last executing test programs: 2m36.035143826s ago: executing program 3 (id=2036): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) unshare(0x28000600) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT], 0x401, 0x800) shutdown(r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x2, 0x40010062, 0x0) 2m34.784148346s ago: executing program 3 (id=2038): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0xc0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2m31.156151443s ago: executing program 3 (id=2046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept(r3, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pwrite64$ublk_bdev(r0, &(0x7f0000000180), 0x0, 0x7f) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_gettime(0x6, &(0x7f00000000c0)) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 2m26.355867479s ago: executing program 3 (id=2051): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 2m24.384523327s ago: executing program 3 (id=2055): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0xc0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 2m22.376697145s ago: executing program 3 (id=2059): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m5.384366345s ago: executing program 32 (id=2059): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 28.448361704s ago: executing program 1 (id=2406): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r0, 0x0, 0x0) 26.652568067s ago: executing program 1 (id=2411): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d06, &(0x7f0000000040)="00000200000000000000") 26.326320105s ago: executing program 1 (id=2413): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101", @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc", 0x99}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 25.756441929s ago: executing program 1 (id=2418): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000440)={0xffffffffffffffff, 0xfffffc00, 0x1}) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x8044) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000", @ANYRES32=r6, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 8.856169227s ago: executing program 0 (id=2468): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140)=""/159, 0x9f, 0x60, 0x0, 0x0) 8.440445007s ago: executing program 0 (id=2471): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x83, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x3, 0x80, 0xe, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x7, 0x11, 0x3}, [@extension_unit={0x8, 0x24, 0x9, 0x3, 0xd, 0xfd, "81"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0xf5, 0x4, {0x8, 0x25, 0x1, 0x0, 0x33, 0x4, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0xf6, 0x2, {0x8, 0x25, 0x1, 0x14bce3cd00dd8fde, 0x3, 0xfd, 0x9}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 6.060489014s ago: executing program 2 (id=2477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.82429309s ago: executing program 2 (id=2478): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r3, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000020000002cbd700003350000020000004d000000"], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e00200001e00010029bd7000fcdbdf2514000000cc00f30077650b8a3ff9624abc1fd3da1bc0c6165a422c86814441545cb1b21b10faf9156b52762a3a585b0505a754f2b3179eb9f54b9c7acb9b63e89f0a7cf36901758b047a9eb5721469c5ab335e702191f66210049ccf5281e56ba0", @ANYRES32, @ANYBLOB="8f00"], 0x2e0}, 0x1, 0x0, 0x0, 0x890}, 0x20004080) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') 5.590972466s ago: executing program 4 (id=2479): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,cach']) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0x30000, 0xc000, 0x1}) 4.5777926s ago: executing program 2 (id=2480): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x133000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 3.447479487s ago: executing program 4 (id=2481): syz_open_dev$dri(0x0, 0x0, 0x133000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 3.444587847s ago: executing program 2 (id=2482): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x5e8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5bc, 0x2, [@TCA_BPF_ACT={0x5b8, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xbc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x45, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x14c, 0x13, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x62, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e10"}}]}, {0x99, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.437557517s ago: executing program 0 (id=2483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x9, &(0x7f0000000100)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 3.32903734s ago: executing program 2 (id=2484): openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x200000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x3, 0x0, 0xb47, 0x8, 0x0, 0xfffffff7, 0x401}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x60dc7000) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) read(r1, &(0x7f0000000180)=""/236, 0xec) 3.120508425s ago: executing program 2 (id=2485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.052157467s ago: executing program 1 (id=2422): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101", @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.899998955s ago: executing program 4 (id=2487): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r3, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000020000002cbd700003350000020000004d000000"], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e00200001e00010029bd7000fcdbdf2514000000cc00f30077650b8a3ff9624abc1fd3da1bc0c6165a422c86814441545cb1b21b10faf9156b52762a3a585b0505a754f2b3179eb9f54b9c7acb9b63e89f0a7cf36901758b047a9eb5721469c5ab335e702191f66210049ccf5281e56ba0", @ANYRES32, @ANYBLOB="8f00"], 0x2e0}, 0x1, 0x0, 0x0, 0x890}, 0x20004080) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') 1.590049162s ago: executing program 0 (id=2488): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140)=""/159, 0x9f, 0x60, 0x0, 0x0) 652.453495ms ago: executing program 0 (id=2489): syz_emit_ethernet(0x76, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @fragment={0x4, 0x0, 0xb9, 0x1, 0x0, 0x12, 0x65}]}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x41}, @empty, 0x7, 0x7fff, 0x3d, 0x500, 0x5, 0x19c0000, r1}) 651.181125ms ago: executing program 1 (id=2490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0', 0xa) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0xffffffffffffffff, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x50) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x8) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r6) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0xfff, 0xa925, 0x9, 0x8007, 0x8, "7a3800e5ffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x16) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0xe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x544, r6) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r8}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r3, r0, 0x7}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 561.080037ms ago: executing program 4 (id=2491): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 248.591415ms ago: executing program 4 (id=2492): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x5e8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5bc, 0x2, [@TCA_BPF_ACT={0x5b8, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xbc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x45, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x14c, 0x13, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x62, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e10"}}]}, {0x99, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 36.49924ms ago: executing program 0 (id=2493): syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 0s ago: executing program 4 (id=2494): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) kernel console output (not intermixed with test programs): ce (046d:0825) [ 813.588503][T11918] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.1977: No space for directory leaf checksum. Please run e2fsck -D. [ 813.605867][T11918] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.1977: checksumming directory block 0 [ 813.619085][T11918] netdevsim netdevsim1: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 813.630648][T11918] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.1977: No space for directory leaf checksum. Please run e2fsck -D. [ 813.656612][T11918] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.1977: checksumming directory block 0 [ 813.669748][T11918] netdevsim netdevsim1: loading /lib/firmware/updates/. failed with error -74 [ 813.679985][T11918] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.1977: No space for directory leaf checksum. Please run e2fsck -D. [ 813.695656][T11918] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.1977: checksumming directory block 0 [ 813.708341][T11918] netdevsim netdevsim1: loading /lib/firmware/syzkaller/. failed with error -74 [ 813.773107][ T790] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 813.806046][ T27] kauditd_printk_skb: 128 callbacks suppressed [ 813.806099][ T27] audit: type=1326 audit(1786344951.794:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 813.855124][T11918] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 813.864152][T11918] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 813.873693][T11918] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 813.954934][ T790] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 814.078488][ T790] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 814.285172][ T27] audit: type=1326 audit(1786344951.794:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 814.374188][ T790] usb 3-1: USB disconnect, device number 46 [ 814.749920][ T27] audit: type=1326 audit(1786344951.794:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 815.241704][ T27] audit: type=1326 audit(1786344951.794:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 815.685836][ T27] audit: type=1326 audit(1786344951.794:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 816.098550][ T27] audit: type=1326 audit(1786344951.794:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 816.533296][ T27] audit: type=1326 audit(1786344951.794:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 816.745151][ T27] audit: type=1326 audit(1786344951.794:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 816.769777][ T27] audit: type=1326 audit(1786344951.794:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 816.794881][ T27] audit: type=1326 audit(1786344951.794:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.1.1977" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 821.558099][T11963] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.1989: No space for directory leaf checksum. Please run e2fsck -D. [ 821.573839][T11963] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.1989: checksumming directory block 0 [ 821.587842][T11963] netdevsim netdevsim1: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 821.598604][T11963] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.1989: No space for directory leaf checksum. Please run e2fsck -D. [ 821.679780][T11963] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.1989: checksumming directory block 0 [ 821.693595][T11963] netdevsim netdevsim1: loading /lib/firmware/updates/. failed with error -74 [ 821.706294][T11963] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.1989: No space for directory leaf checksum. Please run e2fsck -D. [ 821.723712][T11963] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.1989: checksumming directory block 0 [ 821.737322][T11963] netdevsim netdevsim1: loading /lib/firmware/syzkaller/. failed with error -74 [ 821.749387][T11963] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 821.758841][T11963] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 821.768566][T11963] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 821.800553][ T27] kauditd_printk_skb: 126 callbacks suppressed [ 821.800572][ T27] audit: type=1326 audit(1786344959.022:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 822.191972][ T27] audit: type=1326 audit(1786344959.022:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 822.454752][ T27] audit: type=1326 audit(1786344959.022:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 822.704623][ T27] audit: type=1326 audit(1786344959.032:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 822.968861][ T27] audit: type=1326 audit(1786344959.032:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 823.228861][ T27] audit: type=1326 audit(1786344959.032:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 823.553000][ T27] audit: type=1326 audit(1786344959.032:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 823.866229][ T27] audit: type=1326 audit(1786344959.032:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 824.167051][ T27] audit: type=1326 audit(1786344959.032:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 824.485309][ T27] audit: type=1326 audit(1786344959.032:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11959 comm="syz.1.1989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 832.178432][ T27] kauditd_printk_skb: 128 callbacks suppressed [ 832.178450][ T27] audit: type=1326 audit(1786344967.904:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.253680][ T27] audit: type=1326 audit(1786344967.904:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.315161][ T27] audit: type=1326 audit(1786344967.913:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.388073][ T27] audit: type=1326 audit(1786344967.913:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.439928][ T27] audit: type=1326 audit(1786344967.913:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.492048][ T27] audit: type=1326 audit(1786344967.913:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.539999][ T27] audit: type=1326 audit(1786344967.913:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.598651][ T27] audit: type=1326 audit(1786344967.922:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.645318][ T27] audit: type=1326 audit(1786344967.922:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 832.720616][ T27] audit: type=1326 audit(1786344967.922:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 836.771637][ T23] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 837.303675][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.319351][ T23] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 837.329269][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.376717][ T23] usb 2-1: config 0 descriptor?? [ 837.641926][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 837.652716][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 837.682749][ T23] usb 2-1: USB disconnect, device number 39 [ 839.876758][T12071] syz.1.2023 (12071): /proc/12070/oom_adj is deprecated, please use /proc/12070/oom_score_adj instead. [ 843.345942][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 843.345960][ T27] audit: type=1326 audit(1786344979.074:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 843.402865][ T27] audit: type=1326 audit(1786344979.084:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 843.464635][ T27] audit: type=1326 audit(1786344979.111:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 843.529793][ T27] audit: type=1326 audit(1786344979.111:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 845.183173][ T27] audit: type=1326 audit(1786344979.121:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 845.219517][ T27] audit: type=1326 audit(1786344979.121:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 845.316994][ T27] audit: type=1326 audit(1786344979.121:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 845.373387][ T27] audit: type=1326 audit(1786344979.130:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 845.429461][ T27] audit: type=1326 audit(1786344979.130:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.2.2031" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 845.569726][ T28] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 845.776852][ T28] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 845.793673][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.825826][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 845.835192][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.861929][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.924358][ T28] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 845.955438][ T28] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 845.977647][ T28] usb 3-1: Product: syz [ 845.981919][ T28] usb 3-1: Manufacturer: syz [ 846.008708][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 846.018984][ T28] cdc_wdm 3-1:1.0: skipping garbage [ 846.045620][ T28] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 846.064486][ T28] cdc_wdm 3-1:1.0: Unknown control protocol [ 846.559755][T12105] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 846.857271][ T28] usb 3-1: USB disconnect, device number 47 [ 850.483922][ T5843] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 850.635511][T12149] 0x20000000,0x20000000 overlaps existing 0x20000000,0x20000 [ 850.691072][ T5843] usb 1-1: not running at top speed; connect to a high speed hub [ 850.700841][ T5843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.722002][ T5843] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 850.734574][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.800196][ T5843] usb 1-1: Found UVC 1.00 device (046d:0825) [ 851.964481][T12157] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.3.2046: No space for directory leaf checksum. Please run e2fsck -D. [ 851.981684][T12157] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.3.2046: checksumming directory block 0 [ 851.995615][T12157] netdevsim netdevsim3: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 852.006215][T12157] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.3.2046: No space for directory leaf checksum. Please run e2fsck -D. [ 852.021774][T12157] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.3.2046: checksumming directory block 0 [ 852.034495][T12157] netdevsim netdevsim3: loading /lib/firmware/updates/. failed with error -74 [ 852.045034][T12157] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.3.2046: No space for directory leaf checksum. Please run e2fsck -D. [ 852.060566][T12157] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.3.2046: checksumming directory block 0 [ 852.073162][T12157] netdevsim netdevsim3: loading /lib/firmware/syzkaller/. failed with error -74 [ 852.083827][T12157] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 852.092488][T12157] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 852.101178][T12157] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 852.201618][ T5843] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 852.283848][ T27] audit: type=1326 audit(1786344987.189:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 852.417705][ T5843] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : 0 (exp. 26). [ 852.498026][ T5843] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 852.519496][ T27] audit: type=1326 audit(1786344987.189:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 852.797520][ T27] audit: type=1326 audit(1786344987.189:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 852.851345][T11638] usb 1-1: USB disconnect, device number 36 [ 853.124551][ T27] audit: type=1326 audit(1786344987.189:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 853.488141][ T27] audit: type=1326 audit(1786344987.189:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 853.870885][ T27] audit: type=1326 audit(1786344987.189:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 854.196459][ T27] audit: type=1326 audit(1786344987.189:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 855.304006][ T27] audit: type=1326 audit(1786344987.189:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 855.330042][ T27] audit: type=1326 audit(1786344987.199:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 855.355777][ T27] audit: type=1326 audit(1786344987.199:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.3.2046" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4df9e0d9 code=0x7ffc0000 [ 858.185296][ T790] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 858.435731][ T790] usb 3-1: not running at top speed; connect to a high speed hub [ 858.447998][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.470645][ T790] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 858.490109][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.516314][ T790] usb 3-1: Found UVC 1.00 device (046d:0825) [ 859.732965][ T790] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 859.755449][ T790] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : 0 (exp. 26). [ 859.777652][ T790] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 859.990660][T12196] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.0.2060: No space for directory leaf checksum. Please run e2fsck -D. [ 860.006359][T12196] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.0.2060: checksumming directory block 0 [ 860.019533][T12196] netdevsim netdevsim0: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 860.030363][T12196] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.0.2060: No space for directory leaf checksum. Please run e2fsck -D. [ 860.045913][T12196] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.0.2060: checksumming directory block 0 [ 860.058668][T12196] netdevsim netdevsim0: loading /lib/firmware/updates/. failed with error -74 [ 860.068520][T12196] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.0.2060: No space for directory leaf checksum. Please run e2fsck -D. [ 860.084552][T12196] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.0.2060: checksumming directory block 0 [ 860.097316][T12196] netdevsim netdevsim0: loading /lib/firmware/syzkaller/. failed with error -74 [ 860.107832][T12196] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 860.124048][T12196] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 860.132653][T12196] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 860.254719][ T5766] usb 3-1: USB disconnect, device number 48 [ 860.264955][ T790] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 860.279060][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 860.279078][ T27] audit: type=1326 audit(1786344994.649:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 861.110562][ T27] audit: type=1326 audit(1786344994.649:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.495013][ T27] audit: type=1326 audit(1786344994.649:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.520622][ T27] audit: type=1326 audit(1786344994.649:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.545390][ T27] audit: type=1326 audit(1786344994.649:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.570596][ T27] audit: type=1326 audit(1786344994.649:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.596161][ T27] audit: type=1326 audit(1786344994.649:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.620869][ T27] audit: type=1326 audit(1786344994.667:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.648235][ T27] audit: type=1326 audit(1786344994.667:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.694959][ T27] audit: type=1326 audit(1786344994.667:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.0.2060" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 862.738829][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.757298][ T790] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 862.766761][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.781353][ T790] usb 2-1: config 0 descriptor?? [ 863.072993][ T790] usbhid 2-1:0.0: can't add hid device: -71 [ 863.079068][ T790] usbhid: probe of 2-1:0.0 failed with error -71 [ 863.114108][ T790] usb 2-1: USB disconnect, device number 40 [ 864.093821][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.274080][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.636670][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'. [ 865.680866][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2066'. [ 865.955069][T12219] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.2070: No space for directory leaf checksum. Please run e2fsck -D. [ 865.970839][T12219] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.2070: checksumming directory block 0 [ 865.983544][T12219] netdevsim netdevsim1: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 865.994209][T12219] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.2070: No space for directory leaf checksum. Please run e2fsck -D. [ 866.009914][T12219] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.2070: checksumming directory block 0 [ 866.022827][T12219] netdevsim netdevsim1: loading /lib/firmware/updates/. failed with error -74 [ 866.032715][T12219] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.2070: No space for directory leaf checksum. Please run e2fsck -D. [ 866.048254][T12219] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.2070: checksumming directory block 0 [ 866.060892][T12219] netdevsim netdevsim1: loading /lib/firmware/syzkaller/. failed with error -74 [ 866.071793][T12219] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 866.080214][T12219] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 866.088999][T12219] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 866.206198][ T27] kauditd_printk_skb: 166 callbacks suppressed [ 866.206243][ T27] audit: type=1326 audit(1786345000.142:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 866.513350][ T8] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 868.302262][ T27] audit: type=1326 audit(1786345000.142:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 868.359422][ T27] audit: type=1326 audit(1786345000.142:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 868.393394][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 868.403868][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.418675][ T27] audit: type=1326 audit(1786345000.142:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 868.419514][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 868.458503][ T27] audit: type=1326 audit(1786345000.142:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 868.483751][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.519589][ T27] audit: type=1326 audit(1786345000.142:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 868.579875][ T27] audit: type=1326 audit(1786345000.151:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 868.583055][ T8] usb 1-1: Found UVC 1.00 device (046d:0825) [ 868.659820][ T27] audit: type=1326 audit(1786345000.151:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 868.722505][ T27] audit: type=1326 audit(1786345000.151:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 868.751564][ T27] audit: type=1326 audit(1786345000.151:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.1.2070" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 869.222148][ T8] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 869.234493][ T8] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : 0 (exp. 26). [ 869.254246][ T8] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 869.974334][ T790] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 870.012597][ T8] usb 1-1: USB disconnect, device number 37 [ 870.443505][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.474818][ T790] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 871.177814][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.292934][ T790] usb 3-1: config 0 descriptor?? [ 871.368733][T12240] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 871.525532][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.566702][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.359163][T12257] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.2081: No space for directory leaf checksum. Please run e2fsck -D. [ 872.374987][T12257] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.2081: checksumming directory block 0 [ 872.388515][T12257] netdevsim netdevsim1: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 872.398858][T12257] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.2081: No space for directory leaf checksum. Please run e2fsck -D. [ 872.451316][T12257] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.2081: checksumming directory block 0 [ 872.464787][T12257] netdevsim netdevsim1: loading /lib/firmware/updates/. failed with error -74 [ 872.476260][T12257] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.1.2081: No space for directory leaf checksum. Please run e2fsck -D. [ 872.492512][T12257] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.1.2081: checksumming directory block 0 [ 872.506604][T12257] netdevsim netdevsim1: loading /lib/firmware/syzkaller/. failed with error -74 [ 872.522375][T12257] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 872.531544][T12257] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 872.540638][T12257] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 874.918883][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 874.918899][ T27] audit: type=1326 audit(1786345005.921:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.072596][ T27] audit: type=1326 audit(1786345005.921:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.097925][ T790] usbhid 3-1:0.0: can't add hid device: -71 [ 875.104080][ T790] usbhid: probe of 3-1:0.0 failed with error -71 [ 875.188692][ T790] usb 3-1: USB disconnect, device number 49 [ 875.244748][ T27] audit: type=1326 audit(1786345005.921:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.309809][ T27] audit: type=1326 audit(1786345005.921:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.362108][ T27] audit: type=1326 audit(1786345005.921:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.391276][ T27] audit: type=1326 audit(1786345005.921:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.421365][ T27] audit: type=1326 audit(1786345005.921:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.458669][ T27] audit: type=1326 audit(1786345005.921:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.522643][ T27] audit: type=1326 audit(1786345005.921:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 875.570177][ T27] audit: type=1326 audit(1786345005.921:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12255 comm="syz.1.2081" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 876.797969][T12272] syz.0.2086: attempt to access beyond end of device [ 876.797969][T12272] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 876.837936][T12272] EXT4-fs (loop1): unable to read superblock [ 876.969326][T12275] device-mapper: ioctl: name not supplied when creating device [ 877.087192][T11638] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 877.353939][T11638] usb 3-1: not running at top speed; connect to a high speed hub [ 877.363576][T11638] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.397985][T11638] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 877.431657][T11638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.468499][T11638] usb 3-1: Found UVC 1.00 device (046d:0825) [ 877.476082][T12287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 877.488273][T12287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 877.501720][T12287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 877.534425][T12287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 877.542883][T12287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 877.551316][T12287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 877.650735][ T790] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 877.879178][ T790] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.905963][ T790] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 877.912675][T11638] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 877.932001][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.950005][T11638] uvcvideo 3-1:1.1: No frame descriptor found for the default format. [ 877.960089][ T790] usb 1-1: Product: syz [ 877.973925][ T790] usb 1-1: Manufacturer: syz [ 877.975072][T11638] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 877.995423][ T790] usb 1-1: SerialNumber: syz [ 878.086852][ T790] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 878.173676][T11638] usb 3-1: USB disconnect, device number 50 [ 878.407559][ T5087] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 878.452269][T12286] chnl_net:caif_netlink_parms(): no params data found [ 878.524049][ T6382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.574170][ T790] gspca_mr97310a: reg read [21] error -71 [ 878.582858][ T790] mr97310a: probe of 1-1:1.0 failed with error -71 [ 878.605201][ T790] usb 1-1: USB disconnect, device number 38 [ 878.695880][ T6382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.785662][ T6382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.824601][T12286] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.849799][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.860088][T12286] bridge_slave_0: entered allmulticast mode [ 878.871755][T12286] bridge_slave_0: entered promiscuous mode [ 878.897847][ T6382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.912588][T12286] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.921069][T12286] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.934952][T12286] bridge_slave_1: entered allmulticast mode [ 878.943045][T12286] bridge_slave_1: entered promiscuous mode [ 878.977722][T12307] hub 7-0:1.0: USB hub found [ 878.983888][T12307] hub 7-0:1.0: 1 port detected [ 879.006137][T12286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.021416][T12286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.088477][T12286] team0: Port device team_slave_0 added [ 879.117943][T12286] team0: Port device team_slave_1 added [ 879.234293][T12286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.251980][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.298809][T12286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.353042][T12286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.360053][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.413810][T12286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.561851][T12315] device-mapper: table: 248:1: : unknown target type [ 879.574906][T12315] device-mapper: ioctl: error adding target to table [ 879.774689][ T5087] Bluetooth: hci4: command tx timeout [ 879.788440][T12286] hsr_slave_0: entered promiscuous mode [ 879.797958][T12286] hsr_slave_1: entered promiscuous mode [ 879.812002][T12286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.825428][T12286] Cannot create hsr debugfs directory [ 880.087529][ T790] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 880.225975][T12338] netlink: 524 bytes leftover after parsing attributes in process `syz.0.2107'. [ 880.250040][T11638] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 880.294686][ T790] usb 3-1: not running at top speed; connect to a high speed hub [ 880.326568][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.349069][ T790] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 880.368922][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.399678][ T790] usb 3-1: Found UVC 1.00 device (046d:0825) [ 880.464896][T11638] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.501766][T11638] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 880.532364][T11638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.540466][T11638] usb 2-1: Product: syz [ 880.587608][T11638] usb 2-1: Manufacturer: syz [ 880.592304][T11638] usb 2-1: SerialNumber: syz [ 880.642121][T11638] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 880.748452][T12286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 880.778293][T12286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 880.849189][ T790] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 880.889843][ T790] uvcvideo 3-1:1.1: No frame descriptor found for the default format. [ 880.909225][ T790] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 881.030530][ T5087] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 881.081596][T12286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 881.138691][ T28] usb 3-1: USB disconnect, device number 51 [ 881.227906][T11638] gspca_mr97310a: reg write [21] error -110 [ 881.233984][T11638] mr97310a: probe of 2-1:1.0 failed with error -110 [ 881.292746][ T9] usb 2-1: USB disconnect, device number 41 [ 881.493197][T12286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 882.026168][ T5087] Bluetooth: hci4: command tx timeout [ 882.260889][ T6382] hsr_slave_0: left promiscuous mode [ 882.305093][ T6382] hsr_slave_1: left promiscuous mode [ 882.325567][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.340400][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.376730][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.438210][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.454385][ T6382] bridge_slave_1: left allmulticast mode [ 882.464959][ T6382] bridge_slave_1: left promiscuous mode [ 882.490483][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.514599][ T6382] bridge_slave_0: left allmulticast mode [ 882.520324][ T6382] bridge_slave_0: left promiscuous mode [ 882.538097][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.634937][ T6382] veth1_macvtap: left promiscuous mode [ 882.641157][ T6382] veth0_macvtap: left promiscuous mode [ 882.651132][ T6382] veth1_vlan: left promiscuous mode [ 882.662594][ T6382] veth0_vlan: left promiscuous mode [ 883.014497][ T6382] bond1 (unregistering): (slave veth7): Releasing active interface [ 883.054557][ T6382] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 883.069557][ T6382] bond1 (unregistering): Released all slaves [ 884.279527][ T5087] Bluetooth: hci4: command tx timeout [ 885.153737][ T6382] team0 (unregistering): Port device team_slave_1 removed [ 885.229784][ T6382] team0 (unregistering): Port device team_slave_0 removed [ 885.339728][ T6382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.451230][ T6382] bond0 (unregistering): (slave 30): Releasing backup interface [ 886.122266][T11638] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 886.133059][ T6382] bond0 (unregistering): Released all slaves [ 886.292629][ T6382] lo (unregistering): left allmulticast mode [ 886.320429][ T6382] smc: removing net device lo with user defined pnetid SYZ0 [ 886.403375][T11638] usb 1-1: not running at top speed; connect to a high speed hub [ 886.466153][T11638] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.513342][T11638] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 886.543670][ T5087] Bluetooth: hci4: command tx timeout [ 886.551946][T12286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.564661][T11638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.629449][T11638] usb 1-1: Found UVC 1.00 device (046d:0825) [ 886.650935][T12286] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.728836][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.736131][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.827959][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.835237][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.772410][T12395] xt_nfacct: accounting object `syz0' does not exist [ 887.906291][T11638] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 887.929242][T11638] uvcvideo 1-1:1.1: No frame descriptor found for the default format. [ 887.951234][T11638] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 888.162397][ T790] usb 1-1: USB disconnect, device number 39 [ 888.392795][T12406] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 888.563279][ T6382] IPVS: stop unused estimator thread 0... [ 888.835104][T12286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.466623][T12286] veth0_vlan: entered promiscuous mode [ 890.511091][T12286] veth1_vlan: entered promiscuous mode [ 890.598729][T12286] veth0_macvtap: entered promiscuous mode [ 890.636594][T12286] veth1_macvtap: entered promiscuous mode [ 890.705360][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.729396][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.750477][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.778345][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.791027][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.806405][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.854351][T12286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.895793][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.908074][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.939755][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.951253][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.966660][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.988184][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.039015][T12286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.067328][T12286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.094722][T12286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.114524][T12286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.133916][T12286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.374717][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.382634][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.469716][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.500736][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.996518][T12491] syz.2.2142 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 892.056938][T12491] CPU: 0 PID: 12491 Comm: syz.2.2142 Not tainted syzkaller #0 [ 892.064498][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 892.074629][T12491] Call Trace: [ 892.078066][T12491] [ 892.081129][T12491] dump_stack_lvl+0x18c/0x250 [ 892.085959][T12491] ? show_regs_print_info+0x20/0x20 [ 892.091262][T12491] ? load_image+0x420/0x420 [ 892.095865][T12491] ? ___ratelimit+0x478/0x610 [ 892.100631][T12491] ? radix_tree_cpu_dead+0x160/0x160 [ 892.105983][T12491] dump_header+0xd8/0x820 [ 892.110384][T12491] oom_kill_process+0x390/0x580 [ 892.115346][T12491] out_of_memory+0xe0e/0x1200 [ 892.120083][T12491] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 892.125790][T12491] ? mutex_lock_nested+0x20/0x20 [ 892.130880][T12491] ? unregister_oom_notifier+0x20/0x20 [ 892.136423][T12491] mem_cgroup_out_of_memory+0x2c2/0x390 [ 892.142063][T12491] ? try_charge_memcg+0xc91/0x17c0 [ 892.147232][T12491] ? drain_local_stock+0x630/0x630 [ 892.152395][T12491] ? do_raw_spin_unlock+0x121/0x230 [ 892.157682][T12491] try_charge_memcg+0xca1/0x17c0 [ 892.162677][T12491] ? folio_flags+0x120/0x120 [ 892.167300][T12491] ? percpu_ref_tryget+0x15/0x180 [ 892.172359][T12491] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 892.178137][T12491] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 892.184150][T12491] ? percpu_ref_tryget+0x15/0x180 [ 892.189206][T12491] ? percpu_ref_tryget+0x15/0x180 [ 892.194286][T12491] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 892.200037][T12491] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 892.205808][T12491] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 892.211647][T12491] obj_cgroup_charge+0x36e/0x630 [ 892.216618][T12491] ? get_obj_cgroup_from_current+0xd4/0x280 [ 892.222559][T12491] ? obj_cgroup_charge+0xed/0x630 [ 892.227636][T12491] ? mod_objcg_mlstate+0x320/0x320 [ 892.232786][T12491] ? get_obj_cgroup_from_current+0xd4/0x280 [ 892.238729][T12491] ? get_obj_cgroup_from_current+0xd4/0x280 [ 892.244718][T12491] slab_pre_alloc_hook+0x2e2/0x300 [ 892.249884][T12491] ? d_instantiate+0x6f/0x90 [ 892.254516][T12491] kmem_cache_alloc+0x5a/0x2c0 [ 892.259322][T12491] ? alloc_empty_file+0x9e/0x1d0 [ 892.264297][T12491] alloc_empty_file+0x9e/0x1d0 [ 892.269103][T12491] alloc_file+0x5b/0x600 [ 892.273379][T12491] alloc_file_pseudo+0x184/0x210 [ 892.278346][T12491] ? fput+0x1a0/0x1a0 [ 892.282354][T12491] ? tipc_node_get_capabilities+0xee/0x130 [ 892.288299][T12491] sock_alloc_file+0xb7/0x280 [ 892.293105][T12491] __sys_socketpair+0x376/0x550 [ 892.298004][T12491] __x64_sys_socketpair+0x9b/0xb0 [ 892.303057][T12491] do_syscall_64+0x55/0xb0 [ 892.307505][T12491] ? clear_bhb_loop+0x40/0x90 [ 892.312240][T12491] ? clear_bhb_loop+0x40/0x90 [ 892.316956][T12491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.322906][T12491] RIP: 0033:0x7ff3e4b9e0d9 [ 892.327430][T12491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.347130][T12491] RSP: 002b:00007ff3e598b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 892.355644][T12491] RAX: ffffffffffffffda RBX: 00007ff3e4e25fa0 RCX: 00007ff3e4b9e0d9 [ 892.363673][T12491] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 892.371672][T12491] RBP: 00007ff3e4c35024 R08: 0000000000000000 R09: 0000000000000000 [ 892.379678][T12491] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000000 [ 892.387673][T12491] R13: 00007ff3e4e26038 R14: 00007ff3e4e25fa0 R15: 00007ffe74b07608 [ 892.395692][T12491] [ 892.453872][T12491] memory: usage 8kB, limit 8kB, failcnt 21 [ 892.464702][T12491] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 892.493216][T12491] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 892.511343][T12491] Memory cgroup stats for /syz2/test: [ 892.514201][T12491] cache 0 [ 892.608917][T12491] rss 0 [ 892.611781][T12491] rss_huge 0 [ 892.615034][T12491] shmem 0 [ 892.618006][T12491] mapped_file 0 [ 892.652022][T12491] dirty 0 [ 892.656865][T12491] writeback 0 [ 892.660207][T12491] workingset_refault_anon 0 [ 892.679636][T12491] workingset_refault_file 0 [ 892.684251][T12491] swap 0 [ 892.708332][T12491] pgpgin 0 [ 892.711453][T12491] pgpgout 0 [ 892.714608][T12491] pgfault 1 [ 892.745057][T12491] pgmajfault 0 [ 892.748524][T12491] inactive_anon 0 [ 892.755990][T12491] active_anon 0 [ 892.759524][T12491] inactive_file 0 [ 892.777974][T12491] active_file 0 [ 892.781549][T12491] unevictable 0 [ 892.793644][T12491] hierarchical_memory_limit 8192 [ 892.798926][T12491] hierarchical_memsw_limit 9223372036854771712 [ 892.833552][T12491] total_cache 0 [ 892.875830][T12491] total_rss 0 [ 892.880841][T12491] total_rss_huge 0 [ 892.884665][T12491] total_shmem 0 [ 892.888169][T12491] total_mapped_file 0 [ 892.917373][T12491] total_dirty 0 [ 892.920936][T12491] total_writeback 0 [ 892.951045][T12491] total_workingset_refault_anon 0 [ 892.964111][T12491] total_workingset_refault_file 0 [ 892.977677][T12491] total_swap 0 [ 892.981179][T12491] total_pgpgin 0 [ 892.984779][T12491] total_pgpgout 0 [ 893.021202][T12491] total_pgfault 1 [ 893.025030][T12491] total_pgmajfault 0 [ 893.028973][T12491] total_inactive_anon 0 [ 893.055842][T12491] total_active_anon 0 [ 893.059915][T12491] total_inactive_file 0 [ 893.076441][T12491] total_active_file 0 [ 893.080515][T12491] total_unevictable 0 [ 893.084533][T12491] anon_cost 0 [ 893.106804][T12491] file_cost 0 [ 893.122518][T12491] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.2142,pid=12490,uid=0 [ 893.146784][T12513] loop1: detected capacity change from 0 to 512 [ 893.154903][T12491] Memory cgroup out of memory: Killed process 12490 (syz.2.2142) total-vm:102244kB, anon-rss:1372kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 893.194368][T12513] EXT4-fs error (device loop1): ext4_get_journal_inode:5820: comm syz.1.2149: inode #2147418112: comm syz.1.2149: iget: illegal inode # [ 893.259791][T12513] EXT4-fs (loop1): no journal found [ 893.265096][T12513] EXT4-fs (loop1): can't get journal size [ 893.328045][T12513] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 893.396749][T12513] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 893.434414][T12513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.580579][T12513] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 893.804806][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.536083][ T5766] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 894.702863][T12566] loop4: detected capacity change from 0 to 256 [ 894.892189][ T5766] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.280730][ T5766] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 895.326900][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.367737][ T5766] usb 1-1: Product: syz [ 895.386478][ T5766] usb 1-1: Manufacturer: syz [ 895.423475][ T5766] usb 1-1: SerialNumber: syz [ 895.456591][ T5766] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 895.777900][ T5087] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 895.924802][T12578] syzkaller0: entered promiscuous mode [ 895.948128][T12578] syzkaller0: entered allmulticast mode [ 896.002977][ T5766] gspca_mr97310a: reg read [21] error -71 [ 896.025463][ T5766] mr97310a: probe of 1-1:1.0 failed with error -71 [ 896.041409][ T5766] usb 1-1: USB disconnect, device number 40 [ 898.880675][ T23] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 899.109758][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 899.150696][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.166285][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 899.205631][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.265954][ T23] usb 1-1: Found UVC 1.00 device (046d:0825) [ 899.648478][T12663] veth3: entered allmulticast mode [ 899.727476][ T23] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 899.746606][ T23] uvcvideo 1-1:1.1: No frame descriptor found for the default format. [ 899.766607][ T23] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 899.982822][ T8] usb 1-1: USB disconnect, device number 41 [ 900.107485][T12676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2190'. [ 901.034834][T12704] veth5: entered allmulticast mode [ 901.761971][ T5766] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 901.837807][ T790] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 902.015100][ T5766] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.048131][ T5766] usb 1-1: config 1 interface 0 has no altsetting 1 [ 902.057469][ T790] usb 3-1: not running at top speed; connect to a high speed hub [ 902.076805][ T5766] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 902.088833][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.101123][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.119268][ T5766] usb 1-1: Product: syz [ 902.124530][ T5766] usb 1-1: Manufacturer: syz [ 902.129205][ T5766] usb 1-1: SerialNumber: syz [ 902.131543][ T790] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 902.152100][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.179076][ T790] usb 3-1: Found UVC 1.00 device (046d:0825) [ 902.209592][T12746] Console: switching to colour VGA+ 80x25 [ 902.435638][ T5766] dvbdev: DVB: registering new adapter (DEC3000-s) [ 902.444384][T12746] Console: switching to colour frame buffer device 128x48 [ 902.473453][ T5766] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 902.629519][ T790] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 902.646538][ T790] uvcvideo 3-1:1.1: No frame descriptor found for the default format. [ 902.655670][ T790] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 902.663958][ T5766] ttusb_dec_send_command: result bulk message failed: error -71 [ 902.704876][ T5766] usb 1-1: USB disconnect, device number 42 [ 902.877665][ T790] usb 3-1: USB disconnect, device number 52 [ 902.939348][T12757] veth5: entered allmulticast mode [ 903.372233][ T28] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 903.422284][ T28] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 903.534545][T12766] loop1: detected capacity change from 0 to 4096 [ 903.562097][T12766] ext4: Unknown parameter 'seclabel' [ 903.630252][T12754] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 903.655870][T12767] udevd[12767]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 904.069985][T12786] 0x20000000,0x20000000 overlaps existing 0x20000000,0x20000 [ 904.745448][T12791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2222'. [ 904.804244][T12791] veth3: entered allmulticast mode [ 905.035773][T12799] loop4: detected capacity change from 0 to 512 [ 905.043162][T12800] loop2: detected capacity change from 0 to 1024 [ 905.106840][T12800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.183936][T12799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.279644][T12799] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.438254][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 905.438309][ T27] audit: type=1326 audit(1786345036.405:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 905.864501][ T27] audit: type=1326 audit(1786345036.405:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 906.250879][ T27] audit: type=1326 audit(1786345036.405:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 906.590259][ T27] audit: type=1326 audit(1786345036.433:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 906.648766][T12286] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.877790][ T27] audit: type=1326 audit(1786345036.433:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 907.204991][ T27] audit: type=1326 audit(1786345036.433:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 907.469863][ T27] audit: type=1326 audit(1786345036.433:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 907.717040][ T27] audit: type=1326 audit(1786345036.433:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 907.989565][ T27] audit: type=1326 audit(1786345036.433:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 908.341924][ T27] audit: type=1326 audit(1786345036.433:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12811 comm="syz.1.2229" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 908.670911][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.178430][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2236'. [ 910.231007][T12851] veth3: entered allmulticast mode [ 910.447462][T12858] loop4: detected capacity change from 0 to 1024 [ 910.538510][T12858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.615314][T12858] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 910.625244][T12858] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 910.997576][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 910.997626][ T27] audit: type=1326 audit(1786345041.501:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 911.614996][T12286] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.646772][ T27] audit: type=1326 audit(1786345041.510:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 912.156556][ T27] audit: type=1326 audit(1786345041.510:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 912.627250][ T27] audit: type=1326 audit(1786345041.510:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 913.105172][ T27] audit: type=1326 audit(1786345041.510:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 913.537735][ T27] audit: type=1326 audit(1786345041.510:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 914.067411][ T27] audit: type=1326 audit(1786345041.510:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 914.094249][ T27] audit: type=1326 audit(1786345041.510:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 914.118808][ T27] audit: type=1326 audit(1786345041.510:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 914.143510][ T27] audit: type=1326 audit(1786345041.510:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.0.2241" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 915.080612][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2248'. [ 915.147671][T12896] veth3: entered allmulticast mode [ 916.930874][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 916.930932][ T27] audit: type=1326 audit(1786345047.013:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 917.951158][T12933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.4.2254: No space for directory leaf checksum. Please run e2fsck -D. [ 917.967496][T12933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.4.2254: checksumming directory block 0 [ 917.984125][T12933] netdevsim netdevsim4: loading /lib/firmware/updates/syzkaller/. failed with error -74 [ 918.013276][T12933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.4.2254: No space for directory leaf checksum. Please run e2fsck -D. [ 918.029206][T12933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.4.2254: checksumming directory block 0 [ 918.042010][T12933] netdevsim netdevsim4: loading /lib/firmware/updates/. failed with error -74 [ 918.053403][T12933] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.4.2254: No space for directory leaf checksum. Please run e2fsck -D. [ 918.114358][T12933] EXT4-fs error (device sda1): __ext4_find_entry:1696: inode #274: comm syz.4.2254: checksumming directory block 0 [ 918.127716][T12933] netdevsim netdevsim4: loading /lib/firmware/syzkaller/. failed with error -74 [ 918.139390][T12933] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 918.160491][T12933] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 918.171339][T12933] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 919.031149][ T23] IPVS: starting estimator thread 0... [ 920.786421][ T27] audit: type=1326 audit(1786345047.013:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 920.832142][ T27] audit: type=1326 audit(1786345047.040:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 920.859904][T12936] IPVS: using max 21 ests per chain, 50400 per kthread [ 920.886301][ T27] audit: type=1326 audit(1786345047.040:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 921.107031][ T27] audit: type=1326 audit(1786345047.040:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 921.370826][ T27] audit: type=1326 audit(1786345047.040:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 921.600027][ T27] audit: type=1326 audit(1786345047.040:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 921.835935][ T27] audit: type=1326 audit(1786345047.040:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 921.861601][ T27] audit: type=1326 audit(1786345047.040:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 921.886280][ T27] audit: type=1326 audit(1786345047.040:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12930 comm="syz.0.2255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682639e0d9 code=0x7ffc0000 [ 922.094443][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2258'. [ 922.144615][T12947] veth3: entered allmulticast mode [ 922.200967][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'. [ 922.301189][ T8540] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 922.546890][ T8540] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.580992][ T8540] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 922.590112][ T8540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.613274][ T8540] usb 2-1: Product: syz [ 922.625067][ T8540] usb 2-1: Manufacturer: syz [ 922.629763][ T8540] usb 2-1: SerialNumber: syz [ 922.683974][ T8540] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 923.217746][ T5087] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 924.086808][ T8540] gspca_mr97310a: reg read [21] error -110 [ 924.092741][ T8540] mr97310a: probe of 2-1:1.0 failed with error -110 [ 924.201442][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 924.201494][ T27] audit: type=1326 audit(1786345053.697:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 924.231939][ C0] vkms_vblank_simulate: vblank timer overrun [ 925.372432][ T8] usb 2-1: USB disconnect, device number 42 [ 925.623147][ T27] audit: type=1326 audit(1786345053.706:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 926.110442][ T27] audit: type=1326 audit(1786345053.706:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 926.496033][ T27] audit: type=1326 audit(1786345053.706:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 926.520645][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.820587][ T27] audit: type=1326 audit(1786345053.706:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 927.051197][ T27] audit: type=1326 audit(1786345053.706:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 927.474933][ T27] audit: type=1326 audit(1786345053.706:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 927.616124][ T27] audit: type=1326 audit(1786345053.706:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 927.640374][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.647607][ T27] audit: type=1326 audit(1786345053.715:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 927.671982][ T27] audit: type=1326 audit(1786345053.715:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12981 comm="syz.4.2267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 927.696152][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.738120][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2269'. [ 927.867417][ T5766] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 927.908158][T12997] veth5: entered allmulticast mode [ 927.913397][ T5766] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 927.983224][T13000] loop0: detected capacity change from 0 to 4096 [ 928.011924][T13000] ext4: Unknown parameter 'seclabel' [ 928.065781][T13006] udevd[13006]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 930.023465][ T27] kauditd_printk_skb: 359 callbacks suppressed [ 930.023515][ T27] audit: type=1326 audit(1786345058.507:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 930.657510][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.825465][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.143313][ T27] audit: type=1326 audit(1786345058.507:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.186014][ T27] audit: type=1326 audit(1786345058.507:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.221119][ T27] audit: type=1326 audit(1786345058.507:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.245836][ T27] audit: type=1326 audit(1786345058.507:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.270613][ T27] audit: type=1326 audit(1786345058.507:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.351169][ T27] audit: type=1326 audit(1786345058.516:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.470297][ T27] audit: type=1326 audit(1786345058.516:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.556988][ T27] audit: type=1326 audit(1786345058.516:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.619376][ T27] audit: type=1326 audit(1786345058.516:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.2.2278" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3e4b5e90e code=0x7ffc0000 [ 932.648700][T13047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'. [ 932.953734][T13045] veth5: entered allmulticast mode [ 933.419754][T13072] loop0: detected capacity change from 0 to 512 [ 933.464469][T13075] loop4: detected capacity change from 0 to 512 [ 933.511264][T13040] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 933.736680][T13075] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.2289: Unrecognised inode hash code 255 [ 933.774791][T13075] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2289: Corrupt directory, running e2fsck is recommended [ 934.426246][T13075] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 934.435437][T13075] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.2289: corrupted in-inode xattr: invalid ea_ino [ 934.479989][T13075] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2289: couldn't read orphan inode 15 (err -117) [ 934.686566][T13075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.209318][T13096] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.2289: Unrecognised inode hash code 255 [ 935.221635][T13096] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2289: Corrupt directory, running e2fsck is recommended [ 935.237994][T13096] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 4: comm syz.4.2289: path /42/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 935.493517][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 935.493533][ T27] audit: type=1326 audit(1786345063.861:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 936.683913][ T27] audit: type=1326 audit(1786345063.861:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 936.798212][T12286] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.991017][ T27] audit: type=1326 audit(1786345063.861:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 937.397135][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2295'. [ 937.487087][ T27] audit: type=1326 audit(1786345063.861:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 938.108147][ T27] audit: type=1326 audit(1786345063.861:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 938.219890][T13102] veth3: entered allmulticast mode [ 938.242563][ T27] audit: type=1326 audit(1786345063.870:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 938.309485][ T27] audit: type=1326 audit(1786345063.870:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 938.374045][ T27] audit: type=1326 audit(1786345063.870:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 938.468722][ T27] audit: type=1326 audit(1786345063.870:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 938.528940][T13121] syz.0.2298 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 938.535050][ T27] audit: type=1326 audit(1786345063.870:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13088 comm="syz.1.2292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 938.656574][T13121] loop0: detected capacity change from 0 to 1024 [ 941.837912][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 941.837929][ T27] audit: type=1326 audit(1786345070.000:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 943.894884][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2307'. [ 943.908986][ T27] audit: type=1326 audit(1786345070.037:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.044048][ T27] audit: type=1326 audit(1786345070.037:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.108105][T13168] veth3: entered allmulticast mode [ 944.147359][ T27] audit: type=1326 audit(1786345070.037:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.215006][ T27] audit: type=1326 audit(1786345070.037:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.282478][T13175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2311'. [ 944.292006][ T27] audit: type=1326 audit(1786345070.037:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.330440][ T27] audit: type=1326 audit(1786345070.047:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.421941][ T27] audit: type=1326 audit(1786345070.047:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.506296][ T27] audit: type=1326 audit(1786345070.047:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.598870][ T27] audit: type=1326 audit(1786345070.047:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.2309" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f899d19e0d9 code=0x7ffc0000 [ 944.730108][T13185] loop0: detected capacity change from 0 to 512 [ 944.847346][T13185] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 944.873399][T13185] System zones: 0-2, 18-18, 34-35 [ 944.897578][T13185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.936788][T13185] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.177296][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'. [ 946.296897][T13220] veth5: entered allmulticast mode [ 946.341368][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.277471][ T27] kauditd_printk_skb: 426 callbacks suppressed [ 947.277488][ T27] audit: type=1326 audit(1786345075.004:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 947.570344][ T27] audit: type=1326 audit(1786345075.004:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 947.653668][ T27] audit: type=1326 audit(1786345075.013:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 947.905655][ T27] audit: type=1326 audit(1786345075.013:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 948.176009][ T27] audit: type=1326 audit(1786345075.013:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 948.484379][ T27] audit: type=1326 audit(1786345075.013:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 948.690536][ T27] audit: type=1326 audit(1786345075.013:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 948.874221][ T27] audit: type=1326 audit(1786345075.013:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 949.006367][ T27] audit: type=1326 audit(1786345075.023:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 949.085840][ T27] audit: type=1326 audit(1786345075.023:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13224 comm="syz.0.2324" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682635e90e code=0x7ffc0000 [ 949.417645][T13257] veth5: entered allmulticast mode [ 949.632249][T13257] bond1: (slave veth5): Enslaving as an active interface with an up link [ 950.082832][T13265] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 950.684522][T13287] loop1: detected capacity change from 0 to 1024 [ 950.846225][T13287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.974320][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.096714][T12287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 952.110196][T12287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 952.121498][T12287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 952.138691][T12287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 952.152679][T12287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 952.161663][T12287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 952.735979][T13325] veth3: entered allmulticast mode [ 952.751299][T13325] bond1: (slave veth3): Enslaving as an active interface with an up link [ 952.879416][ T2964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.933583][T13326] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 953.012253][T13341] loop2: detected capacity change from 0 to 1024 [ 953.016239][ T2964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.217423][T13341] loop2: detected capacity change from 0 to 512 [ 953.320496][T13341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 953.322167][T13353] zero sized request [ 953.421970][ T2964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.561231][T13341] System zones: 1-12 [ 953.915328][T13341] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.2356: inode has both inline data and extents flags [ 954.000001][T13341] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2356: couldn't read orphan inode 15 (err -117) [ 954.071487][ T2964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.114113][T13341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.383250][T12287] Bluetooth: hci1: command tx timeout [ 954.451536][ T27] kauditd_printk_skb: 522 callbacks suppressed [ 954.451550][ T27] audit: type=1326 audit(1786345081.651:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 955.812659][ T27] audit: type=1326 audit(1786345081.651:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 955.997075][ T27] audit: type=1326 audit(1786345082.842:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 956.192866][ T27] audit: type=1326 audit(1786345082.842:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 956.335885][ T27] audit: type=1326 audit(1786345082.842:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 956.459250][ T27] audit: type=1326 audit(1786345082.842:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 956.490736][T13311] chnl_net:caif_netlink_parms(): no params data found [ 956.565486][ T27] audit: type=1326 audit(1786345082.842:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 956.683069][ T27] audit: type=1326 audit(1786345082.842:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 956.708783][T12287] Bluetooth: hci1: command tx timeout [ 956.807684][ T27] audit: type=1326 audit(1786345082.842:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 956.894145][T13311] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.918781][ T27] audit: type=1326 audit(1786345082.842:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.4.2360" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a6479e0d9 code=0x7ffc0000 [ 956.950624][T13311] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.995121][T13311] bridge_slave_0: entered allmulticast mode [ 957.029523][T13311] bridge_slave_0: entered promiscuous mode [ 957.056589][T13311] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.079094][T13311] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.106187][T13311] bridge_slave_1: entered allmulticast mode [ 957.122107][T13311] bridge_slave_1: entered promiscuous mode [ 957.424150][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.504256][T13311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.557527][T13311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.658666][T13390] zero sized request [ 957.690189][T13311] team0: Port device team_slave_0 added [ 957.706316][T13311] team0: Port device team_slave_1 added [ 957.945447][T13311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.978388][T13311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.060309][T13311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.095513][T13311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.117517][T13311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.203919][T13311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.649327][T13311] hsr_slave_0: entered promiscuous mode [ 958.719445][T13311] hsr_slave_1: entered promiscuous mode [ 958.911418][T12287] Bluetooth: hci1: command tx timeout [ 959.440002][T13422] zero sized request [ 959.884833][ T27] kauditd_printk_skb: 180 callbacks suppressed [ 959.884916][ T27] audit: type=1326 audit(1786345086.655:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 960.341462][ T27] audit: type=1326 audit(1786345086.655:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 960.736215][ T27] audit: type=1326 audit(1786345086.655:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 961.102200][ T27] audit: type=1326 audit(1786345086.655:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 961.153381][T12287] Bluetooth: hci1: command tx timeout [ 961.590647][ T27] audit: type=1326 audit(1786345086.655:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 961.997647][ T27] audit: type=1326 audit(1786345086.664:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 962.411948][ T27] audit: type=1326 audit(1786345086.664:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 962.764661][ T27] audit: type=1326 audit(1786345086.664:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 962.833553][ T27] audit: type=1326 audit(1786345086.664:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 962.858187][ T27] audit: type=1326 audit(1786345086.664:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f899d15e90e code=0x7ffc0000 [ 964.298695][T13460] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 965.032180][ T2964] hsr_slave_0: left promiscuous mode [ 965.040394][ T2964] hsr_slave_1: left promiscuous mode [ 965.059438][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.067107][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.084218][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.106880][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.140028][ T2964] bridge_slave_1: left allmulticast mode [ 965.145852][ T2964] bridge_slave_1: left promiscuous mode [ 965.170360][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.206331][ T2964] bridge_slave_0: left allmulticast mode [ 965.212122][ T2964] bridge_slave_0: left promiscuous mode [ 965.234546][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.289730][T13484] loop1: detected capacity change from 0 to 512 [ 965.352647][T13484] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.2392: Unrecognised inode hash code 255 [ 965.382917][ T2964] veth1_macvtap: left promiscuous mode [ 965.392220][T13484] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2392: Corrupt directory, running e2fsck is recommended [ 965.405477][T13484] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 965.413962][T13484] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.2392: corrupted in-inode xattr: invalid ea_ino [ 965.429496][T13484] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2392: couldn't read orphan inode 15 (err -117) [ 965.439866][ T2964] veth0_macvtap: left promiscuous mode [ 965.447636][T13484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.503073][ T2964] veth1_vlan: left promiscuous mode [ 965.539580][ T2964] veth0_vlan: left promiscuous mode [ 966.466885][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.427605][T13501] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 968.416201][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 968.494513][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 968.561557][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.635581][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.208025][ T2964] bond0 (unregistering): Released all slaves [ 969.303349][ T2964] lo (unregistering): left allmulticast mode [ 969.421279][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 969.655480][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.702579][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 969.714499][T13528] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 969.749734][ T23] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 969.754251][T13311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 969.789904][T13311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 969.807963][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.825601][T13311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 969.850501][ T23] usb 5-1: config 0 descriptor?? [ 969.893585][T13311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 970.080279][ T2964] IPVS: stop unused estimator thread 0... [ 970.119237][ T8] usb 5-1: USB disconnect, device number 2 [ 970.206233][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 970.206295][ T27] audit: type=1326 audit(1786345096.173:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 970.791829][ T27] audit: type=1326 audit(1786345096.173:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 970.817783][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 971.188298][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.309715][ T27] audit: type=1326 audit(1786345096.173:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 971.392078][ T8] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 971.537439][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 971.686031][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.730499][ T27] audit: type=1326 audit(1786345096.173:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 971.859019][ T8] usb 5-1: config 0 descriptor?? [ 972.003787][T13311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.064008][ T27] audit: type=1326 audit(1786345096.182:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 972.540142][ T27] audit: type=1326 audit(1786345096.182:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 972.735822][T13311] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.885853][ T27] audit: type=1326 audit(1786345096.182:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 973.030910][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.038154][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.229480][ T27] audit: type=1326 audit(1786345096.182:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 973.318853][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.326104][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.326203][ T27] audit: type=1326 audit(1786345096.182:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 973.357817][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.364508][ T27] audit: type=1326 audit(1786345096.182:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.2.2404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3e4b9e0d9 code=0x7ffc0000 [ 973.388835][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.822394][T13311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.938354][T13311] veth0_vlan: entered promiscuous mode [ 973.972279][T13311] veth1_vlan: entered promiscuous mode [ 974.050480][T13311] veth0_macvtap: entered promiscuous mode [ 974.075074][T13311] veth1_macvtap: entered promiscuous mode [ 974.294979][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.326918][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.352362][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.375996][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.389055][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.407010][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.584153][T13311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.037303][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.146209][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.156209][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.174198][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.190683][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 975.213708][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.232887][T11638] usb 5-1: USB disconnect, device number 3 [ 975.243333][T13311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.296454][T13311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.316617][T13311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.338711][T13311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.356407][T13311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.390478][T13581] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 975.757728][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.783022][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.918610][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.926533][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.069005][T12287] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 980.345330][T12287] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 980.669770][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 980.688732][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 980.699355][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 980.708797][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 980.717182][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 980.726290][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 980.813857][ T5776] syz-executor (5776) used greatest stack depth: 20056 bytes left [ 982.160482][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.737126][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.986073][ T5087] Bluetooth: hci0: command tx timeout [ 983.009040][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.146952][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.746897][T13661] chnl_net:caif_netlink_parms(): no params data found [ 985.217294][T13661] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.235985][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.251919][ T5087] Bluetooth: hci0: command tx timeout [ 985.272322][T13661] bridge_slave_0: entered allmulticast mode [ 985.283390][T13661] bridge_slave_0: entered promiscuous mode [ 985.436744][T13661] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.449036][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.456293][T13661] bridge_slave_1: entered allmulticast mode [ 985.478921][T13661] bridge_slave_1: entered promiscuous mode [ 985.500664][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2446'. [ 986.984730][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.999787][T13763] warning: `syz.2.2449' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 987.055325][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.351448][ T5087] Bluetooth: hci4: link tx timeout [ 987.360338][ T5087] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 987.462473][T13661] team0: Port device team_slave_0 added [ 987.486067][ T5087] Bluetooth: hci0: command tx timeout [ 987.591265][T13661] team0: Port device team_slave_1 added [ 987.719130][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.733328][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.776631][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.978050][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.023829][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.106807][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.388707][ T49] hsr_slave_0: left promiscuous mode [ 989.518999][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 989.557670][ T49] hsr_slave_1: left promiscuous mode [ 989.569085][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 989.646393][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.657595][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.691955][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.711663][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.732653][ T49] bridge_slave_1: left allmulticast mode [ 989.748211][ T49] bridge_slave_1: left promiscuous mode [ 989.749859][T12287] Bluetooth: hci0: command tx timeout [ 989.772591][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.815636][ T49] bridge_slave_0: left allmulticast mode [ 989.836658][ T49] bridge_slave_0: left promiscuous mode [ 989.842586][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.889421][ T49] veth1_macvtap: left promiscuous mode [ 989.920073][ T49] veth0_macvtap: left promiscuous mode [ 989.940995][ T49] veth1_vlan: left promiscuous mode [ 989.965455][ T49] veth0_vlan: left promiscuous mode [ 990.284659][ T49] bond1 (unregistering): (slave veth5): Releasing backup interface [ 990.310077][ T49] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 990.320280][ T49] bond1 (unregistering): Released all slaves [ 991.172382][ T49] team0 (unregistering): Port device team_slave_1 removed [ 991.207125][T13821] loop2: detected capacity change from 0 to 512 [ 991.243375][T13821] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 991.262850][T13821] System zones: 0-2, 18-18, 34-35 [ 991.299675][T13821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.320609][T13821] ext4 filesystem being mounted at /603/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.333621][ T49] team0 (unregistering): Port device team_slave_0 removed [ 991.392141][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.450059][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.833204][ T49] bond0 (unregistering): Released all slaves [ 991.909997][ T49] lo (unregistering): left allmulticast mode [ 992.072618][T13661] hsr_slave_0: entered promiscuous mode [ 992.087847][T13661] hsr_slave_1: entered promiscuous mode [ 992.095637][T13661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 992.121870][T13661] Cannot create hsr debugfs directory [ 992.154134][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.172559][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2465'. [ 993.678519][ T49] IPVS: stop unused estimator thread 0... [ 993.811500][ T28] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 994.042124][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.057635][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 994.081479][ T28] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 994.092360][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.135261][ T28] usb 1-1: config 0 descriptor?? [ 994.202467][ T28] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 994.435059][ T28] usb 1-1: USB disconnect, device number 43 [ 994.551964][T13661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 994.575322][T13661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 994.599343][T13661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 994.621891][T13661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 994.796026][T13661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.824316][T13661] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.843385][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.851661][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.869051][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.876309][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.951679][T13661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 994.973415][T13661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 995.105200][ T28] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 995.332320][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.356278][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 995.389369][T13872] loop4: detected capacity change from 0 to 512 [ 995.394927][ T28] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 995.442349][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.463761][T13872] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 995.486260][T13872] System zones: 0-2, 18-18, 34-35 [ 995.501469][T13872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.523739][ T28] usb 1-1: config 0 descriptor?? [ 995.580375][ T28] aiptek 1-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 995.620439][T13872] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.643643][ T28] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 995.863760][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.904369][T13890] syzkaller0: entered promiscuous mode [ 995.909952][T13890] syzkaller0: entered allmulticast mode [ 996.019969][T13661] veth0_vlan: entered promiscuous mode [ 996.044454][T13661] veth1_vlan: entered promiscuous mode [ 996.113436][T13661] veth0_macvtap: entered promiscuous mode [ 996.127364][T13661] veth1_macvtap: entered promiscuous mode [ 996.157200][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.170594][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.196771][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.213709][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.223950][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.236173][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.251766][T13661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.331313][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.342221][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.353428][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.376709][T12286] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.436319][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.531083][T13661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.615449][T13661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.734346][T13661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.195230][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.208064][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.220121][T13661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.241424][T13661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.265105][T13661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.296570][T13661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.616540][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.633543][ T6382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.642905][ T6382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.034639][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.459744][T11638] usb 1-1: USB disconnect, device number 44 [ 1001.394173][T13950] vhci_hcd vhci_hcd.0: remove, state 4 [ 1001.400401][T13950] usb usb34: USB disconnect, device number 1 [ 1001.667326][ T49] vhci_hcd: stop threads [ 1001.693970][ T49] vhci_hcd: release socket [ 1001.729915][ T49] vhci_hcd: disconnect device [ 1001.735147][ T11] vhci_hcd: stop threads [ 1001.761837][ T11] vhci_hcd: release socket [ 1001.767478][ T11] vhci_hcd: disconnect device [ 1001.776412][ T11] vhci_hcd: stop threads [ 1001.786717][ T11] vhci_hcd: release socket [ 1001.795733][ T11] vhci_hcd: disconnect device [ 1001.813554][ T11] vhci_hcd: stop threads [ 1001.822734][ T11] vhci_hcd: release socket [ 1001.834911][ T11] vhci_hcd: disconnect device [ 1001.852818][ T11] vhci_hcd: stop threads [ 1001.864533][ T11] vhci_hcd: release socket [ 1001.878575][ T11] vhci_hcd: disconnect device [ 1001.895443][ T11] vhci_hcd: stop threads [ 1001.913477][ T11] vhci_hcd: release socket [ 1001.935414][ T11] vhci_hcd: disconnect device [ 1001.964145][ T11] vhci_hcd: stop threads [ 1001.977455][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1001.989625][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1002.010102][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1002.017737][ T11] vhci_hcd: release socket [ 1002.023945][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1002.030738][ T11] vhci_hcd: disconnect device [ 1002.039445][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1002.048388][ T11] vhci_hcd: stop threads [ 1002.048473][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1003.124220][T13950] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 1003.124802][ T11] vhci_hcd: release socket [ 1003.221807][ T11] vhci_hcd: disconnect device [ 1003.234742][T13950] vhci_hcd vhci_hcd.0: remove, state 4 [ 1003.286585][T13950] usb usb33: USB disconnect, device number 1 [ 1003.402476][ T6382] vhci_hcd: stop threads [ 1003.410172][T13950] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 1003.434535][ T6382] vhci_hcd: release socket [ 1003.459488][ T6382] vhci_hcd: disconnect device [ 1003.490842][ T6382] ================================================================== [ 1003.498949][ T6382] BUG: KASAN: slab-use-after-free in __lock_acquire+0x10c/0x7d80 [ 1003.506768][ T6382] Read of size 8 at addr ffff888025da0440 by task kworker/u4:14/6382 [ 1003.514878][ T6382] [ 1003.517243][ T6382] CPU: 1 PID: 6382 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1003.524877][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1003.534941][ T6382] Workqueue: usbip_event event_handler [ 1003.540466][ T6382] Call Trace: [ 1003.543761][ T6382] [ 1003.546726][ T6382] dump_stack_lvl+0x18c/0x250 [ 1003.551416][ T6382] ? __lock_acquire+0x7d80/0x7d80 [ 1003.556465][ T6382] ? show_regs_print_info+0x20/0x20 [ 1003.561706][ T6382] ? load_image+0x420/0x420 [ 1003.566221][ T6382] ? finish_task_switch+0x262/0x8f0 [ 1003.571455][ T6382] ? __virt_addr_valid+0x10c/0x380 [ 1003.576588][ T6382] ? __virt_addr_valid+0x10c/0x380 [ 1003.581721][ T6382] ? __virt_addr_valid+0x10c/0x380 [ 1003.586877][ T6382] print_report+0xa8/0x210 [ 1003.591298][ T6382] ? __lock_acquire+0x10c/0x7d80 [ 1003.596236][ T6382] kasan_report+0x117/0x150 [ 1003.600872][ T6382] ? __lock_acquire+0x10c/0x7d80 [ 1003.605854][ T6382] __lock_acquire+0x10c/0x7d80 [ 1003.610661][ T6382] ? asan.module_dtor+0x20/0x20 [ 1003.615544][ T6382] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1003.621530][ T6382] ? llist_add_batch+0x10f/0x1f0 [ 1003.626530][ T6382] ? preempt_schedule+0xc0/0xd0 [ 1003.631391][ T6382] ? verify_lock_unused+0x140/0x140 [ 1003.636601][ T6382] ? preempt_schedule_common+0x82/0xc0 [ 1003.642083][ T6382] ? preempt_schedule+0xc0/0xd0 [ 1003.646943][ T6382] ? tick_nohz_tick_stopped+0x7f/0xc0 [ 1003.652344][ T6382] ? __irq_work_queue_local+0x13a/0x3b0 [ 1003.657915][ T6382] ? irq_work_queue+0xbc/0x140 [ 1003.662722][ T6382] lock_acquire+0x19e/0x420 [ 1003.667254][ T6382] ? event_handler+0x2a9/0x460 [ 1003.672120][ T6382] ? lock_chain_count+0x20/0x20 [ 1003.676987][ T6382] ? read_lock_is_recursive+0x20/0x20 [ 1003.682369][ T6382] _raw_spin_lock_irqsave+0xb4/0x100 [ 1003.687667][ T6382] ? event_handler+0x2a9/0x460 [ 1003.692439][ T6382] ? _raw_spin_lock+0x40/0x40 [ 1003.697131][ T6382] ? vhci_shutdown_connection+0x326/0x4a0 [ 1003.702865][ T6382] event_handler+0x2a9/0x460 [ 1003.707464][ T6382] ? process_scheduled_works+0x975/0x1600 [ 1003.713300][ T6382] process_scheduled_works+0xa60/0x1600 [ 1003.718869][ T6382] ? worker_attach_to_pool+0x370/0x370 [ 1003.724342][ T6382] ? assign_work+0x3cc/0x5d0 [ 1003.728946][ T6382] worker_thread+0xa5e/0xfe0 [ 1003.733549][ T6382] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1003.739479][ T6382] ? _raw_spin_unlock+0x40/0x40 [ 1003.744342][ T6382] ? __kthread_parkme+0x71/0x1c0 [ 1003.749287][ T6382] kthread+0x2fa/0x390 [ 1003.753357][ T6382] ? pr_cont_work+0x550/0x550 [ 1003.758043][ T6382] ? kthread_blkcg+0xd0/0xd0 [ 1003.762639][ T6382] ret_from_fork+0x48/0x80 [ 1003.767063][ T6382] ? kthread_blkcg+0xd0/0xd0 [ 1003.771661][ T6382] ret_from_fork_asm+0x11/0x20 [ 1003.776485][ T6382] [ 1003.779507][ T6382] [ 1003.781827][ T6382] Allocated by task 1: [ 1003.785951][ T6382] kasan_set_track+0x4e/0x70 [ 1003.790541][ T6382] __kasan_kmalloc+0x8f/0xa0 [ 1003.795168][ T6382] __kmalloc+0xb7/0x240 [ 1003.799334][ T6382] __usb_create_hcd+0x67/0x8a0 [ 1003.804126][ T6382] vhci_hcd_probe+0x103/0x370 [ 1003.808830][ T6382] platform_probe+0x13b/0x1c0 [ 1003.813586][ T6382] really_probe+0x247/0xae0 [ 1003.818090][ T6382] __driver_probe_device+0x1f5/0x390 [ 1003.823389][ T6382] driver_probe_device+0x4f/0x420 [ 1003.828420][ T6382] __device_attach_driver+0x2ca/0x510 [ 1003.833806][ T6382] bus_for_each_drv+0x252/0x2e0 [ 1003.838672][ T6382] __device_attach+0x2c1/0x420 [ 1003.843456][ T6382] bus_probe_device+0x180/0x260 [ 1003.848340][ T6382] device_add+0x87c/0xc40 [ 1003.852697][ T6382] platform_device_add+0x4c3/0x830 [ 1003.857819][ T6382] vhci_hcd_init+0x3cb/0x500 [ 1003.862529][ T6382] do_one_initcall+0x242/0x790 [ 1003.867304][ T6382] do_initcall_level+0x13d/0x1f0 [ 1003.872298][ T6382] do_initcalls+0x69/0xd0 [ 1003.876637][ T6382] kernel_init_freeable+0x3d9/0x560 [ 1003.881851][ T6382] kernel_init+0x1d/0x1c0 [ 1003.886206][ T6382] ret_from_fork+0x48/0x80 [ 1003.890639][ T6382] ret_from_fork_asm+0x11/0x20 [ 1003.895410][ T6382] [ 1003.897733][ T6382] Freed by task 13950: [ 1003.901797][ T6382] kasan_set_track+0x4e/0x70 [ 1003.906407][ T6382] kasan_save_free_info+0x28/0x40 [ 1003.911466][ T6382] ____kasan_slab_free+0x126/0x1f0 [ 1003.916600][ T6382] slab_free_freelist_hook+0x130/0x1a0 [ 1003.922078][ T6382] __kmem_cache_free+0xba/0x1f0 [ 1003.926939][ T6382] vhci_hcd_remove+0xe4/0x100 [ 1003.931620][ T6382] platform_remove+0x6d/0xe0 [ 1003.936215][ T6382] device_release_driver_internal+0x408/0x6f0 [ 1003.942291][ T6382] unbind_store+0x1a1/0x1d0 [ 1003.946804][ T6382] kernfs_fop_write_iter+0x3a4/0x520 [ 1003.952105][ T6382] vfs_write+0x474/0x9a0 [ 1003.956353][ T6382] ksys_write+0x151/0x260 [ 1003.960686][ T6382] do_syscall_64+0x55/0xb0 [ 1003.965105][ T6382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1003.971001][ T6382] [ 1003.973342][ T6382] The buggy address belongs to the object at ffff888025da0000 [ 1003.973342][ T6382] which belongs to the cache kmalloc-8k of size 8192 [ 1003.987462][ T6382] The buggy address is located 1088 bytes inside of [ 1003.987462][ T6382] freed 8192-byte region [ffff888025da0000, ffff888025da2000) [ 1004.001452][ T6382] [ 1004.003782][ T6382] The buggy address belongs to the physical page: [ 1004.010270][ T6382] page:ffffea0000976800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25da0 [ 1004.020450][ T6382] head:ffffea0000976800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1004.029417][ T6382] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1004.037396][ T6382] page_type: 0xffffffff() [ 1004.041741][ T6382] raw: 00fff00000000840 ffff888017c42280 dead000000000122 0000000000000000 [ 1004.050353][ T6382] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 1004.058936][ T6382] page dumped because: kasan: bad access detected [ 1004.065408][ T6382] page_owner tracks the page as allocated [ 1004.071122][ T6382] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14728234873, free_ts 0 [ 1004.090855][ T6382] post_alloc_hook+0x1c1/0x200 [ 1004.095669][ T6382] get_page_from_freelist+0x2181/0x22a0 [ 1004.101252][ T6382] __alloc_pages+0x1f0/0x460 [ 1004.105883][ T6382] alloc_page_interleave+0x24/0x1e0 [ 1004.111088][ T6382] alloc_slab_page+0x5d/0x180 [ 1004.115781][ T6382] new_slab+0x87/0x2d0 [ 1004.120282][ T6382] ___slab_alloc+0xc5c/0x12f0 [ 1004.124966][ T6382] __kmem_cache_alloc_node+0x11f/0x250 [ 1004.130443][ T6382] __kmalloc+0xa7/0x240 [ 1004.134694][ T6382] __usb_create_hcd+0x67/0x8a0 [ 1004.139468][ T6382] vhci_hcd_probe+0x103/0x370 [ 1004.144147][ T6382] platform_probe+0x13b/0x1c0 [ 1004.148858][ T6382] really_probe+0x247/0xae0 [ 1004.153367][ T6382] __driver_probe_device+0x1f5/0x390 [ 1004.158661][ T6382] driver_probe_device+0x4f/0x420 [ 1004.163687][ T6382] __device_attach_driver+0x2ca/0x510 [ 1004.169086][ T6382] page_owner free stack trace missing [ 1004.174458][ T6382] [ 1004.176787][ T6382] Memory state around the buggy address: [ 1004.182416][ T6382] ffff888025da0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1004.190488][ T6382] ffff888025da0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1004.198548][ T6382] >ffff888025da0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1004.206606][ T6382] ^ [ 1004.212754][ T6382] ffff888025da0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1004.220819][ T6382] ffff888025da0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1004.228891][ T6382] ================================================================== [ 1004.236977][ T6382] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1004.244192][ T6382] CPU: 1 PID: 6382 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1004.251865][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1004.261967][ T6382] Workqueue: usbip_event event_handler [ 1004.267468][ T6382] Call Trace: [ 1004.270760][ T6382] [ 1004.273697][ T6382] dump_stack_lvl+0x18c/0x250 [ 1004.278400][ T6382] ? show_regs_print_info+0x20/0x20 [ 1004.283611][ T6382] ? load_image+0x420/0x420 [ 1004.288137][ T6382] panic+0x2ca/0x720 [ 1004.292068][ T6382] ? bpf_jit_dump+0xd0/0xd0 [ 1004.296593][ T6382] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1004.302523][ T6382] ? _raw_spin_unlock+0x40/0x40 [ 1004.307395][ T6382] ? print_memory_metadata+0x314/0x400 [ 1004.307987][ T5087] Bluetooth: hci2: command tx timeout [ 1004.318255][ T6382] ? __lock_acquire+0x10c/0x7d80 [ 1004.323209][ T6382] check_panic_on_warn+0x84/0xa0 [ 1004.328154][ T6382] ? __lock_acquire+0x10c/0x7d80 [ 1004.333112][ T6382] end_report+0x6f/0x130 [ 1004.337366][ T6382] kasan_report+0x128/0x150 [ 1004.341877][ T6382] ? __lock_acquire+0x10c/0x7d80 [ 1004.346843][ T6382] __lock_acquire+0x10c/0x7d80 [ 1004.351636][ T6382] ? asan.module_dtor+0x20/0x20 [ 1004.356498][ T6382] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1004.362491][ T6382] ? llist_add_batch+0x10f/0x1f0 [ 1004.367470][ T6382] ? preempt_schedule+0xc0/0xd0 [ 1004.372339][ T6382] ? verify_lock_unused+0x140/0x140 [ 1004.377543][ T6382] ? preempt_schedule_common+0x82/0xc0 [ 1004.383021][ T6382] ? preempt_schedule+0xc0/0xd0 [ 1004.387893][ T6382] ? tick_nohz_tick_stopped+0x7f/0xc0 [ 1004.393275][ T6382] ? __irq_work_queue_local+0x13a/0x3b0 [ 1004.398830][ T6382] ? irq_work_queue+0xbc/0x140 [ 1004.403604][ T6382] lock_acquire+0x19e/0x420 [ 1004.408129][ T6382] ? event_handler+0x2a9/0x460 [ 1004.412918][ T6382] ? lock_chain_count+0x20/0x20 [ 1004.417776][ T6382] ? read_lock_is_recursive+0x20/0x20 [ 1004.423158][ T6382] _raw_spin_lock_irqsave+0xb4/0x100 [ 1004.428454][ T6382] ? event_handler+0x2a9/0x460 [ 1004.433230][ T6382] ? _raw_spin_lock+0x40/0x40 [ 1004.437916][ T6382] ? vhci_shutdown_connection+0x326/0x4a0 [ 1004.443642][ T6382] event_handler+0x2a9/0x460 [ 1004.448252][ T6382] ? process_scheduled_works+0x975/0x1600 [ 1004.453982][ T6382] process_scheduled_works+0xa60/0x1600 [ 1004.459552][ T6382] ? worker_attach_to_pool+0x370/0x370 [ 1004.465056][ T6382] ? assign_work+0x3cc/0x5d0 [ 1004.469721][ T6382] worker_thread+0xa5e/0xfe0 [ 1004.474377][ T6382] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1004.480284][ T6382] ? _raw_spin_unlock+0x40/0x40 [ 1004.485154][ T6382] ? __kthread_parkme+0x71/0x1c0 [ 1004.490094][ T6382] kthread+0x2fa/0x390 [ 1004.494167][ T6382] ? pr_cont_work+0x550/0x550 [ 1004.498866][ T6382] ? kthread_blkcg+0xd0/0xd0 [ 1004.503456][ T6382] ret_from_fork+0x48/0x80 [ 1004.507884][ T6382] ? kthread_blkcg+0xd0/0xd0 [ 1004.512481][ T6382] ret_from_fork_asm+0x11/0x20 [ 1004.517262][ T6382] [ 1004.520451][ T6382] Kernel Offset: disabled [ 1004.524777][ T6382] Rebooting in 86400 seconds..