177.644770][ T5681] hub 4-1:0.0: bad descriptor, ignoring hub [ 177.644792][ T5681] hub 4-1:0.0: probe with driver hub failed with error -5 [ 177.701547][ T5688] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 178.029905][ T5688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.031934][ T5688] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 178.031968][ T5688] usb 1-1: can't read configurations, error -71 [ 180.119843][ T7970] warning: `syz.4.833' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.475140][ T7981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.181087][ T7996] overlayfs: failed to resolve './file0': -2 [ 182.351389][ T8007] overlayfs: failed to resolve './file1': -2 [ 182.374406][ T8005] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.848550][ T8026] overlayfs: failed to resolve './file1': -2 [ 182.930372][ T8032] overlayfs: failed to resolve './file0': -2 [ 182.979904][ T8034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.327266][ T8045] gadgetfs: bound to dummy_udc driver [ 183.419018][ T5681] usb 4-1: USB disconnect, device number 2 [ 183.623200][ T8056] overlayfs: failed to resolve './file1': -2 [ 183.808409][ T8059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.898921][ T8065] kAFS: No cell specified [ 184.159663][ T8073] gadgetfs: bound to dummy_udc driver [ 184.267028][ T8082] overlayfs: failed to resolve './file1': -2 [ 184.371597][ T5600] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 184.428455][ T8089] kAFS: No cell specified [ 184.524567][ T5600] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 184.524598][ T5600] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 184.527510][ T5600] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 184.527534][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.527550][ T5600] usb 5-1: Product: syz [ 184.527563][ T5600] usb 5-1: Manufacturer: syz [ 184.527576][ T5600] usb 5-1: SerialNumber: syz [ 184.609363][ T5600] usb 5-1: config 0 descriptor?? [ 184.610689][ T8074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.610864][ T8074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.758341][ T8099] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.849674][ T8074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 184.849847][ T8074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 185.102049][ T8110] gadgetfs: bound to dummy_udc driver [ 185.272036][ T5600] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 185.298489][ T8113] md/raid:md0: not clean -- starting background reconstruction [ 185.298499][ T8113] md/raid:md0: invalid chunk size 0 [ 185.298506][ T8113] md: pers->run() failed ... [ 185.476850][ T5600] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 185.527181][ T5600] usb 5-1: USB disconnect, device number 3 [ 185.593841][ T8119] kAFS: No cell specified [ 185.817925][ T8123] i8042 aux 00:01: in use; can't configure [ 186.666800][ T8123] printk: legacy console [ttyS0] disabled syzkaller syzkaller login: syzkaller syzkaller login: [ 1356.643228][ T314] printk: legacy console [ttyS0] enabled [ 1357.067617][ T340] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1357.608369][ T367] loop5: detected capacity change from 0 to 7 [ 1357.610775][ T367] Dev loop5: unable to read RDB block 7 [ 1357.610793][ T367] loop5: AHDI p1 p3 p4 [ 1357.610801][ T367] loop5: partition table partially beyond EOD, truncated [ 1357.611313][ T367] loop5: p1 size 100663296 extends beyond EOD, truncated [ 1357.647964][ T367] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 1357.666730][ T367] Dev loop5: unable to read RDB block 7 [ 1357.666748][ T367] loop5: AHDI p1 p3 p4 [ 1357.666757][ T367] loop5: partition table partially beyond EOD, truncated [ 1357.667958][ T367] loop5: p1 size 100663296 extends beyond EOD, truncated [ 1357.669548][ T367] loop5: p3 size 4227858431 extends beyond EOD, truncated [ 1357.728646][ T322] Flush: task=udevd[322] dev=loop5 state=2 [ 1357.742002][ T322] Teardown: task=udevd[322] dev=loop5 state=2 [ 1357.764305][ T369] fuse: Unknown parameter 'fd0x0000000000000003' [ 1357.781309][ T322] udevd[322]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1357.814286][ T371] udevd[371]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1357.815823][ T372] ieee80211 phy109: Selected rate control algorithm 'minstrel_ht' [ 1357.871219][ T322] udevd[322]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1357.873289][ T373] udevd[373]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1358.034459][T26172] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1358.745947][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9621'. [ 1359.106124][ T463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.175569][ T465] md/raid:md0: not clean -- starting background reconstruction [ 1359.178015][ T465] raid456: run(md0) called. [ 1359.178025][ T465] md/raid:md0: device ram3 operational as raid disk 3 [ 1359.178035][ T465] md/raid:md0: device ram2 operational as raid disk 2 [ 1359.241796][ T465] md/raid:md0: allocated 4350kB [ 1359.243170][ T465] md/raid:md0: not enough operational devices (2/4 failed) [ 1359.244247][ T465] RAID conf printout: [ 1359.244256][ T465] --- level:5 rd:4 wd:2 [ 1359.244271][ T465] disk 2, o:1, dev:ram2 [ 1359.244280][ T465] disk 3, o:1, dev:ram3 [ 1359.244295][ T465] remove_hash(), stripe 0 [ 1359.244333][ T465] remove_hash(), stripe 0 [ 1359.244366][ T465] remove_hash(), stripe 0 [ 1359.244397][ T465] remove_hash(), stripe 0 [ 1359.244431][ T465] remove_hash(), stripe 0 [ 1359.244463][ T465] remove_hash(), stripe 0 [ 1359.244496][ T465] remove_hash(), stripe 0 [ 1359.244530][ T465] remove_hash(), stripe 0 [ 1359.244561][ T465] remove_hash(), stripe 0 [ 1359.244595][ T465] remove_hash(), stripe 0 [ 1359.245235][ T465] remove_hash(), stripe 0 [ 1359.245276][ T465] remove_hash(), stripe 0 [ 1359.245309][ T465] remove_hash(), stripe 0 [ 1359.245342][ T465] remove_hash(), stripe 0 [ 1359.245375][ T465] remove_hash(), stripe 0 [ 1359.245408][ T465] remove_hash(), stripe 0 [ 1359.245445][ T465] remove_hash(), stripe 0 [ 1359.245478][ T465] remove_hash(), stripe 0 [ 1359.245510][ T465] remove_hash(), stripe 0 [ 1359.245543][ T465] remove_hash(), stripe 0 [ 1359.245576][ T465] remove_hash(), stripe 0 [ 1359.245610][ T465] remove_hash(), stripe 0 [ 1359.245642][ T465] remove_hash(), stripe 0 [ 1359.246170][ T465] remove_hash(), stripe 0 [ 1359.246205][ T465] remove_hash(), stripe 0 [ 1359.246253][ T465] remove_hash(), stripe 0 [ 1359.246305][ T465] remove_hash(), stripe 0 [ 1359.246337][ T465] remove_hash(), stripe 0 [ 1359.246369][ T465] remove_hash(), stripe 0 [ 1359.246400][ T465] remove_hash(), stripe 0 [ 1359.246433][ T465] remove_hash(), stripe 0 [ 1359.246464][ T465] remove_hash(), stripe 0 [ 1359.246495][ T465] remove_hash(), stripe 0 [ 1359.246527][ T465] remove_hash(), stripe 0 [ 1359.246558][ T465] remove_hash(), stripe 0 [ 1359.246591][ T465] remove_hash(), stripe 0 [ 1359.246622][ T465] remove_hash(), stripe 0 [ 1359.246654][ T465] remove_hash(), stripe 0 [ 1359.246690][ T465] remove_hash(), stripe 0 [ 1359.247859][ T465] remove_hash(), stripe 0 [ 1359.247897][ T465] remove_hash(), stripe 0 [ 1359.247930][ T465] remove_hash(), stripe 0 [ 1359.247962][ T465] remove_hash(), stripe 0 [ 1359.247995][ T465] remove_hash(), stripe 0 [ 1359.248028][ T465] remove_hash(), stripe 0 [ 1359.248064][ T465] remove_hash(), stripe 0 [ 1359.248097][ T465] remove_hash(), stripe 0 [ 1359.248129][ T465] remove_hash(), stripe 0 [ 1359.248162][ T465] remove_hash(), stripe 0 [ 1359.248196][ T465] remove_hash(), stripe 0 [ 1359.248227][ T465] remove_hash(), stripe 0 [ 1359.248259][ T465] remove_hash(), stripe 0 [ 1359.248299][ T465] remove_hash(), stripe 0 [ 1359.248335][ T465] remove_hash(), stripe 0 [ 1359.248367][ T465] remove_hash(), stripe 0 [ 1359.248409][ T465] remove_hash(), stripe 0 [ 1359.248440][ T465] remove_hash(), stripe 0 [ 1359.249150][ T465] remove_hash(), stripe 0 [ 1359.249185][ T465] remove_hash(), stripe 0 [ 1359.249218][ T465] remove_hash(), stripe 0 [ 1359.249254][ T465] remove_hash(), stripe 0 [ 1359.249299][ T465] remove_hash(), stripe 0 [ 1359.249330][ T465] remove_hash(), stripe 0 [ 1359.249363][ T465] remove_hash(), stripe 0 [ 1359.249396][ T465] remove_hash(), stripe 0 [ 1359.249427][ T465] remove_hash(), stripe 0 [ 1359.249461][ T465] remove_hash(), stripe 0 [ 1359.249495][ T465] remove_hash(), stripe 0 [ 1359.249528][ T465] remove_hash(), stripe 0 [ 1359.249559][ T465] remove_hash(), stripe 0 [ 1359.249591][ T465] remove_hash(), stripe 0 [ 1359.249623][ T465] remove_hash(), stripe 0 [ 1359.249656][ T465] remove_hash(), stripe 0 [ 1359.249693][ T465] remove_hash(), stripe 0 [ 1359.249726][ T465] remove_hash(), stripe 0 [ 1359.249758][ T465] remove_hash(), stripe 0 [ 1359.249792][ T465] remove_hash(), stripe 0 [ 1359.249826][ T465] remove_hash(), stripe 0 [ 1359.249858][ T465] remove_hash(), stripe 0 [ 1359.249892][ T465] remove_hash(), stripe 0 [ 1359.249923][ T465] remove_hash(), stripe 0 [ 1359.299229][ T465] remove_hash(), stripe 0 [ 1359.299277][ T465] remove_hash(), stripe 0 [ 1359.299311][ T465] remove_hash(), stripe 0 [ 1359.299344][ T465] remove_hash(), stripe 0 [ 1359.299379][ T465] remove_hash(), stripe 0 [ 1359.299413][ T465] remove_hash(), stripe 0 [ 1359.299447][ T465] remove_hash(), stripe 0 [ 1359.299481][ T465] remove_hash(), stripe 0 [ 1359.299515][ T465] remove_hash(), stripe 0 [ 1359.299547][ T465] remove_hash(), stripe 0 [ 1359.299580][ T465] remove_hash(), stripe 0 [ 1359.299612][ T465] remove_hash(), stripe 0 [ 1359.299644][ T465] remove_hash(), stripe 0 [ 1359.299677][ T465] remove_hash(), stripe 0 [ 1359.299710][ T465] remove_hash(), stripe 0 [ 1359.299741][ T465] remove_hash(), stripe 0 [ 1359.299773][ T465] remove_hash(), stripe 0 [ 1359.299807][ T465] remove_hash(), stripe 0 [ 1359.299839][ T465] remove_hash(), stripe 0 [ 1359.299876][ T465] remove_hash(), stripe 0 [ 1359.299909][ T465] remove_hash(), stripe 0 [ 1359.299946][ T465] remove_hash(), stripe 0 [ 1359.299979][ T465] remove_hash(), stripe 0 [ 1359.300012][ T465] remove_hash(), stripe 0 [ 1359.300046][ T465] remove_hash(), stripe 0 [ 1359.300087][ T465] remove_hash(), stripe 0 [ 1359.300124][ T465] remove_hash(), stripe 0 [ 1359.300155][ T465] remove_hash(), stripe 0 [ 1359.300187][ T465] remove_hash(), stripe 0 [ 1359.300219][ T465] remove_hash(), stripe 0 [ 1359.300251][ T465] remove_hash(), stripe 0 [ 1359.300289][ T465] remove_hash(), stripe 0 [ 1359.300324][ T465] remove_hash(), stripe 0 [ 1359.300355][ T465] remove_hash(), stripe 0 [ 1359.300390][ T465] remove_hash(), stripe 0 [ 1359.300423][ T465] remove_hash(), stripe 0 [ 1359.300455][ T465] remove_hash(), stripe 0 [ 1359.300489][ T465] remove_hash(), stripe 0 [ 1359.300521][ T465] remove_hash(), stripe 0 [ 1359.300552][ T465] remove_hash(), stripe 0 [ 1359.300585][ T465] remove_hash(), stripe 0 [ 1359.300617][ T465] remove_hash(), stripe 0 [ 1359.884583][ T465] remove_hash(), stripe 0 [ 1359.884625][ T465] remove_hash(), stripe 0 [ 1359.884658][ T465] remove_hash(), stripe 0 [ 1359.884690][ T465] remove_hash(), stripe 0 [ 1359.884722][ T465] remove_hash(), stripe 0 [ 1359.884754][ T465] remove_hash(), stripe 0 [ 1359.884786][ T465] remove_hash(), stripe 0 [ 1359.884819][ T465] remove_hash(), stripe 0 [ 1359.884851][ T465] remove_hash(), stripe 0 [ 1359.884882][ T465] remove_hash(), stripe 0 [ 1359.884915][ T465] remove_hash(), stripe 0 [ 1359.884948][ T465] remove_hash(), stripe 0 [ 1359.884981][ T465] remove_hash(), stripe 0 [ 1359.885021][ T465] remove_hash(), stripe 0 [ 1359.885053][ T465] remove_hash(), stripe 0 [ 1359.885085][ T465] remove_hash(), stripe 0 [ 1359.885122][ T465] remove_hash(), stripe 0 [ 1359.885155][ T465] remove_hash(), stripe 0 [ 1359.885186][ T465] remove_hash(), stripe 0 [ 1359.885217][ T465] remove_hash(), stripe 0 [ 1359.885250][ T465] remove_hash(), stripe 0 [ 1359.885282][ T465] remove_hash(), stripe 0 [ 1359.885315][ T465] remove_hash(), stripe 0 [ 1359.885350][ T465] remove_hash(), stripe 0 [ 1359.885389][ T465] remove_hash(), stripe 0 [ 1359.885421][ T465] remove_hash(), stripe 0 [ 1359.885454][ T465] remove_hash(), stripe 0 [ 1359.885486][ T465] remove_hash(), stripe 0 [ 1359.885517][ T465] remove_hash(), stripe 0 [ 1359.885549][ T465] remove_hash(), stripe 0 [ 1359.885644][ T465] remove_hash(), stripe 0 [ 1359.885679][ T465] remove_hash(), stripe 0 [ 1359.885712][ T465] remove_hash(), stripe 0 [ 1359.885745][ T465] remove_hash(), stripe 0 [ 1359.885777][ T465] remove_hash(), stripe 0 [ 1359.885809][ T465] remove_hash(), stripe 0 [ 1359.885842][ T465] remove_hash(), stripe 0 [ 1359.885875][ T465] remove_hash(), stripe 0 [ 1359.885905][ T465] remove_hash(), stripe 0 [ 1359.885937][ T465] remove_hash(), stripe 0 [ 1359.885969][ T465] remove_hash(), stripe 0 [ 1359.888051][ T465] remove_hash(), stripe 0 [ 1359.888090][ T465] remove_hash(), stripe 0 [ 1359.888124][ T465] remove_hash(), stripe 0 [ 1359.888159][ T465] remove_hash(), stripe 0 [ 1359.888201][ T465] remove_hash(), stripe 0 [ 1359.888245][ T465] remove_hash(), stripe 0 [ 1359.888280][ T465] remove_hash(), stripe 0 [ 1359.888314][ T465] remove_hash(), stripe 0 [ 1359.888346][ T465] remove_hash(), stripe 0 [ 1359.888385][ T465] remove_hash(), stripe 0 [ 1359.888416][ T465] remove_hash(), stripe 0 [ 1359.888447][ T465] remove_hash(), stripe 0 [ 1359.888478][ T465] remove_hash(), stripe 0 [ 1359.888510][ T465] remove_hash(), stripe 0 [ 1359.888542][ T465] remove_hash(), stripe 0 [ 1359.888573][ T465] remove_hash(), stripe 0 [ 1359.888603][ T465] remove_hash(), stripe 0 [ 1359.888636][ T465] remove_hash(), stripe 0 [ 1359.888676][ T465] remove_hash(), stripe 0 [ 1359.888708][ T465] remove_hash(), stripe 0 [ 1359.888741][ T465] remove_hash(), stripe 0 [ 1359.890694][ T465] remove_hash(), stripe 0 [ 1359.890757][ T465] remove_hash(), stripe 0 [ 1359.890793][ T465] remove_hash(), stripe 0 [ 1359.890825][ T465] remove_hash(), stripe 0 [ 1359.894341][ T465] remove_hash(), stripe 0 [ 1359.894383][ T465] remove_hash(), stripe 0 [ 1359.894440][ T465] remove_hash(), stripe 0 [ 1359.894473][ T465] remove_hash(), stripe 0 [ 1359.894505][ T465] remove_hash(), stripe 0 [ 1359.894535][ T465] remove_hash(), stripe 0 [ 1359.894568][ T465] remove_hash(), stripe 0 [ 1359.894601][ T465] remove_hash(), stripe 0 [ 1359.894632][ T465] remove_hash(), stripe 0 [ 1359.894668][ T465] remove_hash(), stripe 0 [ 1359.894709][ T465] remove_hash(), stripe 0 [ 1359.894741][ T465] remove_hash(), stripe 0 [ 1359.894777][ T465] remove_hash(), stripe 0 [ 1360.209694][ T465] remove_hash(), stripe 0 [ 1360.209743][ T465] remove_hash(), stripe 0 [ 1360.209819][ T465] remove_hash(), stripe 0 [ 1360.209857][ T465] remove_hash(), stripe 0 [ 1360.209890][ T465] remove_hash(), stripe 0 [ 1360.209922][ T465] remove_hash(), stripe 0 [ 1360.209954][ T465] remove_hash(), stripe 0 [ 1360.209987][ T465] remove_hash(), stripe 0 [ 1360.210018][ T465] remove_hash(), stripe 0 [ 1360.210051][ T465] remove_hash(), stripe 0 [ 1360.210082][ T465] remove_hash(), stripe 0 [ 1360.210115][ T465] remove_hash(), stripe 0 [ 1360.210147][ T465] remove_hash(), stripe 0 [ 1360.210184][ T465] remove_hash(), stripe 0 [ 1360.210217][ T465] remove_hash(), stripe 0 [ 1360.210250][ T465] remove_hash(), stripe 0 [ 1360.210283][ T465] remove_hash(), stripe 0 [ 1360.210315][ T465] remove_hash(), stripe 0 [ 1360.210347][ T465] remove_hash(), stripe 0 [ 1360.210380][ T465] remove_hash(), stripe 0 [ 1360.210416][ T465] remove_hash(), stripe 0 [ 1360.210448][ T465] remove_hash(), stripe 0 [ 1360.210480][ T465] remove_hash(), stripe 0 [ 1360.210512][ T465] remove_hash(), stripe 0 [ 1360.210544][ T465] remove_hash(), stripe 0 [ 1360.210575][ T465] remove_hash(), stripe 0 [ 1360.210607][ T465] remove_hash(), stripe 0 [ 1360.210638][ T465] remove_hash(), stripe 0 [ 1360.210670][ T465] remove_hash(), stripe 0 [ 1360.210781][ T465] remove_hash(), stripe 0 [ 1360.210814][ T465] remove_hash(), stripe 0 [ 1360.280941][ T465] remove_hash(), stripe 0 [ 1360.280980][ T465] remove_hash(), stripe 0 [ 1360.281011][ T465] remove_hash(), stripe 0 [ 1360.281044][ T465] remove_hash(), stripe 0 [ 1360.281075][ T465] remove_hash(), stripe 0 [ 1360.461880][ T465] remove_hash(), stripe 0 [ 1360.461932][ T465] remove_hash(), stripe 0 [ 1360.461965][ T465] remove_hash(), stripe 0 [ 1360.462002][ T465] remove_hash(), stripe 0 [ 1360.462037][ T465] remove_hash(), stripe 0 [ 1360.462069][ T465] remove_hash(), stripe 0 [ 1360.462102][ T465] remove_hash(), stripe 0 [ 1360.462136][ T465] remove_hash(), stripe 0 [ 1360.462167][ T465] remove_hash(), stripe 0 [ 1360.462198][ T465] remove_hash(), stripe 0 [ 1360.462235][ T465] remove_hash(), stripe 0 [ 1360.462298][ T465] remove_hash(), stripe 0 [ 1360.462335][ T465] remove_hash(), stripe 0 [ 1360.462369][ T465] remove_hash(), stripe 0 [ 1360.462400][ T465] remove_hash(), stripe 0 [ 1360.462432][ T465] remove_hash(), stripe 0 [ 1360.462467][ T465] remove_hash(), stripe 0 [ 1360.462499][ T465] remove_hash(), stripe 0 [ 1360.606826][ T37] audit: type=1800 audit(1785938324.492:181): pid=479 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.9633" name="zoned" dev="configfs" ino=142579 res=0 errno=0 [ 1360.637256][ T37] audit: type=1800 audit(1785938324.522:182): pid=479 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.9633" name="size" dev="configfs" ino=142580 res=0 errno=0 [ 1360.667937][ T37] audit: type=1800 audit(1785938324.552:183): pid=479 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.9633" name="power" dev="configfs" ino=142582 res=0 errno=0 [ 1360.701744][ T465] md/raid:md0: failed to run raid set. [ 1360.701755][ T465] md: pers->run() failed ... [ 1360.854508][ T485] block nbd8: shutting down sockets [ 1361.082198][ T491] fuse: fd is not a fuse device [ 1361.229967][ T506] nvme_fcloop: unknown parameter or missing value 'ww' [ 1361.340556][ T514] fuse: fd is not a fuse device [ 1361.434975][ T37] audit: type=1800 audit(1785938325.322:184): pid=518 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.9651" name="zoned" dev="configfs" ino=142738 res=0 errno=0 [ 1361.436021][ T37] audit: type=1800 audit(1785938325.322:185): pid=518 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.9651" name="power" dev="configfs" ino=142739 res=0 errno=0 [ 1361.440491][ T37] audit: type=1800 audit(1785938325.322:186): pid=518 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.9651" name="zoned" dev="configfs" ino=142744 res=0 errno=0 [ 1361.441092][ T37] audit: type=1800 audit(1785938325.332:187): pid=518 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.9651" name="power" dev="configfs" ino=142745 res=0 errno=0 [ 1361.450470][ T518] null_blk: nullb2: using native zone append [ 1361.516245][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.516288][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.575904][ T518] null_blk: disk nullb2 created [ 1361.604506][ T509] device-mapper: table: 248:3: thin-pool: Error creating metadata object (-EIO) [ 1361.604521][ T509] device-mapper: ioctl: error adding target to table [ 1361.739379][ T528] jffs2: notice: (528) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1361.843745][ T533] fuse: fd is not a fuse device [ 1363.202443][ T560] fuse: fd is not a fuse device [ 1364.260130][ T567] 9pnet_virtio: no channels available for device syz [ 1364.427777][ T571] netlink: 52 bytes leftover after parsing attributes in process `syz.8.9674'. [ 1365.692793][ T610] kAFS: bad VL server IP address [ 1365.847194][ T37] audit: type=1807 audit(1785938329.732:188): action=measure func=FILE_CHECK res=1 [ 1365.847273][ T617] ima: policy update completed [ 1365.849150][ T37] audit: type=1802 audit(1785938329.732:189): pid=617 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=completed comm="syz.8.9694" res=1 errno=0 [ 1365.911469][ T37] audit: type=1800 audit(1785938329.792:190): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 1365.942876][ T37] audit: type=1800 audit(1785938329.832:191): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 1366.057460][ T37] audit: type=1800 audit(1785938329.942:192): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 1366.106298][ T37] audit: type=1800 audit(1785938329.992:193): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31429 res=0 errno=0 [ 1366.110501][ T37] audit: type=1800 audit(1785938329.992:194): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31452 res=0 errno=0 [ 1366.170017][ T37] audit: type=1800 audit(1785938330.052:195): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15407 res=0 errno=0 [ 1366.203110][ T37] audit: type=1800 audit(1785938330.092:196): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15407 res=0 errno=0 [ 1366.284952][ T37] audit: type=1800 audit(1785938330.162:197): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15407 res=0 errno=0 [ 1366.330337][ T631] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 1366.396323][T26960] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1366.416059][ T5695] lg-g15 0003:046D:C21C.0048: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1366.417201][ T5695] lg-g15 0003:046D:C21C.0048: Error getting backlight brightness: 0 [ 1366.418277][ T5695] lg-g15 0003:046D:C21C.0048: probe with driver lg-g15 failed with error -5 [ 1366.488855][ T638] fuse: fd is not a fuse device [ 1366.543173][T26960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.543192][T26960] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.543210][T26960] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1366.543222][T26960] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.546256][ T637] fido_id[637]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1366.547173][T26960] usb 9-1: config 0 descriptor?? [ 1366.958949][T26960] cm6533_jd 0003:0D8C:0022.0049: unknown main item tag 0x0 [ 1366.958973][T26960] cm6533_jd 0003:0D8C:0022.0049: unknown main item tag 0x0 [ 1366.958988][T26960] cm6533_jd 0003:0D8C:0022.0049: unknown main item tag 0x0 [ 1366.959003][T26960] cm6533_jd 0003:0D8C:0022.0049: unknown main item tag 0x0 [ 1366.959017][T26960] cm6533_jd 0003:0D8C:0022.0049: unknown main item tag 0x0 [ 1367.005004][T26960] cm6533_jd 0003:0D8C:0022.0049: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 1367.198715][ T651] program syz.5.9708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1367.224825][ T653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9709'. [ 1367.229889][ T653] ieee80211 phy110: Selected rate control algorithm 'minstrel_ht' [ 1367.260327][T26960] usb 9-1: USB disconnect, device number 14 [ 1367.430220][ T665] capability: warning: `syz.1.9715' uses deprecated v2 capabilities in a way that may be insecure [ 1367.430566][ T666] fuse: fd is not a fuse device [ 1367.588505][ T677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9720'. [ 1367.606324][ T677] ieee80211 phy111: Selected rate control algorithm 'minstrel_ht' [ 1367.776651][ T684] 9pnet_virtio: no channels available for device syz [ 1367.883808][ T688] vhci_hcd: not connected 4 [ 1368.011820][ T698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9729'. [ 1368.011849][ T698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9729'. [ 1368.081147][ T700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9730'. [ 1368.086835][ T700] ieee80211 phy112: Selected rate control algorithm 'minstrel_ht' [ 1368.346619][ T712] jffs2: notice: (712) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1368.369911][ T712] jffs2: warning: (712) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=60 [ 1368.575874][ T725] ieee80211 phy113: Selected rate control algorithm 'minstrel_ht' [ 1368.712187][ T729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9742'. [ 1368.823329][ T735] tmpfs: Unsupported parameter 'huge' [ 1369.049831][ T745] ieee80211 phy114: Selected rate control algorithm 'minstrel_ht' [ 1369.203966][ T751] fuse: fd is not a fuse device [ 1369.204306][ T749] netlink: 'syz.1.9751': attribute type 4 has an invalid length. [ 1369.271206][T26960] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1369.423877][T26960] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1369.423899][T26960] usb 9-1: config 0 has no interface number 0 [ 1369.423917][T26960] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1369.423930][T26960] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1369.423943][T26960] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1369.453042][T26960] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1369.453066][T26960] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1369.453076][T26960] usb 9-1: Product: syz [ 1369.453084][T26960] usb 9-1: SerialNumber: syz [ 1369.515665][T26960] usb 9-1: config 0 descriptor?? [ 1369.528854][T26960] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1369.540763][T26960] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input116 [ 1369.745912][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.746093][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.746273][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.746452][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.746619][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.746788][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.746952][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.747120][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.747284][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.747467][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1369.777456][T26960] usb 9-1: USB disconnect, device number 15 [ 1369.777558][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1369.858941][T26960] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1369.909546][ T764] ieee80211 phy115: Selected rate control algorithm 'minstrel_ht' [ 1370.319707][ T767] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1370.499866][ T773] futex_wake_op: syz.5.9763 tries to shift op by 144; fix this program [ 1370.499973][ T773] futex_wake_op: syz.5.9763 tries to shift op by 144; fix this program [ 1370.933718][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 1370.933730][ T37] audit: type=1800 audit(1785938334.822:269): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=456868 res=0 errno=0 [ 1370.935072][ T785] ieee80211 phy116: Selected rate control algorithm 'minstrel_ht' [ 1371.047418][ T37] audit: type=1800 audit(1785938334.932:270): pid=793 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.9770" name="reclaim" dev="sysfs" ino=1147 res=0 errno=0 [ 1371.215401][ T37] audit: type=1326 audit(1785938335.102:271): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=794 comm="syz.1.9771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617f85e0d9 code=0x7ffc0000 [ 1371.216783][ T37] audit: type=1326 audit(1785938335.102:272): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=794 comm="syz.1.9771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617f85e0d9 code=0x7ffc0000 [ 1371.216808][ T37] audit: type=1326 audit(1785938335.102:273): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=794 comm="syz.1.9771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617f85e0d9 code=0x7ffc0000 [ 1371.217266][ T37] audit: type=1326 audit(1785938335.102:274): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=794 comm="syz.1.9771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f617f85e0d9 code=0x7ffc0000 [ 1371.217287][ T37] audit: type=1326 audit(1785938335.102:275): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=794 comm="syz.1.9771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617f85e0d9 code=0x7ffc0000 [ 1371.217303][ T37] audit: type=1326 audit(1785938335.102:276): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=794 comm="syz.1.9771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617f85e0d9 code=0x7ffc0000 [ 1371.217319][ T37] audit: type=1326 audit(1785938335.102:277): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=794 comm="syz.1.9771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617f85e0d9 code=0x7ffc0000 [ 1371.217336][ T37] audit: type=1326 audit(1785938335.102:278): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=794 comm="syz.1.9771" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617f85e0d9 code=0x7ffc0000 [ 1371.641996][ T810] ieee80211 phy117: Selected rate control algorithm 'minstrel_ht' [ 1372.018626][ T826] fuse: Bad value for 'fd' [ 1372.030751][ T2401] bridge_slave_1: left allmulticast mode [ 1372.030768][ T2401] bridge_slave_1: left promiscuous mode [ 1372.044784][ T2401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.059970][ T2401] bridge_slave_0: left allmulticast mode [ 1372.059986][ T2401] bridge_slave_0: left promiscuous mode [ 1372.060086][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.217987][ T833] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1372.241336][ T833] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 1372.246249][ T833] udc usbip-vudc.0: failed to start g1: -19 [ 1372.246558][ T833] UDC core: g1: couldn't find an available UDC or it's busy [ 1372.305246][ T2401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.333174][ T2401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1372.349793][ T2401] bond0 (unregistering): Released all slaves [ 1372.694588][ T850] ieee80211 phy118: Selected rate control algorithm 'minstrel_ht' [ 1373.505182][ T870] fuse: Bad value for 'fd' [ 1373.680667][ T2401] hsr_slave_0: left promiscuous mode [ 1374.290363][ T2401] hsr_slave_1: left promiscuous mode [ 1374.484211][ T2401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.484228][ T2401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.126724][ T2401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.126739][ T2401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.421532][ T2401] veth1_macvtap: left promiscuous mode [ 1376.421570][ T2401] veth0_macvtap: left promiscuous mode [ 1376.421657][ T2401] veth1_vlan: left promiscuous mode [ 1376.421714][ T2401] veth0_vlan: left promiscuous mode [ 1376.465739][ T37] kauditd_printk_skb: 286 callbacks suppressed [ 1376.465751][ T37] audit: type=1800 audit(1785938340.352:565): pid=884 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.9796" name="remove" dev="sysfs" ino=456812 res=0 errno=0 [ 1376.516210][ T884] program syz.5.9796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1376.517819][ T37] audit: type=1800 audit(1785938340.402:566): pid=884 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.9796" name="rescan" dev="sysfs" ino=1652 res=0 errno=0 [ 1376.518232][ T884] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1376.574495][ T37] audit: type=1800 audit(1785938340.452:567): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=457328 res=0 errno=0 [ 1376.580128][ T37] audit: type=1800 audit(1785938340.462:568): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=457313 res=0 errno=0 [ 1376.664490][ T37] audit: type=1800 audit(1785938340.552:569): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 1376.844092][ T37] audit: type=1800 audit(1785938340.722:570): pid=900 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.9801" name="array_state" dev="sysfs" ino=112726 res=0 errno=0 [ 1376.943496][T29580] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1376.980671][ T905] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1377.064567][ T2401] team0 (unregistering): Port device team_slave_1 removed [ 1377.093131][T29580] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1377.093158][T29580] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1377.094776][T29580] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1377.094792][T29580] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.094802][T29580] usb 9-1: Product: syz [ 1377.094809][T29580] usb 9-1: Manufacturer: syz [ 1377.094816][T29580] usb 9-1: SerialNumber: syz [ 1377.096739][ T2401] team0 (unregistering): Port device team_slave_0 removed [ 1377.128772][ T37] audit: type=1800 audit(1785938341.002:571): pid=373 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=457374 res=0 errno=0 [ 1377.197218][ T37] audit: type=1800 audit(1785938341.082:572): pid=373 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=457406 res=0 errno=0 [ 1377.220278][ T37] audit: type=1800 audit(1785938341.082:573): pid=373 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=457381 res=0 errno=0 [ 1377.243379][ T37] audit: type=1800 audit(1785938341.132:574): pid=373 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=457382 res=0 errno=0 [ 1377.253305][T26960] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1377.253940][ T911] fuse: Bad value for 'fd' [ 1377.458726][ T918] netlink: 192 bytes leftover after parsing attributes in process `syz.5.9806'. [ 1377.477790][ T919] 9p: Bad value for 'rfdno' [ 1378.438156][T26960] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1378.471024][ T10] usb 9-1: USB disconnect, device number 16 [ 1378.506299][ T923] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1378.526007][T26960] ath9k_htc: Failed to initialize the device [ 1378.529293][ T10] usb 9-1: ath9k_htc: USB layer deinitialized [ 1378.777121][ T937] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1378.887006][ T1159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.923521][ T937] md/raid:md0: not clean -- starting background reconstruction [ 1378.925205][ T937] raid456: run(md0) called. [ 1378.925216][ T937] md/raid:md0: device ram3 operational as raid disk 3 [ 1378.925226][ T937] md/raid:md0: device ram2 operational as raid disk 2 [ 1378.925233][ T937] md/raid:md0: device ram0 operational as raid disk 0 [ 1378.970744][ T1159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.001278][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1379.047335][ T937] md/raid:md0: allocated 4350kB [ 1379.048818][ T937] md/raid:md0: cannot start dirty degraded array. [ 1379.049259][ T1159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.077774][ T937] RAID conf printout: [ 1379.077785][ T937] --- level:5 rd:4 wd:3 [ 1379.077793][ T937] disk 0, o:1, dev:ram0 [ 1379.077801][ T937] disk 2, o:1, dev:ram2 [ 1379.077808][ T937] disk 3, o:1, dev:ram3 [ 1379.077823][ T937] remove_hash(), stripe 0 [ 1379.077860][ T937] remove_hash(), stripe 0 [ 1379.077894][ T937] remove_hash(), stripe 0 [ 1379.077927][ T937] remove_hash(), stripe 0 [ 1379.077961][ T937] remove_hash(), stripe 0 [ 1379.077993][ T937] remove_hash(), stripe 0 [ 1379.078027][ T937] remove_hash(), stripe 0 [ 1379.078059][ T937] remove_hash(), stripe 0 [ 1379.078092][ T937] remove_hash(), stripe 0 [ 1379.078124][ T937] remove_hash(), stripe 0 [ 1379.078157][ T937] remove_hash(), stripe 0 [ 1379.078191][ T937] remove_hash(), stripe 0 [ 1379.078223][ T937] remove_hash(), stripe 0 [ 1379.078256][ T937] remove_hash(), stripe 0 [ 1379.078288][ T937] remove_hash(), stripe 0 [ 1379.088237][ T937] remove_hash(), stripe 0 [ 1379.088278][ T937] remove_hash(), stripe 0 [ 1379.088310][ T937] remove_hash(), stripe 0 [ 1379.088344][ T937] remove_hash(), stripe 0 [ 1379.088376][ T937] remove_hash(), stripe 0 [ 1379.088419][ T937] remove_hash(), stripe 0 [ 1379.088457][ T937] remove_hash(), stripe 0 [ 1379.088489][ T937] remove_hash(), stripe 0 [ 1379.088526][ T937] remove_hash(), stripe 0 [ 1379.088559][ T937] remove_hash(), stripe 0 [ 1379.088594][ T937] remove_hash(), stripe 0 [ 1379.088627][ T937] remove_hash(), stripe 0 [ 1379.088664][ T937] remove_hash(), stripe 0 [ 1379.088708][ T937] remove_hash(), stripe 0 [ 1379.088740][ T937] remove_hash(), stripe 0 [ 1379.088773][ T937] remove_hash(), stripe 0 [ 1379.088805][ T937] remove_hash(), stripe 0 [ 1379.088838][ T937] remove_hash(), stripe 0 [ 1379.088871][ T937] remove_hash(), stripe 0 [ 1379.088902][ T937] remove_hash(), stripe 0 [ 1379.088935][ T937] remove_hash(), stripe 0 [ 1379.088972][ T937] remove_hash(), stripe 0 [ 1379.089005][ T937] remove_hash(), stripe 0 [ 1379.089038][ T937] remove_hash(), stripe 0 [ 1379.170606][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1379.256540][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1379.256558][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1379.256572][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1379.256585][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.282477][ T937] remove_hash(), stripe 0 [ 1379.282523][ T937] remove_hash(), stripe 0 [ 1379.282558][ T937] remove_hash(), stripe 0 [ 1379.303312][ T937] remove_hash(), stripe 0 [ 1379.303353][ T937] remove_hash(), stripe 0 [ 1379.315673][ T937] remove_hash(), stripe 0 [ 1379.315717][ T937] remove_hash(), stripe 0 [ 1379.315750][ T937] remove_hash(), stripe 0 [ 1379.315782][ T937] remove_hash(), stripe 0 [ 1379.315816][ T937] remove_hash(), stripe 0 [ 1379.315849][ T937] remove_hash(), stripe 0 [ 1379.315881][ T937] remove_hash(), stripe 0 [ 1379.315914][ T937] remove_hash(), stripe 0 [ 1379.315945][ T937] remove_hash(), stripe 0 [ 1379.315976][ T937] remove_hash(), stripe 0 [ 1379.316008][ T937] remove_hash(), stripe 0 [ 1379.316039][ T937] remove_hash(), stripe 0 [ 1379.316071][ T937] remove_hash(), stripe 0 [ 1379.316106][ T937] remove_hash(), stripe 0 [ 1379.316138][ T937] remove_hash(), stripe 0 [ 1379.316176][ T937] remove_hash(), stripe 0 [ 1379.316213][ T937] remove_hash(), stripe 0 [ 1379.316250][ T937] remove_hash(), stripe 0 [ 1379.316281][ T937] remove_hash(), stripe 0 [ 1379.316312][ T937] remove_hash(), stripe 0 [ 1379.316345][ T937] remove_hash(), stripe 0 [ 1379.316379][ T937] remove_hash(), stripe 0 [ 1379.316410][ T937] remove_hash(), stripe 0 [ 1379.316441][ T937] remove_hash(), stripe 0 [ 1379.316474][ T937] remove_hash(), stripe 0 [ 1379.316506][ T937] remove_hash(), stripe 0 [ 1379.316541][ T937] remove_hash(), stripe 0 [ 1379.316573][ T937] remove_hash(), stripe 0 [ 1379.316608][ T937] remove_hash(), stripe 0 [ 1379.316638][ T937] remove_hash(), stripe 0 [ 1379.316676][ T937] remove_hash(), stripe 0 [ 1379.316709][ T937] remove_hash(), stripe 0 [ 1379.316741][ T937] remove_hash(), stripe 0 [ 1379.316774][ T937] remove_hash(), stripe 0 [ 1379.316808][ T937] remove_hash(), stripe 0 [ 1379.336587][ T10] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1379.336605][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.336615][ T10] usb 9-1: Product: syz [ 1379.336623][ T10] usb 9-1: Manufacturer: syz [ 1379.336630][ T10] usb 9-1: SerialNumber: syz [ 1379.395163][ T10] usb 9-1: config 0 descriptor?? [ 1379.600174][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input117 [ 1379.615621][ T937] remove_hash(), stripe 0 [ 1379.615664][ T937] remove_hash(), stripe 0 [ 1379.615696][ T937] remove_hash(), stripe 0 [ 1379.615928][ T937] remove_hash(), stripe 0 [ 1379.615966][ T937] remove_hash(), stripe 0 [ 1379.615997][ T937] remove_hash(), stripe 0 [ 1379.616071][ T937] remove_hash(), stripe 0 [ 1379.616105][ T937] remove_hash(), stripe 0 [ 1379.616139][ T937] remove_hash(), stripe 0 [ 1379.616171][ T937] remove_hash(), stripe 0 [ 1379.616417][ T937] remove_hash(), stripe 0 [ 1379.616449][ T937] remove_hash(), stripe 0 [ 1379.616481][ T937] remove_hash(), stripe 0 [ 1379.616715][ T937] remove_hash(), stripe 0 [ 1379.616749][ T937] remove_hash(), stripe 0 [ 1379.616789][ T937] remove_hash(), stripe 0 [ 1379.619789][ T937] remove_hash(), stripe 0 [ 1379.619826][ T937] remove_hash(), stripe 0 [ 1379.619858][ T937] remove_hash(), stripe 0 [ 1379.634030][ T937] remove_hash(), stripe 0 [ 1379.634068][ T937] remove_hash(), stripe 0 [ 1379.646762][ T937] remove_hash(), stripe 0 [ 1379.646808][ T937] remove_hash(), stripe 0 [ 1379.646841][ T937] remove_hash(), stripe 0 [ 1379.646873][ T937] remove_hash(), stripe 0 [ 1379.646903][ T937] remove_hash(), stripe 0 [ 1379.646936][ T937] remove_hash(), stripe 0 [ 1379.646966][ T937] remove_hash(), stripe 0 [ 1379.646998][ T937] remove_hash(), stripe 0 [ 1379.647029][ T937] remove_hash(), stripe 0 [ 1379.647061][ T937] remove_hash(), stripe 0 [ 1379.647092][ T937] remove_hash(), stripe 0 [ 1379.647134][ T937] remove_hash(), stripe 0 [ 1379.647173][ T937] remove_hash(), stripe 0 [ 1379.647204][ T937] remove_hash(), stripe 0 [ 1379.647237][ T937] remove_hash(), stripe 0 [ 1379.647269][ T937] remove_hash(), stripe 0 [ 1379.647300][ T937] remove_hash(), stripe 0 [ 1379.732338][ T937] remove_hash(), stripe 0 [ 1379.732391][ T937] remove_hash(), stripe 0 [ 1379.732423][ T937] remove_hash(), stripe 0 [ 1379.732454][ T937] remove_hash(), stripe 0 [ 1379.732486][ T937] remove_hash(), stripe 0 [ 1379.732520][ T937] remove_hash(), stripe 0 [ 1379.732554][ T937] remove_hash(), stripe 0 [ 1379.732587][ T937] remove_hash(), stripe 0 [ 1379.732618][ T937] remove_hash(), stripe 0 [ 1379.732654][ T937] remove_hash(), stripe 0 [ 1379.732686][ T937] remove_hash(), stripe 0 [ 1379.732717][ T937] remove_hash(), stripe 0 [ 1379.732748][ T937] remove_hash(), stripe 0 [ 1379.732783][ T937] remove_hash(), stripe 0 [ 1379.732815][ T937] remove_hash(), stripe 0 [ 1379.732847][ T937] remove_hash(), stripe 0 [ 1379.732881][ T937] remove_hash(), stripe 0 [ 1379.732914][ T937] remove_hash(), stripe 0 [ 1379.732945][ T937] remove_hash(), stripe 0 [ 1379.732979][ T937] remove_hash(), stripe 0 [ 1379.733010][ T937] remove_hash(), stripe 0 [ 1379.733041][ T937] remove_hash(), stripe 0 [ 1379.733072][ T937] remove_hash(), stripe 0 [ 1379.733102][ T937] remove_hash(), stripe 0 [ 1379.733133][ T937] remove_hash(), stripe 0 [ 1379.733166][ T937] remove_hash(), stripe 0 [ 1379.733196][ T937] remove_hash(), stripe 0 [ 1379.733227][ T937] remove_hash(), stripe 0 [ 1379.733265][ T937] remove_hash(), stripe 0 [ 1379.733304][ T937] remove_hash(), stripe 0 [ 1379.733335][ T937] remove_hash(), stripe 0 [ 1379.733368][ T937] remove_hash(), stripe 0 [ 1379.733400][ T937] remove_hash(), stripe 0 [ 1379.733431][ T937] remove_hash(), stripe 0 [ 1379.733461][ T937] remove_hash(), stripe 0 [ 1379.733492][ T937] remove_hash(), stripe 0 [ 1379.733531][ T937] remove_hash(), stripe 0 [ 1379.733562][ T937] remove_hash(), stripe 0 [ 1379.733597][ T937] remove_hash(), stripe 0 [ 1379.733629][ T937] remove_hash(), stripe 0 [ 1379.733670][ T937] remove_hash(), stripe 0 [ 1379.733705][ T937] remove_hash(), stripe 0 [ 1379.733739][ T937] remove_hash(), stripe 0 [ 1379.866483][ T937] remove_hash(), stripe 0 [ 1379.866523][ T937] remove_hash(), stripe 0 [ 1379.880694][ T937] remove_hash(), stripe 0 [ 1379.887350][ T937] remove_hash(), stripe 0 [ 1379.887394][ T937] remove_hash(), stripe 0 [ 1379.887427][ T937] remove_hash(), stripe 0 [ 1379.903184][ T937] remove_hash(), stripe 0 [ 1379.903223][ T937] remove_hash(), stripe 0 [ 1379.916185][ T937] remove_hash(), stripe 0 [ 1379.916224][ T937] remove_hash(), stripe 0 [ 1379.916259][ T937] remove_hash(), stripe 0 [ 1379.931837][ T937] remove_hash(), stripe 0 [ 1379.931880][ T937] remove_hash(), stripe 0 [ 1379.944778][ T937] remove_hash(), stripe 0 [ 1379.944815][ T937] remove_hash(), stripe 0 [ 1379.962217][ T937] remove_hash(), stripe 0 [ 1379.962258][ T937] remove_hash(), stripe 0 [ 1379.962290][ T937] remove_hash(), stripe 0 [ 1379.977542][ T937] remove_hash(), stripe 0 [ 1379.977582][ T937] remove_hash(), stripe 0 [ 1379.977615][ T937] remove_hash(), stripe 0 [ 1379.989536][ T937] remove_hash(), stripe 0 [ 1379.989577][ T937] remove_hash(), stripe 0 [ 1380.005802][ T937] remove_hash(), stripe 0 [ 1380.005847][ T937] remove_hash(), stripe 0 [ 1380.021591][ T937] remove_hash(), stripe 0 [ 1380.021632][ T937] remove_hash(), stripe 0 [ 1380.021666][ T937] remove_hash(), stripe 0 [ 1380.033822][ T937] remove_hash(), stripe 0 [ 1380.033858][ T937] remove_hash(), stripe 0 [ 1380.048898][ T937] remove_hash(), stripe 0 [ 1380.048935][ T937] remove_hash(), stripe 0 [ 1380.048968][ T937] remove_hash(), stripe 0 [ 1380.063451][ T937] remove_hash(), stripe 0 [ 1380.063491][ T937] remove_hash(), stripe 0 [ 1380.096122][ T1159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.177788][ T937] remove_hash(), stripe 0 [ 1380.177834][ T937] remove_hash(), stripe 0 [ 1380.177866][ T937] remove_hash(), stripe 0 [ 1380.177899][ T937] remove_hash(), stripe 0 [ 1380.177933][ T937] remove_hash(), stripe 0 [ 1380.177967][ T937] remove_hash(), stripe 0 [ 1380.177999][ T937] remove_hash(), stripe 0 [ 1380.178031][ T937] remove_hash(), stripe 0 [ 1380.178061][ T937] remove_hash(), stripe 0 [ 1380.178094][ T937] remove_hash(), stripe 0 [ 1380.178127][ T937] remove_hash(), stripe 0 [ 1380.178159][ T937] remove_hash(), stripe 0 [ 1380.178192][ T937] remove_hash(), stripe 0 [ 1380.178224][ T937] remove_hash(), stripe 0 [ 1380.178259][ T937] remove_hash(), stripe 0 [ 1380.178289][ T937] remove_hash(), stripe 0 [ 1380.178321][ T937] remove_hash(), stripe 0 [ 1380.178351][ T937] remove_hash(), stripe 0 [ 1380.178382][ T937] remove_hash(), stripe 0 [ 1380.178413][ T937] remove_hash(), stripe 0 [ 1380.178443][ T937] remove_hash(), stripe 0 [ 1380.178474][ T937] remove_hash(), stripe 0 [ 1380.178505][ T937] remove_hash(), stripe 0 [ 1380.178535][ T937] remove_hash(), stripe 0 [ 1380.178567][ T937] remove_hash(), stripe 0 [ 1380.178598][ T937] remove_hash(), stripe 0 [ 1380.178629][ T937] remove_hash(), stripe 0 [ 1380.178661][ T937] remove_hash(), stripe 0 [ 1380.178694][ T937] remove_hash(), stripe 0 [ 1380.178730][ T937] remove_hash(), stripe 0 [ 1380.178762][ T937] remove_hash(), stripe 0 [ 1380.178796][ T937] remove_hash(), stripe 0 [ 1380.178830][ T937] remove_hash(), stripe 0 [ 1380.178863][ T937] remove_hash(), stripe 0 [ 1380.178895][ T937] remove_hash(), stripe 0 [ 1380.178929][ T937] remove_hash(), stripe 0 [ 1380.376183][ T937] remove_hash(), stripe 0 [ 1380.376223][ T937] remove_hash(), stripe 0 [ 1380.376300][ T937] remove_hash(), stripe 0 [ 1380.376333][ T937] remove_hash(), stripe 0 [ 1380.376365][ T937] remove_hash(), stripe 0 [ 1380.376437][ T937] remove_hash(), stripe 0 [ 1380.376471][ T937] remove_hash(), stripe 0 [ 1380.376502][ T937] remove_hash(), stripe 0 [ 1380.377038][ T937] remove_hash(), stripe 0 [ 1380.377074][ T937] remove_hash(), stripe 0 [ 1380.377109][ T937] remove_hash(), stripe 0 [ 1380.377141][ T937] remove_hash(), stripe 0 [ 1380.378217][ T937] remove_hash(), stripe 0 [ 1380.378531][ T961] fuse: Bad value for 'fd' [ 1380.378793][ T937] remove_hash(), stripe 0 [ 1380.378827][ T937] remove_hash(), stripe 0 [ 1380.378860][ T937] remove_hash(), stripe 0 [ 1380.379734][ T937] remove_hash(), stripe 0 [ 1380.379769][ T937] remove_hash(), stripe 0 [ 1380.380622][ T937] remove_hash(), stripe 0 [ 1380.380657][ T937] remove_hash(), stripe 0 [ 1380.380697][ T937] remove_hash(), stripe 0 [ 1380.380730][ T937] remove_hash(), stripe 0 [ 1380.380763][ T937] remove_hash(), stripe 0 [ 1380.380802][ T937] remove_hash(), stripe 0 [ 1380.411005][ T937] remove_hash(), stripe 0 [ 1380.525597][ T5681] usb 9-1: USB disconnect, device number 17 [ 1380.795700][ T1159] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.842395][ T937] md/raid:md0: failed to run raid set. [ 1380.842407][ T937] md: pers->run() failed ... [ 1380.875441][ T1159] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.898772][ T985] 9pnet_virtio: no channels available for device syz [ 1380.977380][ T1159] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.064982][ T1159] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.717112][ T37] kauditd_printk_skb: 71 callbacks suppressed [ 1381.717125][ T37] audit: type=1800 audit(1785938345.602:646): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 1381.783875][ T37] audit: type=1800 audit(1785938345.672:647): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=458147 res=0 errno=0 [ 1381.794011][ T37] audit: type=1800 audit(1785938345.672:648): pid=373 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=458152 res=0 errno=0 [ 1381.828670][ T37] audit: type=1800 audit(1785938345.712:649): pid=373 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=458156 res=0 errno=0 [ 1381.834434][ T37] audit: type=1800 audit(1785938345.722:650): pid=373 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=458155 res=0 errno=0 [ 1381.834459][ T37] audit: type=1800 audit(1785938345.722:651): pid=373 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=458158 res=0 errno=0 [ 1381.895129][ T37] audit: type=1800 audit(1785938345.782:652): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=458233 res=0 errno=0 [ 1381.913197][ T37] audit: type=1800 audit(1785938345.782:653): pid=322 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=458238 res=0 errno=0 [ 1381.944586][ T37] audit: type=1800 audit(1785938345.822:654): pid=322 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=458242 res=0 errno=0 [ 1381.952723][ T37] audit: type=1800 audit(1785938345.832:655): pid=322 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=458241 res=0 errno=0 [ 1382.072904][ T1159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.155472][ T1159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.178799][ T1011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1382.178884][ T1011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1382.244622][ T1159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.255073][ T1012] veth0: entered promiscuous mode [ 1382.280350][ T1012] tipc: Cannot configure node identity twice [ 1382.310671][ T1159] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.334299][ T1010] veth0: left promiscuous mode [ 1382.494928][ T1159] bridge_slave_1: left allmulticast mode [ 1382.494944][ T1159] bridge_slave_1: left promiscuous mode [ 1382.495104][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.528155][ T1159] bridge_slave_0: left allmulticast mode [ 1382.528173][ T1159] bridge_slave_0: left promiscuous mode [ 1382.528268][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.576993][ T1159] bridge_slave_1: left allmulticast mode [ 1382.577011][ T1159] bridge_slave_1: left promiscuous mode [ 1382.577116][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.607113][ T1159] bridge_slave_0: left allmulticast mode [ 1382.607130][ T1159] bridge_slave_0: left promiscuous mode [ 1382.607229][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.676303][ T1159] bridge_slave_1: left allmulticast mode [ 1382.676320][ T1159] bridge_slave_1: left promiscuous mode [ 1382.676436][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.722971][ T1159] bridge_slave_0: left allmulticast mode [ 1382.722988][ T1159] bridge_slave_0: left promiscuous mode [ 1382.723094][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.692520][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.699404][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.722169][ T1159] bond0 (unregistering): Released all slaves [ 1385.890682][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.909088][ T1072] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9845'. [ 1385.920566][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.931845][ T1159] bond0 (unregistering): Released all slaves [ 1386.057430][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.072931][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.077432][ T1159] bond0 (unregistering): Released all slaves [ 1386.154478][ T1089] fuse: fd is not a fuse device [ 1386.802067][ T1124] fuse: fd is not a fuse device [ 1387.013609][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 1387.013621][ T37] audit: type=1800 audit(1785938350.892:697): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 1387.135793][ T37] audit: type=1800 audit(1785938351.022:698): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=458855 res=0 errno=0 [ 1387.617822][ T1159] hsr_slave_0: left promiscuous mode [ 1387.636611][ T1159] hsr_slave_1: left promiscuous mode [ 1387.637298][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.637312][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.658524][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.658538][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.726903][ T1159] hsr_slave_0: left promiscuous mode [ 1387.751182][ T1159] hsr_slave_1: left promiscuous mode [ 1387.751824][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.751837][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.756074][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.756088][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.808917][ T1159] hsr_slave_0: left promiscuous mode [ 1387.810712][ T1159] hsr_slave_1: left promiscuous mode [ 1387.827146][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.827163][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.831063][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.831079][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.904851][ T1159] veth1_macvtap: left promiscuous mode [ 1387.904887][ T1159] veth0_macvtap: left promiscuous mode [ 1387.904982][ T1159] veth1_vlan: left promiscuous mode [ 1387.905072][ T1159] veth0_vlan: left promiscuous mode [ 1387.956407][ T1159] veth1_macvtap: left promiscuous mode [ 1387.956442][ T1159] veth0_macvtap: left promiscuous mode [ 1387.956528][ T1159] veth1_vlan: left promiscuous mode [ 1387.956585][ T1159] veth0_vlan: left promiscuous mode [ 1388.023179][ T1159] veth1_macvtap: left promiscuous mode [ 1388.023214][ T1159] veth0_macvtap: left promiscuous mode [ 1388.023325][ T1159] veth1_vlan: left promiscuous mode [ 1388.023383][ T1159] veth0_vlan: left promiscuous mode [ 1388.075108][ T37] audit: type=1800 audit(1785938351.952:699): pid=4955 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15776 res=0 errno=0 [ 1388.153510][ T37] audit: type=1800 audit(1785938352.042:700): pid=1163 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.9870" name="UDC" dev="configfs" ino=146164 res=0 errno=0 [ 1388.160460][ T1163] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1388.160478][ T1163] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1388.160486][ T1163] ================================================================== [ 1388.160493][ T1163] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3f/0x80 [ 1388.160514][ T1163] Read of size 8 at addr ffff88806dfc27f0 by task syz.2.9870/1163 [ 1388.160524][ T1163] [ 1388.160534][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: syz.2.9870 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1388.160549][ T1163] Tainted: [L]=SOFTLOCKUP [ 1388.160553][ T1163] Hardware name: Google Googl[ 1388.160553][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1388.160560][ T1163] Call Trace: [ 1388.160565][ T1163] [ 1388.160570][ T1163] dump_stack_lvl+0xe8/0x150 [ 1388.160586][ T1163] print_address_description+0x55/0x1e0 [ 1388.160603][ T1163] ? dummy_free_request+0x3f/0x80 [ 1388.160617][ T1163] print_report+0x58/0x70 [ 1388.160631][ T1163] kasan_report+0x117/0x150 [ 1388.160641][ T1163] ? dummy_free_request+0x3f/0x80 [ 1388.160656][ T1163] dummy_free_request+0x3f/0x80 [ 1388.160669][ T1163] uvc_function_bind+0xe5d/0x15a0 [ 1388.160683][ T1163] usb_add_function+0x290/0x930 [ 1388.160696][ T1163] configfs_composite_bind+0xde0/0x1410 [ 1388.160712][ T1163] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1388.160725][ T1163] gadget_bind_driver+0x2ca/0x9e0 [ 1388.160737][ T1163] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1388.160746][ T1163] really_probe+0x254/0xae0 [ 1388.160759][ T1163] __driver_probe_device+0x1e8/0x360 [ 1388.160779][ T1163] driver_probe_device+0x4f/0x240 [ 1388.160792][ T1163] __driver_attach+0x339/0x600 [ 1388.160804][ T1163] bus_for_each_dev+0x23e/0x2c0 [ 1388.160820][ T1163] ? __pfx___driver_attach+0x10/0x10 [ 1388.160834][ T1163] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1388.160850][ T1163] ? rt_spin_unlock+0x163/0x200 [ 1388.160865][ T1163] bus_add_driver+0x348/0x670 [ 1388.160880][ T1163] driver_register+0x23a/0x320 [ 1388.160894][ T1163] usb_gadget_register_driver_owner+0xf9/0x270 [ 1388.160910][ T1163] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1388.160920][ T1163] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1388.160931][ T1163] configfs_write_iter+0x33a/0x430 [ 1388.160943][ T1163] vfs_write+0x61e/0xbb0 [ 1388.160956][ T1163] ? __pfx_vfs_write+0x10/0x10 [ 1388.160974][ T1163] ? trace_irq_enable+0x3b/0x140 [ 1388.160985][ T1163] ? mutex_lock_nested+0x152/0x1d0 [ 1388.160998][ T1163] ? fdget_pos+0x252/0x320 [ 1388.161011][ T1163] ksys_write+0x156/0x270 [ 1388.161023][ T1163] ? __pfx_ksys_write+0x10/0x10 [ 1388.161035][ T1163] ? rcu_is_watching+0x15/0xb0 [ 1388.161048][ T1163] do_syscall_64+0x17b/0x530 [ 1388.161059][ T1163] ? irqentry_exit+0x10f/0x8f0 [ 1388.161069][ T1163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.161079][ T1163] ? clear_bhb_loop+0x40/0x90 [ 1388.161091][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.161101][ T1163] RIP: 0033:0x7f14c4e3e0d9 [ 1388.161112][ T1163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.161121][ T1163] RSP: 002b:00007f14c3096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1388.161134][ T1163] RAX: ffffffffffffffda RBX: 00007f14c50c5fa0 RCX: 00007f14c4e3e0d9 [ 1388.161142][ T1163] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000005 [ 1388.161149][ T1163] RBP: 00007f14c4ed5024 R08: 0000000000000000 R09: 0000000000000000 [ 1388.161155][ T1163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1388.161162][ T1163] R13: 00007f14c50c6038 R14: 00007f14c50c5fa0 R15: 00007ffed5a09008 [ 1388.161172][ T1163] [ 1388.161176][ T1163] [ 1388.161188][ T1163] Allocated by task 833: [ 1388.161247][ T1163] kasan_save_track+0x3e/0x80 [ 1388.161262][ T1163] __kasan_kmalloc+0x93/0xb0 [ 1388.161276][ T1163] __kmalloc_cache_noprof+0x3cd/0x670 [ 1388.161290][ T1163] cdev_alloc+0x4c/0xc0 [ 1388.161303][ T1163] __video_register_device+0x396e/0x4aa0 [ 1388.161318][ T1163] uvc_register_video+0x296/0x370 [ 1388.161331][ T1163] uvc_function_bind+0x108d/0x15a0 [ 1388.161340][ T1163] usb_add_function+0x290/0x930 [ 1388.161351][ T1163] configfs_composite_bind+0xde0/0x1410 [ 1388.161363][ T1163] gadget_bind_driver+0x2ca/0x9e0 [ 1388.161372][ T1163] really_probe+0x254/0xae0 [ 1388.161383][ T1163] __driver_probe_device+0x1e8/0x360 [ 1388.161394][ T1163] driver_probe_device+0x4f/0x240 [ 1388.161405][ T1163] __driver_attach+0x339/0x600 [ 1388.161415][ T1163] bus_for_each_dev+0x23e/0x2c0 [ 1388.161428][ T1163] bus_add_driver+0x348/0x670 [ 1388.161440][ T1163] driver_register+0x23a/0x320 [ 1388.161452][ T1163] usb_gadget_register_driver_owner+0xf9/0x270 [ 1388.161466][ T1163] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1388.161475][ T1163] configfs_write_iter+0x33a/0x430 [ 1388.161485][ T1163] vfs_write+0x61e/0xbb0 [ 1388.161495][ T1163] ksys_write+0x156/0x270 [ 1388.161504][ T1163] do_syscall_64+0x17b/0x530 [ 1388.161513][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.161522][ T1163] [ 1388.161525][ T1163] Freed by task 833: [ 1388.161530][ T1163] kasan_save_track+0x3e/0x80 [ 1388.161542][ T1163] kasan_save_free_info+0x40/0x50 [ 1388.161553][ T1163] __kasan_slab_free+0x5c/0x80 [ 1388.161566][ T1163] kfree+0x1c5/0x6c0 [ 1388.161577][ T1163] cdev_dynamic_release+0x1b1/0x1d0 [ 1388.161590][ T1163] kobject_put+0x222/0x550 [ 1388.161600][ T1163] v4l2_device_release+0x147/0x460 [ 1388.161613][ T1163] device_release+0xc4/0x1f0 [ 1388.161624][ T1163] kobject_put+0x222/0x550 [ 1388.161634][ T1163] uvc_function_unbind+0x4a5/0xc20 [ 1388.161643][ T1163] purge_configs_funcs+0x248/0x3d0 [ 1388.161655][ T1163] configfs_composite_bind+0x106d/0x1410 [ 1388.161666][ T1163] gadget_bind_driver+0x2ca/0x9e0 [ 1388.161675][ T1163] really_probe+0x254/0xae0 [ 1388.161685][ T1163] __driver_probe_device+0x1e8/0x360 [ 1388.161696][ T1163] driver_probe_device+0x4f/0x240 [ 1388.161707][ T1163] __driver_attach+0x339/0x600 [ 1388.161717][ T1163] bus_for_each_dev+0x23e/0x2c0 [ 1388.161730][ T1163] bus_add_driver+0x348/0x670 [ 1388.161742][ T1163] driver_register+0x23a/0x320 [ 1388.161754][ T1163] usb_gadget_register_driver_owner+0xf9/0x270 [ 1388.161768][ T1163] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1388.161778][ T1163] configfs_write_iter+0x33a/0x430 [ 1388.161787][ T1163] vfs_write+0x61e/0xbb0 [ 1388.161797][ T1163] ksys_write+0x156/0x270 [ 1388.161806][ T1163] do_syscall_64+0x17b/0x530 [ 1388.161815][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.161824][ T1163] [ 1388.161826][ T1163] The buggy address belongs to the object at ffff88806dfc2700 [ 1388.161826][ T1163] which belongs to the cache kmalloc-128 of size 128 [ 1388.161866][ T1163] The buggy address is located 112 bytes to the right of [ 1388.161866][ T1163] allocated 128-byte region [ffff88806dfc2700, ffff88806dfc2780) [ 1388.161878][ T1163] [ 1388.161881][ T1163] The buggy address belongs to the physical page: [ 1388.161914][ T1163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806dfc2b00 pfn:0x6dfc2 [ 1388.161926][ T1163] flags: 0x80000000000200(workingset|node=0|zone=1) [ 1388.161935][ T1163] page_type: f5(slab) [ 1388.161945][ T1163] raw: 0080000000000200 ffff88813fe37a00 ffffea000103b890 ffffea0000f552d0 [ 1388.161955][ T1163] raw: ffff88806dfc2b00 0000000800100003 00000000f5000000 0000000000000000 [ 1388.161960][ T1163] page dumped because: kasan: bad access detected [ 1388.161978][ T1163] page_owner tracks the page as allocated [ 1388.161983][ T1163] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 32649, tgid 32648 (syz.1.9534), ts 1351847748478 [ 1388.162001][ T1163] post_alloc_hook+0x1f9/0x250 [ 1388.162016][ T1163] get_page_from_freelist+0x264c/0x26c0 [ 1388.162030][ T1163] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 1388.162045][ T1163] allocate_slab+0x7c/0x5e0 [ 1388.162055][ T1163] refill_objects+0x2d8/0x350 [ 1388.162065][ T1163] __pcs_replace_empty_main+0x330/0x690 [ 1388.162074][ T1163] __kmalloc_noprof+0x543/0x790 [ 1388.162087][ T1163] hash_netnet4_add+0x1f36/0x27b0 [ 1388.162101][ T1163] hash_netnet4_uadt+0xbd4/0xf00 [ 1388.162113][ T1163] call_ad+0x2ee/0xa30 [ 1388.162127][ T1163] ip_set_ad+0x82a/0x9d0 [ 1388.162139][ T1163] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 1388.162151][ T1163] netlink_rcv_skb+0x226/0x4a0 [ 1388.162165][ T1163] nfnetlink_rcv+0x2b9/0x28d0 [ 1388.162177][ T1163] netlink_unicast+0x7f5/0x990 [ 1388.162188][ T1163] netlink_sendmsg+0x813/0xb40 [ 1388.162202][ T1163] page last free pid 21 tgid 21 ts 1351841792408 stack trace: [ 1388.162210][ T1163] __free_frozen_pages+0x1185/0x1270 [ 1388.162222][ T1163] tlb_remove_table_rcu+0x85/0x100 [ 1388.162231][ T1163] rcu_cpu_kthread+0x950/0x1480 [ 1388.162241][ T1163] smpboot_thread_fn+0x57c/0xa80 [ 1388.162251][ T1163] kthread+0x388/0x470 [ 1388.162263][ T1163] ret_from_fork+0x514/0xb70 [ 1388.162275][ T1163] ret_from_fork_asm+0x1a/0x30 [ 1388.162288][ T1163] [ 1388.162290][ T1163] Memory state around the buggy address: [ 1388.162296][ T1163] ffff88806dfc2680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1388.162303][ T1163] ffff88806dfc2700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1388.162310][ T1163] >ffff88806dfc2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1388.162315][ T1163] ^ [ 1388.162348][ T1163] ffff88806dfc2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1388.162355][ T1163] ffff88806dfc2880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1388.162361][ T1163] ================================================================== [ 1388.255457][ T1163] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1388.255474][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: syz.2.9870 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1388.255490][ T1163] Tainted: [L]=SOFTLOCKUP [ 1388.255495][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1388.255502][ T1163] Call Trace: [ 1388.255507][ T1163] [ 1388.255513][ T1163] vpanic+0x56c/0xa60 [ 1388.255528][ T1163] ? __pfx_vpanic+0x10/0x10 [ 1388.255539][ T1163] ? __pfx___schedule+0x10/0x10 [ 1388.255557][ T1163] panic+0xc5/0xd0 [ 1388.255566][ T1163] ? __pfx_panic+0x10/0x10 [ 1388.255576][ T1163] ? preempt_schedule_thunk+0x16/0x40 [ 1388.255589][ T1163] ? dummy_free_request+0x3f/0x80 [ 1388.255604][ T1163] check_panic_on_warn+0x89/0xb0 [ 1388.255618][ T1163] ? dummy_free_request+0x3f/0x80 [ 1388.255632][ T1163] end_report+0x73/0x170 [ 1388.255641][ T1163] ? dummy_free_request+0x3f/0x80 [ 1388.255654][ T1163] kasan_report+0x128/0x150 [ 1388.255663][ T1163] ? dummy_free_request+0x3f/0x80 [ 1388.255678][ T1163] dummy_free_request+0x3f/0x80 [ 1388.255692][ T1163] uvc_function_bind+0xe5d/0x15a0 [ 1388.255706][ T1163] usb_add_function+0x290/0x930 [ 1388.255720][ T1163] configfs_composite_bind+0xde0/0x1410 [ 1388.255735][ T1163] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1388.255748][ T1163] gadget_bind_driver+0x2ca/0x9e0 [ 1388.255760][ T1163] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1388.255769][ T1163] really_probe+0x254/0xae0 [ 1388.255783][ T1163] __driver_probe_device+0x1e8/0x360 [ 1388.255796][ T1163] driver_probe_device+0x4f/0x240 [ 1388.255808][ T1163] __driver_attach+0x339/0x600 [ 1388.255820][ T1163] bus_for_each_dev+0x23e/0x2c0 [ 1388.255835][ T1163] ? __pfx___driver_attach+0x10/0x10 [ 1388.255846][ T1163] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1388.255861][ T1163] ? rt_spin_unlock+0x163/0x200 [ 1388.255875][ T1163] bus_add_driver+0x348/0x670 [ 1388.255891][ T1163] driver_register+0x23a/0x320 [ 1388.255904][ T1163] usb_gadget_register_driver_owner+0xf9/0x270 [ 1388.255921][ T1163] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1388.255932][ T1163] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1388.255943][ T1163] configfs_write_iter+0x33a/0x430 [ 1388.255956][ T1163] vfs_write+0x61e/0xbb0 [ 1388.255975][ T1163] ? __pfx_vfs_write+0x10/0x10 [ 1388.255987][ T1163] ? trace_irq_enable+0x3b/0x140 [ 1388.255998][ T1163] ? mutex_lock_nested+0x152/0x1d0 [ 1388.256010][ T1163] ? fdget_pos+0x252/0x320 [ 1388.256023][ T1163] ksys_write+0x156/0x270 [ 1388.256034][ T1163] ? __pfx_ksys_write+0x10/0x10 [ 1388.256046][ T1163] ? rcu_is_watching+0x15/0xb0 [ 1388.256059][ T1163] do_syscall_64+0x17b/0x530 [ 1388.256070][ T1163] ? irqentry_exit+0x10f/0x8f0 [ 1388.256079][ T1163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.256089][ T1163] ? clear_bhb_loop+0x40/0x90 [ 1388.256100][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.256111][ T1163] RIP: 0033:0x7f14c4e3e0d9 [ 1388.256123][ T1163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.256132][ T1163] RSP: 002b:00007f14c3096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1388.256144][ T1163] RAX: ffffffffffffffda RBX: 00007f14c50c5fa0 RCX: 00007f14c4e3e0d9 [ 1388.256152][ T1163] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000005 [ 1388.256159][ T1163] RBP: 00007f14c4ed5024 R08: 0000000000000000 R09: 0000000000000000 [ 1388.256165][ T1163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1388.256172][ T1163] R13: 00007f14c50c6038 R14: 00007f14c50c5fa0 R15: 00007ffed5a09008 [ 1388.256184][ T1163] [ 1388.256241][ T1163] Kernel Offset: disabled