last executing test programs: 16m16.238199592s ago: executing program 32 (id=199): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c00040028"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000}, 0x20008000) 14m46.792839521s ago: executing program 0 (id=639): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f000001b800)={0x0, 0x10, &(0x7f000001b840)=[@in={0x2, 0x0, @local}]}, &(0x7f000001b880)=0x10) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f000001b8c0)={r1, @in={{0x2, 0x4e22, @empty}}, 0x4e23}, 0x90) 14m46.607895689s ago: executing program 0 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xb, &(0x7f0000002440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002500)={r1, 0x0, 0x1c, 0x0, &(0x7f0000002580)="0000000004000000000000dd0000adb1ea711d1f8eed378f000522ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m46.416132444s ago: executing program 0 (id=645): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000000)='3', 0x4e) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 14m46.205065669s ago: executing program 0 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000000)='./nfsd\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='+2 -3 +4\n', 0x9) 14m45.606565992s ago: executing program 0 (id=652): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000007c0)={0x20, 0x30, 0x4, "60b87c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m45.144279532s ago: executing program 0 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xb, &(0x7f0000002440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000024c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 14m44.689385411s ago: executing program 33 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xb, &(0x7f0000002440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000024c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10m13.010829773s ago: executing program 2 (id=1467): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x7) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000003c0)=0x0, 0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x2e9, 0xffe0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 10m10.916325243s ago: executing program 2 (id=1473): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x7) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r5}) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 10m8.700665327s ago: executing program 2 (id=1481): mremap(&(0x7f000021d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00007d7000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x800) inotify_rm_watch(r4, 0x0) 10m7.065345473s ago: executing program 2 (id=1485): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x7) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x2e9, 0xffe0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 10m3.838508128s ago: executing program 2 (id=1502): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000001940)={0x2, 0x0, {&(0x7f00000019c0)=""/197, 0xc5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000001c00)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001c80)={0x2, 0x0, {&(0x7f0000001d00)=""/2, 0x2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000001dc0)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001e00)={0x2, 0x0, {&(0x7f0000001e80)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r6 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00950000000000dcad39c78500"/23], &(0x7f0000000880)='GPL\x00', 0x9}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x18, &(0x7f0000002140)=ANY=[@ANYBLOB="4dc1e685f6dffa0000d09e1100000000000000000000000007faf93b0d880000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000320000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x80d, 0x1, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[r7], &(0x7f0000002080)=[{0x3, 0x3, 0xf, 0x2}, {0x5, 0x4, 0xf, 0x7}, {0x5, 0x5, 0x8e, 0x5}, {0x5, 0x5, 0x8, 0x5}, {0x1, 0x1, 0x1, 0x6}, {0x1, 0x1, 0x40000008}, {0x4, 0x5, 0x7, 0x6}, {0x0, 0x3, 0x3, 0x3}, {0x2, 0x5, 0x10, 0xa}, {0x0, 0x2, 0x2, 0x8}], 0x10, 0x2}, 0x94) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x40, 0x3, 0x5e, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6179, 0x1, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bf2, 0x1000, 0x1, 0xef, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f000018d000/0x1000)=nil, 0x1000, 0x300000b, 0x10, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) add_key(&(0x7f0000000300)='pkcs7_test\x00', 0x0, &(0x7f0000001880)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010510040401020304", 0xbe, 0xffffffffffffffff) 9m57.670919623s ago: executing program 2 (id=1506): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000000d0a46adc402d7ccb72000000a00bffe0980020073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x161, 0x8000000, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 9m41.329568304s ago: executing program 34 (id=1506): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000000d0a46adc402d7ccb72000000a00bffe0980020073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x161, 0x8000000, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 5m51.082902935s ago: executing program 7 (id=2031): pwrite64(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x89c) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x10}}) r1 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x3c, 0x2, 0x100, "45c93d5ee3885046d5dce4130f84a95015a3e3a26b5c39a58cf64507bf87b813", 0x20493859}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m47.787669003s ago: executing program 7 (id=2036): syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, 0x0, 0x0, 0x0) eventfd2(0x1, 0x80001) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x3554000) fadvise64(r1, 0x3, 0x4000000005, 0x4) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, 0x0, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x3e0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x0, 0x1c3}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 5m46.26023454s ago: executing program 7 (id=2042): socket$rds(0x15, 0x5, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x800) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) 5m42.279304505s ago: executing program 7 (id=2049): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000500)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000540)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x84042, 0xc2) write$P9_RUNLINKAT(r1, &(0x7f00000002c0)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 5m39.361827518s ago: executing program 7 (id=2055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1fe) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, 0x0, 0x1008, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 5m36.64066576s ago: executing program 7 (id=2057): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000500)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000540)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x84042, 0xc2) write$P9_RUNLINKAT(r1, &(0x7f00000002c0)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 5m20.338316168s ago: executing program 35 (id=2057): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000500)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000540)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x9, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda\x00', 0x84042, 0xc2) write$P9_RUNLINKAT(r1, &(0x7f00000002c0)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 3m32.846241388s ago: executing program 6 (id=2265): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x802) writev(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019300)='./sys\x00', &(0x7f0000019340)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019380)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000193c0)=""/265, 0x109) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000195c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) 3m32.237952611s ago: executing program 6 (id=2267): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101c00, 0x0) ftruncate(r0, 0x46) set_mempolicy(0x1, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x200900, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x70d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f00000000c0)={'full'}, 0xfffffdef) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000a00)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a40)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f0000000cc0)='+=\xbe9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0x5, 0x7, 0x7}, 0x4}, 0x20, 0x1, 0x0) 3m21.675478487s ago: executing program 6 (id=2284): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000180)={0x0, 0x280, 0x1e0, 0x34325258, 0x3, [0x2], [0x80ffff, 0x0, 0x2000000], [0x0, 0x1beab, 0x0, 0xff], [0x400000000000000, 0x4]}) 3m20.030284427s ago: executing program 6 (id=2289): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000fc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001040)='27', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'vlan0\x00', 0x0}) 3m19.580968345s ago: executing program 6 (id=2290): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x802) writev(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019300)='./sys\x00', &(0x7f0000019340)='sysfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000193c0)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000195c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) 3m19.140417407s ago: executing program 6 (id=2292): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x2}, {0x2, 0xe}, {0xfff2, 0x8}}}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$loop(&(0x7f0000000700), 0x6, 0x2a2983) syz_open_dev$dvb_frontend(0x0, 0x1, 0x882) syz_open_dev$vim2m(&(0x7f0000000740), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2002c094) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000900)={0x3, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x0, 0x48, 0x0, 0x18, 0xb4a, 0x9, 0xfffffffffffffff7, 0x0, 0x120000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000980)={'vxcan0\x00'}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000a00)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB], 0x80}}, 0x0) syz_clone(0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000b40)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) 3m3.300292511s ago: executing program 36 (id=2292): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x2}, {0x2, 0xe}, {0xfff2, 0x8}}}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$loop(&(0x7f0000000700), 0x6, 0x2a2983) syz_open_dev$dvb_frontend(0x0, 0x1, 0x882) syz_open_dev$vim2m(&(0x7f0000000740), 0x7fff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x2002c094) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000900)={0x3, 0x2}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x0, 0x48, 0x0, 0x18, 0xb4a, 0x9, 0xfffffffffffffff7, 0x0, 0x120000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000980)={'vxcan0\x00'}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000a00)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB], 0x80}}, 0x0) syz_clone(0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000b40)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) 1m1.802354264s ago: executing program 1 (id=2524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x8004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 59.745862284s ago: executing program 1 (id=2530): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000800)=@abs, 0x6e) getpgrp(0x0) sendmmsg$unix(r1, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r0, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="1d", 0xfe3a, 0xfffffffffffffffe) 50.634397439s ago: executing program 1 (id=2545): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000340)={0x0, 0x80000001}) openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000400)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffffff, 0x0, 0x8, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x2004) 48.102812158s ago: executing program 1 (id=2547): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000780)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e932057", 0x17e}, {&(0x7f0000000900)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dc", 0x9a}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000c00)=0xdf8, 0x4) writev(r0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139cad3915f76f9cf17d61", 0xb2}, {&(0x7f0000000d40)="135c15194fad5248c52ac1fc08d8399a", 0x10}], 0x2) write(r0, &(0x7f0000000d80)="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", 0x37d) 46.6088188s ago: executing program 1 (id=2552): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x802) writev(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000192c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000019300)='./sys\x00', &(0x7f0000019340)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000019380)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r4, &(0x7f00000193c0)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000195c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) 45.076017351s ago: executing program 1 (id=2554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20004a000000010328bd7000fbdbdf090c0000000c00040000000000000071f3a496607a81c7ee2de26db554b05165dad5c162f9f348dd58e26fb8dcd7426e62b5265752f27cba3becdb5e37e5728048f3a91df8b447f8cc68e29c69b6fd7c1eff5e3d2c4658598988a5718553698b87ef14dff891bf908d776c03f379a1114da7bd57576558c9e1a297874b8fb2dbcf68b0a5cc42bd18f7c653c21a086223a073f587446c7453d11e5b866889"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='u\x00\x00\xf1\x94\x00'/18, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x0}]}) close(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3}}, 0x10, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x40051}, 0x20008000) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a00008", 0xf) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f000002b000/0xb000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 35.925628724s ago: executing program 5 (id=2569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x2e9, 0xffe0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 33.873278868s ago: executing program 5 (id=2574): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000001940)={0x2, 0x0, {&(0x7f00000019c0)=""/197, 0xc5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000001c00)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001c80)={0x2, 0x0, {&(0x7f0000001d00)=""/2, 0x2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000001dc0)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001e00)={0x2, 0x0, {&(0x7f0000001e80)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r6 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00950000000000dcad39c785"], &(0x7f0000000880)='GPL\x00', 0x9}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x18, &(0x7f0000002140)=ANY=[@ANYBLOB="4dc1e685f6dffa0000d09e1100000000000000000000000007faf93b0d880000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000320000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x80d, 0x1, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[r7], &(0x7f0000002080)=[{0x3, 0x3, 0xf, 0x2}, {0x5, 0x4, 0xf, 0x7}, {0x5, 0x5, 0x8e, 0x5}, {0x5, 0x5, 0x8, 0x5}, {0x1, 0x1, 0x1, 0x6}, {0x1, 0x1, 0x40000008}, {0x4, 0x5, 0x7, 0x6}, {0x0, 0x3, 0x3, 0x3}, {0x2, 0x5, 0x10, 0xa}, {0x0, 0x2, 0x2, 0x8}], 0x10, 0x2}, 0x94) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x40, 0x3, 0x5e, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6179, 0x1, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bf2, 0x1000, 0x1, 0xef, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f000018d000/0x1000)=nil, 0x1000, 0x300000b, 0x10, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) add_key(&(0x7f0000000300)='pkcs7_test\x00', 0x0, &(0x7f0000001880)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010510040401020304", 0xbe, 0xffffffffffffffff) 29.680528022s ago: executing program 37 (id=2554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20004a000000010328bd7000fbdbdf090c0000000c00040000000000000071f3a496607a81c7ee2de26db554b05165dad5c162f9f348dd58e26fb8dcd7426e62b5265752f27cba3becdb5e37e5728048f3a91df8b447f8cc68e29c69b6fd7c1eff5e3d2c4658598988a5718553698b87ef14dff891bf908d776c03f379a1114da7bd57576558c9e1a297874b8fb2dbcf68b0a5cc42bd18f7c653c21a086223a073f587446c7453d11e5b866889"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='u\x00\x00\xf1\x94\x00'/18, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x0}]}) close(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3}}, 0x10, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x40051}, 0x20008000) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a00008", 0xf) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f000002b000/0xb000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 27.735446167s ago: executing program 5 (id=2583): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x800001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000000d0a46adc402d7ccb72000000a00bffe0980020073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x161, 0x8000000, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 22.949455109s ago: executing program 4 (id=2588): socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) fcntl$getown(0xffffffffffffffff, 0x9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x258}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0xa001, 0xfffffffe, 0x20146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x4, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80000, 0x5, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) 22.452984923s ago: executing program 3 (id=2590): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 18.688626688s ago: executing program 3 (id=2593): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000340)={0x0, 0x80000001}) openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000400)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='v2to_da_alloc', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) 18.660365146s ago: executing program 8 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 18.481113807s ago: executing program 4 (id=2595): r0 = getpid() sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) r1 = io_uring_setup(0xc90, &(0x7f0000000000)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000002c0)="143613d0273152d4b270d784e4b24ddb50a607917dcde0e686ffe2dd57eecac45d1c0ac375910a54b3e528064f9f7b32ccf09a58fb853f01fde40747682aae9fe62528aa079cb20dec920ed135a376c4d7101a28e00a4f0ac80a53e476c16191dfae8a4d677c356e032bae46e8f2", 0x6e}, {&(0x7f00000007c0)}, {&(0x7f0000001100)="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", 0xfe}, {&(0x7f0000001200)="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", 0x1f3}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)="c6af36c277b4b70ecafd6506a840259b69a4d8171c4a41382ce9c9699f44bba5def25d60a3e3d5d38fd87fc6f2f6592e88c35723dda2089f5119cc12d030ef7abc632140c69fe21ad9edcfb1c99b0633cdabb633397c3954f6752ac246554bc16e1ee17fd0fa89efc9c648d4c335a4f9e11436af9e7cb786ec4202d9d97653c6d52805df5a1b01c3062a85db6ed41dfef720f450c04bb5fd3cd7ae2697309321dd7f51d8ca3f31d8af", 0xa9}], 0x6, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x260}}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) sync() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRES16=r0, @ANYRES8, @ANYRES32=r4, @ANYRES8, @ANYRESDEC=r2], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) readv(r5, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/214, 0xd6}], 0x1) socket$kcm(0x2, 0xa, 0x2) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000440), 0x1c) 16.908844004s ago: executing program 9 (id=2596): r0 = getpid() sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) r1 = io_uring_setup(0xc90, &(0x7f0000000000)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000002c0)="143613d0273152d4b270d784e4b24ddb50a607917dcde0e686ffe2dd57eecac45d1c0ac375910a54b3e528064f9f7b32ccf09a58fb853f01fde40747682aae9fe62528aa079cb20dec920ed135a376c4d7101a28e00a4f0ac80a53e476c16191dfae8a4d677c356e032bae46e8f2", 0x6e}, {&(0x7f00000007c0)="a83e1667578a94c8099b2308f1b3f5776f9e35504e45f3208326b731ef98fa9a9d438256fd5ed0549c9226720f2211f477657ce3286025be77", 0x39}, {&(0x7f0000001100)="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", 0xfe}, {&(0x7f0000001200)="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", 0x1f3}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)="c6af36c277b4b70ecafd6506a840259b69a4d8171c4a41382ce9c9699f44bba5def25d60a3e3d5d38fd87fc6f2f6592e88c35723dda2089f5119cc12d030ef7abc632140c69fe21ad9edcfb1c99b0633cdabb633397c3954f6752ac246554bc16e1ee17fd0fa89efc9c648d4c335a4f9e11436af9e7cb786ec4202d9d97653c6d52805df5a1b01c3062a85db6ed41dfef720f450c04bb5fd3cd7ae2697309321dd7f51d8ca3f31d8af", 0xa9}], 0x6, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x260}}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) sync() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRES16=r0, @ANYRES8, @ANYRES32=r4, @ANYRES8, @ANYRESDEC=r2], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) readv(r5, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/214, 0xd6}], 0x1) socket$kcm(0x2, 0xa, 0x2) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000440), 0x1c) 16.727856413s ago: executing program 8 (id=2597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000851}, 0x20044840) 15.815896608s ago: executing program 3 (id=2598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fe) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, 0x0, 0x1008, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 15.604805095s ago: executing program 8 (id=2599): syz_open_dev$sg(0x0, 0x6f5e, 0x121403) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x0, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27ffffe, 0x4000, 0x2100, 0x2d8, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0xfffffffc, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0xe, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x3, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) 15.290489531s ago: executing program 5 (id=2600): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) openat$iommufd(0xffffffffffffff9c, &(0x7f0000002240), 0x20400, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002280), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, 0x0, 0x22000054) sched_setattr(0x0, &(0x7f00000022c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pidfd(0xffffffffffffff9c, &(0x7f0000002300), 0x80080, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002340)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) mq_open(&(0x7f00000043c0)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2DvF\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b\x95\xcdq\xcc\xe6\x91X\xd6\xcc\xea$\xfd\xc4\n\x01&\x8d\xd2\x02\x83\x18(+\'4xq\xfebM\x84\x16+4\xc6Wf\xba\xb9\xaf\xac\xfe\x99\x95\x97[\x9bb\xd2\xfdr\x84&\x94\x7fcV\xa8m\\\x9bP\xfbFf\x0f \xd8R\xc9X+N\x9d\xbfx\xd0EZY\xea\\\xc1\x86{?jm\xec\x1b\x16\x83\xdeR~\x92\x8cg(@\xb3\xb2\x97\xdf\x1b\x9b\xcdtJw~\x99jd(\x034\xaa\x967\xd6OW# \xc3\xbf\xf2z\xf4\x8f\x91\xe3', 0x40, 0x80, 0x0) connect$inet(r1, &(0x7f00000044c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004500), 0x4000095, 0xfffe) add_key(&(0x7f0000004540)='pkcs7_test\x00', 0x0, &(0x7f0000004580)="100c060863ff0760e15ce7cc0c86", 0xe, 0xfffffffffffffffd) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000004680)=ANY=[@ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf256a00000008000300", @ANYRES32, @ANYBLOB="e3b16464866891ea2bd6244bfb260811baa076adf004bdb617ed245d75cb00c4e06440e2eabcabcae7db0462e4b25d81a44d024722ce3a906a2202f7eedf0122364a0aa1edddb934aa24d6e5ae70e1544377560f4e3e6da3ac83f0bab8a3a707288bdce3d4d1b96c6b3b9a61d4bfd19f55a9fe0db212f1fe2410d23cf3cde24fd54f3f640430bef2d45efbcd4ff3ff3cb2a51830735fba21cf6756226fc7470f61d96f1dfde43be9f3d5755e404ef163acff3d5e04d79b7da13cd465cec5f46e0d947826fe49a6e010"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000004640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004600)={&(0x7f00000045c0)={0x1c, 0x0, 0x302, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000011) 13.501483256s ago: executing program 3 (id=2601): setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000400)=0x9, 0x4, 0x1) 12.779007876s ago: executing program 4 (id=2602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x2, &(0x7f0000000500)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f0000000600), &(0x7f0000000640)=@tcp=r4}, 0x20) sendto(r4, &(0x7f0000000680)='{', 0x1, 0x8000, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000006c0)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x34, r8, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 12.747216432s ago: executing program 9 (id=2603): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, 0x5, 0x8}, [@sa_dir={0x5, 0x21, 0x2}]}, 0x100}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 11.238194136s ago: executing program 3 (id=2604): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000"], 0x28}, 0x0) listen(r3, 0x0) 9.534740472s ago: executing program 8 (id=2605): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x61) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x10800, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./trace\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) write$FUSE_BMAP(r3, 0x0, 0x0) 8.820607585s ago: executing program 4 (id=2606): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.690107628s ago: executing program 3 (id=2607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20004a000000010328bd7000fbdbdf090c0000000c00040000000000000071f3a496607a81c7ee2de26db554b05165dad5c162f9f348dd58e26fb8dcd7426e62b5265752f27cba3becdb5e37e5728048f3a91df8b447f8cc68e29c69b6fd7c1eff5e3d2c4658598988a5718553698b87ef14dff891bf908d776c03f379a1114da7bd57576558c9e1a297874b8fb2dbcf68b0a5cc42bd18f7c653c21a086223a073f587446c7453d11e5b866889"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='u\x00\x00\xf1\x94\x00'/18, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x0}]}) close(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3}}, 0x10, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x40051}, 0x20008000) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}}, 0x8000) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a00008", 0xf) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f000002b000/0xb000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8.2858195s ago: executing program 9 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7.298232479s ago: executing program 8 (id=2609): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000001940)={0x2, 0x0, {&(0x7f00000019c0)=""/197, 0xc5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001b80)={0x2, 0x0, {&(0x7f0000001c00)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001c80)={0x2, 0x0, {&(0x7f0000001d00)=""/2, 0x2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000001dc0)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001e00)={0x2, 0x0, {&(0x7f0000001e80)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r6 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000000f000000000000005504000001ed90002500000017ff2000dd40000000000000730a13fe000000002f04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="00950000000000dcad39c785"], &(0x7f0000000880)='GPL\x00', 0x9}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x18, &(0x7f0000002140)=ANY=[@ANYBLOB="4dc1e685f6dffa0000d09e1100000000000000000000000007faf93b0d880000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000320000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x80d, 0x1, 0x8}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[r7], &(0x7f0000002080)=[{0x3, 0x3, 0xf, 0x2}, {0x5, 0x4, 0xf, 0x7}, {0x5, 0x5, 0x8e, 0x5}, {0x5, 0x5, 0x8, 0x5}, {0x1, 0x1, 0x1, 0x6}, {0x1, 0x1, 0x40000008}, {0x4, 0x5, 0x7, 0x6}, {0x0, 0x3, 0x3, 0x3}, {0x2, 0x5, 0x10, 0xa}, {0x0, 0x2, 0x2, 0x8}], 0x10, 0x2}, 0x94) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x40, 0x3, 0x5e, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6179, 0x1, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bf2, 0x1000, 0x1, 0xef, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f000018d000/0x1000)=nil, 0x1000, 0x300000b, 0x10, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) add_key(&(0x7f0000000300)='pkcs7_test\x00', 0x0, &(0x7f0000001880)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010510040401020304", 0xbe, 0xffffffffffffffff) 7.144005307s ago: executing program 5 (id=2610): socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$video4linux(&(0x7f0000000000), 0x806, 0x1233c1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000340)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c00028008"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r2 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x40000000, &(0x7f0000000b80)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@getqdisc={0x34, 0x26, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x1f, 0x4}, {0xd, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_getattr(r2, &(0x7f0000000b00)={0x38}, 0x38, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) 6.679831977s ago: executing program 9 (id=2611): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000580)=@rnullb={'/dev/syzrnull', 0x0}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./debug/failslab/times\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/failslab/probability\x00', 0x2, 0x132) write(r1, &(0x7f0000000b40)='5', 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fstat(r2, &(0x7f0000000180)) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000bc0)='1', 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f0000019280), 0x0, 0x0, 0x4, 0x0) pread64(r0, &(0x7f0000019340)=""/75, 0x4b, 0x0) 5.360938348s ago: executing program 9 (id=2612): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r3, 0x4}, 0x38) 4.508332941s ago: executing program 4 (id=2613): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x2e9, 0xffe0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x3, 0x32, 0x0, 0x0) 1.980612612s ago: executing program 8 (id=2614): r0 = getpid() sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) r1 = io_uring_setup(0xc90, &(0x7f0000000000)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000002c0)="143613d0273152d4b270d784e4b24ddb50a607917dcde0e686ffe2dd57eecac45d1c0ac375910a54b3e528064f9f7b32ccf09a58fb853f01fde40747682aae9fe62528aa079cb20dec920ed135a376c4d7101a28e00a4f0ac80a53e476c16191dfae8a4d677c356e032bae46e8f2", 0x6e}, {&(0x7f00000007c0)="a83e1667578a94c8099b2308f1b3f5776f9e35504e45f3208326b731ef98fa9a9d438256fd5ed0549c9226720f2211f477657ce3286025be77", 0x39}, {&(0x7f0000001100)="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", 0xfe}, {&(0x7f0000001200)="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", 0x1f3}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)="c6af36c277b4b70ecafd6506a840259b69a4d8171c4a41382ce9c9699f44bba5def25d60a3e3d5d38fd87fc6f2f6592e88c35723dda2089f5119cc12d030ef7abc632140c69fe21ad9edcfb1c99b0633cdabb633397c3954f6752ac246554bc16e1ee17fd0fa89efc9c648d4c335a4f9e11436af9e7cb786ec4202d9d97653c6d52805df5a1b01c3062a85db6ed41dfef720f450c04bb5fd3cd7ae2697309321dd7f51d8ca3f31d8af", 0xa9}], 0x6, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x260}}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) sync() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRES16=r0, @ANYRES8, @ANYRES32=r4, @ANYRES8, @ANYRESDEC=r2], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) readv(r5, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/214, 0xd6}], 0x1) socket$kcm(0x2, 0xa, 0x2) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000440), 0x1c) 1.935822901s ago: executing program 5 (id=2615): socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) fcntl$getown(0xffffffffffffffff, 0x9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x258}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0xa001, 0xfffffffe, 0x20146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x4, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x80000, 0x5, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x3, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) 1.631480951s ago: executing program 9 (id=2616): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x401, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x400, 0x0, 0x0, @by_dev={r1}, [@cache={0x0, 0x2410, 0x0, 0x88, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, '64', 0x20, '1 passthrough', 0x20, 'smq 0'}}]}) ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x10618, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, "f781e26f23a23d9905f7ac4b96a49624ce55a37c8fbde30e4f6354"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000840), 0x2, 0x143102) writev(r2, &(0x7f0000000880)=[{&(0x7f00000008c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10009, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '3\x00'}}], [{@euid_eq={'euid', 0x3d, r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x38, 0x36, 0x38, 0x39, 0x61, 0x38, 0x34], 0x2d, [0x36, 0x37, 0x38, 0x65], 0x2d, [0x62, 0x32, 0x33, 0x34], 0x2d, [0x0, 0x64, 0x62, 0x30], 0x2d, [0x63, 0x33, 0x61, 0x36, 0x62, 0x62, 0x65, 0x63]}}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}}) 0s ago: executing program 4 (id=2617): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff0000000904010102ff0000000705870240"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="2300020000000203"], 0x0, 0x0, 0x0, 0x0}, 0x0) timerfd_create(0x1, 0x66447b0ba3708b4b) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2400c000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14507e, 0x0) r3 = eventfd2(0x156, 0x0) r4 = dup2(r3, r2) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000840)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000880)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000900)={0x1, 0x0, 0x0, &(0x7f0000000940)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000a00)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000a40)={0x0, r4}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)={0x40, 0x14, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): speed is unknown, defaulting to 1000 [ 827.471111][ T5649] usb 9-1: f81604_read: reg: 105 failed: -EPIPE [ 827.471151][ T5649] f81604 9-1:255.122: Setting termination of CH#1 failed: -EPIPE [ 827.471195][ T5649] f81604 9-1:255.122: probe with driver f81604 failed with error -32 [ 827.519596][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 827.519656][ T10] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 827.542150][ T10] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 827.542181][ T10] usb 2-1: config 2 has no interface number 0 [ 827.542214][ T10] usb 2-1: config 2 interface 8 has no altsetting 0 [ 827.603459][ T10] usb 2-1: string descriptor 0 read error: -22 [ 827.603576][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.674164][ T10] usbtest 2-1:2.8: Linux user mode ISO test driver [ 827.674192][ T10] usbtest 2-1:2.8: low-speed {control} tests [ 828.239285][ T85] bridge_slave_1: left allmulticast mode [ 828.239323][ T85] bridge_slave_1: left promiscuous mode [ 828.239862][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.282235][ T85] bridge_slave_0: left allmulticast mode [ 828.282262][ T85] bridge_slave_0: left promiscuous mode [ 828.286880][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.342829][T13298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2101'. [ 828.676545][ T5760] usb 9-1: USB disconnect, device number 19 [ 829.266997][ T53] Bluetooth: hci0: command tx timeout [ 830.414592][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.445248][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.484009][ T85] bond0 (unregistering): Released all slaves [ 830.507833][T13317] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 831.333554][ T53] Bluetooth: hci0: command tx timeout [ 832.831647][ T5780] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 832.982317][ T5780] usb 9-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 832.989204][ T5780] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.989263][ T5780] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 832.989297][ T5780] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.046222][ T5780] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.046254][ T5780] usb 9-1: Product: syz [ 833.046275][ T5780] usb 9-1: Manufacturer: syz [ 833.046296][ T5780] usb 9-1: SerialNumber: syz [ 833.613589][T13341] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 833.837750][ T5889] usb 2-1: USB disconnect, device number 47 [ 834.177439][ T85] hsr_slave_0: left promiscuous mode [ 834.227010][ T85] hsr_slave_1: left promiscuous mode [ 834.228768][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.228790][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.298636][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.298661][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.368881][ T85] veth1_macvtap: left promiscuous mode [ 834.368932][ T85] veth0_macvtap: left promiscuous mode [ 834.369058][ T85] veth1_vlan: left promiscuous mode [ 834.369167][ T85] veth0_vlan: left promiscuous mode [ 834.500329][ T5780] ATM dev 0: failed to start ADSL synchronisation: -32 [ 834.500628][ C0] usbatm_complete: 18 callbacks suppressed [ 834.500654][ C0] ATM dev 0: usbatm_complete: urb 0xffff888037d64c00 failed (-71)! [ 834.500726][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034cd5000 failed (-71)! [ 834.500794][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034cd5900 failed (-71)! [ 834.500861][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034cd5f00 failed (-71)! [ 834.601662][ C0] ATM dev 0: usbatm_complete: urb 0xffff888037d64c00 failed (-71)! [ 834.601713][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034cd5000 failed (-71)! [ 834.601758][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034cd5900 failed (-71)! [ 834.601800][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034cd5f00 failed (-71)! [ 834.711904][ C0] ATM dev 0: usbatm_complete: urb 0xffff888037d64c00 failed (-71)! [ 834.711967][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034cd5000 failed (-71)! [ 834.726070][ T5780] usb 9-1: USB disconnect, device number 20 [ 835.042588][ T5649] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 835.202148][ T5649] usb 2-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=b3.a4 [ 835.203503][ T5649] usb 2-1: config 255 has an invalid interface number: 122 but max is 0 [ 835.203533][ T5649] usb 2-1: config 255 has no interface number 0 [ 835.203567][ T5649] usb 2-1: config 255 interface 122 has no altsetting 0 [ 835.207479][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.207519][ T5649] usb 2-1: Product: syz [ 835.207546][ T5649] usb 2-1: Manufacturer: syz [ 835.207573][ T5649] usb 2-1: SerialNumber: syz [ 836.001659][ T5649] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 836.001704][ T5649] f81604 2-1:255.122: Setting termination of CH#1 failed: -EPIPE [ 836.001751][ T5649] f81604 2-1:255.122: probe with driver f81604 failed with error -32 [ 839.005442][ T5889] usb 2-1: USB disconnect, device number 48 [ 839.566703][ T85] team0 (unregistering): Port device team_slave_1 removed [ 839.685022][ T85] team0 (unregistering): Port device team_slave_0 removed [ 839.851028][T13401] netlink: 'syz.1.2122': attribute type 49 has an invalid length. [ 840.693954][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 841.042669][T13395] rxe_eth0 speed is unknown, defaulting to 1000 [ 841.538321][T13237] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.567470][T13237] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.567607][T13237] bridge_slave_0: entered allmulticast mode [ 841.595661][T13237] bridge_slave_0: entered promiscuous mode [ 841.616798][T13237] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.616888][T13237] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.617009][T13237] bridge_slave_1: entered allmulticast mode [ 841.679514][T13237] bridge_slave_1: entered promiscuous mode [ 842.077717][T13237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.174472][T13237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.697666][T13237] team0: Port device team_slave_0 added [ 842.750061][T13237] team0: Port device team_slave_1 added [ 843.196898][T13237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.196924][T13237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.196962][T13237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.253480][T13237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.253499][T13237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.253535][T13237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.455785][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 843.455811][ T30] audit: type=1326 audit(1793161952.951:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.500031][ T30] audit: type=1326 audit(1793161952.961:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.500094][ T30] audit: type=1326 audit(1793161953.001:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.500149][ T30] audit: type=1326 audit(1793161953.001:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.500204][ T30] audit: type=1326 audit(1793161953.001:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.624684][ T30] audit: type=1326 audit(1793161953.121:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.624746][ T30] audit: type=1326 audit(1793161953.131:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.624802][ T30] audit: type=1326 audit(1793161953.131:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.753676][ T30] audit: type=1326 audit(1793161953.251:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 843.753758][ T30] audit: type=1326 audit(1793161953.251:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13425 comm="syz.6.2120" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 844.089790][T13237] hsr_slave_0: entered promiscuous mode [ 844.097030][T13237] hsr_slave_1: entered promiscuous mode [ 844.126119][T13237] debugfs: 'hsr0' already exists in 'hsr' [ 844.126145][T13237] Cannot create hsr debugfs directory [ 844.813310][ T5780] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 844.981486][ T5780] usb 4-1: Using ep0 maxpacket: 32 [ 844.982227][ T5780] usb 4-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 844.992111][ T5780] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 844.992150][ T5780] usb 4-1: config 0 has no interface number 0 [ 844.992206][ T5780] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 844.992255][ T5780] usb 4-1: config 0 interface 85 has no altsetting 0 [ 845.051553][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.051732][ T5780] usb 4-1: Product: syz [ 845.051761][ T5780] usb 4-1: Manufacturer: syz [ 845.051789][ T5780] usb 4-1: SerialNumber: syz [ 845.130053][ T5780] usb 4-1: config 0 descriptor?? [ 845.409219][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.409740][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.819746][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 845.914085][ T5780] appletouch 4-1:0.85: Geyser mode initialized. [ 846.030595][ T5780] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input16 [ 846.379018][ T5780] usb 4-1: USB disconnect, device number 55 [ 846.626266][ T5780] appletouch 4-1:0.85: input: appletouch disconnected [ 848.960937][T13237] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 849.054105][T13237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.108298][T13237] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 849.191053][T13237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.215273][T13237] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 849.328212][T13237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.356873][T13237] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 849.399208][T13237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.448504][T13237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.613314][T13237] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.673910][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.674033][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.728054][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.728149][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.484684][ T5782] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 853.700070][ T5782] usb 9-1: unable to get BOS descriptor or descriptor too short [ 853.700118][ T5782] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 853.732712][ T5782] usb 9-1: config 2 has an invalid interface number: 8 but max is 0 [ 853.732761][ T5782] usb 9-1: config 2 has no interface number 0 [ 853.732806][ T5782] usb 9-1: config 2 interface 8 has no altsetting 0 [ 853.838669][ T5782] usb 9-1: string descriptor 0 read error: -22 [ 853.838783][ T5782] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.905921][ T5782] usbtest 9-1:2.8: Linux user mode ISO test driver [ 853.905949][ T5782] usbtest 9-1:2.8: low-speed {control} tests [ 854.163933][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15 [ 857.485977][T13237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.371764][T13237] veth0_vlan: entered promiscuous mode [ 861.466610][T13237] veth1_vlan: entered promiscuous mode [ 861.636471][ T5773] usb 9-1: USB disconnect, device number 21 [ 861.746817][T13237] veth0_macvtap: entered promiscuous mode [ 861.800701][T13237] veth1_macvtap: entered promiscuous mode [ 861.980926][T13237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.058038][T13237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.151858][T10543] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.155172][ T6042] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.155268][ T6042] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.155331][ T6042] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.289465][ T5292] 8021q: adding VLAN 0 to HW filter on device eth16 [ 863.762202][T13031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.762227][T13031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.005224][T10543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.005249][T10543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.592099][ T5760] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 866.527344][ T5760] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 866.528733][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.561385][T13599] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 866.569317][ T5760] usb 2-1: config 0 descriptor?? [ 866.703287][T13599] usb 9-1: device descriptor read/64, error -71 [ 866.884228][ T5760] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 866.894931][ T5760] [drm:udl_init] *ERROR* Selecting channel failed [ 866.941526][T13599] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 866.990342][ T5760] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 866.990369][ T5760] [drm] Initialized udl on minor 1 [ 867.015096][ T5760] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 867.015420][ T5760] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 867.050678][ T5760] usb 2-1: USB disconnect, device number 49 [ 867.050816][ T5889] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 867.051165][ T5889] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 867.051682][ T5889] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 867.073290][T13599] usb 9-1: device descriptor read/64, error -71 [ 867.091410][ T5649] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 867.182457][T13599] usb usb9-port1: attempt power cycle [ 867.253365][ T5649] usb 4-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=b3.a4 [ 867.257676][ T5649] usb 4-1: config 255 has an invalid interface number: 122 but max is 0 [ 867.257717][ T5649] usb 4-1: config 255 has no interface number 0 [ 867.257762][ T5649] usb 4-1: config 255 interface 122 has no altsetting 0 [ 867.298827][ T5649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.298870][ T5649] usb 4-1: Product: syz [ 867.298898][ T5649] usb 4-1: Manufacturer: syz [ 867.298926][ T5649] usb 4-1: SerialNumber: syz [ 867.522565][T13599] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 867.546280][T13599] usb 9-1: device descriptor read/8, error -71 [ 869.111733][T13599] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 869.131810][ T5649] usb 4-1: f81604_read: reg: 105 failed: -EPIPE [ 869.131850][ T5649] f81604 4-1:255.122: Setting termination of CH#1 failed: -EPIPE [ 869.131895][ T5649] f81604 4-1:255.122: probe with driver f81604 failed with error -32 [ 869.167387][T13599] usb 9-1: device descriptor read/8, error -71 [ 869.272086][T13599] usb usb9-port1: unable to enumerate USB device [ 869.495279][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.495338][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.084661][T13599] usb 4-1: USB disconnect, device number 56 [ 872.275586][T13668] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 873.728098][T13670] xt_l2tp: missing protocol rule (udp|l2tpip) [ 880.660081][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 880.660109][ T30] audit: type=1326 audit(1793161990.161:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.660744][ T30] audit: type=1326 audit(1793161990.161:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.660990][ T30] audit: type=1326 audit(1793161990.161:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.772619][ T30] audit: type=1326 audit(1793161990.271:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.772933][ T30] audit: type=1326 audit(1793161990.281:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.780995][ T30] audit: type=1326 audit(1793161990.281:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.781078][ T30] audit: type=1326 audit(1793161990.281:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.781150][ T30] audit: type=1326 audit(1793161990.281:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.784666][ T30] audit: type=1326 audit(1793161990.281:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 880.784744][ T30] audit: type=1326 audit(1793161990.281:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13716 comm="syz.1.2186" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 884.178484][T13759] FAULT_INJECTION: forcing a failure. [ 884.178484][T13759] name failslab, interval 1, probability 5, space 0, times 10000 [ 884.178529][T13759] CPU: 1 UID: 0 PID: 13759 Comm: syz.9.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.178570][T13759] Tainted: [L]=SOFTLOCKUP [ 884.178581][T13759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 884.178598][T13759] Call Trace: [ 884.178608][T13759] [ 884.178620][T13759] dump_stack_lvl+0x100/0x190 [ 884.178668][T13759] should_fail_ex.cold+0x5/0xa [ 884.178703][T13759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.178744][T13759] should_failslab+0xc2/0x120 [ 884.178778][T13759] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 884.178831][T13759] ? __kthread_create_on_node+0x186/0x3f0 [ 884.178877][T13759] kvasprintf+0xbc/0x150 [ 884.178923][T13759] ? __pfx_kvasprintf+0x10/0x10 [ 884.178969][T13759] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 884.179015][T13759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.179052][T13759] ? __kthread_create_on_node+0xce/0x3f0 [ 884.179096][T13759] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 884.179152][T13759] __kthread_create_on_node+0x186/0x3f0 [ 884.179203][T13759] ? __pfx___kthread_create_on_node+0x10/0x10 [ 884.179240][T13759] ? irqentry_exit+0x202/0xab0 [ 884.179291][T13759] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 884.179337][T13759] kthread_create_on_node+0xc7/0x100 [ 884.179378][T13759] ? __pfx_kthread_create_on_node+0x10/0x10 [ 884.179421][T13759] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 884.179467][T13759] ? find_held_lock+0x2b/0x80 [ 884.179513][T13759] ? __enqueue_in_driver+0x14d/0x340 [ 884.179569][T13759] sdr_cap_start_streaming+0x36f/0x4c0 [ 884.179610][T13759] ? __pfx_sdr_cap_buf_queue+0x10/0x10 [ 884.179650][T13759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.179686][T13759] ? _raw_spin_unlock+0x28/0x50 [ 884.179732][T13759] ? __pfx_sdr_cap_start_streaming+0x10/0x10 [ 884.179786][T13759] vb2_start_streaming+0x162/0x570 [ 884.179832][T13759] ? __bitmap_weight+0xd7/0x110 [ 884.179909][T13759] vb2_core_streamon+0x26a/0x3c0 [ 884.179958][T13759] __vb2_init_fileio+0xcb7/0x1000 [ 884.180015][T13759] ? __pfx_vb2_vmalloc_vaddr+0x10/0x10 [ 884.180070][T13759] __vb2_perform_fileio+0x9ba/0x1380 [ 884.180129][T13759] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 884.180176][T13759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.180238][T13759] vb2_fop_read+0x211/0x520 [ 884.180285][T13759] v4l2_read+0x229/0x2c0 [ 884.180346][T13759] ? __pfx_v4l2_read+0x10/0x10 [ 884.180407][T13759] vfs_read+0x1e4/0xb40 [ 884.180446][T13759] ? lock_acquire+0x1d1/0x380 [ 884.180491][T13759] ? __fget_files+0x34/0x3d0 [ 884.180540][T13759] ? __pfx_vfs_read+0x10/0x10 [ 884.180574][T13759] ? find_held_lock+0x2b/0x80 [ 884.180622][T13759] ? __fget_files+0x215/0x3d0 [ 884.180657][T13759] ? __fget_files+0x215/0x3d0 [ 884.180691][T13759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.180734][T13759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.180769][T13759] ? __fget_files+0x21f/0x3d0 [ 884.180816][T13759] __x64_sys_pread64+0x1eb/0x250 [ 884.180848][T13759] ? __pfx___x64_sys_pread64+0x10/0x10 [ 884.180883][T13759] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.180925][T13759] do_syscall_64+0x123/0x790 [ 884.180962][T13759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.180993][T13759] RIP: 0033:0x7f62aa39f559 [ 884.181023][T13759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.181052][T13759] RSP: 002b:00007f62ab2f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 884.181081][T13759] RAX: ffffffffffffffda RBX: 00007f62aa625fa0 RCX: 00007f62aa39f559 [ 884.181101][T13759] RDX: 000000000000004b RSI: 0000200000019340 RDI: 0000000000000003 [ 884.181120][T13759] RBP: 00007f62aa436b20 R08: 0000000000000000 R09: 0000000000000000 [ 884.181139][T13759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.181157][T13759] R13: 00007f62aa626038 R14: 00007f62aa625fa0 R15: 00007ffdbaaa7308 [ 884.181197][T13759] [ 885.176849][T13759] vivid-009: kernel_thread() failed [ 885.606654][T13751] xt_l2tp: missing protocol rule (udp|l2tpip) [ 888.093007][T13793] tipc: Enabling of bearer rejected, already enabled [ 890.001387][ T5760] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 890.173001][ T5760] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 890.176458][ T5760] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.203323][ T5760] usb 10-1: config 0 descriptor?? [ 890.465412][ T5760] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 890.469128][ T5760] [drm:udl_init] *ERROR* Selecting channel failed [ 890.529869][ T5760] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 890.529906][ T5760] [drm] Initialized udl on minor 1 [ 890.530975][ T5760] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 890.553145][ T5760] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 890.557793][ T5760] usb 10-1: USB disconnect, device number 2 [ 890.582328][ T5773] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 890.596302][ T5773] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 893.107654][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2217'. [ 893.619417][T13847] xt_l2tp: missing protocol rule (udp|l2tpip) [ 893.836898][ T5773] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 893.985813][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 894.002379][ T5773] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 894.009714][ T5773] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 894.009745][ T5773] usb 4-1: config 0 has no interface number 0 [ 894.009790][ T5773] usb 4-1: config 0 interface 184 has no altsetting 0 [ 894.073199][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.073239][ T5773] usb 4-1: Product: syz [ 894.073266][ T5773] usb 4-1: Manufacturer: syz [ 894.073292][ T5773] usb 4-1: SerialNumber: syz [ 894.110640][ T5773] usb 4-1: config 0 descriptor?? [ 895.285786][ T5773] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 895.285918][ T5773] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 896.202470][ T5773] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 896.202508][ T5773] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 896.202539][ T5773] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 896.202564][ T5773] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 896.202764][ T5773] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 896.275586][ T5773] usb 4-1: USB disconnect, device number 57 [ 896.421422][ T5889] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 896.571371][ T5889] usb 10-1: Using ep0 maxpacket: 16 [ 896.571916][ T5889] usb 10-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 896.573546][ T5889] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.573594][ T5889] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 896.886082][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.886126][ T5889] usb 10-1: Product: syz [ 896.886154][ T5889] usb 10-1: Manufacturer: syz [ 896.886181][ T5889] usb 10-1: SerialNumber: syz [ 896.907309][ T5889] usb 10-1: config 0 descriptor?? [ 901.101916][ T5783] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 902.189296][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 902.213868][ T5783] usb 4-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 902.215357][ T5783] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 902.215395][ T5783] usb 4-1: config 0 has no interface number 0 [ 902.215451][ T5783] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 902.215498][ T5783] usb 4-1: config 0 interface 85 has no altsetting 0 [ 902.539089][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.539134][ T5783] usb 4-1: Product: syz [ 902.539160][ T5783] usb 4-1: Manufacturer: syz [ 902.539186][ T5783] usb 4-1: SerialNumber: syz [ 902.571676][ T5783] usb 4-1: config 0 descriptor?? [ 902.663154][T13599] usb 10-1: USB disconnect, device number 3 [ 904.142803][T13885] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 904.278064][ T5783] appletouch 4-1:0.85: Failed to read mode from device. [ 904.278305][ T5783] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 904.372846][ T5783] usb 4-1: USB disconnect, device number 58 [ 907.501893][ T5783] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 908.464256][ T5783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 908.464318][ T5783] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 908.469454][ T5783] usb 4-1: config 2 has an invalid interface number: 8 but max is 0 [ 908.469494][ T5783] usb 4-1: config 2 has no interface number 0 [ 908.469537][ T5783] usb 4-1: config 2 interface 8 has no altsetting 0 [ 908.481754][ T5783] usb 4-1: string descriptor 0 read error: -22 [ 908.481903][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.494525][ T5783] usbtest 4-1:2.8: Linux user mode ISO test driver [ 908.494562][ T5783] usbtest 4-1:2.8: low-speed {control} tests [ 912.301939][T13959] tipc: Enabling of bearer rejected, already enabled [ 912.395211][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 912.395528][ T30] audit: type=1326 audit(1793162021.901:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 912.396940][ T30] audit: type=1326 audit(1793162021.901:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 912.469295][ T30] audit: type=1326 audit(1793162021.981:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 912.469369][ T30] audit: type=1326 audit(1793162021.981:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 912.526152][ T30] audit: type=1326 audit(1793162022.041:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 912.526214][ T30] audit: type=1326 audit(1793162022.041:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fccf979f2c2 code=0x7ffc0000 [ 912.526282][ T30] audit: type=1326 audit(1793162022.041:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fccf979f357 code=0x7ffc0000 [ 912.561737][ T30] audit: type=1326 audit(1793162022.071:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 912.561816][ T30] audit: type=1326 audit(1793162022.071:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 912.561890][ T30] audit: type=1326 audit(1793162022.071:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.1.2240" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 915.787803][ T5889] usb 4-1: USB disconnect, device number 59 [ 915.926495][T13978] xt_l2tp: missing protocol rule (udp|l2tpip) [ 916.931427][T13599] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 917.084433][T13599] usb 9-1: Using ep0 maxpacket: 32 [ 917.089368][T13599] usb 9-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 917.112552][T13599] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 917.112600][T13599] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 917.112638][T13599] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 917.112702][T13599] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 917.112744][T13599] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 917.113710][T13599] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 917.113779][T13599] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.210152][T13599] usb 9-1: config 0 descriptor?? [ 917.503189][T13599] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 917.939036][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 917.939093][ T30] audit: type=1326 audit(1793162027.441:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 917.979913][ T30] audit: type=1326 audit(1793162027.481:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 917.979984][ T30] audit: type=1326 audit(1793162027.481:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 918.046981][ T30] audit: type=1326 audit(1793162027.551:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 918.047151][ T30] audit: type=1326 audit(1793162027.551:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 918.119330][ T30] audit: type=1326 audit(1793162027.621:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 918.119913][ T30] audit: type=1326 audit(1793162027.621:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 918.176546][ T30] audit: type=1326 audit(1793162027.621:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 918.176615][ T30] audit: type=1326 audit(1793162027.691:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 918.176695][ T30] audit: type=1326 audit(1793162027.691:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.8.2248" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f362619f559 code=0x7ffc0000 [ 918.484381][ C0] usblp0: nonzero read bulk status received: -71 [ 918.485044][T13599] usb 9-1: USB disconnect, device number 26 [ 918.508560][T14008] usblp0: error -71 reading from printer [ 918.546649][T13599] usblp0: removed [ 921.541580][ T5889] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 922.983101][T14059] FAULT_INJECTION: forcing a failure. [ 922.983101][T14059] name failslab, interval 1, probability 5, space 0, times 10000 [ 922.983144][T14059] CPU: 1 UID: 0 PID: 14059 Comm: syz.8.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 922.983185][T14059] Tainted: [L]=SOFTLOCKUP [ 922.983196][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 922.983215][T14059] Call Trace: [ 922.983225][T14059] [ 922.983237][T14059] dump_stack_lvl+0x100/0x190 [ 922.983284][T14059] should_fail_ex.cold+0x5/0xa [ 922.983319][T14059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.983360][T14059] should_failslab+0xc2/0x120 [ 922.983395][T14059] __kmalloc_cache_noprof+0x91/0x6d0 [ 922.983436][T14059] ? trace_kmalloc+0xeb/0x110 [ 922.983470][T14059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.983506][T14059] ? vb2_vmalloc_alloc+0xf9/0x410 [ 922.983548][T14059] vb2_vmalloc_alloc+0xf9/0x410 [ 922.983581][T14059] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 922.983619][T14059] __vb2_queue_alloc+0x8d5/0x1160 [ 922.983671][T14059] vb2_core_reqbufs+0x899/0xf30 [ 922.983711][T14059] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 922.983745][T14059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.983782][T14059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.983825][T14059] ? __vb2_init_fileio+0x18f/0x1000 [ 922.983865][T14059] __vb2_init_fileio+0x32d/0x1000 [ 922.983901][T14059] ? __pfx___futex_wait+0x10/0x10 [ 922.983935][T14059] ? futex_hash+0x311/0x400 [ 922.983984][T14059] __vb2_perform_fileio+0x9ba/0x1380 [ 922.984041][T14059] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 922.984081][T14059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.984133][T14059] vb2_fop_read+0x211/0x520 [ 922.984169][T14059] v4l2_read+0x229/0x2c0 [ 922.984213][T14059] ? __pfx_v4l2_read+0x10/0x10 [ 922.984259][T14059] vfs_read+0x1e4/0xb40 [ 922.984288][T14059] ? lock_acquire+0x1d1/0x380 [ 922.984322][T14059] ? __fget_files+0x34/0x3d0 [ 922.984359][T14059] ? __pfx_vfs_read+0x10/0x10 [ 922.984385][T14059] ? find_held_lock+0x2b/0x80 [ 922.984429][T14059] ? __fget_files+0x215/0x3d0 [ 922.984465][T14059] ? __fget_files+0x215/0x3d0 [ 922.984499][T14059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.984542][T14059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.984577][T14059] ? __fget_files+0x21f/0x3d0 [ 922.984627][T14059] __x64_sys_pread64+0x1eb/0x250 [ 922.984659][T14059] ? __pfx___x64_sys_pread64+0x10/0x10 [ 922.984694][T14059] ? srso_alias_return_thunk+0x5/0xfbef5 [ 922.984737][T14059] do_syscall_64+0x123/0x790 [ 922.984776][T14059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.984807][T14059] RIP: 0033:0x7f362619f559 [ 922.984831][T14059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.984860][T14059] RSP: 002b:00007f3626fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 922.984889][T14059] RAX: ffffffffffffffda RBX: 00007f3626425fa0 RCX: 00007f362619f559 [ 922.984909][T14059] RDX: 000000000000004b RSI: 0000200000019340 RDI: 0000000000000003 [ 922.984928][T14059] RBP: 00007f3626236b20 R08: 0000000000000000 R09: 0000000000000000 [ 922.984947][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.984966][T14059] R13: 00007f3626426038 R14: 00007f3626425fa0 R15: 00007ffce8601df8 [ 922.985006][T14059] [ 924.527862][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 924.527889][ T30] audit: type=1326 audit(1793162034.021:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 924.578050][ T30] audit: type=1326 audit(1793162034.081:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 924.578118][ T30] audit: type=1326 audit(1793162034.081:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 924.633005][ T30] audit: type=1326 audit(1793162034.141:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 924.658952][ T30] audit: type=1326 audit(1793162034.161:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d8f59f2c2 code=0x7ffc0000 [ 924.685853][ T30] audit: type=1326 audit(1793162034.191:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9d8f59f357 code=0x7ffc0000 [ 924.686992][ T30] audit: type=1326 audit(1793162034.191:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9d8f55c251 code=0x7ffc0000 [ 924.687286][ T30] audit: type=1326 audit(1793162034.191:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9d8f5a0349 code=0x7ffc0000 [ 924.689366][ T30] audit: type=1326 audit(1793162034.191:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9d8f55c2bb code=0x7ffc0000 [ 924.689440][ T30] audit: type=1326 audit(1793162034.191:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2261" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8f59f559 code=0x7ffc0000 [ 925.029081][T14070] fuse: fd is not a fuse device [ 925.981402][ T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 926.141565][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 926.151338][ T24] usb 9-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 926.163964][ T24] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 926.164004][ T24] usb 9-1: config 0 has no interface number 0 [ 926.164082][ T24] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 926.164123][ T24] usb 9-1: config 0 interface 85 has no altsetting 0 [ 926.187220][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.187288][ T24] usb 9-1: Product: syz [ 926.187316][ T24] usb 9-1: Manufacturer: syz [ 926.187344][ T24] usb 9-1: SerialNumber: syz [ 926.263274][ T24] usb 9-1: config 0 descriptor?? [ 926.557930][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.570826][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.589061][ T24] appletouch 9-1:0.85: Failed to read mode from device. [ 926.589255][ T24] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 926.857890][ T24] usb 9-1: USB disconnect, device number 27 [ 928.274533][ T5889] usb 2-1: device descriptor read/all, error -110 [ 928.524004][ T5889] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 928.673891][ T5889] usb 2-1: device descriptor read/64, error -32 [ 928.790157][ T5889] usb usb2-port1: attempt power cycle [ 929.141547][ T5889] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 929.164492][ T5889] usb 2-1: device descriptor read/8, error -32 [ 929.355119][T14048] raw-gadget.0 gadget.1: failed to queue suspend event [ 929.356383][T14048] raw-gadget.0 gadget.1: failed to queue disconnect event [ 929.414220][ T5889] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 929.508019][T14096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2259'. [ 929.631360][ T5889] usb 2-1: device not accepting address 54, error -71 [ 929.632191][ T5889] usb usb2-port1: unable to enumerate USB device [ 929.917063][T14099] xt_l2tp: missing protocol rule (udp|l2tpip) [ 930.934354][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.934433][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.408680][T14109] xt_l2tp: missing protocol rule (udp|l2tpip) [ 938.408685][T14153] fuse: Bad value for 'group_id' [ 938.408709][T14153] fuse: Bad value for 'group_id' [ 940.331330][ T5773] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 941.382034][ T5773] usb 10-1: New USB device found: idVendor=046d, idProduct=c293, bcdDevice=0.00 [ 941.382081][ T5773] usb 10-1: too many configurations: 253, using maximum allowed: 8 [ 941.383977][ T5773] usb 10-1: config 0 has no interfaces? [ 941.396259][ T5773] usb 10-1: config 0 has no interfaces? [ 941.425420][ T5773] usb 10-1: config 0 has no interfaces? [ 941.457017][ T5773] usb 10-1: config 0 has no interfaces? [ 941.459816][ T5773] usb 10-1: config 0 has no interfaces? [ 941.475051][ T5773] usb 10-1: config 0 has no interfaces? [ 941.491835][ T5773] usb 10-1: config 0 has no interfaces? [ 941.492458][ T5773] usb 10-1: config 0 has no interfaces? [ 941.492505][ T5773] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.523842][ T5773] usb 10-1: config 0 descriptor?? [ 941.731373][ T5889] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 942.160633][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 942.160682][ T5889] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 942.188689][ T5889] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 942.188719][ T5889] usb 2-1: config 2 has no interface number 0 [ 942.188752][ T5889] usb 2-1: config 2 interface 8 has no altsetting 0 [ 943.020402][ T5889] usb 2-1: string descriptor 0 read error: -22 [ 943.020558][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.126915][ T5889] usbtest 2-1:2.8: Linux user mode ISO test driver [ 943.126943][ T5889] usbtest 2-1:2.8: low-speed {control} tests [ 943.496337][ T10] usb 2-1: USB disconnect, device number 55 [ 943.757507][ T10] usb 10-1: USB disconnect, device number 4 [ 945.772017][T14190] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 947.384963][T14208] fuse: Bad value for 'group_id' [ 947.384987][T14208] fuse: Bad value for 'group_id' [ 948.716314][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 949.182560][T14217] FAULT_INJECTION: forcing a failure. [ 949.182560][T14217] name fail_futex, interval 1, probability 0, space 0, times 0 [ 949.182602][T14217] CPU: 0 UID: 0 PID: 14217 Comm: syz.3.2302 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.182650][T14217] Tainted: [L]=SOFTLOCKUP [ 949.182661][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 949.182680][T14217] Call Trace: [ 949.182690][T14217] [ 949.182702][T14217] dump_stack_lvl+0x100/0x190 [ 949.182749][T14217] should_fail_ex.cold+0x5/0xa [ 949.182790][T14217] get_futex_key+0x1c9/0x13e0 [ 949.182840][T14217] ? __pfx_get_futex_key+0x10/0x10 [ 949.182882][T14217] ? wakeup_preempt_fair+0x4fc/0xf60 [ 949.182934][T14217] futex_wait_setup+0x91/0x540 [ 949.182980][T14217] __futex_wait+0x19f/0x360 [ 949.183018][T14217] ? __pfx___futex_wait+0x10/0x10 [ 949.183051][T14217] ? __pfx_try_to_wake_up+0x10/0x10 [ 949.183089][T14217] ? futex_hash+0x311/0x400 [ 949.183136][T14217] ? __pfx_futex_wake_mark+0x10/0x10 [ 949.183178][T14217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.183214][T14217] ? find_held_lock+0x2b/0x80 [ 949.183259][T14217] ? futex_wake+0x4ea/0x5e0 [ 949.183293][T14217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.183331][T14217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.183372][T14217] futex_wait+0xe6/0x370 [ 949.183408][T14217] ? __pfx_futex_wait+0x10/0x10 [ 949.183451][T14217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 949.183503][T14217] do_futex+0x265/0x440 [ 949.183553][T14217] ? __pfx_do_futex+0x10/0x10 [ 949.183600][T14217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.183636][T14217] ? sock_ioctl+0x2dc/0x6b0 [ 949.183695][T14217] __x64_sys_futex+0x34f/0x4d0 [ 949.183725][T14217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.183760][T14217] ? __fget_files+0x21f/0x3d0 [ 949.183797][T14217] ? __pfx___x64_sys_futex+0x10/0x10 [ 949.183847][T14217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.183886][T14217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 949.183929][T14217] do_syscall_64+0x123/0x790 [ 949.183966][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.183997][T14217] RIP: 0033:0x7f56a2d9f559 [ 949.184021][T14217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.184049][T14217] RSP: 002b:00007f56a3cf80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 949.184078][T14217] RAX: ffffffffffffffda RBX: 00007f56a3025fa8 RCX: 00007f56a2d9f559 [ 949.184098][T14217] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f56a3025fa8 [ 949.184117][T14217] RBP: 00007f56a3025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 949.184136][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.184156][T14217] R13: 00007f56a3026038 R14: 00007fff9b50c620 R15: 00007fff9b50c708 [ 949.184196][T14217] [ 953.762298][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 953.762327][ T30] audit: type=1326 audit(1793162063.271:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 953.766603][ T30] audit: type=1326 audit(1793162063.271:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 953.851182][ T30] audit: type=1326 audit(1793162063.351:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 953.890399][ T30] audit: type=1326 audit(1793162063.391:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 953.900337][ T30] audit: type=1326 audit(1793162063.401:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 953.900416][ T30] audit: type=1326 audit(1793162063.401:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 953.900490][ T30] audit: type=1326 audit(1793162063.401:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 953.984915][ T30] audit: type=1326 audit(1793162063.491:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 954.025634][ T30] audit: type=1326 audit(1793162063.531:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 954.082596][ T30] audit: type=1326 audit(1793162063.581:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14236 comm="syz.5.2309" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 954.300600][T14237] fuse: fd is not a fuse device [ 957.533845][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 957.548755][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 957.556915][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 957.572004][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 957.572710][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 959.651934][ T5637] Bluetooth: hci5: command tx timeout [ 961.731758][ T5637] Bluetooth: hci5: command tx timeout [ 962.080339][ T549] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.811925][ T5637] Bluetooth: hci5: command tx timeout [ 963.844243][ T549] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.199328][ T549] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.217654][ T549] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.449452][T14301] xt_l2tp: missing protocol rule (udp|l2tpip) [ 965.619003][T14255] rxe_eth0 speed is unknown, defaulting to 1000 [ 965.891855][ T5637] Bluetooth: hci5: command tx timeout [ 966.099566][T14322] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 966.166291][ T549] bridge_slave_1: left allmulticast mode [ 966.166318][ T549] bridge_slave_1: left promiscuous mode [ 966.166497][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.214393][ T549] bridge_slave_0: left allmulticast mode [ 966.214419][ T549] bridge_slave_0: left promiscuous mode [ 966.221053][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.759974][ T549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.813075][ T549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.844968][ T549] bond0 (unregistering): Released all slaves [ 968.115395][ T549] tipc: Disabling bearer [ 968.115629][ T549] tipc: Left network mode [ 968.222268][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 968.222290][ T30] audit: type=1326 audit(1793162077.721:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.222350][ T30] audit: type=1326 audit(1793162077.721:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.244935][ T30] audit: type=1326 audit(1793162077.731:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.245017][ T30] audit: type=1326 audit(1793162077.731:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.245089][ T30] audit: type=1326 audit(1793162077.731:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.371990][ T5889] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 968.373502][ T30] audit: type=1326 audit(1793162077.881:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.382540][ T30] audit: type=1326 audit(1793162077.891:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.382617][ T30] audit: type=1326 audit(1793162077.891:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.524222][ T30] audit: type=1326 audit(1793162078.031:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.524286][ T30] audit: type=1326 audit(1793162078.031:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.5.2333" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901659f559 code=0x7ffc0000 [ 968.652689][ T5889] usb 9-1: New USB device found: idVendor=046d, idProduct=c293, bcdDevice=0.00 [ 968.652736][ T5889] usb 9-1: too many configurations: 253, using maximum allowed: 8 [ 968.653366][ T5889] usb 9-1: config 0 has no interfaces? [ 968.661001][ T5889] usb 9-1: config 0 has no interfaces? [ 968.690072][ T5889] usb 9-1: config 0 has no interfaces? [ 968.719510][ T5889] usb 9-1: config 0 has no interfaces? [ 968.735938][ T5889] usb 9-1: config 0 has no interfaces? [ 968.756800][ T5889] usb 9-1: config 0 has no interfaces? [ 968.758536][ T5889] usb 9-1: config 0 has no interfaces? [ 968.780549][ T5889] usb 9-1: config 0 has no interfaces? [ 968.780587][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.833694][ T5889] usb 9-1: config 0 descriptor?? [ 969.341706][ T5889] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 969.495879][ T5889] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 969.498737][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.527660][ T5889] usb 10-1: config 0 descriptor?? [ 970.086997][ T5889] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 970.087969][ T5889] [drm:udl_init] *ERROR* Selecting channel failed [ 970.170590][ T5889] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 970.170619][ T5889] [drm] Initialized udl on minor 1 [ 970.187458][ T5889] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 970.187799][ T5889] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 970.207193][ T24] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 970.226812][ T5889] usb 10-1: USB disconnect, device number 5 [ 970.240377][ T24] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 971.637551][T13599] usb 9-1: USB disconnect, device number 28 [ 971.920886][ T549] hsr_slave_0: left promiscuous mode [ 971.945606][ T549] hsr_slave_1: left promiscuous mode [ 971.946425][ T549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.946448][ T549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.986536][ T549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.986559][ T549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.025651][ T549] veth1_macvtap: left promiscuous mode [ 972.025700][ T549] veth0_macvtap: left promiscuous mode [ 972.025886][ T549] veth1_vlan: left promiscuous mode [ 972.025971][ T549] veth0_vlan: left promiscuous mode [ 972.161775][ T5889] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 973.044315][ T5889] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 973.045671][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.056974][ T5889] usb 10-1: config 0 descriptor?? [ 978.135565][ T5889] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 978.137269][ T5889] [drm:udl_init] *ERROR* Selecting channel failed [ 978.410834][ T5889] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 978.410873][ T5889] [drm] Initialized udl on minor 1 [ 978.418423][ T5889] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 978.423130][ T5889] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 978.426585][T13885] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 978.428644][T13885] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 978.428875][T13885] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 980.366990][ T549] team0 (unregistering): Port device team_slave_1 removed [ 980.405994][ T549] team0 (unregistering): Port device team_slave_0 removed [ 981.544814][ T5292] 8021q: adding VLAN 0 to HW filter on device eth17 [ 981.601985][T13885] usb 10-1: USB disconnect, device number 6 [ 982.581611][T14255] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.581735][T14255] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.581887][T14255] bridge_slave_0: entered allmulticast mode [ 982.589445][T14255] bridge_slave_0: entered promiscuous mode [ 982.605572][T14255] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.605691][T14255] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.605842][T14255] bridge_slave_1: entered allmulticast mode [ 982.616095][T14255] bridge_slave_1: entered promiscuous mode [ 982.843002][T14255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.869823][T14255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.065119][T14255] team0: Port device team_slave_0 added [ 983.082416][T14255] team0: Port device team_slave_1 added [ 983.831756][T13599] logitech-hidpp-device 0003:046D:C082.000C: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 983.862565][T14255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.862584][T14255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.862619][T14255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.938951][T14255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.938978][T14255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.939027][T14255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.237731][ T24] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 984.395823][ T24] usb 10-1: New USB device found: idVendor=046d, idProduct=c293, bcdDevice=0.00 [ 984.395870][ T24] usb 10-1: too many configurations: 253, using maximum allowed: 8 [ 984.400800][ T24] usb 10-1: config 0 has no interfaces? [ 984.430474][ T24] usb 10-1: config 0 has no interfaces? [ 984.431355][ T24] usb 10-1: config 0 has no interfaces? [ 984.451780][ T24] usb 10-1: config 0 has no interfaces? [ 984.455725][ T24] usb 10-1: config 0 has no interfaces? [ 984.461377][ T24] usb 10-1: config 0 has no interfaces? [ 984.473439][ T24] usb 10-1: config 0 has no interfaces? [ 984.481373][ T24] usb 10-1: config 0 has no interfaces? [ 984.481420][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.521958][ T24] usb 10-1: config 0 descriptor?? [ 984.594048][T14255] hsr_slave_0: entered promiscuous mode [ 984.619390][T14255] hsr_slave_1: entered promiscuous mode [ 984.620007][T14255] debugfs: 'hsr0' already exists in 'hsr' [ 984.620029][T14255] Cannot create hsr debugfs directory [ 984.738784][T14455] fido_id[14455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 988.897464][ T5783] usb 10-1: USB disconnect, device number 7 [ 991.768917][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 991.768939][ T30] audit: type=1326 audit(1793162101.271:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.777981][ T30] audit: type=1326 audit(1793162101.281:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.821519][ T30] audit: type=1326 audit(1793162101.321:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.828546][ T30] audit: type=1326 audit(1793162101.331:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.828623][ T30] audit: type=1326 audit(1793162101.331:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.828695][ T30] audit: type=1326 audit(1793162101.331:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.857122][ T30] audit: type=1326 audit(1793162101.361:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.857202][ T30] audit: type=1326 audit(1793162101.361:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.857281][ T30] audit: type=1326 audit(1793162101.361:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 991.888076][ T30] audit: type=1326 audit(1793162101.391:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14512 comm="syz.1.2364" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 992.375650][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.375730][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.397148][ T5292] 8021q: adding VLAN 0 to HW filter on device eth18 [ 992.726416][ T5783] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 992.881658][ T5783] usb 9-1: Using ep0 maxpacket: 32 [ 992.902639][ T5783] usb 9-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 992.907033][ T5783] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 992.907073][ T5783] usb 9-1: config 0 has no interface number 0 [ 992.907128][ T5783] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.907177][ T5783] usb 9-1: config 0 interface 85 has no altsetting 0 [ 992.963676][ T5783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.963720][ T5783] usb 9-1: Product: syz [ 992.963754][ T5783] usb 9-1: Manufacturer: syz [ 992.963782][ T5783] usb 9-1: SerialNumber: syz [ 992.997794][ T5783] usb 9-1: config 0 descriptor?? [ 993.048765][T14255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 993.120140][T14255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 993.166814][T14255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 993.195963][T14255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 993.210391][T14255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 993.238571][T14255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 993.250421][T14255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 993.286694][T14255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.329477][T14531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.330215][T14531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.360265][ T5783] appletouch 9-1:0.85: Failed to read mode from device. [ 993.360540][ T5783] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 993.523456][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 994.488706][ T24] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 994.501818][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.529955][ T24] usb 4-1: config 0 descriptor?? [ 996.587233][ T5783] usb 9-1: USB disconnect, device number 29 [ 996.601640][ T24] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 996.632090][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 996.638023][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 996.677068][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 996.677105][ T24] [drm] Initialized udl on minor 1 [ 996.677225][T14546] tipc: Enabling of bearer rejected, already enabled [ 996.680876][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 996.714289][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 996.731873][ T5889] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 996.732534][ T5889] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 996.732777][ T5889] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 996.766420][ T24] usb 4-1: USB disconnect, device number 60 [ 996.783405][T14255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.829927][ T10] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 996.844498][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.076321][ T10] usb 2-1: config 0 descriptor?? [ 997.897613][T14255] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.940722][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.940845][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.019788][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.019916][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.178823][T14255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 998.565030][ T5783] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 998.571578][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 998.693721][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 999.181317][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 999.182121][ T5783] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 999.185993][ T5783] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 999.186033][ T5783] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 999.186089][ T5783] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 999.186153][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 999.186194][ T5783] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 999.186239][ T5783] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 999.186315][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.229524][ T5783] usb 4-1: config 0 descriptor?? [ 999.904190][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 999.904222][ T10] [drm] Initialized udl on minor 1 [ 1000.162951][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1000.163365][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1000.366395][ T10] usb 2-1: USB disconnect, device number 56 [ 1000.369456][T13599] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1000.370153][T13599] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1000.429123][ T5783] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1000.750035][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 1000.750063][ T30] audit: type=1326 audit(1793162110.251:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.750293][ T30] audit: type=1326 audit(1793162110.251:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.822783][ T30] audit: type=1326 audit(1793162110.331:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.836313][ T30] audit: type=1326 audit(1793162110.331:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.836390][ T30] audit: type=1326 audit(1793162110.331:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.877515][ T30] audit: type=1326 audit(1793162110.371:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.877601][ T30] audit: type=1326 audit(1793162110.371:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.877674][ T30] audit: type=1326 audit(1793162110.371:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.889992][ T30] audit: type=1326 audit(1793162110.391:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1000.890076][ T30] audit: type=1326 audit(1793162110.391:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.3.2374" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a2d9f559 code=0x7ffc0000 [ 1001.118422][ C1] usblp0: nonzero read bulk status received: -71 [ 1001.118761][ T5889] usb 4-1: USB disconnect, device number 61 [ 1001.118998][T14568] usblp0: error -71 reading from printer [ 1001.158608][ T5889] usblp0: removed [ 1002.051944][ T5292] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1007.898072][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1007.898101][ T30] audit: type=1326 audit(1793162117.391:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1007.898181][ T30] audit: type=1326 audit(1793162117.391:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1007.987189][ T30] audit: type=1326 audit(1793162117.481:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1007.987503][ T30] audit: type=1326 audit(1793162117.491:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1007.987858][ T30] audit: type=1326 audit(1793162117.491:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1007.988171][ T30] audit: type=1326 audit(1793162117.491:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1007.988453][ T30] audit: type=1326 audit(1793162117.491:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1007.989138][ T30] audit: type=1326 audit(1793162117.491:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1008.009938][ T30] audit: type=1326 audit(1793162117.501:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1008.010300][ T30] audit: type=1326 audit(1793162117.501:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.1.2389" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1008.264097][T14255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.368376][T14678] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1012.043482][ T5889] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1012.052409][T14255] veth0_vlan: entered promiscuous mode [ 1012.088589][T14255] veth1_vlan: entered promiscuous mode [ 1012.192152][ T5889] usb 9-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1012.203679][ T5889] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.203758][ T5889] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1012.203803][ T5889] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.207404][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.207444][ T5889] usb 9-1: Product: syz [ 1012.207472][ T5889] usb 9-1: Manufacturer: syz [ 1012.207500][ T5889] usb 9-1: SerialNumber: syz [ 1012.307880][T14255] veth0_macvtap: entered promiscuous mode [ 1012.332083][T14255] veth1_macvtap: entered promiscuous mode [ 1012.445868][T14255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.488255][T14255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.601054][ T5292] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1012.609603][T10543] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.609719][T10543] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.609886][T10543] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.742933][T14691] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1012.782031][T10543] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.051861][T13032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.051896][T13032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.283938][ T6239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.283971][ T6239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.398200][ T5889] ATM dev 0: failed to start ADSL synchronisation: -32 [ 1013.398507][ C1] usbatm_complete: 160 callbacks suppressed [ 1013.398533][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880270ded00 failed (-71)! [ 1013.398605][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880270dec00 failed (-71)! [ 1013.398672][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880270deb00 failed (-71)! [ 1013.398737][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880270dea00 failed (-71)! [ 1013.502747][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880270ded00 failed (-71)! [ 1013.502796][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880270dec00 failed (-71)! [ 1013.502833][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880270deb00 failed (-71)! [ 1013.502871][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880270dea00 failed (-71)! [ 1013.516023][T14704] usb 9-1: USB disconnect, device number 30 [ 1016.371455][ T5773] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1016.548756][ T5773] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1016.566568][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.608200][ T5773] usb 4-1: config 0 descriptor?? [ 1016.781429][T13885] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1017.827066][T13885] usb 9-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1017.843977][T13885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.850864][T13885] usb 9-1: config 0 descriptor?? [ 1018.918883][ T5773] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1018.919543][ T5773] [drm:udl_init] *ERROR* Selecting channel failed [ 1019.976771][ T5773] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1019.976812][ T5773] [drm] Initialized udl on minor 1 [ 1020.000443][ T5773] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1020.000868][ T5773] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1020.031797][ T5773] usb 4-1: USB disconnect, device number 62 [ 1020.065127][ T5889] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1020.145449][T13885] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1020.145916][T13885] [drm:udl_init] *ERROR* Selecting channel failed [ 1020.177484][T13885] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1020.177521][T13885] [drm] Initialized udl on minor 2 [ 1020.178737][T13885] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1020.179167][T13885] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1020.214313][ T5889] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1020.214996][ T5889] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1020.215765][ T5889] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1020.215909][T13885] usb 9-1: USB disconnect, device number 31 [ 1020.521780][ T5889] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1020.684037][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 1020.684957][ T5889] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 1020.688480][ T5889] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1020.688520][ T5889] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1020.688558][ T5889] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1020.688622][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1020.688664][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1020.688708][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1020.688774][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.781773][ T5889] usb 5-1: config 0 descriptor?? [ 1020.811355][T13885] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1020.961429][T13885] usb 4-1: Using ep0 maxpacket: 32 [ 1020.971011][T13885] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 1020.985158][T13885] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1020.985199][T13885] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1020.985268][T13885] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1020.985332][T13885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1020.985373][T13885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1020.985449][T13885] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1020.985514][T13885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.071925][T13885] usb 4-1: config 0 descriptor?? [ 1021.101508][ T5889] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1021.357197][T13885] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1021.425492][ T30] audit: type=1326 audit(1793162130.931:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.464685][ T30] audit: type=1326 audit(1793162130.961:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.466079][ T30] audit: type=1326 audit(1793162130.971:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.539717][ T30] audit: type=1326 audit(1793162131.031:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.539807][ T30] audit: type=1326 audit(1793162131.031:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.539863][ T30] audit: type=1326 audit(1793162131.031:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.539940][ T30] audit: type=1326 audit(1793162131.031:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.652187][ T30] audit: type=1326 audit(1793162131.161:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.655980][ T30] audit: type=1326 audit(1793162131.161:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.657477][ T30] audit: type=1326 audit(1793162131.161:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.4.2409" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f991b79f559 code=0x7ffc0000 [ 1021.876897][ C0] usblp0: nonzero read bulk status received: -71 [ 1021.877581][ T5782] usb 5-1: USB disconnect, device number 6 [ 1021.909896][T14761] usblp0: error -71 reading from printer [ 1021.929300][ T5782] usblp0: removed [ 1022.080573][T13885] usb 4-1: USB disconnect, device number 63 [ 1022.109876][T13885] usblp1: removed [ 1022.269371][T14795] FAULT_INJECTION: forcing a failure. [ 1022.269371][T14795] name failslab, interval 1, probability 5, space 0, times 10000 [ 1022.269414][T14795] CPU: 1 UID: 0 PID: 14795 Comm: syz.1.2416 Tainted: G L syzkaller #0 PREEMPT(full) [ 1022.269455][T14795] Tainted: [L]=SOFTLOCKUP [ 1022.269466][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1022.269484][T14795] Call Trace: [ 1022.269494][T14795] [ 1022.269506][T14795] dump_stack_lvl+0x100/0x190 [ 1022.269552][T14795] should_fail_ex.cold+0x5/0xa [ 1022.269587][T14795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1022.269628][T14795] should_failslab+0xc2/0x120 [ 1022.269662][T14795] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1022.269712][T14795] ? __d_alloc+0x34/0xad0 [ 1022.269760][T14795] __d_alloc+0x34/0xad0 [ 1022.269798][T14795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1022.269846][T14795] d_alloc_pseudo+0x1c/0xc0 [ 1022.269878][T14795] alloc_file_pseudo+0x118/0x290 [ 1022.269940][T14795] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1022.269995][T14795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1022.270046][T14795] ? alloc_fd+0x471/0x7a0 [ 1022.270106][T14795] sock_alloc_file+0x50/0x210 [ 1022.270164][T14795] __sys_socket+0x1c0/0x260 [ 1022.270202][T14795] ? __pfx___sys_socket+0x10/0x10 [ 1022.270259][T14795] __x64_sys_socket+0x72/0xb0 [ 1022.270294][T14795] ? lockdep_hardirqs_on+0x7d/0x110 [ 1022.270339][T14795] do_syscall_64+0x123/0x790 [ 1022.270390][T14795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.270431][T14795] RIP: 0033:0x7fccf979f559 [ 1022.270462][T14795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.270500][T14795] RSP: 002b:00007fccfa5ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1022.270537][T14795] RAX: ffffffffffffffda RBX: 00007fccf9a25fa0 RCX: 00007fccf979f559 [ 1022.270565][T14795] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1022.270590][T14795] RBP: 00007fccf9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1022.270614][T14795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.270639][T14795] R13: 00007fccf9a26038 R14: 00007fccf9a25fa0 R15: 00007ffc1fe41ac8 [ 1022.270693][T14795] [ 1024.233521][T14814] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2419'. [ 1027.431970][T14704] logitech-hidpp-device 0003:046D:C082.000D: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 1027.889514][T14856] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1027.967980][T14847] fido_id[14847]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1028.358984][T14855] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1029.508118][ T5949] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1030.599418][ T5949] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1030.601335][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.629101][ T5949] usb 4-1: config 0 descriptor?? [ 1031.506553][ T5949] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1031.507015][ T5949] [drm:udl_init] *ERROR* Selecting channel failed [ 1031.641836][ T5949] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1031.641875][ T5949] [drm] Initialized udl on minor 1 [ 1031.650797][ T5949] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1031.672907][ T5949] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1031.697403][ T5949] usb 4-1: USB disconnect, device number 64 [ 1031.705239][T13885] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.932634][T14892] ptrace attach of ""[14897] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[14892] [ 1034.158748][T14892] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0) [ 1034.788813][T14919] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1035.715855][ T5949] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 1036.675512][ T5949] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1036.675568][ T5949] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 1036.680528][ T5949] usb 10-1: config 2 has an invalid interface number: 8 but max is 0 [ 1036.680558][ T5949] usb 10-1: config 2 has no interface number 0 [ 1036.680590][ T5949] usb 10-1: config 2 interface 8 has no altsetting 0 [ 1036.749522][ T5949] usb 10-1: string descriptor 0 read error: -22 [ 1036.749645][ T5949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.845288][ T5949] usbtest 10-1:2.8: Linux user mode ISO test driver [ 1036.845316][ T5949] usbtest 10-1:2.8: low-speed {control} tests [ 1038.013267][T14957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2453'. [ 1038.222715][T14954] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1038.584848][T14704] usb 10-1: USB disconnect, device number 8 [ 1041.409298][T14989] fuse: fd is not a fuse device [ 1041.980051][T14998] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1042.092225][T15003] FAULT_INJECTION: forcing a failure. [ 1042.092225][T15003] name failslab, interval 1, probability 5, space 0, times 10000 [ 1042.092269][T15003] CPU: 1 UID: 0 PID: 15003 Comm: syz.4.2462 Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.092310][T15003] Tainted: [L]=SOFTLOCKUP [ 1042.092321][T15003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1042.092345][T15003] Call Trace: [ 1042.092355][T15003] [ 1042.092367][T15003] dump_stack_lvl+0x100/0x190 [ 1042.092414][T15003] should_fail_ex.cold+0x5/0xa [ 1042.092450][T15003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.092491][T15003] should_failslab+0xc2/0x120 [ 1042.092526][T15003] __kmalloc_noprof+0xfc/0x840 [ 1042.092573][T15003] ? vb2_vmalloc_alloc+0x135/0x410 [ 1042.092607][T15003] ? __vb2_queue_alloc+0x23e/0x1160 [ 1042.092648][T15003] __vb2_queue_alloc+0x23e/0x1160 [ 1042.092699][T15003] vb2_core_reqbufs+0x899/0xf30 [ 1042.092740][T15003] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1042.092774][T15003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.092811][T15003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.092862][T15003] ? __vb2_init_fileio+0x18f/0x1000 [ 1042.092921][T15003] __vb2_init_fileio+0x32d/0x1000 [ 1042.092972][T15003] ? __pfx___futex_wait+0x10/0x10 [ 1042.093020][T15003] ? futex_hash+0x311/0x400 [ 1042.093088][T15003] __vb2_perform_fileio+0x9ba/0x1380 [ 1042.093150][T15003] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1042.093200][T15003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.093265][T15003] vb2_fop_read+0x211/0x520 [ 1042.093314][T15003] v4l2_read+0x229/0x2c0 [ 1042.093384][T15003] ? __pfx_v4l2_read+0x10/0x10 [ 1042.093459][T15003] vfs_read+0x1e4/0xb40 [ 1042.093500][T15003] ? lock_acquire+0x1d1/0x380 [ 1042.093549][T15003] ? __fget_files+0x34/0x3d0 [ 1042.093600][T15003] ? __pfx_vfs_read+0x10/0x10 [ 1042.093635][T15003] ? find_held_lock+0x2b/0x80 [ 1042.093699][T15003] ? __fget_files+0x215/0x3d0 [ 1042.093747][T15003] ? __fget_files+0x215/0x3d0 [ 1042.093795][T15003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.093854][T15003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.093905][T15003] ? __fget_files+0x21f/0x3d0 [ 1042.093971][T15003] __x64_sys_pread64+0x1eb/0x250 [ 1042.094017][T15003] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1042.094066][T15003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.094125][T15003] do_syscall_64+0x123/0x790 [ 1042.094178][T15003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.094222][T15003] RIP: 0033:0x7f991b79f559 [ 1042.094255][T15003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.094295][T15003] RSP: 002b:00007f991c6e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1042.094339][T15003] RAX: ffffffffffffffda RBX: 00007f991ba25fa0 RCX: 00007f991b79f559 [ 1042.094368][T15003] RDX: 000000000000004b RSI: 0000200000019340 RDI: 0000000000000003 [ 1042.094395][T15003] RBP: 00007f991b836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1042.094421][T15003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.094447][T15003] R13: 00007f991ba26038 R14: 00007f991ba25fa0 R15: 00007ffe9d2a2a98 [ 1042.094502][T15003] [ 1042.674967][T14996] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1044.285314][T15018] Context (ID=0x0) not attached to queue pair (handle=0x4e5:0x0) [ 1046.317086][T15045] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1048.331467][ T5782] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1048.481609][ T5782] usb 2-1: Using ep0 maxpacket: 32 [ 1048.484046][ T5782] usb 2-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1048.514322][ T5782] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1048.514358][ T5782] usb 2-1: config 0 has no interface number 0 [ 1048.514400][ T5782] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1048.514437][ T5782] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1048.551142][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.551181][ T5782] usb 2-1: Product: syz [ 1048.551441][ T5782] usb 2-1: Manufacturer: syz [ 1048.551469][ T5782] usb 2-1: SerialNumber: syz [ 1048.626201][ T5782] usb 2-1: config 0 descriptor?? [ 1048.914550][T15060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.940362][T15060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.181955][ T5782] appletouch 2-1:0.85: Geyser mode initialized. [ 1049.204065][ T5782] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input20 [ 1049.245024][T15077] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1049.422549][ T5949] usb 2-1: USB disconnect, device number 57 [ 1049.619946][ T5949] appletouch 2-1:0.85: input: appletouch disconnected [ 1053.816351][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.816417][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.767121][T15149] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1058.934844][T15140] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1061.417291][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2494'. [ 1062.165660][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1062.165689][ T30] audit: type=1326 audit(1793162171.671:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.166697][ T30] audit: type=1326 audit(1793162171.671:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.278973][ T30] audit: type=1326 audit(1793162171.771:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.312005][ T30] audit: type=1326 audit(1793162171.811:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.312177][ T30] audit: type=1326 audit(1793162171.821:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.312681][ T30] audit: type=1326 audit(1793162171.771:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.313550][ T30] audit: type=1326 audit(1793162171.821:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.313713][ T30] audit: type=1326 audit(1793162171.821:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.451047][ T30] audit: type=1326 audit(1793162171.821:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1062.477136][ T30] audit: type=1326 audit(1793162171.951:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.1.2500" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fccf979f559 code=0x7ffc0000 [ 1063.171764][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1063.338991][ T24] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1063.368468][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.392381][ T24] usb 2-1: config 0 descriptor?? [ 1065.876433][ T5782] usb 2-1: USB disconnect, device number 58 [ 1066.782115][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1066.942566][ T24] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1066.968719][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.992136][ T24] usb 10-1: config 0 descriptor?? [ 1067.277204][ T24] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1067.277631][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 1067.305717][T15225] fuse: Unknown parameter 'group_i00000000000000000000' [ 1067.424869][ T24] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 1067.424909][ T24] [drm] Initialized udl on minor 1 [ 1067.458912][ T24] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1067.459241][ T24] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1067.502332][ T24] usb 10-1: USB disconnect, device number 9 [ 1067.525096][ T5949] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1069.604047][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1069.765516][ T24] usb 4-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1069.782415][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.782482][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1069.782515][ T24] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1069.872843][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.872877][ T24] usb 4-1: Product: syz [ 1069.872899][ T24] usb 4-1: Manufacturer: syz [ 1069.872919][ T24] usb 4-1: SerialNumber: syz [ 1069.928576][T15239] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1070.530614][T15236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1071.132936][ T5949] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1071.287917][ T5949] usb 2-1: device descriptor read/64, error -71 [ 1071.336365][ T24] ATM dev 0: failed to start ADSL synchronisation: -32 [ 1071.336632][ C1] usbatm_complete: 97 callbacks suppressed [ 1071.336651][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1200 failed (-71)! [ 1071.336709][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1c00 failed (-71)! [ 1071.336761][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1900 failed (-71)! [ 1071.336813][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1f00 failed (-71)! [ 1071.441440][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1200 failed (-71)! [ 1071.441495][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1c00 failed (-71)! [ 1071.441539][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1900 failed (-71)! [ 1071.441582][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1f00 failed (-71)! [ 1071.551476][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1200 failed (-71)! [ 1071.551537][ C1] ATM dev 0: usbatm_complete: urb 0xffff888053cd1c00 failed (-71)! [ 1072.443042][ T5949] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1072.458736][ T24] usb 4-1: USB disconnect, device number 65 [ 1072.551844][T13885] ATM dev 0: error -19 fetching device status [ 1072.632887][ T5949] usb 2-1: device descriptor read/64, error -71 [ 1072.748386][ T5949] usb usb2-port1: attempt power cycle [ 1073.121296][ T5949] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1073.241567][T13885] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1073.372088][T13885] usb 9-1: device descriptor read/64, error -71 [ 1073.763871][T13885] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1073.961749][T13885] usb 9-1: device descriptor read/64, error -71 [ 1074.070347][ T5949] usb 2-1: device descriptor read/8, error -71 [ 1074.078738][T13885] usb usb9-port1: attempt power cycle [ 1074.481377][T13885] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1075.197054][T13885] usb 9-1: device descriptor read/8, error -71 [ 1077.923483][T15307] fuse: Unknown parameter 'group_id00000000000000000000' [ 1078.636035][T15312] syzkaller0: entered promiscuous mode [ 1078.636069][T15312] syzkaller0: entered allmulticast mode [ 1078.738974][T15312] tipc: Enabled bearer , priority 0 [ 1078.801764][T15312] tipc: Resetting bearer [ 1078.843432][T15311] tipc: Resetting bearer [ 1079.358400][T15311] tipc: Disabling bearer [ 1079.659816][T15326] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1081.491301][T15321] Bluetooth: hci5: command 0x0406 tx timeout [ 1082.142833][ T5782] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1082.314659][ T5782] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1082.316854][ T5782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.350281][ T5782] usb 10-1: config 0 descriptor?? [ 1082.848726][ T5782] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1082.867675][ T5782] [drm:udl_init] *ERROR* Selecting channel failed [ 1082.950884][ T5782] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 1082.950915][ T5782] [drm] Initialized udl on minor 1 [ 1082.972536][ T5782] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1082.972865][ T5782] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1083.011873][ T5782] usb 10-1: USB disconnect, device number 10 [ 1083.035533][T14704] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1084.130359][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1084.130381][ T30] audit: type=1326 audit(1793162193.631:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.178144][ T30] audit: type=1326 audit(1793162193.681:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.208967][ T30] audit: type=1326 audit(1793162193.691:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.209209][T13885] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 1084.212448][ T30] audit: type=1326 audit(1793162193.711:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.219815][ T30] audit: type=1326 audit(1793162193.721:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.314769][ T30] audit: type=1326 audit(1793162193.821:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.314835][ T30] audit: type=1326 audit(1793162193.821:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.322926][ T30] audit: type=1326 audit(1793162193.821:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.323013][ T30] audit: type=1326 audit(1793162193.821:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1084.323087][ T30] audit: type=1326 audit(1793162193.821:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.9.2538" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa39f559 code=0x7ffc0000 [ 1085.090273][T13885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1085.090339][T13885] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 1085.121338][T13885] usb 5-1: config 2 has an invalid interface number: 8 but max is 0 [ 1085.121378][T13885] usb 5-1: config 2 has no interface number 0 [ 1085.121422][T13885] usb 5-1: config 2 interface 8 has no altsetting 0 [ 1085.243240][T13885] usb 5-1: string descriptor 0 read error: -22 [ 1085.243363][T13885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.312487][T13885] usbtest 5-1:2.8: Linux user mode ISO test driver [ 1085.312523][T13885] usbtest 5-1:2.8: low-speed {control} tests [ 1085.672235][T13885] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1085.810386][T15384] fuse: Unknown parameter 'group_id00000000000000000000' [ 1085.869809][T13885] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1085.934107][T13885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.974865][T13885] usb 10-1: config 0 descriptor?? [ 1089.010071][ T5949] usb 10-1: USB disconnect, device number 11 [ 1092.049402][T14704] usb 5-1: USB disconnect, device number 7 [ 1095.708679][T15462] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1096.692017][T15477] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1098.675479][T15495] syzkaller0: entered promiscuous mode [ 1098.675505][T15495] syzkaller0: entered allmulticast mode [ 1102.424920][ T5773] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 1102.616568][ T5773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1102.616617][ T5773] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 1102.666595][ T5773] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 1102.666627][ T5773] usb 2-1: config 2 has no interface number 0 [ 1102.666659][ T5773] usb 2-1: config 2 interface 8 has no altsetting 0 [ 1102.731058][ T5773] usb 2-1: string descriptor 0 read error: -22 [ 1102.731275][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.820237][ T5773] usbtest 2-1:2.8: Linux user mode ISO test driver [ 1102.820264][ T5773] usbtest 2-1:2.8: low-speed {control} tests [ 1103.207358][T15528] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1105.222099][ T5780] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1105.427411][ T5780] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1105.427460][ T5780] usb 10-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 1105.452438][ T5780] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.452469][ T5780] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1105.452519][ T5780] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1105.452562][ T5780] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1105.452609][ T5780] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1105.452645][ T5780] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1105.536618][ T5780] usb 10-1: string descriptor 0 read error: -22 [ 1105.536749][ T5780] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.227340][ T5780] usb 10-1: 2:0: cannot get RANGE values for control 2 (id 2) [ 1106.227377][ T5780] usb 10-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1106.227401][ T5780] usb 10-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1106.444824][T15561] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1107.585900][ T5780] usb 10-1: 2:0: failed to get current value for ch 1 (-71) [ 1108.140491][ T5780] usb 10-1: USB disconnect, device number 12 [ 1109.635077][T13885] usb 2-1: USB disconnect, device number 63 [ 1110.437754][T15597] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1111.770973][ T5949] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1111.956180][ T5949] usb 4-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 1111.980488][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.980557][ T5949] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 1111.980596][ T5949] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.035787][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.035831][ T5949] usb 4-1: Product: syz [ 1112.035859][ T5949] usb 4-1: Manufacturer: syz [ 1112.035887][ T5949] usb 4-1: SerialNumber: syz [ 1112.525018][T15321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1112.547940][T15321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1112.565497][T15321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1112.578854][T15321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1112.580326][T15321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1112.721726][T15601] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1113.467685][ T5949] ATM dev 0: failed to start ADSL synchronisation: -32 [ 1113.467941][ C1] usbatm_complete: 419 callbacks suppressed [ 1113.467965][ C1] ATM dev 0: usbatm_complete: urb 0xffff888078a85e00 failed (-71)! [ 1113.468020][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802abc4000 failed (-71)! [ 1113.468059][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805db1e500 failed (-71)! [ 1113.468098][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805db1e200 failed (-71)! [ 1113.572131][ C1] ATM dev 0: usbatm_complete: urb 0xffff888078a85e00 failed (-71)! [ 1113.572179][ C1] ATM dev 0: usbatm_complete: urb 0xffff88802abc4000 failed (-71)! [ 1113.572218][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805db1e500 failed (-71)! [ 1113.572257][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805db1e200 failed (-71)! [ 1113.632727][ T5949] usb 4-1: USB disconnect, device number 66 [ 1114.652003][ T6239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.692744][T15321] Bluetooth: hci2: command tx timeout [ 1115.900186][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.900246][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.386856][ T6239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.771679][T15321] Bluetooth: hci2: command tx timeout [ 1116.856165][ T6239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.370059][ T6239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.975470][T15605] rxe_eth0 speed is unknown, defaulting to 1000 [ 1117.995690][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1118.151445][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1118.152183][ T10] usb 4-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 1118.154912][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1118.154951][ T10] usb 4-1: config 0 has no interface number 0 [ 1118.155005][ T10] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.155068][ T10] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.155109][ T10] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1118.155157][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1118.155206][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.314556][ T10] usb 4-1: config 0 descriptor?? [ 1118.452795][ T10] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 1118.852079][T15321] Bluetooth: hci2: command tx timeout [ 1118.929768][ T10] usbhid 4-1:0.1: can't add hid device: -71 [ 1118.929894][ T10] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1118.991763][ T10] usb 4-1: USB disconnect, device number 67 [ 1120.529131][ T6239] bridge_slave_1: left allmulticast mode [ 1120.529159][ T6239] bridge_slave_1: left promiscuous mode [ 1120.529342][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.629079][ T6239] bridge_slave_0: left allmulticast mode [ 1120.629105][ T6239] bridge_slave_0: left promiscuous mode [ 1120.645376][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.740457][ T6239] pimreg: left allmulticast mode [ 1120.934739][T15321] Bluetooth: hci2: command tx timeout [ 1123.444101][ T6239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.561682][ T6239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.600875][ T6239] bond0 (unregistering): Released all slaves [ 1124.140820][ T6239] tipc: Disabling bearer [ 1124.140939][ T6239] tipc: Left network mode [ 1132.946596][T15605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.949536][T15605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.949658][T15605] bridge_slave_0: entered allmulticast mode [ 1132.951956][ T5773] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1133.058936][T15605] bridge_slave_0: entered promiscuous mode [ 1133.090601][T15605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.116984][T15605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.117110][T15605] bridge_slave_1: entered allmulticast mode [ 1133.124502][ T5773] usb 5-1: Using ep0 maxpacket: 16 [ 1133.153668][ T5773] usb 5-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 1133.183499][ T5773] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.183534][ T5773] usb 5-1: config 0 has no interface number 0 [ 1133.183577][ T5773] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.183614][ T5773] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.183657][ T5773] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1133.183707][ T5773] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1133.183746][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.204611][ T5782] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 1133.262284][T15605] bridge_slave_1: entered promiscuous mode [ 1133.338681][ T5773] usb 5-1: config 0 descriptor?? [ 1133.402994][ T5773] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count [ 1133.456992][ T5782] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1133.457051][ T5782] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 1133.499654][ T5782] usb 4-1: config 2 has an invalid interface number: 8 but max is 0 [ 1133.499695][ T5782] usb 4-1: config 2 has no interface number 0 [ 1133.499737][ T5782] usb 4-1: config 2 interface 8 has no altsetting 0 [ 1133.569555][ T5782] usb 4-1: string descriptor 0 read error: -22 [ 1133.569707][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.630831][ T5782] usbtest 4-1:2.8: Linux user mode ISO test driver [ 1133.630865][ T5782] usbtest 4-1:2.8: low-speed {control} tests [ 1134.004770][ T5773] usbhid 5-1:0.1: can't add hid device: -71 [ 1134.004869][ T5773] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1134.100815][ T5773] usb 5-1: USB disconnect, device number 8 [ 1134.300858][T15605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.426955][T15605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.843512][ T6239] hsr_slave_0: left promiscuous mode [ 1134.864341][ T6239] hsr_slave_1: left promiscuous mode [ 1134.865189][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.865212][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.898148][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.898184][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.079028][ T6239] veth1_macvtap: left promiscuous mode [ 1135.079082][ T6239] veth0_macvtap: left promiscuous mode [ 1135.079361][ T6239] veth1_vlan: left promiscuous mode [ 1135.079430][ T6239] veth0_vlan: left promiscuous mode [ 1138.847184][T15784] block device autoloading is deprecated and will be removed. [ 1139.211753][T15784] block device autoloading is deprecated and will be removed. [ 1139.815162][T15784] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 1139.932785][T15784] ================================================================== [ 1139.932804][T15784] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xa5/0x420 [ 1139.932844][T15784] Read of size 4 at addr 0000000000000174 by task syz.9.2616/15784 [ 1139.932868][T15784] [ 1139.932884][T15784] CPU: 1 UID: 0 PID: 15784 Comm: syz.9.2616 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1139.932926][T15784] Tainted: [L]=SOFTLOCKUP [ 1139.932937][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1139.932955][T15784] Call Trace: [ 1139.932966][T15784] [ 1139.932977][T15784] dump_stack_lvl+0x100/0x190 [ 1139.933019][T15784] kasan_report+0xdf/0x1c0 [ 1139.933060][T15784] ? dm_kcopyd_client_destroy+0xa5/0x420 [ 1139.933100][T15784] kasan_check_range+0x10f/0x1e0 [ 1139.933139][T15784] dm_kcopyd_client_destroy+0xa5/0x420 [ 1139.933173][T15784] ? kfree+0x22b/0x6d0 [ 1139.933210][T15784] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 1139.933247][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.933283][T15784] ? vfree+0x12f/0x850 [ 1139.933313][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.933348][T15784] ? mempool_exit+0x120/0x1c0 [ 1139.933382][T15784] ? cache_ctr+0x1d73/0x3a80 [ 1139.933421][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.933456][T15784] ? __vmalloc_node_noprof+0xad/0xf0 [ 1139.933492][T15784] __destroy+0x191/0x3c0 [ 1139.933527][T15784] cache_ctr+0x2f7c/0x3a80 [ 1139.933582][T15784] ? __pfx_cache_ctr+0x10/0x10 [ 1139.933633][T15784] ? kfree+0x1e5/0x6d0 [ 1139.933671][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.933706][T15784] ? skip_spaces+0xee/0x130 [ 1139.933757][T15784] ? dm_split_args+0x441/0x570 [ 1139.933795][T15784] dm_table_add_target+0x58b/0xee0 [ 1139.933833][T15784] ? __pfx_dm_table_add_target+0x10/0x10 [ 1139.933868][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.933905][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.933940][T15784] ? dm_table_create+0x2d3/0x3d0 [ 1139.933975][T15784] table_load+0x3b9/0x7b0 [ 1139.934008][T15784] ? __pfx_table_load+0x10/0x10 [ 1139.934034][T15784] ? __might_fault+0xc5/0x140 [ 1139.934075][T15784] ? __might_fault+0xc5/0x140 [ 1139.934120][T15784] ctl_ioctl+0x4d2/0xcc0 [ 1139.934163][T15784] ? __pfx_table_load+0x10/0x10 [ 1139.934192][T15784] ? __pfx_ctl_ioctl+0x10/0x10 [ 1139.934258][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1139.934293][T15784] ? __fget_files+0x21f/0x3d0 [ 1139.934333][T15784] dm_ctl_ioctl+0x22/0x30 [ 1139.934376][T15784] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1139.934421][T15784] __x64_sys_ioctl+0x18e/0x210 [ 1139.934451][T15784] do_syscall_64+0x123/0x790 [ 1139.934485][T15784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.934515][T15784] RIP: 0033:0x7f62aa39f559 [ 1139.934538][T15784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f ** replaying previous printk message ** [ 1139.934538][T15784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.934567][T15784] RSP: 002b:00007f62ab2f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.934595][T15784] RAX: ffffffffffffffda RBX: 00007f62aa625fa0 RCX: 00007f62aa39f559 [ 1139.934615][T15784] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1139.934634][T15784] RBP: 00007f62aa436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1139.934653][T15784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1139.934671][T15784] R13: 00007f62aa626038 R14: 00007f62aa625fa0 R15: 00007ffdbaaa7308 [ 1139.934703][T15784] [ 1139.934714][T15784] ================================================================== [ 1140.232423][T15784] Disabling lock debugging due to kernel taint [ 1140.232467][T15784] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002e: 0000 [#1] SMP KASAN NOPTI [ 1140.333490][T15784] KASAN: null-ptr-deref in range [0x0000000000000170-0x0000000000000177] [ 1140.341918][T15784] CPU: 0 UID: 0 PID: 15784 Comm: syz.9.2616 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1140.352943][T15784] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1140.358467][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1140.368512][T15784] RIP: 0010:dm_kcopyd_client_destroy+0xac/0x420 [ 1140.374760][T15784] Code: e8 b9 c8 5e f9 be d4 03 00 00 48 c7 c7 20 d3 27 8d e8 e8 49 29 f9 be 04 00 00 00 48 89 ef e8 3b ed d6 f9 48 89 e8 48 c1 e8 03 <42> 0f b6 14 20 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 1140.394362][T15784] RSP: 0018:ffffc9000489f7e0 EFLAGS: 00010217 [ 1140.400422][T15784] RAX: 000000000000002e RBX: fffffffffffffff4 RCX: ffffc90012630000 [ 1140.408383][T15784] RDX: 0000000000000000 RSI: ffffffff81c974ed RDI: ffff88801fab1f40 [ 1140.416344][T15784] RBP: 0000000000000174 R08: 0000000000000007 R09: 0000000000000000 [ 1140.424304][T15784] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 1140.432278][T15784] R13: ffff88801453a000 R14: fffffffffffffff4 R15: ffff88802b9eb880 [ 1140.440245][T15784] FS: 00007f62ab2f06c0(0000) GS:ffff888122499000(0000) knlGS:0000000000000000 [ 1140.449169][T15784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1140.455743][T15784] CR2: 00007f991c5556c8 CR3: 000000003732f000 CR4: 0000000000350ef0 [ 1140.463709][T15784] Call Trace: [ 1140.467073][T15784] [ 1140.470003][T15784] ? kfree+0x22b/0x6d0 [ 1140.474078][T15784] ? __pfx_dm_kcopyd_client_destroy+0x10/0x10 [ 1140.480149][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.485803][T15784] ? vfree+0x12f/0x850 [ 1140.489886][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.495519][T15784] ? mempool_exit+0x120/0x1c0 [ 1140.500249][T15784] ? cache_ctr+0x1d73/0x3a80 [ 1140.504848][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.510482][T15784] ? __vmalloc_node_noprof+0xad/0xf0 [ 1140.515771][T15784] __destroy+0x191/0x3c0 [ 1140.520018][T15784] cache_ctr+0x2f7c/0x3a80 [ 1140.524455][T15784] ? __pfx_cache_ctr+0x10/0x10 [ 1140.529228][T15784] ? kfree+0x1e5/0x6d0 [ 1140.533305][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.538956][T15784] ? skip_spaces+0xee/0x130 [ 1140.543474][T15784] ? dm_split_args+0x441/0x570 [ 1140.548260][T15784] dm_table_add_target+0x58b/0xee0 [ 1140.553377][T15784] ? __pfx_dm_table_add_target+0x10/0x10 [ 1140.559011][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.564664][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.570297][T15784] ? dm_table_create+0x2d3/0x3d0 [ 1140.575237][T15784] table_load+0x3b9/0x7b0 [ 1140.579585][T15784] ? __pfx_table_load+0x10/0x10 [ 1140.584428][T15784] ? __might_fault+0xc5/0x140 [ 1140.589109][T15784] ? __might_fault+0xc5/0x140 [ 1140.593797][T15784] ctl_ioctl+0x4d2/0xcc0 [ 1140.598050][T15784] ? __pfx_table_load+0x10/0x10 [ 1140.602900][T15784] ? __pfx_ctl_ioctl+0x10/0x10 [ 1140.607694][T15784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.613346][T15784] ? __fget_files+0x21f/0x3d0 [ 1140.618030][T15784] dm_ctl_ioctl+0x22/0x30 [ 1140.622370][T15784] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1140.627404][T15784] __x64_sys_ioctl+0x18e/0x210 [ 1140.632161][T15784] do_syscall_64+0x123/0x790 [ 1140.636754][T15784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.642643][T15784] RIP: 0033:0x7f62aa39f559 [ 1140.647049][T15784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.666650][T15784] RSP: 002b:00007f62ab2f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.675057][T15784] RAX: ffffffffffffffda RBX: 00007f62aa625fa0 RCX: 00007f62aa39f559 [ 1140.683032][T15784] RDX: 00002000000004c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 1140.690993][T15784] RBP: 00007f62aa436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1140.698950][T15784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.706923][T15784] R13: 00007f62aa626038 R14: 00007f62aa625fa0 R15: 00007ffdbaaa7308 [ 1140.714897][T15784] [ 1140.717898][T15784] Modules linked in: [ 1140.722889][T15784] ---[ end trace 0000000000000000 ]--- [ 1140.843765][T15784] RIP: 0010:dm_kcopyd_client_destroy+0xac/0x420 [ 1140.843818][T15784] Code: e8 b9 c8 5e f9 be d4 03 00 00 48 c7 c7 20 d3 27 8d e8 e8 49 29 f9 be 04 00 00 00 48 89 ef e8 3b ed d6 f9 48 89 e8 48 c1 e8 03 <42> 0f b6 14 20 48 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 1140.843847][T15784] RSP: 0018:ffffc9000489f7e0 EFLAGS: 00010217 [ 1140.843871][T15784] RAX: 000000000000002e RBX: fffffffffffffff4 RCX: ffffc90012630000 [ 1140.843891][T15784] RDX: 0000000000000000 RSI: ffffffff81c974ed RDI: ffff88801fab1f40 [ 1140.843910][T15784] RBP: 0000000000000174 R08: 0000000000000007 R09: 0000000000000000 [ 1140.843929][T15784] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 1140.843948][T15784] R13: ffff88801453a000 R14: fffffffffffffff4 R15: ffff88802b9eb880 [ 1140.843970][T15784] FS: 00007f62ab2f06c0(0000) GS:ffff888122599000(0000) knlGS:0000000000000000 [ 1140.843997][T15784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1140.844016][T15784] CR2: 00007f0c05157e20 CR3: 000000003732f000 CR4: 0000000000350ef0 [ 1140.844038][T15784] Kernel panic - not syncing: Fatal exception [ 1140.945842][T15784] Kernel Offset: disabled [ 1140.950175][T15784] Rebooting in 86400 seconds..