last executing test programs: 13.896655587s ago: executing program 2 (id=3245): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) socket$inet(0x2, 0x2, 0x0) 13.52267766s ago: executing program 2 (id=3246): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 12.86471733s ago: executing program 4 (id=3248): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 12.786087333s ago: executing program 2 (id=3249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts(0xffffffffffffffff, 0x28280) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040022, &(0x7f00000003c0)={[{}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 11.00751364s ago: executing program 4 (id=3252): openat$ptmx(0xffffffffffffff9c, 0x0, 0x408c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) process_vm_writev(r4, 0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/32, 0x20}, {&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000740)=""/149, 0x95}], 0x3, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 10.887954333s ago: executing program 0 (id=3253): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) shmctl$IPC_RMID(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\x03\x00\x00\x00\x00\x00\x00\x00\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d00", @ANYRES8=r1, @ANYRES32], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 9.460294819s ago: executing program 3 (id=3256): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x4}) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x6, 0x3, 0x7}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 9.286730794s ago: executing program 4 (id=3257): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x2, 0x6) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x10}) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mbind(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x2005, 0x0, 0x80000000, 0x6) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) 9.08776712s ago: executing program 3 (id=3258): syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x6) r1 = syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)}, 0x40fd) 8.236845877s ago: executing program 1 (id=3259): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.183169339s ago: executing program 4 (id=3260): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027"], 0x50) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fallocate(0xffffffffffffffff, 0x0, 0x8, 0x1101f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0x93d5, 0x58565559, 0x7, 0x10001, 0x9, 0x9, 0x1, 0x0, 0x4, 0x0, 0x2}}) 8.111718902s ago: executing program 0 (id=3261): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c015) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), 0x0}, 0x20) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) 7.21247103s ago: executing program 4 (id=3262): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) recvmmsg(r1, &(0x7f0000000a40), 0x3d, 0x22, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 7.163902791s ago: executing program 2 (id=3263): sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20001, 0x0) r0 = getpid() shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x2, 0xfffffffffffffffe, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7.074957744s ago: executing program 3 (id=3264): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "7474919ea04e04917c980c53da46c007"}, 0x1001, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) setxattr$incfs_metadata(&(0x7f0000000040)='./file2\x00', &(0x7f0000000100), &(0x7f0000000140)="7f6990c4f8c5ac2839643b67712422809168de328f9fe44e262b71f372be2a0fcb51019c3c78ad55a0411e57d83092687801d6f7e025e9136d35af612b542c4450c534b4571ed5982f9476cc9b2c50758c51a75f148b908260bab24c66a183dcac170cbe1c", 0x65, 0x1) 6.871675741s ago: executing program 1 (id=3265): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/82, 0x52, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x88, r4, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.705367636s ago: executing program 2 (id=3266): timer_create(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 6.671044628s ago: executing program 1 (id=3267): openat$ppp(0xffffffffffffff9c, 0x0, 0x5277c0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7a0, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, &(0x7f0000000380), {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r5 = userfaultfd(0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r9 = dup2(r8, r8) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) read$FUSE(r9, &(0x7f00000063c0)={0x2020}, 0x2020) 6.262884031s ago: executing program 2 (id=3268): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) 5.64992124s ago: executing program 0 (id=3269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0) rmdir(&(0x7f0000000140)='./file0/file3\x00') 4.604896433s ago: executing program 0 (id=3270): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x8040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x10, r0, 0xb1f6000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000100037040200"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c000280"], 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304974) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000000701010000000000000000030000050900010073797a3000000000050003002f000000df7c2e2bb087491b59eff764d90fd43b42bd32d295958281877fa8b146fbb56c1b55c0"], 0x28}, 0x1, 0x0, 0x0, 0x50800}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00000500130008000000050005"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) 3.494740888s ago: executing program 0 (id=3271): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) shmctl$IPC_RMID(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\x03\x00\x00\x00\x00\x00\x00\x00\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d00", @ANYRES8=r1, @ANYRES32], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 3.271824255s ago: executing program 3 (id=3272): r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x301041, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r4, 0x8, 0x0, @void}, 0x10) 2.920421887s ago: executing program 4 (id=3273): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 2.909915837s ago: executing program 1 (id=3274): syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x6) r1 = syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)}, 0x40fd) 1.803760372s ago: executing program 0 (id=3275): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.329493257s ago: executing program 1 (id=3276): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) syz_io_uring_setup(0x31c5, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) rename(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fanotify_init(0xf00, 0x0) mkdir(0x0, 0x0) close(0xffffffffffffffff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') fanotify_mark(0xffffffffffffffff, 0x1, 0x40001000, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) write$cgroup_devices(r6, 0x0, 0x9) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{&(0x7f0000001200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x4000000) 1.311712108s ago: executing program 3 (id=3277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 728.99µs ago: executing program 3 (id=3278): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004890, &(0x7f0000000340)) 0s ago: executing program 1 (id=3279): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010300000000fbd9df251c00000004000180779214347d7bf743ec8c440f099622c920b15748386e13c1e2be8c0241aa45f0fbd5bcf464a7eed31b1b2005fb3dd625cb1192ffff5b44e90f2c50c7e36b4f3a09380ee3fb822fac29ab1b6418a2bdcd84a145438fc8039d3d2ea4d015c628774ef04ca0b1c74c7ff3215e"], 0x18}}, 0x40896) kernel console output (not intermixed with test programs): not up; please bring it up to get a fully working HSR network [ 641.040460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 641.626301][T14263] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 641.655045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 641.688253][T14368] loop2: detected capacity change from 0 to 128 [ 641.693986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 641.710909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 641.726198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 641.781160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 641.851741][T14263] usb 4-1: Using ep0 maxpacket: 32 [ 641.866480][T14263] usb 4-1: no configurations [ 641.871126][T14263] usb 4-1: can't read configurations, error -22 [ 641.888862][T14371] tipc: Enabling of bearer rejected, failed to enable media [ 641.941568][ T4289] Bluetooth: hci0: command 0x0401 tx timeout [ 641.979055][T14263] usb usb4-port1: attempt power cycle [ 642.291374][T14391] device syzkaller0 entered promiscuous mode [ 642.421734][T14263] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 642.480112][T14263] usb 4-1: Using ep0 maxpacket: 32 [ 642.486071][T14263] usb 4-1: no configurations [ 642.490691][T14263] usb 4-1: can't read configurations, error -22 [ 642.510509][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 642.528263][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 642.586854][T14112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.651672][T14263] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 642.692146][T14263] usb 4-1: Using ep0 maxpacket: 32 [ 642.697900][T14263] usb 4-1: no configurations [ 642.718244][T14263] usb 4-1: can't read configurations, error -22 [ 642.747715][T14263] usb usb4-port1: unable to enumerate USB device [ 642.900381][T14413] input: syz1 as /devices/virtual/input/input78 [ 643.972141][T14270] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 644.173525][T14270] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.207921][T14270] usb 4-1: config 0 interface 0 has no altsetting 0 [ 644.240203][T14270] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 644.265496][T14270] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 644.291654][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 644.300109][T14270] usb 4-1: Product: syz [ 644.310697][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.319030][T14270] usb 4-1: Manufacturer: syz [ 644.323921][T14270] usb 4-1: SerialNumber: syz [ 644.368998][T14270] usb 4-1: config 0 descriptor?? [ 644.387075][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 645.021292][T14426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.031931][T14270] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 645.059195][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 645.071870][T14426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.089180][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.140124][T14112] device veth0_vlan entered promiscuous mode [ 645.167756][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 645.177537][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 645.205655][T14112] device veth1_vlan entered promiscuous mode [ 645.304630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 645.326597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 645.375865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 645.414560][T14270] usb 4-1: USB disconnect, device number 106 [ 645.426564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 645.458505][T14112] device veth0_macvtap entered promiscuous mode [ 645.479535][T14112] device veth1_macvtap entered promiscuous mode [ 645.536378][T14112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.547306][T14449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.563208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 645.576403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 645.587799][T14449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.602994][ T27] kauditd_printk_skb: 137 callbacks suppressed [ 645.603006][ T27] audit: type=1326 audit(1779076436.340:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 645.603722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 645.613250][ T27] audit: type=1326 audit(1779076436.340:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 645.702603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 645.738439][T14112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.762727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 645.791617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 645.825839][T14112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.844918][T14112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.868005][ T27] audit: type=1326 audit(1779076436.340:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 645.892191][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.911894][T14112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.920633][T14112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.949378][ T27] audit: type=1326 audit(1779076436.340:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 645.973482][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.046720][T14458] device syzkaller0 entered promiscuous mode [ 646.075688][ T27] audit: type=1326 audit(1779076436.340:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 646.195287][ T27] audit: type=1326 audit(1779076436.340:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 646.219490][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.298956][T14444] loop1: detected capacity change from 0 to 32768 [ 646.310865][ T27] audit: type=1326 audit(1779076436.340:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 646.348150][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.386612][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.403323][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 646.408277][T14444] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 646.450727][T14444] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 646.462637][ T27] audit: type=1326 audit(1779076436.340:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 646.463004][T14462] tipc: Enabling of bearer rejected, failed to enable media [ 646.486704][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.491592][T14444] BTRFS info (device loop1): using free space tree [ 646.565284][ T27] audit: type=1326 audit(1779076436.340:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 646.569104][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.589435][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.591688][ T27] audit: type=1326 audit(1779076436.340:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.2.2934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26d19ce59 code=0x7ffc0000 [ 646.630805][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.642506][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 646.836094][T14444] BTRFS info (device loop1): enabling ssd optimizations [ 647.059990][ T4278] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 647.720977][T13601] usb 3-1: USB disconnect, device number 44 [ 647.761321][T14510] input: syz1 as /devices/virtual/input/input79 [ 648.179603][T14117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 648.191216][T14117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 648.199357][T14117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 648.218957][T14117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 648.222266][T14263] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 648.235168][T14117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 648.242644][T14117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 649.596291][T14263] usb 4-1: Using ep0 maxpacket: 32 [ 649.604118][T14263] usb 4-1: no configurations [ 649.608739][T14263] usb 4-1: can't read configurations, error -22 [ 649.628663][ T4322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.761005][ T4322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.796819][T14263] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 649.933198][ T4322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.962551][T14518] chnl_net:caif_netlink_parms(): no params data found [ 650.016473][T14263] usb 4-1: Using ep0 maxpacket: 32 [ 650.022192][ T4322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.022300][T14263] usb 4-1: no configurations [ 650.072588][T14263] usb 4-1: can't read configurations, error -22 [ 650.094711][T14263] usb usb4-port1: attempt power cycle [ 650.131614][ T14] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 650.179385][T14518] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.207558][T14518] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.241813][T14518] device bridge_slave_0 entered promiscuous mode [ 650.261765][T14117] Bluetooth: hci0: command 0x0409 tx timeout [ 650.262019][T14518] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.275593][T14518] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.286097][T14518] device bridge_slave_1 entered promiscuous mode [ 650.405040][T14518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.479550][T14518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.507896][ T14] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 650.524562][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 650.548359][T14263] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 650.574719][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 650.587779][ T4322] tipc: Left network mode [ 650.591966][ T14] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 650.621607][ T14] usb 1-1: Product: syz [ 650.625897][ T14] usb 1-1: Manufacturer: syz [ 650.630513][ T14] usb 1-1: SerialNumber: syz [ 650.678507][ T14] usb 1-1: config 0 descriptor?? [ 650.679857][T14263] usb 4-1: device descriptor read/8, error -71 [ 650.702713][ T27] kauditd_printk_skb: 126 callbacks suppressed [ 650.702728][ T27] audit: type=1326 audit(1779076441.440:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff04359caeb code=0x7ffc0000 [ 650.735994][T14528] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 650.745982][T14518] team0: Port device team_slave_0 added [ 650.772372][ T14] usb 1-1: selecting invalid altsetting 0 [ 650.907914][ T27] audit: type=1326 audit(1779076441.470:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff04359caeb code=0x7ffc0000 [ 651.688942][ T27] audit: type=1326 audit(1779076441.470:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff04359caeb code=0x7ffc0000 [ 651.848467][ T27] audit: type=1326 audit(1779076441.500:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff04359caeb code=0x7ffc0000 [ 651.872573][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.884032][ T14] usb 1-1: USB disconnect, device number 102 [ 651.885121][T14518] team0: Port device team_slave_1 added [ 651.893866][ T27] audit: type=1326 audit(1779076441.500:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff04355d68e code=0x7ffc0000 [ 651.919734][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.956772][ T27] audit: type=1326 audit(1779076442.520:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 652.107247][ T27] audit: type=1326 audit(1779076442.520:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 652.150695][ T27] audit: type=1326 audit(1779076442.610:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 652.171553][T14518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.174895][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.199990][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.254626][T14518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.290410][ T27] audit: type=1326 audit(1779076442.610:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 652.323825][ T27] audit: type=1326 audit(1779076442.610:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.0.2945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 652.351672][T14117] Bluetooth: hci0: command 0x041b tx timeout [ 652.369422][T14518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.379009][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.404963][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.423300][T14518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.494827][T14518] device hsr_slave_0 entered promiscuous mode [ 652.508962][T14518] device hsr_slave_1 entered promiscuous mode [ 652.516946][T14518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.531589][T14518] Cannot create hsr debugfs directory [ 652.551587][T14563] loop3: detected capacity change from 0 to 32768 [ 652.598706][T14563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2949 (14563) [ 652.678515][T14563] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 652.719393][T14563] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 652.747979][T14563] BTRFS info (device loop3): using free space tree [ 652.903209][T14563] BTRFS info (device loop3): enabling ssd optimizations [ 653.053140][ T4273] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 653.443812][T14606] input: syz1 as /devices/virtual/input/input80 [ 654.815325][T14117] Bluetooth: hci0: command 0x040f tx timeout [ 655.281625][T14603] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 655.515880][T14603] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 655.575116][T14603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.587187][T14603] usb 4-1: Product: syz [ 655.593962][T14603] usb 4-1: Manufacturer: syz [ 655.598657][T14603] usb 4-1: SerialNumber: syz [ 655.633948][T14603] usb 4-1: config 0 descriptor?? [ 655.653103][T14603] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 656.957109][T14117] Bluetooth: hci0: command 0x0419 tx timeout [ 656.981677][T14603] gspca_sunplus: reg_r err -110 [ 657.056383][T14263] usb 4-1: USB disconnect, device number 111 [ 657.158278][ T4322] device hsr_slave_0 left promiscuous mode [ 657.168240][ T4322] device hsr_slave_1 left promiscuous mode [ 657.200261][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.222237][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.281583][ T4322] device bridge_slave_1 left promiscuous mode [ 657.287838][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.484918][ T4322] device bridge_slave_0 left promiscuous mode [ 657.528667][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.216179][T14665] x_tables: duplicate underflow at hook 1 [ 659.462525][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 659.567086][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 659.649065][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.776753][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.563924][ T4322] bond0 (unregistering): Released all slaves [ 660.733666][T14518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 660.796073][T14518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 660.860512][T14518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 660.946336][T14518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 661.760994][T14518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.787126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.800260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.829825][T14518] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.854536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 661.864631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.875339][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.882494][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.000511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.019181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.034655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.058349][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.065583][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.089442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.137012][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2972'. [ 662.151715][ T4532] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 662.161779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.268941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.479951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.622965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.813755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.953802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 663.021734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.068288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.105579][ T4532] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 663.124566][ T4532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.138849][T14729] loop4: detected capacity change from 0 to 512 [ 663.139601][T14518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.158781][T14729] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 663.172028][T14729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 663.185335][ T4532] usb 1-1: Product: syz [ 663.189572][ T4532] usb 1-1: Manufacturer: syz [ 663.194289][ T4532] usb 1-1: SerialNumber: syz [ 663.201429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 663.216329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.230135][T14729] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.2974: orphan file block 0: bad magic [ 663.247397][T14729] EXT4-fs (loop4): mount failed [ 663.278086][ T4532] usb 1-1: config 0 descriptor?? [ 664.070961][T14736] loop1: detected capacity change from 0 to 256 [ 664.144454][ T4532] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 664.364648][ T27] audit: type=1326 audit(1779076455.090:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 664.496471][ T27] audit: type=1326 audit(1779076455.090:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 664.530093][T14736] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 664.566777][ T27] audit: type=1326 audit(1779076455.090:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 664.590971][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.721027][ T27] audit: type=1326 audit(1779076455.090:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 664.745236][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.885362][ T27] audit: type=1326 audit(1779076455.090:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 664.909442][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.999685][ T27] audit: type=1326 audit(1779076455.090:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 665.023950][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.337689][ T27] audit: type=1326 audit(1779076455.090:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 665.362067][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.720515][ T27] audit: type=1326 audit(1779076455.090:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 665.751814][ T27] audit: type=1326 audit(1779076455.090:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 665.776044][ T27] audit: type=1326 audit(1779076455.090:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14711 comm="syz.0.2971" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 665.939481][ T4532] usb 1-1: USB disconnect, device number 103 [ 666.002893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.017601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.035006][T14518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.048573][T14768] input: syz1 as /devices/virtual/input/input81 [ 666.199557][T14518] device veth0_vlan entered promiscuous mode [ 666.214428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 666.227889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 666.267426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 666.295764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 666.305600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 666.313546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 666.329058][T14518] device veth1_vlan entered promiscuous mode [ 666.450621][T14518] device veth0_macvtap entered promiscuous mode [ 666.527923][T14518] device veth1_macvtap entered promiscuous mode [ 668.591552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 668.599508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 668.645807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 668.665196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 668.697876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.707288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.751624][T14268] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 668.878092][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.898500][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.911865][T14518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.919722][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'. [ 668.930344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.942811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.953897][T14518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.973502][T14518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.987523][T14518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.997018][T13033] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 669.033081][T14268] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.050968][T13033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 669.061712][T14268] usb 1-1: config 0 interface 0 has no altsetting 0 [ 669.070440][T14268] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 669.089203][T14518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.098846][T14518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.103275][T14268] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 669.131551][T14268] usb 1-1: Product: syz [ 669.133449][T14518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.135727][T14268] usb 1-1: Manufacturer: syz [ 669.135742][T14268] usb 1-1: SerialNumber: syz [ 669.160561][T14268] usb 1-1: config 0 descriptor?? [ 669.182235][T14518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.212049][T14268] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 669.256045][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.401775][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.409662][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.455848][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.465483][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.479155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.512542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.612531][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.925339][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.319050][T13608] usb 1-1: USB disconnect, device number 104 [ 671.041899][T14263] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 671.337587][T14263] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 671.451339][T14263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.627606][T14263] usb 4-1: Product: syz [ 671.632402][T14263] usb 4-1: Manufacturer: syz [ 671.637194][T14263] usb 4-1: SerialNumber: syz [ 671.652816][T14263] usb 4-1: config 0 descriptor?? [ 671.678824][T14263] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 671.704079][T14829] input: syz1 as /devices/virtual/input/input82 [ 672.015914][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.025693][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.035493][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.047052][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.057410][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 672.076680][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.085630][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 672.085644][ T27] audit: type=1326 audit(1779076462.820:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.116159][ T27] audit: type=1326 audit(1779076462.820:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.140682][ T27] audit: type=1326 audit(1779076462.820:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.185693][ T27] audit: type=1326 audit(1779076462.820:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.210866][ T27] audit: type=1326 audit(1779076462.820:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.235411][ T27] audit: type=1326 audit(1779076462.820:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.260440][ T27] audit: type=1326 audit(1779076462.820:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.294373][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.301772][ T27] audit: type=1326 audit(1779076462.820:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.361544][ T27] audit: type=1326 audit(1779076462.820:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 672.409772][ T27] audit: type=1326 audit(1779076462.820:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14815 comm="syz.3.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa55579ce59 code=0x7ffc0000 [ 673.265097][T14853] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2996'. [ 673.324441][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.534372][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 674.634551][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.768567][T14600] usb 4-1: USB disconnect, device number 112 [ 674.927556][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.221053][T14877] loop3: detected capacity change from 0 to 16 [ 675.244001][T14877] erofs: (device loop3): mounted with root inode @ nid 36. [ 675.814740][T14880] input: syz1 as /devices/virtual/input/input83 [ 676.059305][T14839] chnl_net:caif_netlink_parms(): no params data found [ 676.156719][ T57] tipc: Disabling bearer [ 676.177440][ T57] tipc: Left network mode [ 676.305830][T14266] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 676.371547][T13608] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 676.460245][T14839] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.476797][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.517429][T14839] device bridge_slave_0 entered promiscuous mode [ 676.526580][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.533822][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.542011][T14839] device bridge_slave_1 entered promiscuous mode [ 676.563377][T13608] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 676.623298][T13608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 676.632065][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 676.680689][T13608] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 676.691726][T13608] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 676.700015][T13608] usb 1-1: Product: syz [ 676.706520][T13608] usb 1-1: Manufacturer: syz [ 676.711243][T13608] usb 1-1: SerialNumber: syz [ 676.803328][T13608] usb 1-1: config 0 descriptor?? [ 677.141885][T14266] usb 4-1: device descriptor read/64, error -71 [ 677.151635][T14888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.191852][T14888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.300185][T13608] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 677.337751][T14839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.368940][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.421609][T14266] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 677.507544][T14839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.625051][T14266] usb 4-1: device descriptor read/64, error -71 [ 678.661903][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 678.669514][T14263] usb 1-1: USB disconnect, device number 105 [ 678.761836][T14266] usb usb4-port1: attempt power cycle [ 678.795550][T14839] team0: Port device team_slave_0 added [ 678.823672][T14839] team0: Port device team_slave_1 added [ 678.967101][T14839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.977239][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.007287][T14839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.075636][T14839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.093549][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.128867][T14839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.215905][T14924] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3010'. [ 679.296653][T14839] device hsr_slave_0 entered promiscuous mode [ 679.322983][T14839] device hsr_slave_1 entered promiscuous mode [ 679.340571][T14839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.357487][T14839] Cannot create hsr debugfs directory [ 680.841813][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 681.028968][T14942] loop3: detected capacity change from 0 to 2048 [ 681.131762][T14268] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 681.410503][T14268] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 681.456719][T14268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.592964][T14268] usb 1-1: Product: syz [ 681.661199][T14268] usb 1-1: Manufacturer: syz [ 681.736117][T14268] usb 1-1: SerialNumber: syz [ 681.881202][T14268] usb 1-1: config 0 descriptor?? [ 681.911653][T14951] input: syz1 as /devices/virtual/input/input84 [ 681.940715][T14268] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 682.191409][ T57] device hsr_slave_0 left promiscuous mode [ 682.198180][ T57] device hsr_slave_1 left promiscuous mode [ 682.212373][ T57] device vlan0 left promiscuous mode [ 682.217691][ T57] device bond0 left promiscuous mode [ 682.235066][ T57] bridge0: port 1(vlan0) entered disabled state [ 682.385371][ T27] kauditd_printk_skb: 214 callbacks suppressed [ 682.385385][ T27] audit: type=1326 audit(1779076473.120:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 682.592591][ T27] audit: type=1326 audit(1779076473.120:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 682.701037][ T27] audit: type=1326 audit(1779076473.120:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 682.836409][ T27] audit: type=1326 audit(1779076473.120:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 682.916426][ T27] audit: type=1326 audit(1779076473.120:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 683.021559][ T27] audit: type=1326 audit(1779076473.120:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 683.094761][ T27] audit: type=1326 audit(1779076473.120:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 683.151593][ T27] audit: type=1326 audit(1779076473.120:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 683.216437][ T27] audit: type=1326 audit(1779076473.120:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 683.264944][ T27] audit: type=1326 audit(1779076473.120:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.3011" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff04359ce59 code=0x7ffc0000 [ 683.297528][T14268] usb 1-1: USB disconnect, device number 106 [ 684.343480][T13608] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 684.465951][ T57] bond0 (unregistering): Released all slaves [ 684.511727][T13608] usb 1-1: device descriptor read/64, error -71 [ 684.796073][T13608] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 684.923549][T14982] IPVS: stopping master sync thread 14983 ... [ 686.627130][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.694113][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.927904][T13608] usb 1-1: device descriptor read/64, error -71 [ 686.966007][T14839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 686.981439][T14839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 686.992451][T14839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 687.004336][T14839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 687.044820][T14991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3022'. [ 687.054698][T13608] usb usb1-port1: attempt power cycle [ 687.652144][T14839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.669459][T14839] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.767477][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.105713][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.203018][T15001] input: syz1 as /devices/virtual/input/input85 [ 688.532293][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.585812][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.619219][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.626449][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.920191][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.965441][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.996206][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.003376][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.031991][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 690.052491][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 690.061690][T14263] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 690.080567][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 690.103538][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.104226][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 690.106507][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.107191][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 690.107781][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 690.108360][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 690.108928][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 690.116678][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 690.144549][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 690.147964][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 690.347271][T14263] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 690.375154][T14263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.423590][T14263] usb 5-1: Product: syz [ 690.427788][T14263] usb 5-1: Manufacturer: syz [ 690.467021][T14263] usb 5-1: SerialNumber: syz [ 690.515179][T14263] usb 5-1: config 0 descriptor?? [ 690.561100][T14263] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 690.717813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.822320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.841941][T14839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.934379][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.952190][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.963851][ T27] kauditd_printk_skb: 71 callbacks suppressed [ 690.963863][ T27] audit: type=1326 audit(1779076481.700:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 691.036368][ T27] audit: type=1326 audit(1779076481.740:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 691.085832][T14839] device veth0_vlan entered promiscuous mode [ 691.107660][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 691.122114][ T27] audit: type=1326 audit(1779076481.740:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 691.152166][ T4532] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 691.168457][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.218821][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.246739][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.264864][ T27] audit: type=1326 audit(1779076481.740:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 691.288910][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.309077][T14839] device veth1_vlan entered promiscuous mode [ 691.353346][ T4532] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 691.406475][ T4532] usb 1-1: config 0 interface 0 has no altsetting 0 [ 691.438711][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 691.461015][ T27] audit: type=1326 audit(1779076481.740:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 691.485209][ C1] vkms_vblank_simulate: vblank timer overrun [ 691.504851][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 691.534567][ T4532] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 691.562693][ T4532] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 691.574538][T14839] device veth0_macvtap entered promiscuous mode [ 691.596138][ T4532] usb 1-1: Product: syz [ 691.612810][T14839] device veth1_macvtap entered promiscuous mode [ 691.621367][ T4532] usb 1-1: Manufacturer: syz [ 691.631656][ T4532] usb 1-1: SerialNumber: syz [ 691.636508][ T27] audit: type=1326 audit(1779076481.740:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 691.677635][ T4532] usb 1-1: config 0 descriptor?? [ 691.694479][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.752519][ T27] audit: type=1326 audit(1779076481.740:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 691.767962][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.794111][ T4532] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 691.848285][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 691.870781][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.889317][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.918864][T15038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3032'. [ 691.936730][ T27] audit: type=1326 audit(1779076481.740:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 691.938349][T14839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.000114][T15038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.041896][T15038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.063574][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 692.074523][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 692.077143][ T27] audit: type=1326 audit(1779076481.740:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 692.091823][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 692.105979][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.184625][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 692.227423][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.249796][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.264356][ T27] audit: type=1326 audit(1779076481.740:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.4.3028" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b219ce59 code=0x7ffc0000 [ 692.280416][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.288505][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.360044][T14603] usb 1-1: USB disconnect, device number 110 [ 692.376869][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.407951][T14839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.422361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 692.430777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 692.460254][T14839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.469528][T14600] usb 5-1: USB disconnect, device number 84 [ 692.499506][T14839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.528760][T14839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.551645][T14839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.944382][T12997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.973114][T12997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.006753][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 694.044630][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.060481][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.091341][T14878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 695.500681][T15069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3036'. [ 696.649852][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 696.685862][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 696.695336][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 696.706410][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 696.714710][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 696.723317][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 696.810354][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.904635][T14268] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 697.639240][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.762650][T14268] usb 5-1: device descriptor read/64, error -71 [ 697.859540][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.909663][T15102] loop2: detected capacity change from 0 to 16 [ 697.920449][T15102] erofs: (device loop2): mounted with root inode @ nid 36. [ 697.993894][T15091] chnl_net:caif_netlink_parms(): no params data found [ 698.031743][T14268] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 698.055526][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.095421][T15091] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.107070][T15091] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.118351][T15091] device bridge_slave_0 entered promiscuous mode [ 698.127138][T15091] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.137557][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.145937][T15091] device bridge_slave_1 entered promiscuous mode [ 698.172069][T15091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.182112][T14268] usb 5-1: device descriptor read/64, error -71 [ 698.185044][T15091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.203714][T13608] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 698.241418][T15091] team0: Port device team_slave_0 added [ 698.252601][T15091] team0: Port device team_slave_1 added [ 698.271905][T15091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.278950][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.305162][T15091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.305184][T14268] usb usb5-port1: attempt power cycle [ 698.324050][T15091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.331101][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.360831][T15091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.406706][T13608] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 698.416050][T13608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.426069][T13608] usb 2-1: Product: syz [ 698.430254][T13608] usb 2-1: Manufacturer: syz [ 698.430677][T15091] device hsr_slave_0 entered promiscuous mode [ 698.435538][T13608] usb 2-1: SerialNumber: syz [ 698.446480][T15091] device hsr_slave_1 entered promiscuous mode [ 698.448022][T13608] usb 2-1: config 0 descriptor?? [ 698.470932][T13608] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 698.494702][T15091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.507617][T15091] Cannot create hsr debugfs directory [ 698.619422][ T57] tipc: Left network mode [ 698.679202][T15114] input: syz1 as /devices/virtual/input/input86 [ 698.821650][T14117] Bluetooth: hci3: command 0x0409 tx timeout [ 698.841550][T14268] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 699.964988][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 699.965004][ T27] audit: type=1326 audit(1779076490.700:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 700.085346][T14268] usb 5-1: device descriptor read/8, error -71 [ 700.110300][ T27] audit: type=1326 audit(1779076490.700:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 700.192433][ T27] audit: type=1326 audit(1779076490.750:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 700.376477][ T27] audit: type=1326 audit(1779076490.770:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 700.555741][ T27] audit: type=1326 audit(1779076490.770:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 700.579906][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.707577][ T27] audit: type=1326 audit(1779076490.770:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 700.731744][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.880388][ T27] audit: type=1326 audit(1779076490.770:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 700.904739][T14117] Bluetooth: hci3: command 0x041b tx timeout [ 701.050822][ T27] audit: type=1326 audit(1779076490.770:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 701.219180][ T27] audit: type=1326 audit(1779076490.770:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 701.243314][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.290697][ T27] audit: type=1326 audit(1779076490.770:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15104 comm="syz.1.3042" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 701.537845][T14603] usb 2-1: USB disconnect, device number 81 [ 701.599888][T15091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 701.730361][T15152] loop1: detected capacity change from 0 to 256 [ 701.766213][T15091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 701.832261][T15091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 701.879341][T15091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 702.222820][T14268] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 702.251130][T15157] loop4: detected capacity change from 0 to 16 [ 702.260208][T15157] erofs: (device loop4): mounted with root inode @ nid 36. [ 702.328849][T15158] loop2: detected capacity change from 0 to 16 [ 702.336743][T15158] erofs: (device loop2): mounted with root inode @ nid 36. [ 702.433360][T14268] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.474927][T14268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 702.500239][T14268] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 702.518215][T14268] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 702.526783][T14268] usb 4-1: Product: syz [ 702.536703][T14268] usb 4-1: Manufacturer: syz [ 702.546610][T14268] usb 4-1: SerialNumber: syz [ 702.572494][T14268] usb 4-1: config 0 descriptor?? [ 702.648092][T14268] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 702.670279][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.790778][T15091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.796605][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3046'. [ 702.901074][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.922052][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.979271][ T57] device hsr_slave_0 left promiscuous mode [ 702.985565][T14117] Bluetooth: hci3: command 0x040f tx timeout [ 703.043050][ T57] device hsr_slave_1 left promiscuous mode [ 703.056348][ T4319] usb 4-1: USB disconnect, device number 116 [ 703.084703][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.102484][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.331639][ T4532] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 703.491576][ T4532] usb 5-1: device descriptor read/64, error -71 [ 703.771693][ T4532] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 703.936951][ T4532] usb 5-1: device descriptor read/64, error -71 [ 704.169534][ T4532] usb usb5-port1: attempt power cycle [ 704.256347][ T57] team0 (unregistering): Port device team_slave_1 removed [ 704.312336][ T57] team0 (unregistering): Port device team_slave_0 removed [ 704.378694][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.548532][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.741730][ T4532] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 704.797277][ T4532] usb 5-1: device descriptor read/8, error -71 [ 705.665216][T14117] Bluetooth: hci3: command 0x0419 tx timeout [ 705.739676][ T57] bond0 (unregistering): Released all slaves [ 705.745846][ T4532] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 705.811710][ T4532] usb 5-1: device descriptor read/8, error -71 [ 705.845875][T15091] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.865131][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 705.888059][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 705.919420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 705.942076][ T4532] usb usb5-port1: unable to enumerate USB device [ 705.989488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 706.020952][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.028129][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.050283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 706.059286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 706.090225][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.097440][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.151200][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 706.180809][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 706.225020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 706.248561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 706.267958][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 706.279088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 706.293247][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 706.301740][T13608] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 706.307366][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 706.321004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 706.329827][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 706.382958][T15201] device wlan0 entered promiscuous mode [ 706.406070][T15091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.438028][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 706.452363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 706.475968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 706.485470][T13608] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 706.522614][T13608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.559526][T13608] usb 2-1: Product: syz [ 706.684802][T13608] usb 2-1: Manufacturer: syz [ 706.689748][T13608] usb 2-1: SerialNumber: syz [ 706.703264][T13608] usb 2-1: config 0 descriptor?? [ 706.712714][T13608] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 706.779583][T15208] loop3: detected capacity change from 0 to 16 [ 706.790498][T15208] erofs: (device loop3): mounted with root inode @ nid 36. [ 706.897321][T15211] input: syz1 as /devices/virtual/input/input87 [ 707.008811][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 707.018171][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 707.030438][T15091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.048582][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 707.057366][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 707.077875][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 707.086545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 707.096529][T15091] device veth0_vlan entered promiscuous mode [ 707.103656][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 707.115139][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 707.115176][ T27] audit: type=1326 audit(1779076497.850:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.120627][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 707.131070][ T27] audit: type=1326 audit(1779076497.850:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.145376][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.151261][T15091] device veth1_vlan entered promiscuous mode [ 707.176750][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.223222][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 707.234982][ T27] audit: type=1326 audit(1779076497.850:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.236282][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 707.259180][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.260115][ T27] audit: type=1326 audit(1779076497.850:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.297059][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.305513][ T27] audit: type=1326 audit(1779076497.850:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.329674][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.340255][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 707.340301][ T27] audit: type=1326 audit(1779076497.850:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.370728][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 707.377397][ T27] audit: type=1326 audit(1779076497.850:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.409324][T15091] device veth0_macvtap entered promiscuous mode [ 707.425826][T15091] device veth1_macvtap entered promiscuous mode [ 707.449490][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.460447][ T27] audit: type=1326 audit(1779076497.850:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.486206][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.497233][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.508987][ T27] audit: type=1326 audit(1779076497.850:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.534100][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.562407][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.563474][ T27] audit: type=1326 audit(1779076497.850:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.1.3060" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 707.580034][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.653403][T15091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.660769][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 707.680623][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 707.698003][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 707.714141][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 707.777188][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.858407][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.961090][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.981729][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.995953][T15091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.006930][T15091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.209581][T15091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.219615][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 709.228514][T14263] usb 2-1: USB disconnect, device number 82 [ 709.247872][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 709.335517][T15091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.344490][T15091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.353364][T14600] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 709.354728][T15091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.372636][T15091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.510995][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.525578][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.549061][T14600] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 709.569636][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 709.586399][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.595894][T14600] usb 5-1: config 0 interface 0 has no altsetting 0 [ 709.610840][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.664466][T15226] loop3: detected capacity change from 0 to 256 [ 709.692661][T15226] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 709.726092][T14600] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 709.769531][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 709.898820][T14600] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 710.016432][T14600] usb 5-1: Product: syz [ 710.067399][T14600] usb 5-1: Manufacturer: syz [ 710.115884][T14600] usb 5-1: SerialNumber: syz [ 710.259101][T14600] usb 5-1: config 0 descriptor?? [ 710.505315][T14600] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 710.537153][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3066'. [ 710.598313][T14295] udevd[14295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.795226][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.370645][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.442821][T14268] usb 5-1: USB disconnect, device number 93 [ 712.127173][T15248] x_tables: duplicate underflow at hook 1 [ 712.207909][T15250] device syzkaller0 entered promiscuous mode [ 713.154692][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 713.204533][T15269] loop4: detected capacity change from 0 to 16 [ 713.218538][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 713.235158][T15269] erofs: (device loop4): mounted with root inode @ nid 36. [ 713.249124][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 713.263026][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 713.271881][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 713.279099][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 714.744054][T15284] device syzkaller0 entered promiscuous mode [ 715.050040][T15294] loop1: detected capacity change from 0 to 256 [ 715.078948][T15294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 715.201571][T14602] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 715.301619][T14117] Bluetooth: hci4: command 0x0409 tx timeout [ 715.996986][T14602] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 716.046434][T14602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.075018][T14602] usb 5-1: Product: syz [ 716.077734][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.079194][T14602] usb 5-1: Manufacturer: syz [ 716.079213][T14602] usb 5-1: SerialNumber: syz [ 716.102502][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.142734][T14602] usb 5-1: config 0 descriptor?? [ 716.158556][T14602] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 716.172097][T15263] chnl_net:caif_netlink_parms(): no params data found [ 716.354619][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.404207][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.579031][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.594674][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.771780][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 716.839832][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.850583][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.931525][T14602] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 716.948062][T15263] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.046819][T15263] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.181879][T14602] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 717.373656][T15263] device bridge_slave_0 entered promiscuous mode [ 717.381565][T14117] Bluetooth: hci4: command 0x041b tx timeout [ 717.383953][T15263] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.406604][T15263] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.480213][T15263] device bridge_slave_1 entered promiscuous mode [ 717.492233][T14602] usb 3-1: config 0 interface 0 has no altsetting 0 [ 717.519175][T14602] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 717.548281][T14602] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 717.570074][T15263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.581561][T14602] usb 3-1: Product: syz [ 717.592238][T14602] usb 3-1: Manufacturer: syz [ 717.603666][T14602] usb 3-1: SerialNumber: syz [ 717.611062][T15263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.630260][T14602] usb 3-1: config 0 descriptor?? [ 717.685471][T14602] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 717.701372][T15263] team0: Port device team_slave_0 added [ 717.716922][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.738635][T15263] team0: Port device team_slave_1 added [ 717.820617][T15263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.831057][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.860744][T15316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3085'. [ 717.890243][T15316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.913930][T15316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.914491][T15263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.011202][T15263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.021729][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.047634][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.103996][T15263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.155637][ T4532] usb 3-1: USB disconnect, device number 45 [ 718.190675][ T9] tipc: Disabling bearer [ 718.198057][ T9] tipc: Left network mode [ 718.242703][T15263] device hsr_slave_0 entered promiscuous mode [ 718.259784][T15263] device hsr_slave_1 entered promiscuous mode [ 718.294302][T14602] usb 5-1: USB disconnect, device number 94 [ 718.301254][T15263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.329861][T15263] Cannot create hsr debugfs directory [ 719.222416][T15354] loop2: detected capacity change from 0 to 16 [ 719.254909][T15354] erofs: (device loop2): mounted with root inode @ nid 36. [ 719.461516][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 719.880964][T15358] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 720.111243][T15360] loop2: detected capacity change from 0 to 128 [ 721.016851][T15368] loop4: detected capacity change from 0 to 256 [ 721.046904][T15368] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 721.543065][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 721.720091][T15377] binder_alloc: binder_alloc_mmap_handler: 15373 200000fff000-200001000000 already mapped failed -16 [ 721.781115][T15263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 721.791140][T15263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 721.848805][ T9] device hsr_slave_0 left promiscuous mode [ 721.858399][ T9] device hsr_slave_1 left promiscuous mode [ 721.867658][ T9] device bridge_slave_1 left promiscuous mode [ 721.878582][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.900068][ T9] device bridge_slave_0 left promiscuous mode [ 721.908455][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.039238][ T9] device veth1_macvtap left promiscuous mode [ 722.068434][ T9] device veth0_macvtap left promiscuous mode [ 722.131762][ T9] device veth1_vlan left promiscuous mode [ 722.137866][ T9] device veth0_vlan left promiscuous mode [ 723.512139][T13608] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 723.706707][T13608] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 723.731440][T13608] usb 5-1: config 0 interface 0 has no altsetting 0 [ 723.740256][T13608] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 723.749475][T13608] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 723.757725][T13608] usb 5-1: Product: syz [ 723.762214][T13608] usb 5-1: Manufacturer: syz [ 723.766827][T13608] usb 5-1: SerialNumber: syz [ 723.790413][T13608] usb 5-1: config 0 descriptor?? [ 723.837518][T13608] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 723.852348][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.007375][T15402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3098'. [ 724.025669][T15402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.037790][T15402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.084087][ T9] team0 (unregistering): Port device team_slave_1 removed [ 724.125187][ T4532] usb 5-1: USB disconnect, device number 95 [ 724.159435][ T9] team0 (unregistering): Port device team_slave_0 removed [ 724.204285][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.252065][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.602161][ T9] bond0 (unregistering): Released all slaves [ 724.718430][T15263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 724.749154][T15263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 725.146142][T15422] loop4: detected capacity change from 0 to 16 [ 725.198327][T15422] erofs: (device loop4): mounted with root inode @ nid 36. [ 725.531421][T15263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.962429][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 725.975488][T12997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 726.053601][T15263] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.088952][T15437] loop2: detected capacity change from 0 to 256 [ 726.346064][T15437] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 726.892413][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 727.122326][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 727.199552][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.206853][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.215220][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3105'. [ 727.247876][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 727.275875][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 727.303258][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 727.348282][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.355453][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.458428][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 727.536590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 727.576038][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 727.614026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 727.631933][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 727.648751][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 727.693404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 727.732322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 727.771215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 727.809678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 727.851700][T14267] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 727.859739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 727.902792][T15263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 728.053196][T14267] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 728.092692][T14267] usb 2-1: config 0 interface 0 has no altsetting 0 [ 728.151410][T14267] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 728.195133][T14267] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 728.305656][T14267] usb 2-1: Product: syz [ 728.396617][T14267] usb 2-1: Manufacturer: syz [ 728.401264][T14267] usb 2-1: SerialNumber: syz [ 728.468886][T14267] usb 2-1: config 0 descriptor?? [ 728.530019][T14267] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 728.604372][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.696961][T15459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3108'. [ 728.702266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 728.722014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 728.753157][T15475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.766470][T15263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.829692][T15475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.857480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 728.874495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 728.914815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 728.925685][T13608] usb 2-1: USB disconnect, device number 83 [ 728.976981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 729.032089][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 729.048901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 729.078791][T15263] device veth0_vlan entered promiscuous mode [ 729.114386][T15263] device veth1_vlan entered promiscuous mode [ 729.187370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 729.197677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 729.220844][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 729.244283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 729.274387][T15263] device veth0_macvtap entered promiscuous mode [ 729.314347][T15263] device veth1_macvtap entered promiscuous mode [ 729.362134][T15263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.383270][T15263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.407728][T15263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.428248][T15263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.442338][T15263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.461510][T15263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.477278][T15263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.491617][T15263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.523242][T15263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.534278][T15263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.555225][T15263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.581576][T15263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.622290][T15263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.641520][T15263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.691904][T15263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.732596][T15263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.773067][T15263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.807085][T15263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.851741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 729.870848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 729.903530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 729.932317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.969121][T15263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.047320][T15263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.085714][T15263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.131108][T15263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.005402][T12997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.030406][T12997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.095646][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 731.128626][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.140493][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.275389][T13608] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 731.304772][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 731.521553][T13608] usb 2-1: Using ep0 maxpacket: 16 [ 731.930866][T15521] loop3: detected capacity change from 0 to 16 [ 731.961759][T15521] erofs: (device loop3): mounted with root inode @ nid 36. [ 732.045332][T15519] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 732.474231][T15532] binder_alloc: binder_alloc_mmap_handler: 15527 200000fff000-200001000000 already mapped failed -16 [ 732.802184][T15536] device syzkaller0 entered promiscuous mode [ 733.034892][T13608] usb 2-1: unable to get BOS descriptor or descriptor too short [ 733.052146][T13608] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 733.059742][T13608] usb 2-1: can't read configurations, error -71 [ 736.372995][T13608] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 737.481447][T13608] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 737.490239][T13608] usb 5-1: can't read configurations, error -61 [ 739.236540][T15607] fuse: Unknown parameter 'grou00000000000000000000' [ 739.491822][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'. [ 739.520327][T15614] binder_alloc: binder_alloc_mmap_handler: 15608 200000fff000-200001000000 already mapped failed -16 [ 740.400370][T15618] loop3: detected capacity change from 0 to 2048 [ 741.630302][T15618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 742.231444][ T4319] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 742.369880][T15263] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 742.571517][ T4319] usb 2-1: Using ep0 maxpacket: 16 [ 742.654953][T15263] EXT4-fs (loop3): unmounting filesystem. [ 744.271908][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 745.171242][T15682] loop4: detected capacity change from 0 to 256 [ 745.200199][T15682] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 745.326880][T15678] device syzkaller0 entered promiscuous mode [ 746.448376][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 746.502923][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 746.510536][ T4319] usb 2-1: can't read configurations, error -71 [ 746.528635][T15690] fuse: Unknown parameter 'grou00000000000000000000' [ 746.842320][T15698] loop3: detected capacity change from 0 to 128 [ 747.103997][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.110326][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.619311][ T4319] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 748.313745][T15686] binder_alloc: binder_alloc_mmap_handler: 15684 200000fff000-200001000000 already mapped failed -16 [ 748.358984][ T4319] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 748.359013][ T4319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.359032][ T4319] usb 2-1: config 0 has no interface number 0 [ 748.359055][ T4319] usb 2-1: too many endpoints for config 0 interface 4 altsetting 255: 255, using maximum allowed: 30 [ 748.359103][ T4319] usb 2-1: config 0 interface 4 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 748.359129][ T4319] usb 2-1: config 0 interface 4 has no altsetting 0 [ 748.361420][ T4319] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 748.361486][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 748.361506][ T4319] usb 2-1: Product: syz [ 748.361521][ T4319] usb 2-1: Manufacturer: syz [ 748.361536][ T4319] usb 2-1: SerialNumber: syz [ 748.364619][ T4319] usb 2-1: config 0 descriptor?? [ 748.576875][ T4319] usb 2-1: USB disconnect, device number 87 [ 748.891817][T13606] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 749.084225][T13606] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.104489][T13606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 749.129856][T13606] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 749.177750][T13606] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 749.216758][T13606] usb 1-1: Product: syz [ 749.257605][T13606] usb 1-1: Manufacturer: syz [ 749.271681][T13606] usb 1-1: SerialNumber: syz [ 749.310075][T13606] usb 1-1: config 0 descriptor?? [ 749.383042][T13606] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 749.440386][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.511312][T15733] device syzkaller0 entered promiscuous mode [ 749.600457][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.643018][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.713111][T15738] loop4: detected capacity change from 0 to 16 [ 749.720643][T15738] erofs: (device loop4): mounted with root inode @ nid 36. [ 749.721087][T14602] usb 1-1: USB disconnect, device number 111 [ 750.028777][T15740] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3173'. [ 750.031029][T15742] fuse: Unknown parameter 'grou00000000000000000000' [ 750.247962][T15747] loop2: detected capacity change from 0 to 512 [ 750.288170][T15747] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 750.338937][T15747] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 750.415811][T15747] EXT4-fs (loop2): orphan cleanup on readonly fs [ 750.428311][T15750] loop4: detected capacity change from 0 to 128 [ 750.601721][T15747] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 750.642155][T15747] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 750.710588][T15747] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.3176: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 750.796388][T15747] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3176: couldn't read orphan inode 13 (err -117) [ 750.809861][T15747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 751.527702][T14518] EXT4-fs (loop2): unmounting filesystem. [ 751.901770][ T4319] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 752.106796][ T4319] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 752.124050][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.134141][T15782] loop3: detected capacity change from 0 to 256 [ 752.187493][ T4319] usb 1-1: config 0 has no interface number 0 [ 752.231535][ T4319] usb 1-1: too many endpoints for config 0 interface 4 altsetting 255: 255, using maximum allowed: 30 [ 752.297386][ T4319] usb 1-1: config 0 interface 4 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 752.346852][ T4319] usb 1-1: config 0 interface 4 has no altsetting 0 [ 752.456003][ T4319] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 752.692927][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 752.879448][ T4319] usb 1-1: Product: syz [ 752.987318][ T4319] usb 1-1: Manufacturer: syz [ 753.007152][ T4319] usb 1-1: SerialNumber: syz [ 753.047120][ T4319] usb 1-1: config 0 descriptor?? [ 753.320811][ T4319] usb 1-1: USB disconnect, device number 112 [ 754.417656][T15800] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3188'. [ 755.423993][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 755.487517][T14263] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 756.458979][ T27] kauditd_printk_skb: 214 callbacks suppressed [ 756.458990][ T27] audit: type=1326 audit(1779076547.190:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.462898][T14263] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 756.509048][ T27] audit: type=1326 audit(1779076547.240:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.533211][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.579269][ T27] audit: type=1326 audit(1779076547.240:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.621326][T14263] usb 5-1: config 0 interface 0 has no altsetting 0 [ 756.645868][T14263] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 756.653869][ T27] audit: type=1326 audit(1779076547.260:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.679076][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.714469][T14263] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 756.739851][ T27] audit: type=1326 audit(1779076547.260:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.751543][T14263] usb 5-1: Product: syz [ 756.764063][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.777986][ T27] audit: type=1326 audit(1779076547.270:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.802131][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.811534][T14263] usb 5-1: Manufacturer: syz [ 756.811981][ T27] audit: type=1326 audit(1779076547.280:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.826315][T14263] usb 5-1: SerialNumber: syz [ 756.841053][ T27] audit: type=1326 audit(1779076547.280:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.870851][ T27] audit: type=1326 audit(1779076547.280:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.895022][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.905227][ T27] audit: type=1326 audit(1779076547.280:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.3.3197" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ebd9ce59 code=0x7ffc0000 [ 756.929420][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.950196][T14263] usb 5-1: config 0 descriptor?? [ 756.997026][T14263] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 757.036261][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.121553][T14268] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 757.244428][T15826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.270396][T15826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.322313][T14268] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x6 has invalid maxpacket 65535, setting to 64 [ 757.364533][T14268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 757.404861][T14268] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.409578][T14600] usb 5-1: USB disconnect, device number 98 [ 757.447076][T14268] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 757.465537][T14268] usb 4-1: Product: syz [ 757.490073][T14268] usb 4-1: Manufacturer: syz [ 757.494807][T14268] usb 4-1: SerialNumber: syz [ 757.511131][T14268] usb 4-1: config 0 descriptor?? [ 757.548471][T15823] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 757.569712][T14268] usb 4-1: selecting invalid altsetting 0 [ 758.122383][T13606] usb 4-1: USB disconnect, device number 117 [ 758.421939][ T4319] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 758.617312][ T4319] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 758.663406][ T4319] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 758.748986][ T4319] usb 2-1: config 0 interface 0 has no altsetting 0 [ 759.765530][T15856] IPVS: stopping master sync thread 15857 ... [ 759.914417][ T4319] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 759.923634][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 759.932134][ T4319] usb 2-1: Product: syz [ 759.936387][ T4319] usb 2-1: Manufacturer: syz [ 759.946607][ T4319] usb 2-1: SerialNumber: syz [ 759.953786][ T4319] usb 2-1: config 0 descriptor?? [ 760.180734][ T4319] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 760.198864][ T4319] usb 2-1: USB disconnect, device number 88 [ 760.442949][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 761.675201][T15884] device syzkaller0 entered promiscuous mode [ 762.234118][T15895] loop4: detected capacity change from 0 to 16 [ 762.320028][T15895] erofs: (device loop4): mounted with root inode @ nid 36. [ 762.345575][T14268] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 762.726641][T14268] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.749922][T14268] usb 4-1: config 0 interface 0 has no altsetting 0 [ 762.786355][T14268] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 762.861193][T15902] IPVS: stopping master sync thread 15358 ... [ 762.883673][T14268] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 763.633277][T14268] usb 4-1: Product: syz [ 763.653229][T14268] usb 4-1: Manufacturer: syz [ 763.678144][T14268] usb 4-1: SerialNumber: syz [ 763.719754][T14268] usb 4-1: config 0 descriptor?? [ 763.755936][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 763.755950][ T27] audit: type=1326 audit(1779076554.490:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 763.850954][ T27] audit: type=1326 audit(1779076554.490:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 763.865523][T14268] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 763.875147][ C0] vkms_vblank_simulate: vblank timer overrun [ 763.945554][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 763.968106][ T27] audit: type=1326 audit(1779076554.490:6987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 763.992259][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.030235][T15912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.046672][T15912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.067450][ T27] audit: type=1326 audit(1779076554.520:6988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 764.110684][ T27] audit: type=1326 audit(1779076554.520:6989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 764.171579][T14602] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 764.197175][ T27] audit: type=1326 audit(1779076554.620:6990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 764.221401][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.233026][ T27] audit: type=1326 audit(1779076554.620:6991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 764.257201][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.291587][T14268] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 764.329603][ T27] audit: type=1326 audit(1779076554.620:6992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 764.393186][T14602] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 764.409889][T14602] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 764.420754][ T4319] usb 4-1: USB disconnect, device number 118 [ 764.423706][T14602] usb 5-1: config 0 interface 0 has no altsetting 0 [ 764.436076][ T27] audit: type=1326 audit(1779076554.640:6993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 764.460143][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.467554][ T27] audit: type=1326 audit(1779076554.640:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15899 comm="syz.1.3218" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab53f9ce59 code=0x7ffc0000 [ 764.491712][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.501005][T14602] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 764.517627][T14602] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 764.529674][T14268] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 764.544838][T14602] usb 5-1: Product: syz [ 764.555315][T14602] usb 5-1: Manufacturer: syz [ 764.565213][T14602] usb 5-1: SerialNumber: syz [ 764.573919][T14268] usb 2-1: config 0 interface 0 has no altsetting 0 [ 764.581275][T14602] usb 5-1: config 0 descriptor?? [ 764.634753][T14268] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 764.666380][T14268] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 764.696744][T14268] usb 2-1: Product: syz [ 764.730708][T14268] usb 2-1: Manufacturer: syz [ 764.796631][T14268] usb 2-1: SerialNumber: syz [ 765.011189][T14268] usb 2-1: config 0 descriptor?? [ 765.030506][T14602] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 765.078305][T14602] usb 5-1: USB disconnect, device number 99 [ 765.092707][T15905] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 765.109101][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.140280][T14268] usb 2-1: selecting invalid altsetting 0 [ 765.651295][T14600] usb 2-1: USB disconnect, device number 89 [ 768.225776][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 769.413238][T15942] loop1: detected capacity change from 0 to 16 [ 769.420378][T15942] erofs: (device loop1): mounted with root inode @ nid 36. [ 769.601403][T15953] device syzkaller0 entered promiscuous mode [ 770.572538][T15958] loop2: detected capacity change from 0 to 512 [ 770.666694][T15958] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 770.728790][T15958] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 770.849433][T15958] EXT4-fs (loop2): orphan cleanup on readonly fs [ 770.857207][T15958] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 770.894045][T15958] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 770.902679][T15958] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.3233: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 770.933493][T15958] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3233: couldn't read orphan inode 13 (err -117) [ 770.961616][T14268] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 770.979084][T15958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 771.154304][T14268] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 771.185921][T14268] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.251021][T14268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 771.314820][T14268] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 771.392906][T14268] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 771.427282][T14268] usb 5-1: Product: syz [ 771.530679][T14268] usb 5-1: Manufacturer: syz [ 771.545811][T14268] usb 5-1: SerialNumber: syz [ 772.596457][T14268] usb 5-1: config 0 descriptor?? [ 772.604275][T14518] EXT4-fs (loop2): unmounting filesystem. [ 774.098826][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 774.111069][T14268] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 774.741845][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 775.725486][T14268] usb 5-1: USB disconnect, device number 100 [ 775.758702][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.573497][T16000] binder_alloc: binder_alloc_mmap_handler: 15999 200000fff000-200001000000 already mapped failed -16 [ 777.158228][T16013] loop3: detected capacity change from 0 to 16 [ 777.165826][T16013] erofs: (device loop3): mounted with root inode @ nid 36. [ 780.306587][T14603] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 780.653097][T14603] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 780.684628][T14603] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.761073][T14603] usb 1-1: config 0 interface 0 has no altsetting 0 [ 780.777200][T14603] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 780.789988][T14603] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 780.801320][T14603] usb 1-1: Product: syz [ 780.814903][T14603] usb 1-1: Manufacturer: syz [ 780.828239][T14603] usb 1-1: SerialNumber: syz [ 780.858945][T14603] usb 1-1: config 0 descriptor?? [ 780.976349][T14603] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 781.016930][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.074567][T14603] usb 1-1: USB disconnect, device number 113 [ 781.095581][T16048] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3257'. [ 781.144263][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 783.928080][T16093] x_tables: duplicate underflow at hook 1 [ 784.503970][T16082] loop3: detected capacity change from 0 to 32768 [ 785.691333][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'. [ 786.631860][T16082] loop3: detected capacity change from 32768 to 0 [ 786.663345][ C0] I/O error, dev loop3, sector 152 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 786.672706][ C0] metapage_read_end_io: I/O error [ 786.686381][T16103] read_mapping_page failed! [ 786.920021][T14878] loop: Write error at byte offset 9223372036870516731, length 4096. [ 786.974214][ C0] I/O error, dev loop3, sector 30744 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 786.984011][ C0] lbmIODone: I/O error in JFS log [ 787.002568][T14878] loop: Write error at byte offset 9223372036870520827, length 4096. [ 787.011550][T14264] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 787.029452][T14878] loop: Write error at byte offset 9223372036854910971, length 4096. [ 787.039771][ C0] I/O error, dev loop3, sector 30752 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 787.049515][ C0] lbmIODone: I/O error in JFS log [ 787.060763][T14878] loop: Write error at byte offset 9223372036854857723, length 4096. [ 787.071222][ C0] I/O error, dev loop3, sector 264 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 787.080646][ C0] metapage_write_end_io: I/O error [ 787.085811][ C0] I/O error, dev loop3, sector 160 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 787.095207][ C0] metapage_write_end_io: I/O error [ 787.105433][ T46] loop: Write error at byte offset 9223372036854910971, length 4096. [ 787.120810][ C0] I/O error, dev loop3, sector 264 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 787.130251][ C0] metapage_write_end_io: I/O error [ 787.215627][T14264] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 787.256953][T14264] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 787.308553][T14264] usb 1-1: config 0 interface 0 has no altsetting 0 [ 787.319532][T14264] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 787.335915][T14264] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 787.351600][T14264] usb 1-1: Product: syz [ 787.366003][T14264] usb 1-1: Manufacturer: syz [ 787.371068][T14264] usb 1-1: SerialNumber: syz [ 787.373414][T14878] loop: Write error at byte offset 9223372036854857723, length 4096. [ 787.387372][T14264] usb 1-1: config 0 descriptor?? [ 787.398038][ C0] I/O error, dev loop3, sector 160 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 787.407543][ C0] metapage_write_end_io: I/O error [ 787.413046][T14878] loop: Write error at byte offset 9223372036854910971, length 4096. [ 787.421175][T14878] loop: Write error at byte offset 9223372036854923259, length 4096. [ 787.432011][ C0] I/O error, dev loop3, sector 264 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 787.439912][T14264] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 787.441492][ C0] metapage_write_end_io: I/O error [ 787.460179][T14878] loop: Write error at byte offset 9223372036854890491, length 4096. [ 787.467516][T14160] udevd[14160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 787.468980][ C0] I/O error, dev loop3, sector 288 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 787.493530][ C0] metapage_write_end_io: I/O error [ 787.498673][ C0] I/O error, dev loop3, sector 224 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 787.508111][ C0] metapage_write_end_io: I/O error [ 787.528474][T16114] befs: (nullb0): invalid magic header [ 787.603748][T14603] usb 1-1: USB disconnect, device number 114 [ 787.644250][ T57] loop: Write error at byte offset 9223372036854906875, length 4096. [ 787.656569][ C0] metapage_write_end_io: I/O error [ 787.664204][ C0] metapage_write_end_io: I/O error [ 787.675079][ C0] metapage_write_end_io: I/O error [ 787.680955][ C0] metapage_write_end_io: I/O error [ 787.687573][ C0] metapage_write_end_io: I/O error [ 787.692793][ C0] metapage_write_end_io: I/O error [ 787.707919][ C0] lbmIODone: I/O error in JFS log [ 787.714220][ C0] lbmIODone: I/O error in JFS log [ 787.719735][ C0] lbmIODone: I/O error in JFS log [ 787.726850][T15263] lmLogShutdown: exit(-5) [ 787.731888][T15263] jfs_umount failed with return code -5 [ 790.297806][T16139] page:ffffea0001c62f80 refcount:4 mapcount:1 mapping:ffff88804ec148d8 index:0x0 pfn:0x718be [ 790.309310][T16139] memcg:ffff88802452a000 [ 790.313577][T16139] aops:shmem_aops ino:674 [ 790.318026][T16139] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 790.327856][T16139] raw: 00fff60000080015 ffff88802452c248 ffffea0001401448 ffff88804ec148d8 [ 790.336450][T16139] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88802452a000 [ 790.345036][T16139] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 790.352323][T16139] page_owner tracks the page as allocated [ 790.359192][T16139] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 16140, tgid 16139 (syz.3.3278), ts 790263810674, free_ts 790111202508 [ 790.377094][T16139] post_alloc_hook+0x173/0x1a0 [ 790.381888][T16139] get_page_from_freelist+0x1a1e/0x1ab0 [ 790.387425][T16139] __alloc_pages+0x1ec/0x4f0 [ 790.392009][T16139] __folio_alloc+0xe/0x30 [ 790.396330][T16139] vma_alloc_folio+0x4a3/0x900 [ 790.401147][T16139] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 790.406892][T16139] shmem_get_folio_gfp+0x1361/0x3400 [ 790.412169][T16139] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 790.417884][T16139] udmabuf_create+0x99b/0xfc0 [ 790.422614][T16139] udmabuf_ioctl+0x1f3/0x300 [ 790.427196][T16139] __se_sys_ioctl+0xfa/0x170 [ 790.431830][T16139] do_syscall_64+0x4c/0xa0 [ 790.436254][T16139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.442185][T16139] page last free stack trace: [ 790.446841][T16139] free_unref_page_prepare+0x8b4/0x9a0 [ 790.452297][T16139] free_unref_page_list+0xbb/0x8e0 [ 790.457401][T16139] release_pages+0x1fa6/0x2220 [ 790.462207][T16139] __pagevec_release+0x6d/0xe0 [ 790.466962][T16139] shmem_undo_range+0x7c2/0x20c0 [ 790.471889][T16139] shmem_evict_inode+0x25b/0xa80 [ 790.476816][T16139] evict+0x4c9/0x8d0 [ 790.480701][T16139] __dentry_kill+0x431/0x650 [ 790.485287][T16139] dentry_kill+0xb8/0x290 [ 790.489606][T16139] dput+0xfa/0x1d0 [ 790.493324][T16139] __fput+0x5e0/0x920 [ 790.497348][T16139] task_work_run+0x1d0/0x260 [ 790.501957][T16139] do_exit+0x982/0x2480 [ 790.506150][T16139] do_group_exit+0x217/0x2d0 [ 790.510729][T16139] get_signal+0x1272/0x1350 [ 790.515253][T16139] arch_do_signal_or_restart+0xc4/0x1350 [ 790.520992][T16139] ------------[ cut here ]------------ [ 790.526435][T16139] kernel BUG at mm/filemap.c:153! [ 790.531502][T16139] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 790.537675][T16139] CPU: 1 PID: 16139 Comm: syz.3.3278 Not tainted syzkaller #0 [ 790.545115][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.555164][T16139] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 790.561481][T16139] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 b0 ed d6 ff 48 89 df 48 c7 c6 a0 ff 94 8a e8 11 0d 12 00 <0f> 0b e8 9a ed d6 ff 48 89 df 48 c7 c6 00 05 95 8a e8 fb 0c 12 00 [ 790.581120][T16139] RSP: 0018:ffffc9000522f618 EFLAGS: 00010046 [ 790.587225][T16139] RAX: 5427c89a284d1000 RBX: ffffea0001c62f80 RCX: 5427c89a284d1000 [ 790.595190][T16139] RDX: 0000000000000002 RSI: ffffffff8a8c2b20 RDI: ffffffff8adf1ba0 [ 790.603165][T16139] RBP: ffffc9000522f778 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 790.611140][T16139] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: dffffc0000000000 [ 790.619110][T16139] R13: dffffc0000000000 R14: ffff88804ec148d8 R15: 1ffff92000a45ed4 [ 790.627075][T16139] FS: 00005555601cb500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 790.635995][T16139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.642567][T16139] CR2: 0000000000000000 CR3: 000000007f512000 CR4: 00000000003506e0 [ 790.650528][T16139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 790.658488][T16139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 790.666447][T16139] Call Trace: [ 790.669796][T16139] [ 790.672779][T16139] __filemap_remove_folio+0xbc/0x8a0 [ 790.678088][T16139] ? __rwlock_init+0x140/0x140 [ 790.682856][T16139] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 790.689865][T16139] ? _raw_spin_lock_irq+0xb7/0xf0 [ 790.694877][T16139] ? _raw_spin_lock_irqsave+0x100/0x100 [ 790.700411][T16139] ? __folio_cancel_dirty+0xc0/0x580 [ 790.705684][T16139] filemap_remove_folio+0xed/0x2c0 [ 790.710786][T16139] truncate_inode_folio+0x59/0x70 [ 790.715800][T16139] shmem_undo_range+0x533/0x20c0 [ 790.720730][T16139] ? shmem_truncate_range+0xb0/0xb0 [ 790.725925][T16139] ? do_raw_spin_lock+0x128/0x2f0 [ 790.730934][T16139] ? __rwlock_init+0x140/0x140 [ 790.735681][T16139] shmem_evict_inode+0x25b/0xa80 [ 790.740611][T16139] ? inode_wait_for_writeback+0x1df/0x220 [ 790.746401][T16139] ? shmem_free_in_core_inode+0xb0/0xb0 [ 790.751936][T16139] ? do_raw_spin_lock+0x128/0x2f0 [ 790.756948][T16139] ? bit_waitqueue+0x30/0x30 [ 790.761580][T16139] ? do_raw_spin_unlock+0x11d/0x230 [ 790.766766][T16139] ? shmem_free_in_core_inode+0xb0/0xb0 [ 790.772303][T16139] evict+0x4c9/0x8d0 [ 790.776188][T16139] ? proc_nr_inodes+0x2f0/0x2f0 [ 790.781029][T16139] ? do_raw_spin_unlock+0x11d/0x230 [ 790.786213][T16139] ? _raw_spin_unlock+0x24/0x40 [ 790.791052][T16139] ? iput+0x768/0x980 [ 790.795026][T16139] __dentry_kill+0x431/0x650 [ 790.799609][T16139] dentry_kill+0xb8/0x290 [ 790.803927][T16139] ? dput+0x37/0x1d0 [ 790.807815][T16139] dput+0xfa/0x1d0 [ 790.811526][T16139] __fput+0x5e0/0x920 [ 790.815498][T16139] task_work_run+0x1d0/0x260 [ 790.820080][T16139] ? task_work_cancel+0x220/0x220 [ 790.825095][T16139] ? exit_to_user_mode_loop+0x3b/0x110 [ 790.830632][T16139] exit_to_user_mode_loop+0xe6/0x110 [ 790.835910][T16139] exit_to_user_mode_prepare+0xee/0x180 [ 790.841446][T16139] syscall_exit_to_user_mode+0x16/0x40 [ 790.846928][T16139] do_syscall_64+0x58/0xa0 [ 790.851335][T16139] ? clear_bhb_loop+0x60/0xb0 [ 790.856000][T16139] ? clear_bhb_loop+0x60/0xb0 [ 790.860674][T16139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 790.866554][T16139] RIP: 0033:0x7f59ebd9ce59 [ 790.870963][T16139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.890552][T16139] RSP: 002b:00007ffce8ab2b38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 790.898951][T16139] RAX: 0000000000000000 RBX: 00007ffce8ab2c20 RCX: 00007f59ebd9ce59 [ 790.906905][T16139] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 790.914864][T16139] RBP: 00000000000c0edd R08: 0000000000000001 R09: 0000000000000000 [ 790.922823][T16139] R10: 0000001b2c820000 R11: 0000000000000246 R12: 00007ffce8ab2c60 [ 790.930779][T16139] R13: 00007f59ec015fac R14: 00000000000c0f36 R15: 00007f59ec015fa0 [ 790.938744][T16139] [ 790.941760][T16139] Modules linked in: [ 790.945647][T16139] ---[ end trace 0000000000000000 ]--- [ 790.951084][T16139] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 790.957320][T16139] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 b0 ed d6 ff 48 89 df 48 c7 c6 a0 ff 94 8a e8 11 0d 12 00 <0f> 0b e8 9a ed d6 ff 48 89 df 48 c7 c6 00 05 95 8a e8 fb 0c 12 00 [ 790.976917][T16139] RSP: 0018:ffffc9000522f618 EFLAGS: 00010046 [ 790.982971][T16139] RAX: 5427c89a284d1000 RBX: ffffea0001c62f80 RCX: 5427c89a284d1000 [ 790.990936][T16139] RDX: 0000000000000002 RSI: ffffffff8a8c2b20 RDI: ffffffff8adf1ba0 [ 790.998891][T16139] RBP: ffffc9000522f778 R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d [ 791.006852][T16139] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: dffffc0000000000 [ 791.014807][T16139] R13: dffffc0000000000 R14: ffff88804ec148d8 R15: 1ffff92000a45ed4 [ 791.022764][T16139] FS: 00005555601cb500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 791.031676][T16139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 791.038241][T16139] CR2: 0000000000000000 CR3: 000000007f512000 CR4: 00000000003506e0 [ 791.046200][T16139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 791.054156][T16139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 791.062181][T16139] Kernel panic - not syncing: Fatal exception [ 791.068539][T16139] Kernel Offset: disabled [ 791.072846][T16139] Rebooting in 86400 seconds..