last executing test programs: 27m45.055980666s ago: executing program 32 (id=376): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) 27m30.212335045s ago: executing program 33 (id=372): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7) 26m59.797360604s ago: executing program 34 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200000000002) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="00000000040000003804000000c07f690000"], 0x48) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x220443b, &(0x7f0000000180)=ANY=[]) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_procfs(r0, &(0x7f0000000340)='net/rfcomm\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)) 26m38.512132232s ago: executing program 35 (id=382): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x2182842, 0x0, 0x0, 0x0, &(0x7f0000000380)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = dup3(r1, r0, 0x0) accept4$unix(r6, 0xfffffffffffffffe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) 26m38.271218955s ago: executing program 36 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0xfffffc01, 0x7) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000380)={0x0, 0xffffffca, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r4, 0xe, 0x7f, 0x0, 0x0, [], [0x0, 0x29, 0x2], [], [0x0, 0x0, 0xfffffffffffffffd]}) link(0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) 26m37.904546346s ago: executing program 37 (id=383): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f00000001c0)) syz_open_dev$MSR(&(0x7f0000000240), 0x752c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4079, 0xfef}], 0x1}, 0xa}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) timer_create(0x6, 0x0, 0x0) io_uring_setup(0x442b, &(0x7f0000000200)={0x0, 0x6695, 0x444, 0x0, 0x3d7}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f0000000080)) 25m33.654493418s ago: executing program 38 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x21, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e3000000000000000000000001400010067726530000000000000000000000400080001"], 0x4b0}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}], 0x1, 0x5fcf2bd0b4a14a6, 0x0) sendmsg$kcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) 25m32.782178187s ago: executing program 39 (id=393): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$pppoe(r0, 0x0, 0x0) 24m17.906446197s ago: executing program 40 (id=441): syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES64=0x0], 0x11, 0x58ed, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) fallocate(r0, 0x10, 0x2, 0x7fff) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 24m2.151675501s ago: executing program 41 (id=478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, [], [], [0x0, 0x0, 0x2], [0xffffffffffffffff, 0xfffffffefefffffc]}) 23m52.982204272s ago: executing program 42 (id=503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="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"}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x40015b0b, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) 21m40.980687579s ago: executing program 43 (id=793): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = add_key(&(0x7f0000000600)='.dead\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000780)="cd58dc8d87de226c1b2e2273647c046c1774c744b3117aa18cb9040d15f1137ba07f7f2d26016f7cf67dad78061c8368731228014ba22e27082f930f438e332616fc0a15e551235936f1f9148b018184a76738c209f693fb049a18405471c65c530120202350ea0801294bf7bb544780380df2176a12c7d6299ade71c2d2c1b62d24513ce7668ceca33562f054a6f6a0d71f5e2e09a462a9eac6661b41b7368ceab4917004223e847122298cbc52fdfa4651db2b70b5ff0a2b3f25b0e417a01bebaa3a97c1", 0xc5, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000880)=""/217, 0xd9) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB="636f6465706167653d63703836332c005bfe272dc6625d56ef467a37b47c42a2600b26e25d91d3266297b77899ad825ab2296e38b79f5c62fc205f7f94d41ab8"], 0x4, 0x340, &(0x7f0000000a40)="$eJzs3U9r1EwcB/DvJLvb7LOlT562DwVPUi14KrYeFA9apHjxDXiQYm23UBoraAUtiNWziDdB8OjNs+hb0Iv4BhQPBcWTXooHIzOZ/Ftnsul227T2+wF3s8n8+U0zk8y0rAERHVoXZj++OLUp/4k6ABfAWcAB4AE1AP9jzLu9uta1IDfZEohyij/SLKy2TVk96ByaLz/VMJjdR7sjDMPwk/3w53Pq7fveBUSVENkRnOEAA3DUSFTHvT2PbHdsyHYdNpkzLLawhTsYqjIcIiKqnr7/O/ouMajn744DTOh5+EG//+fmN1vVxbEvJPd/J/ocCvnz+Vcdkuu95bWgvRgt4eTZd+JVoqksY58IXTT0pnp3ALeVmXJlajFTsTjNpeWgPbmhCniI81om2ah6XUTcEJkUtmh1ROOGtWmBorYXi1pel22YtsQ/UlSjcQH85iuemqube1ciJvFWvBdzwsczLCbzv1ooZLAqXr9jqETxn7QUV9fvfpQq18o0/P9UJUfiM/D6ZdrKpu3n6sGVsZjIUkTn/N2P43zSsOfCMPK/VohaN2WJIc41AtSE7lxprukk0U9jrtHOuppL9aA9uXAjsHX6/jKu6MRjcVmM4xteYTYz/3dk6gnYR2ZulAuVUveMwvbUVErLecxRA/h6+ZFZL53yb3fReKI7fMl/fIRrOIOhW3fXV+aDoH2z+o14qPSY/Wif44k6ou6Oco98z6SBJzdkJ+xbpb/CMDQeqqFkOXKQ9hxGNKBOP0+bvL4yL/Q1b2cNlFfOjkMz9sQAZgDoPfEVoZfa7ye5BtICS2X/Ic+22mPukHFUezBA4qpyh1wMlBopzR4qvXRvZT7o+WpEB0h60jF2pepgqApy3iWi9V8L6axOXXXki1+w/gm7FZ4pccqyAhpWr/8kKzily5qrZV/BteKNLmuuYyeA4418jQ7iGh90FuvrOLEf/yq5/T9liFl8wFX+/p+IiIiIiIiIiIiIiIiIiIiIiIiI6KDZ7rcRevk6Qb7GzUP4H28QEREREREREREREREREREREREREREREe1M+vzf5PkuDdPzf4ue1KS40RNivH48/9ct8fxfsVGugURk9TsAAP//dtFf0Q==") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000100)=""/52, 0x6d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x7], [0x1, 0x0, 0xe6c7, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) 20m2.666387982s ago: executing program 44 (id=1113): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1, 0x0, [0x0], [], [0x0, 0x0, 0x2], [0xffffffffffffffff, 0xfffffffefefffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r6}) 19m3.07983885s ago: executing program 2 (id=1331): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)=0x1, 0x8, 0x3) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) personality(0x2000000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(0x0, r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c804}, 0x800) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00') 19m2.527098004s ago: executing program 8 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) pipe(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f3ffffff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1, @ANYBLOB="00cf0000ecff0000b702000014000000b70300000000000085000000830000ffbf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r4 = userfaultfd(0x801) socket(0x1, 0x4, 0x2) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='btrfs_qgroup_account_extent\x00', r5}, 0x18) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0xc08c5102, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r7) 19m1.131964611s ago: executing program 8 (id=1339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 19m0.524920197s ago: executing program 8 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) socket(0x15, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x24}}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x3b9ac9ff, 0x8c) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x81, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m0.336834966s ago: executing program 2 (id=1342): r0 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x469f, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0, 0x6040, 0x0, {0x1}}) io_uring_enter(r0, 0x47f9, 0x3f, 0x0, 0x0, 0x0) 18m58.554221474s ago: executing program 8 (id=1343): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1, 0x0, [0x0], [], [0x0, 0x0, 0x2], [0xffffffffffffffff, 0xfffffffefefffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r6}) 18m57.211978228s ago: executing program 2 (id=1345): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) 18m55.464091316s ago: executing program 2 (id=1348): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x4, "ff0f00000000000001a82d866bf4ff0713e4b89c3c00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') pselect6(0x40, &(0x7f0000000040)={0x0, 0x740}, &(0x7f0000000080)={0xea, 0x0, 0x401}, 0x0, 0x0, 0x0) 18m53.94010033s ago: executing program 2 (id=1352): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}}, 0x0) 18m53.677374414s ago: executing program 2 (id=1355): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x42a400, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) 18m47.483751676s ago: executing program 45 (id=1334): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000300)={0x6, 'xfrm0\x00', {0x5}, 0x8}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xff, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0x1, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18m43.277043399s ago: executing program 46 (id=1343): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000080)={r4, 0x0, 0x0, 0x1, 0x0, [0x0], [], [0x0, 0x0, 0x2], [0xffffffffffffffff, 0xfffffffefefffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r6}) 18m38.178287344s ago: executing program 47 (id=1355): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x42a400, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) 14m4.334093906s ago: executing program 9 (id=2115): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) setxattr$incfs_size(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)=0x1, 0x8, 0x3) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) personality(0x2000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(0x0, r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r8) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c804}, 0x800) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00') 13m59.950884194s ago: executing program 9 (id=2130): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f00000001c0)) syz_open_dev$MSR(&(0x7f0000000240), 0x752c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4079, 0xfef}], 0x1}, 0xa}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="fc"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_create(0x6, 0x0, 0x0) io_uring_setup(0x442b, &(0x7f0000000200)={0x0, 0x6695, 0x444, 0x0, 0x3d7}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000080)) 13m58.127152757s ago: executing program 9 (id=2137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x44}}, 0x0) 13m57.865466519s ago: executing program 9 (id=2140): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x8}, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getpid() sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) getpgid(0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 13m57.277146242s ago: executing program 9 (id=2145): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000340)=ANY=[], 0x14) 13m54.495846371s ago: executing program 9 (id=2153): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xbd, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x15, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000002060305000000000000000000000000050005000a0000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b000000000c00078008001300000000006b25d3aeef654e7e1a09cd625a"], 0x50}}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 13m39.389771848s ago: executing program 48 (id=2153): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xbd, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x15, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000002060305000000000000000000000000050005000a0000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b000000000c00078008001300000000006b25d3aeef654e7e1a09cd625a"], 0x50}}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m20.146483289s ago: executing program 6 (id=4066): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x20, 0x29, 0x32, {@mcast2}}}], 0x20}}], 0x2, 0x40800) 4m19.881073895s ago: executing program 6 (id=4069): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_mr_cache\x00') r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c", 0xb4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, 0x0, r1}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000ff000009"], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x5c}}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 4m19.513812484s ago: executing program 6 (id=4072): syz_open_procfs(0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) recvmmsg(r0, &(0x7f0000000340), 0x0, 0x63, 0x0) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$caif_stream(0x25, 0x1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0}) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 4m18.247203955s ago: executing program 6 (id=4075): mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x210a0a0, &(0x7f0000000580)={'trans=virtio,', {[{@access_client}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/vhost-vsock\x00'}}]}}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x8001) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f00000004c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4m16.899871114s ago: executing program 6 (id=4080): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x4001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}}, 0x0) 4m16.366979624s ago: executing program 6 (id=4082): fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x0, 0x332}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x5, 0x0, 0x8}, 0x20) socket(0x1a, 0x3, 0x4) r2 = socket(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @val={@void}, {@generic={0x19, "c03ea896d12f9a39415a6acb5159e5e01bb243528f8cef352a"}}}, 0x0) 4m1.268194223s ago: executing program 49 (id=4082): fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x0, 0x332}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0xff, 0x5, 0x0, 0x8}, 0x20) socket(0x1a, 0x3, 0x4) r2 = socket(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @val={@void}, {@generic={0x19, "c03ea896d12f9a39415a6acb5159e5e01bb243528f8cef352a"}}}, 0x0) 20.115746319s ago: executing program 0 (id=5014): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) pwrite64(r0, 0x0, 0x0, 0xd) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x5, 0x7, 0x1, {0x2, @pix={0x392b, 0x10, 0x322e37f2, 0x1, 0x1000, 0xa000000, 0xa, 0x5, 0x0, 0x7, 0x2, 0x3}}, 0x5}) socketpair(0x6, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_settime(0x0, 0x1, 0x0, 0x0) timer_delete(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x4040) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000200)='V', 0x1) syz_usb_disconnect(r2) timer_getoverrun(0x0) 16.91782717s ago: executing program 0 (id=5026): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x309, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd600000000000000000bbff02000000000000000000000000000186009078ff00000000"], 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000009100003806269746d61703a706f72740005000400000000000900020073797a30000a0000050005000000000005000100060000001c000780080006409effff7d06000440fe20000006000540"], 0x64}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "fe79ca3351f25129c1ca0c4b310f855c55392fde21c7d98aef39b24985c9c778"}) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x5, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) 13.652067216s ago: executing program 0 (id=5039): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_open_dev$sg(0x0, 0x0, 0x0) 13.586968514s ago: executing program 0 (id=5040): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000240)={0x9f0000, 0x4, 0xe, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a91, 0x5, '\x00', @value=0x5}}) 12.823386647s ago: executing program 0 (id=5047): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_mr_cache\x00') r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c", 0xb4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, 0x0, r1}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000ff000009"], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd00"/46], 0x5c}}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 12.104172607s ago: executing program 0 (id=5050): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x309, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd600000000000000000bbff02000000000000000000000000000186009078ff00000000"], 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000009100003806269746d61703a706f72740005000400000000000900020073797a30000a0000050005000000000005000100060000001c000780080006409effff7d06000440fe20000006000540"], 0x64}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "fe79ca3351f25129c1ca0c4b310f855c55392fde21c7d98aef39b24985c9c778"}) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x5, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) 8.836009149s ago: executing program 7 (id=5001): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(0x4) 8.775218089s ago: executing program 5 (id=5063): socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe3, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) 6.855659181s ago: executing program 3 (id=5068): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.544411281s ago: executing program 7 (id=5069): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 5.985977964s ago: executing program 7 (id=5071): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000240)=0x2000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) 5.436154285s ago: executing program 3 (id=5072): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x3}, 0x8, 0x0) 5.272886206s ago: executing program 7 (id=5074): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x309, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd600000000000000000bbff02000000000000000000000000000186009078ff00000000"], 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000009100003806269746d61703a706f72740005000400000000000900020073797a30000a0000050005000000000005000100060000001c000780080006409effff7d06000440fe20000006000540"], 0x64}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "fe79ca3351f25129c1ca0c4b310f855c55392fde21c7d98aef39b24985c9c778"}) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x5, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.239128204s ago: executing program 3 (id=5075): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x20004004) 5.056048253s ago: executing program 4 (id=5076): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$misdntimer(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x7fffffffffffffff}, 0x0, 0x0) 4.953394594s ago: executing program 5 (id=5077): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.873606226s ago: executing program 3 (id=5078): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000001140)=""/94, 0x5e}, {&(0x7f00000036c0)=""/4089, 0xff9}, {&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000000200)=""/15, 0xf}], 0x5}, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.740706485s ago: executing program 5 (id=5079): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000e80)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.620284666s ago: executing program 1 (id=5080): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 4.237163817s ago: executing program 3 (id=5081): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "85407a77"}, @main=@item_4={0x3, 0x0, 0xb, "000400"}, @main=@item_4={0x3, 0x0, 0x0, "00000080"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0x1, 0x1, 0x5}) 4.052111174s ago: executing program 1 (id=5082): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f00000005c0)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x0, 0x2, 0x75, 0x100, @void}, "becb1c9337"}}}}}}}, 0x0) 3.887045106s ago: executing program 4 (id=5083): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001280), 0x8) r3 = dup(r1) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7f36, 0x10100, 0x0, 0x1}, &(0x7f0000000180), 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) unshare(0x62040200) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000007c0)=[@request_death], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r8, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) 3.799857036s ago: executing program 1 (id=5084): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000140300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x31}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.780695741s ago: executing program 4 (id=5085): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000240)=0x2000, 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) 2.428194944s ago: executing program 4 (id=5086): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x3}, 0x8, 0x0) 2.101158325s ago: executing program 4 (id=5087): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1c8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 1.851366533s ago: executing program 7 (id=5088): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) 1.756111736s ago: executing program 1 (id=5089): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x20004004) 1.698165917s ago: executing program 3 (id=5090): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000080)={0x0, 0x16, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x18, &(0x7f0000000600)={0x0, 0x16, 0x2, 'WL'}, 0x0, 0x0, 0x0, 0x0}) 1.539981525s ago: executing program 5 (id=5091): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000600)="1b", 0x1}], 0x1}}], 0x1, 0x400c0c0) 1.450387198s ago: executing program 1 (id=5092): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000001140)=""/94, 0x5e}, {&(0x7f00000036c0)=""/4089, 0xff9}, {&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000000200)=""/15, 0xf}], 0x5}, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.390800139s ago: executing program 7 (id=5093): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) 1.293348272s ago: executing program 5 (id=5094): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$misdntimer(0xffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x7fffffffffffffff}, 0x0, 0x0) 1.127567746s ago: executing program 4 (id=5095): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 1.105476876s ago: executing program 1 (id=5096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001280), 0x8) r3 = dup(r1) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7f36, 0x10100, 0x0, 0x1}, &(0x7f0000000180), 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) unshare(0x62040200) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000007c0)=[@request_death], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r8, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) 0s ago: executing program 5 (id=5097): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) kernel console output (not intermixed with test programs): ce= 0.40 [ 1774.709459][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.717522][ T46] usb 5-1: Product: syz [ 1774.734598][ T46] usb 5-1: Manufacturer: syz [ 1774.742240][ T46] usb 5-1: SerialNumber: syz [ 1774.810813][T22084] 9pnet_virtio: no channels available for device syz [ 1774.834802][T22084] overlayfs: failed to resolve './file1': -2 [ 1774.976203][ T46] usb 5-1: 0:2 : does not exist [ 1775.023884][ T46] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1775.099611][ T46] usb 5-1: USB disconnect, device number 22 [ 1775.645763][T22094] netlink: 'syz.0.4490': attribute type 10 has an invalid length. [ 1775.818157][T22098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4487'. [ 1776.907076][T22115] ceph: No mds server is up or the cluster is laggy [ 1776.939957][ T46] libceph: connect (1)[c::]:6789 error -101 [ 1777.110804][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 1777.465462][T22112] netlink: 'syz.1.4494': attribute type 10 has an invalid length. [ 1777.575406][T22088] loop7: detected capacity change from 0 to 32768 [ 1777.780421][T22123] overlayfs: upper fs needs to support d_type. [ 1777.786688][T22123] overlayfs: upper fs does not support tmpfile. [ 1777.793624][T22123] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1777.806810][T22123] overlayfs: conflicting lowerdir path [ 1778.547614][ T7611] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 1778.765769][ T7611] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1778.774128][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1778.820044][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1778.858831][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1778.933687][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1778.970580][ T7611] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1778.978506][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1779.019339][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1779.058262][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1779.107159][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1779.149101][ T7611] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1779.156533][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1779.200019][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1779.241605][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1779.287718][ T7611] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1779.334097][ T7611] usb 2-1: string descriptor 0 read error: -22 [ 1779.340624][ T7611] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1779.368624][ T7611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.474481][ T29] audit: type=1326 audit(1734638123.549:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22124 comm="syz.0.4495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x0 [ 1779.498589][ T7611] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1779.757264][ T7611] usb 2-1: USB disconnect, device number 23 [ 1780.369081][T22147] netlink: 'syz.7.4504': attribute type 10 has an invalid length. [ 1780.439286][ T7443] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1781.182355][ T7443] usb 1-1: config 129 has an invalid interface number: 201 but max is 0 [ 1781.190979][ T7443] usb 1-1: config 129 has no interface number 0 [ 1781.197342][ T7443] usb 1-1: config 129 interface 201 has no altsetting 0 [ 1781.235537][T22156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1781.298702][ T7443] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1781.308729][ T7443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.317165][ T7443] usb 1-1: Product: syz [ 1781.321555][ T7443] usb 1-1: Manufacturer: syz [ 1781.326276][ T7443] usb 1-1: SerialNumber: syz [ 1781.384334][T22159] 9pnet_virtio: no channels available for device syz [ 1781.393199][T22159] overlayfs: failed to resolve './file1': -2 [ 1781.836926][ T7443] radioshark 1-1:129.201: Invalid radioSHARK device [ 1781.850086][ T7443] radioshark 1-1:129.201: probe with driver radioshark failed with error -22 [ 1781.909578][ T7443] usbhid 1-1:129.201: couldn't find an input interrupt endpoint [ 1781.938787][T22170] netlink: 'syz.3.4511': attribute type 10 has an invalid length. [ 1781.979374][ T7443] usb 1-1: USB disconnect, device number 25 [ 1781.996276][T22170] bond0: (slave wlan1): Opening slave failed [ 1783.036492][ T29] audit: type=1326 audit(1734638127.109:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1783.189173][ T29] audit: type=1326 audit(1734638127.109:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1783.309156][ T29] audit: type=1326 audit(1734638127.109:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1783.519706][ T29] audit: type=1326 audit(1734638127.109:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1783.543745][ T29] audit: type=1326 audit(1734638127.109:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1783.566989][ T29] audit: type=1326 audit(1734638127.109:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1783.590526][ T29] audit: type=1326 audit(1734638127.109:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1783.816217][ T29] audit: type=1326 audit(1734638127.109:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1784.634089][ T29] audit: type=1326 audit(1734638127.109:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22175 comm="syz.5.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1785.045972][T22189] loop4: detected capacity change from 0 to 32768 [ 1785.413068][T22213] overlayfs: upper fs needs to support d_type. [ 1785.419770][T22213] overlayfs: upper fs does not support tmpfile. [ 1785.447528][T22213] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1785.456160][T22213] overlayfs: conflicting lowerdir path [ 1785.513332][ T7611] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1785.738248][ T7611] usb 4-1: Using ep0 maxpacket: 16 [ 1785.829264][ T7611] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1785.837672][ T7611] usb 4-1: config 0 has no interface number 0 [ 1785.844407][T22222] netlink: 'syz.7.4527': attribute type 10 has an invalid length. [ 1785.853039][ T7611] usb 4-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1785.880408][ T7611] usb 4-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=45.8e [ 1785.889663][ T7611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.897717][ T7611] usb 4-1: Product: syz [ 1785.902045][ T7611] usb 4-1: Manufacturer: syz [ 1785.906779][ T7611] usb 4-1: SerialNumber: syz [ 1785.913717][ T7611] usb 4-1: config 0 descriptor?? [ 1785.919993][T22201] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1786.166351][T21021] usb 4-1: USB disconnect, device number 17 [ 1788.574658][T22262] netlink: 'syz.3.4542': attribute type 10 has an invalid length. [ 1788.845646][T22262] bond0: (slave wlan1): Opening slave failed [ 1789.444527][ T29] audit: type=1326 audit(1734638133.519:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1789.582532][ T29] audit: type=1326 audit(1734638133.589:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1789.639677][ T29] audit: type=1326 audit(1734638133.589:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1789.737053][ T29] audit: type=1326 audit(1734638133.589:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1789.859161][ T5923] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1789.898515][ T29] audit: type=1326 audit(1734638133.589:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1790.009425][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 1790.029607][ T29] audit: type=1326 audit(1734638133.589:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1790.031807][ T5923] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1790.126007][ T29] audit: type=1326 audit(1734638133.589:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1790.134318][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.259510][ T29] audit: type=1326 audit(1734638133.599:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1790.259585][ T29] audit: type=1326 audit(1734638133.609:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22273 comm="syz.3.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299985d29 code=0x7ffc0000 [ 1790.259651][ T29] audit: type=1326 audit(1734638133.629:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22251 comm="syz.0.4538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x0 [ 1790.261332][ T5923] usb 5-1: config 0 descriptor?? [ 1790.289230][ T5923] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1790.666416][T22293] IPv4: Oversized IP packet from 127.202.26.0 [ 1791.324636][ T5923] gspca_sq930x: ucbus_write failed -71 [ 1791.330553][ T5923] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1791.379202][ T5923] usb 5-1: USB disconnect, device number 23 [ 1792.148252][T22303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1792.218284][T22303] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1792.331022][T22303] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1792.343120][T22303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1792.382885][T22303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1792.479826][T22326] 9pnet_virtio: no channels available for device syz [ 1792.499238][T22303] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1792.521166][T22326] overlayfs: failed to resolve './file1': -2 [ 1792.609449][T22303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1792.850738][ T29] audit: type=1326 audit(1734638136.899:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22320 comm="syz.5.4564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x0 [ 1792.928167][T22327] netlink: 'syz.7.4566': attribute type 10 has an invalid length. [ 1792.985100][T22327] team0: Device ipvlan1 failed to register rx_handler [ 1793.538107][T22347] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4574'. [ 1793.556917][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 1793.884144][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4567'. [ 1794.367705][T17173] Bluetooth: hci2: command 0x041b tx timeout [ 1794.379395][T17173] Bluetooth: hci7: command 0x0c1a tx timeout [ 1794.436830][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1794.520210][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1794.671157][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1795.344434][T22403] netlink: 'syz.7.4588': attribute type 10 has an invalid length. [ 1795.588240][T22403] team0: Device ipvlan1 failed to register rx_handler [ 1795.720949][T22380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1795.795122][T22380] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1795.845686][T22380] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1795.870480][T22380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1795.894181][T22380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1795.922495][T22380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1795.945944][T22380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1796.288512][ T29] audit: type=1326 audit(1734638140.359:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.5.4585" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x0 [ 1796.470776][T22410] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1796.477367][T22410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1796.560138][T22410] vhci_hcd vhci_hcd.0: Device attached [ 1796.771932][T22421] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4594'. [ 1796.837989][T22422] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4591'. [ 1796.869271][T11860] vhci_hcd: vhci_device speed not set [ 1796.929710][T11860] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 1796.989745][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 1797.137126][T22412] vhci_hcd: connection reset by peer [ 1797.148044][ T3558] vhci_hcd: stop threads [ 1797.160809][ T3558] vhci_hcd: release socket [ 1797.192370][ T3558] vhci_hcd: disconnect device [ 1797.413440][T22432] 9pnet_virtio: no channels available for device syz [ 1797.444270][T22432] overlayfs: failed to resolve './file1': -2 [ 1797.869938][T17173] Bluetooth: hci7: command 0x0c1a tx timeout [ 1797.951714][T17173] Bluetooth: hci0: command 0x0c1a tx timeout [ 1797.957910][T17173] Bluetooth: hci4: command 0x0406 tx timeout [ 1797.964053][T17173] Bluetooth: hci1: command 0x0c1a tx timeout [ 1797.968191][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 1798.340178][ T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1798.779541][ T7443] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1798.807426][T22451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1798.930823][ T7443] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1798.948210][ T7443] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1798.978400][ T7443] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1799.025545][ T7443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1799.068332][ T7443] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1799.077997][T13840] Bluetooth: hci3: command 0x0c1a tx timeout [ 1799.106599][ T7443] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1799.153700][ T7443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1799.183766][ T7443] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1799.206630][ T7443] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1799.264409][ T7443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1799.276823][ T7443] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1799.305052][ T7443] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1799.348963][ T7443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1799.381666][ T7443] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1799.402388][ T7443] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1799.455271][ T7443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1799.482931][ T7443] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1799.511575][ T7443] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1799.544578][ T7443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1799.574692][ T7443] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1799.612413][ T7443] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1799.686993][ T46] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1799.706092][ T46] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1799.706622][ T7443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1799.725250][ T46] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1799.855853][ T7443] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1799.865682][ T7443] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1799.883677][ T7443] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1799.896496][ T7443] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1799.898762][ T46] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1799.934107][ T7443] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1799.964700][ T7443] usb 8-1: Product: syz [ 1799.970327][ T7443] usb 8-1: Manufacturer: syz [ 1799.975304][ T7443] usb 8-1: SerialNumber: syz [ 1800.012637][ T7443] usb 8-1: config 0 descriptor?? [ 1800.077773][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.115107][ T7443] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1800.180430][ T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1800.299257][T22458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1800.315626][ T7443] usb 8-1: USB disconnect, device number 9 [ 1800.324390][T22458] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1800.334681][ T7443] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1800.623825][T22458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1800.731284][T22458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1800.785944][T22458] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1800.818282][T22458] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1800.846229][T22458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1800.916454][T22469] netlink: 'syz.0.4603': attribute type 10 has an invalid length. [ 1801.013508][T22469] team0: Device ipvlan1 failed to register rx_handler [ 1801.549239][T13840] Bluetooth: hci3: command 0x0c1a tx timeout [ 1801.627260][T22480] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4608'. [ 1801.979586][ T46] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1802.019900][T11860] vhci_hcd: vhci_device speed not set [ 1802.369216][T13840] Bluetooth: hci7: command 0x0c1a tx timeout [ 1802.429197][T13840] Bluetooth: hci2: command 0x041b tx timeout [ 1802.747299][ T8] usb 4-1: USB disconnect, device number 18 [ 1802.753571][T13840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1802.829861][T13840] Bluetooth: hci4: command 0x0406 tx timeout [ 1802.909930][T13840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1803.005574][T22502] 9pnet_virtio: no channels available for device syz [ 1803.046661][T22502] overlayfs: failed to resolve './file1': -2 [ 1803.064219][ T29] audit: type=1326 audit(1734638147.139:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.5.4606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x0 [ 1805.174880][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1805.199427][T22514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1805.205527][T22514] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1805.274760][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4614'. [ 1805.316420][T22514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1805.344150][T22514] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1805.477463][T22514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1805.484646][T22514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1805.491423][T22514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1806.031297][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 1806.038493][T22538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4623'. [ 1806.551898][T22547] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1807.367909][T22564] 9pnet_virtio: no channels available for device syz [ 1807.384496][T22564] overlayfs: failed to resolve './file1': -2 [ 1807.391356][T13840] Bluetooth: hci2: command 0x041b tx timeout [ 1807.397606][T13840] Bluetooth: hci7: command 0x0c1a tx timeout [ 1807.556508][T13840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1807.562912][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1807.569260][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1809.115710][T22573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1809.159378][T22573] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1809.189305][T22577] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1809.195899][T22577] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1809.215309][T22573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1809.278640][T22573] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1809.319940][T22577] vhci_hcd vhci_hcd.0: Device attached [ 1809.364269][T22578] vhci_hcd: connection closed [ 1809.364802][ T3558] vhci_hcd: stop threads [ 1809.397110][T22573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1809.405290][ T3558] vhci_hcd: release socket [ 1809.406131][T22573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1809.418336][T22573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1809.425056][ T3558] vhci_hcd: disconnect device [ 1810.116592][T22589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1810.430949][T17173] Bluetooth: hci3: command 0x0c1a tx timeout [ 1811.168377][T22603] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1811.229702][T17173] Bluetooth: hci2: command 0x041b tx timeout [ 1811.235760][T17173] Bluetooth: hci7: command 0x0c1a tx timeout [ 1811.469428][T13840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1811.475519][T13840] Bluetooth: hci4: command 0x0406 tx timeout [ 1811.482596][T13840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1811.689691][ T8] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1811.889481][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1811.948519][ T8] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1811.999173][ T8] usb 6-1: config 0 has no interface number 0 [ 1812.034235][ T8] usb 6-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1812.131087][ T8] usb 6-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=45.8e [ 1812.169724][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.238681][ T8] usb 6-1: Product: syz [ 1812.274199][ T8] usb 6-1: Manufacturer: syz [ 1812.278844][ T8] usb 6-1: SerialNumber: syz [ 1812.355218][ T8] usb 6-1: config 0 descriptor?? [ 1812.410624][T22609] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1812.441092][ T8] qmi_wwan 6-1:0.4: probe with driver qmi_wwan failed with error -22 [ 1812.653943][ T8] usb 6-1: USB disconnect, device number 26 [ 1812.702305][T22619] geneve1: entered allmulticast mode [ 1813.309807][T17173] Bluetooth: hci2: command 0x041b tx timeout [ 1813.614999][T22624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1813.655958][T22624] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1813.669969][T22632] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1813.676530][T22632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1813.684442][T22632] vhci_hcd vhci_hcd.0: Device attached [ 1813.919261][T21021] vhci_hcd: vhci_device speed not set [ 1814.019184][T21021] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 1815.131683][T17173] Bluetooth: hci3: command 0x0c1a tx timeout [ 1815.657705][T22624] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1815.664840][T22634] vhci_hcd: connection reset by peer [ 1815.721923][T22624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1815.732588][T18314] vhci_hcd: stop threads [ 1815.763198][T18314] vhci_hcd: release socket [ 1815.793452][T22624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1815.799252][T18314] vhci_hcd: disconnect device [ 1815.828433][T22624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1815.876195][T22624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1816.507968][T22645] 9pnet_virtio: no channels available for device syz [ 1816.564881][T22645] overlayfs: failed to resolve './file1': -2 [ 1816.644610][T22648] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1816.660221][T22652] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4660'. [ 1817.169110][T17173] Bluetooth: hci3: command 0x0c1a tx timeout [ 1817.349539][T22666] overlayfs: missing 'lowerdir' [ 1817.722861][T17173] Bluetooth: hci7: command 0x0c1a tx timeout [ 1817.790023][T17173] Bluetooth: hci2: command 0x041b tx timeout [ 1817.913700][T17173] Bluetooth: hci4: command 0x0406 tx timeout [ 1817.913756][T13840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1817.949256][T17173] Bluetooth: hci0: command 0x0c1a tx timeout [ 1817.951995][T22674] openvswitch: netlink: Message has 1259 unknown bytes. [ 1818.917891][T22674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1819.519923][T21021] vhci_hcd: vhci_device speed not set [ 1823.991974][T22723] 9pnet_virtio: no channels available for device syz [ 1824.026138][T22723] overlayfs: failed to resolve './file1': -2 [ 1824.256097][T22729] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1824.389235][ T5890] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1824.591225][ T5890] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.618933][ T5890] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1824.719496][ T5890] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1824.762027][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.804872][ T5890] usb 8-1: Product: syz [ 1824.866655][ T5890] usb 8-1: Manufacturer: syz [ 1824.871436][ T5890] usb 8-1: SerialNumber: syz [ 1825.218855][ T5890] usb 8-1: 0:2 : does not exist [ 1825.229047][ T5890] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1825.243222][ T46] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1825.291581][ T5890] usb 8-1: USB disconnect, device number 10 [ 1825.460944][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 1825.511373][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1825.558076][ T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1825.574638][T22664] Set syz1 is full, maxelem 65536 reached [ 1825.658225][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1825.689170][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.726084][ T46] usb 5-1: Product: syz [ 1825.759149][ T46] usb 5-1: Manufacturer: syz [ 1825.786139][ T46] usb 5-1: SerialNumber: syz [ 1825.885082][T22749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4689'. [ 1826.180054][T22745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4689'. [ 1826.287071][ T46] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1827.513202][ T7611] usb 5-1: USB disconnect, device number 24 [ 1827.520690][T22750] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1827.535642][ T7611] usblp0: removed [ 1827.579435][T22750] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1827.585539][T22750] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1827.623112][T22750] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1827.659985][T22750] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1827.667245][T22750] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1828.596692][T22750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1828.605727][T22744] loop3: detected capacity change from 0 to 32768 [ 1828.606555][T22750] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1828.830599][T22768] overlayfs: upper fs needs to support d_type. [ 1828.837066][T22768] overlayfs: upper fs does not support tmpfile. [ 1828.844119][T22768] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1828.901365][T22768] overlayfs: conflicting lowerdir path [ 1829.309940][T17173] Bluetooth: hci3: command 0x0c1a tx timeout [ 1829.629384][T13840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1829.635913][T17173] Bluetooth: hci2: command 0x041b tx timeout [ 1829.642488][T17173] Bluetooth: hci7: command 0x0c1a tx timeout [ 1829.730231][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1830.709151][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1831.809878][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1832.740912][T22808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1832.747581][T22808] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1832.760379][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1832.841103][T22808] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1832.847192][T22808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1832.915494][T22808] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1832.921838][T22808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1833.002019][T22808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1833.869172][T22835] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4722'. [ 1834.069148][ T5895] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1834.370324][ T5895] usb 8-1: Using ep0 maxpacket: 16 [ 1834.589848][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 1834.922097][T13840] Bluetooth: hci7: command 0x0c1a tx timeout [ 1834.928845][ T5840] Bluetooth: hci2: command 0x041b tx timeout [ 1834.997572][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1835.004634][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1835.069199][T13840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1835.270758][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 1835.282495][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.369476][ T5895] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1835.396941][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.480150][ T5895] usb 8-1: config 0 descriptor?? [ 1835.760765][ T5895] usb 8-1: string descriptor 0 read error: -71 [ 1835.777409][ T5895] usbhid 8-1:0.0: can't add hid device: -71 [ 1835.800972][ T5895] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1835.831550][ T5895] usb 8-1: USB disconnect, device number 11 [ 1836.029362][ T7611] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1836.199171][ T7611] usb 4-1: Using ep0 maxpacket: 8 [ 1836.211276][ T7611] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1836.229042][ T7611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1836.239178][ T7611] usb 4-1: Product: syz [ 1836.243388][ T7611] usb 4-1: Manufacturer: syz [ 1836.268442][ T7611] usb 4-1: SerialNumber: syz [ 1836.285957][ T7611] usb 4-1: config 0 descriptor?? [ 1836.306970][ T7611] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1837.681430][T13840] Bluetooth: hci3: command 0x0c1a tx timeout [ 1837.803067][ T29] audit: type=1326 audit(1734638181.879:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1837.890589][ T29] audit: type=1326 audit(1734638181.909:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1837.919240][ T7611] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1837.926571][ T7611] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 1837.936263][ T7611] usb 4-1: USB disconnect, device number 19 [ 1837.979673][ T29] audit: type=1326 audit(1734638181.909:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1838.060643][ T29] audit: type=1326 audit(1734638181.909:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1838.103687][ T29] audit: type=1326 audit(1734638181.909:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1838.191430][ T29] audit: type=1326 audit(1734638181.909:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1838.235427][ T29] audit: type=1326 audit(1734638181.909:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1838.289298][ T29] audit: type=1326 audit(1734638181.909:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1838.426499][ T29] audit: type=1326 audit(1734638181.909:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1838.482107][ T29] audit: type=1326 audit(1734638181.949:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22871 comm="syz.0.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1838.650230][T22868] loop5: detected capacity change from 0 to 32768 [ 1838.818882][T22897] overlayfs: upper fs needs to support d_type. [ 1838.825244][T22897] overlayfs: upper fs does not support tmpfile. [ 1838.843018][T22897] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1838.903897][T22897] overlayfs: conflicting lowerdir path [ 1840.769160][ T5895] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1840.883045][T22919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4755'. [ 1841.409609][ T7611] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1842.141703][ T5895] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1842.153315][ T5895] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1842.166345][ T5895] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1842.180195][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.241349][T22913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1842.282683][ T5895] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1842.584754][ T7611] usb 1-1: Using ep0 maxpacket: 16 [ 1842.591839][ T7611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 1842.603163][ T7611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.612994][ T7611] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1842.622155][ T7611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.645900][ T7611] usb 1-1: config 0 descriptor?? [ 1842.905192][ T7611] usb 1-1: string descriptor 0 read error: -71 [ 1842.911697][ T5831] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1842.928545][ T7611] usbhid 1-1:0.0: can't add hid device: -71 [ 1842.934888][ T7611] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1842.946724][ T7611] usb 1-1: USB disconnect, device number 26 [ 1843.100849][ T5831] usb 4-1: config index 0 descriptor too short (expected 29, got 18) [ 1843.109410][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1843.147047][ T5831] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 1843.225720][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.297556][ T5831] usb 4-1: config 0 descriptor?? [ 1843.597722][ T5831] usb 4-1: string descriptor 0 read error: -71 [ 1843.615062][ T5831] ldusb 4-1:0.0: Interrupt in endpoint not found [ 1843.802465][ T5831] usb 4-1: USB disconnect, device number 20 [ 1843.904822][T22944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4763'. [ 1843.914436][T22943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4763'. [ 1846.176127][T22973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4774'. [ 1846.194799][T22969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4774'. [ 1847.291454][ T5890] usb 5-1: USB disconnect, device number 25 [ 1847.808023][ T29] audit: type=1326 audit(1734638191.869:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1847.989381][ T29] audit: type=1326 audit(1734638191.869:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1848.929444][ T29] audit: type=1326 audit(1734638191.869:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1848.979197][ T29] audit: type=1326 audit(1734638191.869:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1849.002262][ T29] audit: type=1326 audit(1734638191.869:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1849.019384][T23009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1849.025174][ T29] audit: type=1326 audit(1734638191.869:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1849.047608][T23009] netlink: 'syz.1.4790': attribute type 10 has an invalid length. [ 1849.056421][ T29] audit: type=1326 audit(1734638191.869:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1849.056491][ T29] audit: type=1326 audit(1734638191.869:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1849.065229][T23009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1849.086789][ T29] audit: type=1326 audit(1734638191.869:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1849.086862][ T29] audit: type=1326 audit(1734638191.869:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22994 comm="syz.4.4786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1738585d29 code=0x7ffc0000 [ 1849.359517][T11860] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1849.489270][T11860] usb 8-1: device descriptor read/64, error -71 [ 1849.739891][T11860] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1849.909557][T11860] usb 8-1: device descriptor read/64, error -71 [ 1850.104366][T11860] usb usb8-port1: attempt power cycle [ 1850.559167][T11860] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1850.580553][T11860] usb 8-1: device descriptor read/8, error -71 [ 1851.019116][T11860] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1851.047208][T11860] usb 8-1: device descriptor read/8, error -71 [ 1851.160480][T11860] usb usb8-port1: unable to enumerate USB device [ 1851.540112][T23049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4803'. [ 1851.987872][T23064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4810'. [ 1852.055277][T23061] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4810'. [ 1853.658760][T23106] netlink: 'syz.3.4824': attribute type 10 has an invalid length. [ 1853.750884][T23106] team0: Device ipvlan1 failed to register rx_handler [ 1854.135438][T23118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4828'. [ 1854.851848][T23135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4840'. [ 1854.863169][T23135] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4840'. [ 1855.014188][T23139] tipc: Started in network mode [ 1855.049128][T23139] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 1855.138470][T23139] tipc: Enabled bearer , priority 3 [ 1855.219635][T23150] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1855.226226][T23150] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1855.293565][T23150] vhci_hcd vhci_hcd.0: Device attached [ 1855.759483][T11860] vhci_hcd: vhci_device speed not set [ 1855.848508][T11860] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 1856.506921][ T5890] tipc: Node number set to 9480874 [ 1856.529654][T23151] vhci_hcd: connection reset by peer [ 1856.536668][ T66] vhci_hcd: stop threads [ 1856.541044][ T66] vhci_hcd: release socket [ 1856.718425][ T66] vhci_hcd: disconnect device [ 1857.114747][T23174] sp0: Synchronizing with TNC [ 1857.242061][T23162] [U] è [ 1861.179213][T11860] vhci_hcd: vhci_device speed not set [ 1861.820122][T23263] netlink: 'syz.3.4879': attribute type 10 has an invalid length. [ 1861.924781][T23263] team0: Device ipvlan1 failed to register rx_handler [ 1863.409092][ T29] audit: type=1326 audit(1734638207.479:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1863.431999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1863.487667][ T29] audit: type=1326 audit(1734638207.479:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1863.574890][ T29] audit: type=1326 audit(1734638207.559:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1863.638585][ T29] audit: type=1326 audit(1734638207.559:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1863.727031][ T29] audit: type=1326 audit(1734638207.559:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1863.815194][ T29] audit: type=1326 audit(1734638207.559:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1863.904131][T23290] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4888'. [ 1863.921248][ T29] audit: type=1326 audit(1734638207.559:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1863.992614][T23292] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1863.999199][T23292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1864.010363][T23292] vhci_hcd vhci_hcd.0: Device attached [ 1864.253827][T21021] vhci_hcd: vhci_device speed not set [ 1864.321654][T21021] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 1864.422059][ T29] audit: type=1326 audit(1734638207.559:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1864.642093][ T29] audit: type=1326 audit(1734638207.559:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1864.664457][ C1] vkms_vblank_simulate: vblank timer overrun [ 1864.685881][ T29] audit: type=1326 audit(1734638207.559:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23277 comm="syz.5.4884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1864.720046][T23293] vhci_hcd: connection reset by peer [ 1864.789407][T18389] vhci_hcd: stop threads [ 1864.799587][T18389] vhci_hcd: release socket [ 1864.824881][T18389] vhci_hcd: disconnect device [ 1864.970406][T23266] loop4: detected capacity change from 0 to 32768 [ 1865.248408][T23303] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4893'. [ 1866.724603][T23328] netlink: 'syz.0.4898': attribute type 10 has an invalid length. [ 1866.767474][T23328] team0: Device ipvlan1 failed to register rx_handler [ 1866.965846][T23336] pim6reg1: entered promiscuous mode [ 1867.056384][T23336] pim6reg1: entered allmulticast mode [ 1868.305727][T23357] syz.7.4909: attempt to access beyond end of device [ 1868.305727][T23357] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1868.324612][T23357] syz.7.4909: attempt to access beyond end of device [ 1868.324612][T23357] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1868.338410][T23356] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4910'. [ 1868.352683][T23357] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1868.368226][T23357] syz.7.4909: attempt to access beyond end of device [ 1868.368226][T23357] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1868.384190][T23357] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1868.412678][T23357] syz.7.4909: attempt to access beyond end of device [ 1868.412678][T23357] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1868.436873][T23357] syz.7.4909: attempt to access beyond end of device [ 1868.436873][T23357] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1868.460936][T23357] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1868.475537][T23357] syz.7.4909: attempt to access beyond end of device [ 1868.475537][T23357] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1868.491674][T23357] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1868.499772][T23359] netlink: 352 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1868.522905][T23357] syz.7.4909: attempt to access beyond end of device [ 1868.522905][T23357] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1868.541839][T23357] syz.7.4909: attempt to access beyond end of device [ 1868.541839][T23357] nbd7: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1868.729250][T23352] nbd7: detected capacity change from 0 to 67108884 [ 1868.732773][T23357] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1868.989331][T23353] block nbd7: shutting down sockets [ 1869.006192][T23350] loop3: detected capacity change from 0 to 32768 [ 1869.069230][T23357] blk_print_req_error: 16 callbacks suppressed [ 1869.069261][T23357] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1869.182172][T23357] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=0, location=0 [ 1869.214653][T23367] overlayfs: upper fs needs to support d_type. [ 1869.221077][T23367] overlayfs: upper fs does not support tmpfile. [ 1869.227904][T23367] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1869.244652][T23367] overlayfs: conflicting lowerdir path [ 1869.429387][T23357] I/O error, dev nbd7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1869.460640][T23357] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=1, location=1 [ 1869.476345][T23357] I/O error, dev nbd7, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1869.535876][T23357] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1869.586384][T23357] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1869.619217][T21021] vhci_hcd: vhci_device speed not set [ 1871.076906][T23376] syz.5.4913: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1871.249362][T23376] CPU: 1 UID: 0 PID: 23376 Comm: syz.5.4913 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1871.260304][T23376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1871.270376][T23376] Call Trace: [ 1871.273664][T23376] [ 1871.276619][T23376] dump_stack_lvl+0x16c/0x1f0 [ 1871.281335][T23376] warn_alloc+0x24d/0x3a0 [ 1871.285690][T23376] ? __pfx_warn_alloc+0x10/0x10 [ 1871.290575][T23376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.296249][T23376] ? __get_vm_area_node+0x1b0/0x2f0 [ 1871.301482][T23376] ? __get_vm_area_node+0x1dc/0x2f0 [ 1871.306812][T23376] __vmalloc_node_range_noprof+0x1105/0x1530 [ 1871.312843][T23376] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1871.317995][T23376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1871.324387][T23376] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1871.329539][T23376] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1871.335121][T23376] vmalloc_user_noprof+0x6b/0x90 [ 1871.340100][T23376] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 1871.345240][T23376] vb2_vmalloc_alloc+0x11e/0x3d0 [ 1871.350231][T23376] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1871.355728][T23376] __vb2_queue_alloc+0x899/0x1230 [ 1871.360789][T23376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.366466][T23376] vb2_core_reqbufs+0xa73/0xfb0 [ 1871.371357][T23376] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1871.376761][T23376] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1871.382696][T23376] ? __video_do_ioctl+0x4a2/0xf00 [ 1871.387768][T23376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.393440][T23376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.399129][T23376] vb2_reqbufs+0x1a5/0x1f0 [ 1871.403583][T23376] ? __pfx_vb2_reqbufs+0x10/0x10 [ 1871.408543][T23376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.414219][T23376] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 1871.419565][T23376] v4l_reqbufs+0x14f/0x1e0 [ 1871.424011][T23376] __video_do_ioctl+0xaf3/0xf00 [ 1871.428905][T23376] ? __pfx___video_do_ioctl+0x10/0x10 [ 1871.434400][T23376] ? __might_fault+0xe3/0x190 [ 1871.439128][T23376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.444841][T23376] video_usercopy+0x4d5/0x1620 [ 1871.449650][T23376] ? __pfx___video_do_ioctl+0x10/0x10 [ 1871.455065][T23376] ? __pfx_video_usercopy+0x10/0x10 [ 1871.460324][T23376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1871.466030][T23376] v4l2_ioctl+0x1bd/0x250 [ 1871.470399][T23376] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1871.475282][T23376] __x64_sys_ioctl+0x193/0x200 [ 1871.480080][T23376] do_syscall_64+0xcd/0x250 [ 1871.484620][T23376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.490554][T23376] RIP: 0033:0x7f7620185d29 [ 1871.495015][T23376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1871.514776][T23376] RSP: 002b:00007f7620ee5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1871.523218][T23376] RAX: ffffffffffffffda RBX: 00007f7620376080 RCX: 00007f7620185d29 [ 1871.531210][T23376] RDX: 0000000020000040 RSI: 00000000c0145608 RDI: 0000000000000008 [ 1871.539198][T23376] RBP: 00007f7620201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1871.547186][T23376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.555176][T23376] R13: 0000000000000000 R14: 00007f7620376080 R15: 00007fff4452f6c8 [ 1871.563187][T23376] [ 1871.581896][T23376] Mem-Info: [ 1871.585196][T23376] active_anon:10162 inactive_anon:0 isolated_anon:0 [ 1871.585196][T23376] active_file:22892 inactive_file:39435 isolated_file:0 [ 1871.585196][T23376] unevictable:768 dirty:178 writeback:0 [ 1871.585196][T23376] slab_reclaimable:11519 slab_unreclaimable:120551 [ 1871.585196][T23376] mapped:36327 shmem:7431 pagetables:784 [ 1871.585196][T23376] sec_pagetables:0 bounce:0 [ 1871.585196][T23376] kernel_misc_reclaimable:0 [ 1871.585196][T23376] free:1266065 free_pcp:5243 free_cma:0 [ 1871.664722][T23376] Node 0 active_anon:37016kB inactive_anon:0kB active_file:91568kB inactive_file:157668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145320kB dirty:712kB writeback:0kB shmem:24460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12496kB pagetables:3128kB sec_pagetables:0kB all_unreclaimable? no [ 1871.829160][T23376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1871.925640][T23376] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1872.241564][T23376] lowmem_reserve[]: 0 2461 2461 0 0 [ 1873.134717][T23376] Node 0 DMA32 free:1138916kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:44600kB inactive_anon:0kB active_file:91568kB inactive_file:157352kB unevictable:1536kB writepending:712kB present:3129332kB managed:2549208kB mlocked:0kB bounce:0kB free_pcp:14044kB local_pcp:488kB free_cma:0kB [ 1873.189375][T23376] lowmem_reserve[]: 0 0 0 0 0 [ 1873.201573][T23376] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1873.360072][T23376] lowmem_reserve[]: 0 0 0 0 0 [ 1873.365671][T23376] Node 1 Normal free:3906152kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5244kB local_pcp:5244kB free_cma:0kB [ 1873.398024][T23376] lowmem_reserve[]: 0 0 0 0 0 [ 1873.403577][T23376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1873.421471][T23376] Node 0 DMA32: 92*4kB (ME) 133*8kB (ME) 260*16kB (UME) 342*32kB (UME) 531*64kB (UME) 1160*128kB (UME) 514*256kB (UM) 142*512kB (UME) 52*1024kB (UM) 15*2048kB (UME) 161*4096kB (UME) = 1146712kB [ 1873.457649][T23376] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1873.499384][T23376] Node 1 Normal: 184*4kB (UE) 57*8kB (UE) 40*16kB (UE) 168*32kB (UE) 83*64kB (UME) 21*128kB (UE) 17*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3906152kB [ 1873.556188][T23376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1873.566391][T23376] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1873.576337][T23376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1873.618093][T23376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1873.627939][T23376] 70697 total pagecache pages [ 1873.633253][T23376] 0 pages in swap cache [ 1873.637576][T23376] Free swap = 124428kB [ 1873.649181][T23376] Total swap = 124996kB [ 1873.657432][T23376] 2097051 pages RAM [ 1873.661563][T23376] 0 pages HighMem/MovableOnly [ 1873.666562][T23376] 428027 pages reserved [ 1873.825776][T23376] 0 pages cma reserved [ 1874.877394][T23413] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4923'. [ 1874.910835][T23414] netlink: 'syz.1.4921': attribute type 10 has an invalid length. [ 1875.009264][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 1875.015432][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 1875.031765][T23407] ceph: No mds server is up or the cluster is laggy [ 1875.039821][ T5831] libceph: connect (1)[c::]:6789 error -101 [ 1875.062289][ T5831] libceph: mon0 (1)[c::]:6789 connect error [ 1875.989243][T23428] nbd7: detected capacity change from 0 to 67108884 [ 1875.997692][T23433] loop8: detected capacity change from 0 to 7 [ 1876.037353][T23428] block nbd7: Send control failed (result -89) [ 1876.043831][T23428] block nbd7: Request send failed, requeueing [ 1876.050437][ T26] block nbd7: Dead connection, failed to find a fallback [ 1876.057516][ T26] block nbd7: shutting down sockets [ 1876.066154][ T26] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.075987][ T26] buffer_io_error: 6 callbacks suppressed [ 1876.076012][ T26] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.090211][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.099403][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.107293][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.116509][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.124482][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.133769][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.141696][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.150817][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.158697][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.168008][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.175926][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.185054][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.193010][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.202208][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.210196][T23428] ldm_validate_partition_table(): Disk read failed. [ 1876.216894][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.226150][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.234196][T23428] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1876.243412][T23428] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1876.251536][T23428] Dev nbd7: unable to read RDB block 0 [ 1876.257437][T23428] nbd7: unable to read partition table [ 1876.263878][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1876.274025][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1876.284764][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1876.295408][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1876.306024][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1876.316780][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1876.327474][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1876.338165][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1876.348886][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1876.359512][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1876.370109][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1876.380779][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1876.391696][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1876.401622][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1876.412359][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1876.422998][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1876.433672][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1876.444308][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1876.454867][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1876.465525][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1876.476174][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1876.486913][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1876.497661][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1876.508408][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1876.519558][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1876.529686][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1876.540305][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1876.554097][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1876.564599][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1876.575052][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1876.585515][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1876.596432][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1876.606891][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1876.617320][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1876.627741][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1876.638218][T23428] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1876.647791][T23428] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1876.877466][T23433] Dev loop8: unable to read RDB block 7 [ 1876.887743][T23433] loop8: unable to read partition table [ 1877.049421][T23433] loop8: partition table beyond EOD, truncated [ 1877.055713][T23433] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1877.055713][T23433] ) failed (rc=-5) [ 1878.387291][T23464] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4938'. [ 1879.149252][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 1879.248752][T23480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4940'. [ 1879.288237][T23475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4940'. [ 1879.711591][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1879.711613][ T29] audit: type=1326 audit(1734638223.789:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1879.989239][ T29] audit: type=1326 audit(1734638223.839:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1880.011639][ C1] vkms_vblank_simulate: vblank timer overrun [ 1880.042112][ T29] audit: type=1326 audit(1734638223.859:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1880.150641][ T29] audit: type=1326 audit(1734638223.859:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1880.173941][ T29] audit: type=1326 audit(1734638223.859:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1880.457590][ T29] audit: type=1326 audit(1734638223.869:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1880.653523][ T29] audit: type=1326 audit(1734638223.869:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1880.890101][ T29] audit: type=1326 audit(1734638223.869:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1881.049094][ T29] audit: type=1326 audit(1734638223.869:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1881.099939][ T29] audit: type=1326 audit(1734638223.869:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23483 comm="syz.7.4942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbef85d29 code=0x7ffc0000 [ 1881.599233][T23508] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4953'. [ 1881.966393][T23520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4955'. [ 1882.027742][T23515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4955'. [ 1884.448960][T23540] bond0: option all_slaves_active: invalid value (128) [ 1884.647067][T23543] sp0: Synchronizing with TNC [ 1884.864217][T23532] [U] è [ 1884.899900][T11860] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1885.050988][T23557] nbd4: detected capacity change from 0 to 67108884 [ 1885.060010][T11860] usb 6-1: Using ep0 maxpacket: 32 [ 1885.088939][T11860] usb 6-1: no configurations [ 1885.094612][T11860] usb 6-1: can't read configurations, error -22 [ 1885.113524][T23560] block nbd4: Send control failed (result -89) [ 1885.158388][T23560] block nbd4: Request send failed, requeueing [ 1885.166150][ T5840] block nbd4: Receive control failed (result -32) [ 1885.182393][ T26] block nbd4: Dead connection, failed to find a fallback [ 1885.194770][ T26] block nbd4: shutting down sockets [ 1885.200198][ T26] blk_print_req_error: 45 callbacks suppressed [ 1885.200224][ T26] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1885.215630][ T26] buffer_io_error: 6 callbacks suppressed [ 1885.215654][ T26] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1885.290292][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1885.303484][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1885.323296][T11860] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1885.334114][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1885.379842][T22678] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1885.397132][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1885.427620][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1885.438310][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1885.560698][T11860] usb 6-1: Using ep0 maxpacket: 32 [ 1885.775759][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1885.810467][T11860] usb 6-1: no configurations [ 1885.815221][T11860] usb 6-1: can't read configurations, error -22 [ 1885.819207][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1886.709215][T11860] usb usb6-port1: attempt power cycle [ 1886.740930][T22678] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1886.757175][T22678] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1886.785330][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1886.794701][T22678] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1886.804927][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1886.821043][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1886.915866][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1886.923629][T22678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.992162][T23561] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1887.023077][T22678] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1887.049647][T11860] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1887.074546][T11860] usb 6-1: Using ep0 maxpacket: 32 [ 1887.093765][T11860] usb 6-1: no configurations [ 1887.111472][T11860] usb 6-1: can't read configurations, error -22 [ 1887.143934][T23577] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4971'. [ 1887.182119][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1887.207312][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1887.236617][T23560] ldm_validate_partition_table(): Disk read failed. [ 1887.256771][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1887.289823][T11860] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1887.327574][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1887.376810][T11860] usb 6-1: Using ep0 maxpacket: 32 [ 1887.379440][T23560] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1887.389854][T11860] usb 6-1: no configurations [ 1887.422108][T23560] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1887.430211][T11860] usb 6-1: can't read configurations, error -22 [ 1887.474324][T11860] usb usb6-port1: unable to enumerate USB device [ 1887.493565][T23560] Dev nbd4: unable to read RDB block 0 [ 1887.527959][T23560] nbd4: unable to read partition table [ 1887.557647][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1887.601035][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1887.677201][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1887.763659][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1887.865899][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1887.897702][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1887.959500][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1887.980500][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1888.084304][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1888.095060][ T7611] IPVS: starting estimator thread 0... [ 1888.152243][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1888.219226][T23589] IPVS: using max 16 ests per chain, 38400 per kthread [ 1888.234391][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1888.294695][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1888.370448][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1888.400330][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1888.481509][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1888.538825][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1888.630151][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1888.673090][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1888.730219][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1888.775753][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1888.886682][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1888.932953][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1888.972897][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1889.015875][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1889.167139][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1889.234899][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1889.330362][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1889.350771][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1889.428297][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1889.507799][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1889.559314][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1889.630982][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1889.717658][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1889.761994][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1890.102210][T11860] usb 2-1: USB disconnect, device number 24 [ 1890.180461][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1890.253015][T23560] blk_print_req_error: 44 callbacks suppressed [ 1890.253039][T23560] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1890.294250][T23560] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1890.447149][T23608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4980'. [ 1890.466481][T23560] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1891.006793][T23628] netlink: 'syz.1.4987': attribute type 10 has an invalid length. [ 1891.069567][ T5831] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1891.146680][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1891.146708][ T29] audit: type=1326 audit(1734638235.219:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.184546][T23629] sp0: Synchronizing with TNC [ 1891.206653][ T29] audit: type=1326 audit(1734638235.259:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.257054][ T29] audit: type=1326 audit(1734638235.269:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.291517][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1891.309994][ T5831] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1891.319228][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.331153][ T5831] usb 5-1: config 0 descriptor?? [ 1891.406909][ T29] audit: type=1326 audit(1734638235.269:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.501662][ T29] audit: type=1326 audit(1734638235.269:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.524793][T23609] [U] è [ 1891.548163][ T29] audit: type=1326 audit(1734638235.269:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.636978][ T29] audit: type=1326 audit(1734638235.269:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.661088][ T29] audit: type=1326 audit(1734638235.269:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.694507][ T29] audit: type=1326 audit(1734638235.269:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1891.810571][ T29] audit: type=1326 audit(1734638235.269:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23615 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cf985d29 code=0x7ffc0000 [ 1892.028249][ T5831] elecom 0003:056E:00E6.0011: unknown main item tag 0x0 [ 1892.035645][ T5831] elecom 0003:056E:00E6.0011: unknown main item tag 0x0 [ 1892.042745][ T5831] elecom 0003:056E:00E6.0011: unknown main item tag 0x0 [ 1892.049787][ T5831] elecom 0003:056E:00E6.0011: unknown main item tag 0x0 [ 1892.059434][ T5831] elecom 0003:056E:00E6.0011: unknown main item tag 0x0 [ 1892.066516][ T5831] elecom 0003:056E:00E6.0011: unknown main item tag 0x0 [ 1892.073946][ T5831] elecom 0003:056E:00E6.0011: unknown main item tag 0x0 [ 1892.085897][ T5831] elecom 0003:056E:00E6.0011: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.4-1/input0 [ 1892.105471][ T8] usb 5-1: USB disconnect, device number 26 [ 1893.365607][T23659] syz.4.4998: attempt to access beyond end of device [ 1893.365607][T23659] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1893.430049][T23657] nbd4: detected capacity change from 0 to 67108884 [ 1893.446417][T23661] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4999'. [ 1893.478538][T23659] block nbd4: Send control failed (result -89) [ 1893.492969][T23659] block nbd4: Request send failed, requeueing [ 1893.511978][ T5840] block nbd4: Receive control failed (result -32) [ 1893.528826][ T26] block nbd4: Dead connection, failed to find a fallback [ 1893.536146][ T26] block nbd4: shutting down sockets [ 1893.542987][ T26] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.554373][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1893.589630][T23659] I/O error, dev nbd4, sector 67108882 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.613042][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1893.694547][T23659] I/O error, dev nbd4, sector 67108370 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.745587][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1893.773507][T23659] I/O error, dev nbd4, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.793265][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1893.842061][T23659] I/O error, dev nbd4, sector 67108368 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.870962][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1893.936543][T23659] I/O error, dev nbd4, sector 67108878 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1893.991922][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1894.086574][T23659] I/O error, dev nbd4, sector 67108366 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1894.186230][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1894.235994][T23659] I/O error, dev nbd4, sector 67108582 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1894.278886][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1894.360324][T23681] sp0: Synchronizing with TNC [ 1894.459725][T23659] I/O error, dev nbd4, sector 67108070 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1894.495845][T23685] netlink: 'syz.0.5006': attribute type 10 has an invalid length. [ 1894.540511][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1894.583356][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1894.594319][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1894.606078][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1894.617456][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1894.627448][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1894.646555][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1894.705897][T23672] [U] è [ 1894.723395][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1894.738456][T23685] team0: Device ipvlan1 failed to register rx_handler [ 1894.853319][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1894.889718][T13840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1894.907545][T13840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1894.923658][T13840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1894.936368][T13840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1894.944096][T13840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1894.951635][T13840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1894.962241][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1894.999502][ T7611] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1895.020345][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1895.053474][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1895.147438][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1895.159102][ T7611] usb 4-1: device descriptor read/64, error -71 [ 1895.235066][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1895.286997][T23659] blk_print_req_error: 14 callbacks suppressed [ 1895.287021][T23659] I/O error, dev nbd4, sector 67107248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1895.335280][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1895.367275][T23659] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1895.376866][ T5840] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1895.650743][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1896.381196][ T7611] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1896.410662][T23659] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1896.420340][T23659] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1896.436701][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1896.519112][ T7611] usb 4-1: device descriptor read/64, error -71 [ 1896.582977][T23659] I/O error, dev nbd4, sector 67108872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1896.637707][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1896.648848][ T7611] usb usb4-port1: attempt power cycle [ 1896.679372][T23659] I/O error, dev nbd4, sector 67106824 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1896.724341][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1896.724370][ T29] audit: type=1326 audit(1734638240.799:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23709 comm="syz.5.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1896.769228][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1896.802702][ T29] audit: type=1326 audit(1734638240.839:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23709 comm="syz.5.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1896.832861][T23659] I/O error, dev nbd4, sector 67108864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1896.861875][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1896.904499][T23689] chnl_net:caif_netlink_parms(): no params data found [ 1896.912772][T23659] I/O error, dev nbd4, sector 67106816 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1896.929231][ T29] audit: type=1326 audit(1734638240.859:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23709 comm="syz.5.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1896.970859][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1897.002750][T23659] I/O error, dev nbd4, sector 67108856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1897.023641][ T29] audit: type=1326 audit(1734638240.859:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23709 comm="syz.5.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7620185d29 code=0x7ffc0000 [ 1897.057369][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1897.084663][T23659] I/O error, dev nbd4, sector 67106808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1897.098933][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1897.119250][T13840] Bluetooth: hci3: command tx timeout [ 1897.139159][ T7611] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1897.197249][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1897.218363][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1897.257651][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1897.275838][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1897.291995][T23659] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1897.301673][T23659] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1897.420659][ T7611] usb 4-1: device not accepting address 23, error -71 [ 1897.530557][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1897.701055][ T8] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1897.962562][T23689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1898.271561][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1898.312787][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1898.351324][T23689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.358743][T23689] bridge_slave_0: entered allmulticast mode [ 1898.464959][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1898.497251][T23689] bridge_slave_0: entered promiscuous mode [ 1898.577869][T23735] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5018'. [ 1898.722117][T23689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1898.729878][T23689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1898.737433][T23689] bridge_slave_1: entered allmulticast mode [ 1898.745767][T23689] bridge_slave_1: entered promiscuous mode [ 1898.809883][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1898.818862][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1899.005144][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1899.196223][T13840] Bluetooth: hci3: command tx timeout [ 1899.406631][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1899.415787][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1899.426965][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1899.442101][T23689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1899.481485][T23689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1899.528686][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1899.537924][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1899.549153][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1899.593039][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1899.602194][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1899.613994][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1899.637981][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1899.647878][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1899.658967][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1899.702885][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1899.712102][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1899.713255][T23689] team0: Port device team_slave_0 added [ 1899.723099][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1899.829770][T23689] team0: Port device team_slave_1 added [ 1899.836846][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1899.846436][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1899.858588][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1899.914674][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1899.924010][ T8] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1899.934224][ T8] usb 1-1: Product: syz [ 1899.938414][ T8] usb 1-1: Manufacturer: syz [ 1899.948882][ T8] usb 1-1: SerialNumber: syz [ 1899.978529][T23689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.986817][ T8] usb 1-1: config 0 descriptor?? [ 1899.999180][T23689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1900.095385][T23689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1900.109809][T23689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1900.116792][T23689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1900.143918][T23689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.196249][ T8] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1900.325693][ T5831] usb 1-1: USB disconnect, device number 27 [ 1900.340962][ T5831] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1900.354059][T23689] hsr_slave_0: entered promiscuous mode [ 1900.373219][T23734] loop5: detected capacity change from 0 to 32768 [ 1900.420803][T23689] hsr_slave_1: entered promiscuous mode [ 1900.443559][T23689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1900.463460][T23689] Cannot create hsr debugfs directory [ 1900.540079][T23756] overlayfs: upper fs needs to support d_type. [ 1900.546552][T23756] overlayfs: upper fs does not support tmpfile. [ 1900.553404][T23756] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1900.561898][T23756] overlayfs: conflicting lowerdir path [ 1900.979443][ T5890] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1901.139596][ T5890] usb 1-1: device descriptor read/64, error -71 [ 1901.229110][T13840] Bluetooth: hci3: command tx timeout [ 1901.429457][ T5890] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1901.579361][ T5890] usb 1-1: device descriptor read/64, error -71 [ 1901.615829][T23689] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.699670][ T5890] usb usb1-port1: attempt power cycle [ 1901.907826][T23689] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.059945][ T5890] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1902.152306][ T5890] usb 1-1: device descriptor read/8, error -71 [ 1902.222121][T23689] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.459594][ T5890] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1902.560639][ T5890] usb 1-1: device descriptor read/8, error -71 [ 1902.631098][T23689] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.812484][ T5890] usb usb1-port1: unable to enumerate USB device [ 1903.259293][ T5890] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1903.295980][T23689] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1903.309222][T13840] Bluetooth: hci3: command tx timeout [ 1903.323167][T23689] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1903.359562][T23689] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1903.423373][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 1903.450628][T23689] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1903.477837][ T5890] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1903.528636][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.711448][ T5890] usb 5-1: config 0 descriptor?? [ 1903.720357][ T5890] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1903.779948][T23792] vivid-007: ================= START STATUS ================= [ 1903.859935][T23792] vivid-007: Enable Output Cropping: true [ 1903.911550][T23792] vivid-007: Enable Output Composing: true [ 1903.917551][T23792] vivid-007: Enable Output Scaler: true [ 1903.953515][T23689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1903.999289][T23792] vivid-007: Tx RGB Quantization Range: Automatic [ 1904.030855][T23689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1904.043855][T23792] vivid-007: Transmit Mode: HDMI [ 1904.070018][T23792] vivid-007: Hotplug Present: 0x00000000 [ 1904.090455][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.093452][T23792] vivid-007: RxSense Present: [ 1904.097626][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1904.097703][T23792] 0x00000000 [ 1904.209157][T23792] vivid-007: EDID Present: 0x00000000 [ 1904.220307][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.227516][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.247216][T23792] vivid-007: ================== END STATUS ================== [ 1904.356276][T23689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1904.367579][T23689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1904.689933][T23811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5047'. [ 1904.962854][T23689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1905.805080][ T46] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1906.195810][T23838] nbd3: detected capacity change from 0 to 67108884 [ 1906.218948][T23840] block nbd3: Send control failed (result -89) [ 1906.240247][T23689] veth0_vlan: entered promiscuous mode [ 1906.246900][T23840] block nbd3: Request send failed, requeueing [ 1906.257179][T13840] block nbd3: Receive control failed (result -32) [ 1906.276561][T12262] block nbd3: Dead connection, failed to find a fallback [ 1906.277085][T23689] veth1_vlan: entered promiscuous mode [ 1906.283854][T12262] block nbd3: shutting down sockets [ 1906.294568][T12262] blk_print_req_error: 5 callbacks suppressed [ 1906.294593][T12262] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1906.311066][T12262] buffer_io_error: 6 callbacks suppressed [ 1906.311090][T12262] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1906.327568][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1906.356708][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1906.433904][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1906.454462][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1906.470415][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1906.501643][T23689] veth0_macvtap: entered promiscuous mode [ 1906.508551][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1906.522877][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1906.533395][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1906.543244][T23689] veth1_macvtap: entered promiscuous mode [ 1906.559158][ T46] usb 1-1: device descriptor read/64, error -71 [ 1906.560054][T23689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1906.576023][T23689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1906.585963][T23689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1906.597288][T23689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1906.607237][T23689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1906.617829][T23689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1906.628176][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1906.628238][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1906.628444][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1906.639483][T23689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1906.665245][T23689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1906.675827][T23689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1906.686493][T23689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1906.697049][T23689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1906.707109][T23689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1906.708538][T23844] fuse: Unknown parameter 'grou00000000000000000000' [ 1906.718343][T23689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1906.725052][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1906.735706][T23689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1906.753578][T23689] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.762667][T23689] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.772232][T23689] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.781206][T23689] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.807151][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1907.109448][ T46] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1907.117768][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1907.125946][ T5890] gspca_sonixj: reg_w1 err -71 [ 1907.130924][ T5890] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1907.144262][ T5890] usb 5-1: USB disconnect, device number 27 [ 1907.156523][T23840] ldm_validate_partition_table(): Disk read failed. [ 1907.334798][ T46] usb 1-1: device descriptor read/64, error -71 [ 1907.372028][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.947765][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1907.983576][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.014072][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1908.049163][T23840] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1908.081653][T23840] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1908.093370][T23840] Dev nbd3: unable to read RDB block 0 [ 1908.123970][T23763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1908.150599][T23840] nbd3: unable to read partition table [ 1908.157341][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1908.177879][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1908.189819][ T46] usb usb1-port1: attempt power cycle [ 1908.201290][T23763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.319150][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1908.367765][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1908.450048][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1908.493836][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1908.530672][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1908.579551][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1908.617561][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1908.665319][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1908.708034][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1908.743553][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1908.759141][T21021] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1908.804570][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1908.866641][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1908.915624][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1908.932118][T21021] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1908.954246][T21021] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1908.980470][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1909.003985][T21021] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1909.029426][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1909.050282][T21021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.066773][ T29] audit: type=1326 audit(1734638253.139:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.092027][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1909.107716][T23862] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1909.129434][T21021] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1909.139299][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1909.179946][ T29] audit: type=1326 audit(1734638253.189:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.203624][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1909.249992][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1909.279471][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1909.291329][ T29] audit: type=1326 audit(1734638253.189:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.370429][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1909.404036][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1909.434260][ T29] audit: type=1326 audit(1734638253.189:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.484132][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1909.550246][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1909.571654][ T29] audit: type=1326 audit(1734638253.189:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.612659][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1909.624758][T17173] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1909.639378][T17173] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1909.647830][T17173] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1909.656289][ T29] audit: type=1326 audit(1734638253.199:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.689761][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1909.717904][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1909.736345][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1909.747317][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1909.767211][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1909.793517][ T29] audit: type=1326 audit(1734638253.199:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.831685][ T29] audit: type=1326 audit(1734638253.199:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.855228][ T29] audit: type=1326 audit(1734638253.199:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.878349][ T29] audit: type=1326 audit(1734638253.199:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23868 comm="syz.1.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756b85d29 code=0x7ffc0000 [ 1909.959600][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1909.972368][T17173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1909.980151][T17173] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1909.993678][T17173] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1910.070790][T21021] usb 8-1: USB disconnect, device number 16 [ 1910.086070][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1910.157255][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1910.199458][T23840] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1910.210362][T23840] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1910.633777][T23872] chnl_net:caif_netlink_parms(): no params data found [ 1910.814352][T23886] fuse: Unknown parameter 'group_i00000000000000000000' [ 1911.303559][T17173] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1911.313805][T17173] CPU: 1 UID: 0 PID: 17173 Comm: kworker/u9:1 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1911.324979][T17173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1911.335079][T17173] Workqueue: hci3 hci_rx_work [ 1911.339839][T17173] Call Trace: [ 1911.343150][T17173] [ 1911.346115][T17173] dump_stack_lvl+0x16c/0x1f0 [ 1911.350862][T17173] sysfs_warn_dup+0x7f/0xa0 [ 1911.355430][T17173] sysfs_create_dir_ns+0x24d/0x2b0 [ 1911.360610][T17173] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1911.366319][T17173] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1911.371761][T17173] ? kobject_add_internal+0x12d/0x990 [ 1911.377217][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.382932][T17173] ? do_raw_spin_unlock+0x172/0x230 [ 1911.388199][T17173] kobject_add_internal+0x2c8/0x990 [ 1911.393488][T17173] kobject_add+0x16f/0x240 [ 1911.397983][T17173] ? __pfx_kobject_add+0x10/0x10 [ 1911.402994][T17173] ? class_to_subsys+0x3e/0x160 [ 1911.407923][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.413631][T17173] ? do_raw_spin_unlock+0x172/0x230 [ 1911.418886][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.424582][T17173] ? kobject_put+0xab/0x5a0 [ 1911.429151][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.434867][T17173] device_add+0x289/0x1a70 [ 1911.439345][T17173] ? __pfx_dev_set_name+0x10/0x10 [ 1911.444410][T17173] ? __pfx_device_add+0x10/0x10 [ 1911.449334][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.455037][T17173] ? mgmt_send_event_skb+0x2f2/0x460 [ 1911.460391][T17173] hci_conn_add_sysfs+0x17e/0x230 [ 1911.465487][T17173] le_conn_complete_evt+0x107f/0x1da0 [ 1911.470921][T17173] ? __pfx_lock_release+0x10/0x10 [ 1911.475986][T17173] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1911.481754][T17173] ? trace_contention_end+0xee/0x140 [ 1911.487085][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.492779][T17173] ? __mutex_lock+0x1cc/0xa60 [ 1911.497517][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.503219][T17173] hci_le_conn_complete_evt+0x23c/0x370 [ 1911.508826][T17173] hci_le_meta_evt+0x2e5/0x5d0 [ 1911.513907][T17173] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1911.520034][T17173] hci_event_packet+0x669/0x1180 [ 1911.525026][T17173] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1911.530373][T17173] ? __pfx_hci_event_packet+0x10/0x10 [ 1911.535796][T17173] ? __entry_text_end+0x1020c5/0x1020c9 [ 1911.541406][T17173] ? mark_held_locks+0x9f/0xe0 [ 1911.546215][T17173] ? kcov_remote_start+0x3cf/0x6e0 [ 1911.551377][T17173] ? lockdep_hardirqs_on+0x7c/0x110 [ 1911.556718][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.562422][T17173] hci_rx_work+0x2c5/0x16b0 [ 1911.566984][T17173] ? process_one_work+0x921/0x1ba0 [ 1911.572147][T17173] process_one_work+0x9c8/0x1ba0 [ 1911.577147][T17173] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1911.582825][T17173] ? __pfx_process_one_work+0x10/0x10 [ 1911.588243][T17173] ? rcu_is_watching+0x12/0xc0 [ 1911.593062][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.598768][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.604466][T17173] ? assign_work+0x1a0/0x250 [ 1911.609102][T17173] worker_thread+0x6c8/0xf00 [ 1911.613748][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.619451][T17173] ? __kthread_parkme+0x148/0x220 [ 1911.624528][T17173] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1911.630223][T17173] ? __pfx_worker_thread+0x10/0x10 [ 1911.635379][T17173] kthread+0x2c4/0x3a0 [ 1911.639504][T17173] ? _raw_spin_unlock_irq+0x23/0x50 [ 1911.644747][T17173] ? __pfx_kthread+0x10/0x10 [ 1911.649394][T17173] ret_from_fork+0x48/0x80 [ 1911.653936][T17173] ? __pfx_kthread+0x10/0x10 [ 1911.658840][T17173] ret_from_fork_asm+0x1a/0x30 [ 1911.663687][T17173] [ 1911.675290][T17173] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1911.691577][T17173] Bluetooth: hci3: failed to register connection device [ 1911.931468][T23872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.954433][T23895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5070'. [ 1911.969259][T23872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.009727][T23872] bridge_slave_0: entered allmulticast mode [ 1912.029358][T23872] bridge_slave_0: entered promiscuous mode [ 1912.050684][T13840] Bluetooth: hci2: command tx timeout [ 1912.117766][T23903] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 1912.361010][T23872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.374218][T23872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.383635][T23872] bridge_slave_1: entered allmulticast mode [ 1912.406959][T23872] bridge_slave_1: entered promiscuous mode [ 1912.580344][T23872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1912.605616][T23916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5078'. [ 1912.625653][T23914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5078'. [ 1912.674980][T23872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.749874][ T7611] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1912.920155][ T7611] usb 8-1: device descriptor read/64, error -71 [ 1912.998232][T23872] team0: Port device team_slave_0 added [ 1913.063016][T23872] team0: Port device team_slave_1 added [ 1913.220314][ T7611] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1913.296925][T23872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1913.353903][T23872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.399235][ T7611] usb 8-1: device descriptor read/64, error -71 [ 1913.420978][T23872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1913.457811][T23872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1913.488981][T23872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.538618][T23872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1913.539089][ T7611] usb usb8-port1: attempt power cycle [ 1913.555170][ T5890] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1913.745077][T23872] hsr_slave_0: entered promiscuous mode [ 1913.760935][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.773103][T23872] hsr_slave_1: entered promiscuous mode [ 1913.799302][T23872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1913.806997][T23872] Cannot create hsr debugfs directory [ 1913.819550][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1913.827302][T23932] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 1913.879624][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1913.969208][ T7611] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1913.988284][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1913.999894][ T7611] usb 8-1: device descriptor read/8, error -71 [ 1914.019220][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.063759][ T5890] usb 4-1: config 0 descriptor?? [ 1914.109535][T13840] Bluetooth: hci2: command tx timeout [ 1914.249438][ T7611] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1914.297270][ T7611] usb 8-1: device descriptor read/8, error -71 [ 1914.446441][ T7611] usb usb8-port1: unable to enumerate USB device [ 1914.494738][ T5890] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1914.540100][ T5890] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 1914.582546][ T5890] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1914.803000][T23872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1914.925900][ T7611] usb 4-1: USB disconnect, device number 25 [ 1915.127315][T23872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.373599][T23872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.866217][T23872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1915.933076][T23944] syzkaller1: entered promiscuous mode [ 1915.938605][T23944] syzkaller1: entered allmulticast mode [ 1915.984271][T23963] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5092'. [ 1915.993886][T23958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5092'. [ 1916.039564][ T5890] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1916.189410][ T5831] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1916.197331][T13840] Bluetooth: hci2: command tx timeout [ 1916.221238][ T5890] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1916.237416][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.257380][ T5890] usb 4-1: config 0 descriptor?? [ 1916.273998][ T5890] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1916.320739][T23872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1916.345638][T23872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1916.363837][T23872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1916.387449][T23872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1916.401260][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.428400][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.524367][ T5890] gp8psk: usb in 128 operation failed. [ 1916.534530][ T5831] usb 8-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1916.561293][ T5890] gp8psk: usb in 137 operation failed. [ 1916.579328][ T5923] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1916.593107][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.602398][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1916.649066][ T5831] usb 8-1: config 0 descriptor?? [ 1916.655572][ T5890] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1916.699941][ T5890] usb 4-1: media controller created [ 1916.774121][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1916.783646][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 1916.821611][ T5890] gp8psk_fe: Frontend attached [ 1916.826959][ T5890] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1916.835624][ T5923] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1916.844652][ T5923] usb 5-1: config 179 has no interface number 0 [ 1916.867849][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1916.895573][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1916.911372][ T5890] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1916.920591][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1916.952271][ T5923] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1916.984730][T23872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1917.004521][ T5923] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1917.033489][ T5890] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1917.046750][ T5923] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1917.061134][ T5890] gp8psk: found Genpix USB device pID = 203 (hex) [ 1917.067799][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.090356][T23967] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1917.200173][ T5831] usbhid 8-1:0.0: can't add hid device: -71 [ 1917.214337][ T5831] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1917.226320][ T5831] usb 8-1: USB disconnect, device number 21 [ 1917.287317][T23872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1917.395713][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.402900][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1917.405252][T21021] usb 4-1: USB disconnect, device number 26 [ 1917.434421][T22678] usb 5-1: USB disconnect, device number 28 [ 1917.434507][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1917.448740][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1917.457711][ C1] ================================================================== [ 1917.465968][ C1] BUG: KASAN: slab-use-after-free in register_lock_class+0x1033/0x1240 [ 1917.474258][ C1] Read of size 1 at addr ffff88808592a891 by task kworker/u8:1/12 [ 1917.482092][ C1] [ 1917.484432][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1917.495150][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1917.505223][ C1] Workqueue: bat_events batadv_nc_worker [ 1917.510974][ C1] Call Trace: [ 1917.514250][ C1] [ 1917.517089][ C1] dump_stack_lvl+0x116/0x1f0 [ 1917.521787][ C1] print_report+0xc3/0x620 [ 1917.526212][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.531871][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.537528][ C1] ? __phys_addr+0xc6/0x150 [ 1917.542051][ C1] kasan_report+0xd9/0x110 [ 1917.546475][ C1] ? register_lock_class+0x1033/0x1240 [ 1917.551951][ C1] ? register_lock_class+0x1033/0x1240 [ 1917.557430][ C1] register_lock_class+0x1033/0x1240 [ 1917.562822][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 1917.568648][ C1] __lock_acquire+0x135/0x3c40 [ 1917.573429][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1917.578640][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1917.583852][ C1] lock_acquire.part.0+0x11b/0x380 [ 1917.588976][ C1] ? __wake_up+0x1c/0x60 [ 1917.593230][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1917.598902][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.604561][ C1] ? rcu_is_watching+0x12/0xc0 [ 1917.609351][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.615008][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1917.620229][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1917.625616][ C1] ? __wake_up+0x1c/0x60 [ 1917.629951][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.635608][ C1] ? lock_acquire+0x2f/0xb0 [ 1917.640120][ C1] ? __wake_up+0x1c/0x60 [ 1917.644370][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 1917.649587][ C1] ? __wake_up+0x1c/0x60 [ 1917.653835][ C1] __wake_up+0x1c/0x60 [ 1917.657914][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 1917.663395][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 1917.668783][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 1917.673994][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.679657][ C1] dummy_timer+0x17f7/0x3960 [ 1917.684293][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.689953][ C1] ? mark_lock+0xb5/0xc60 [ 1917.694290][ C1] ? __pfx_lock_release+0x10/0x10 [ 1917.699326][ C1] ? lock_acquire+0x2f/0xb0 [ 1917.703837][ C1] ? debug_object_deactivate+0x13b/0x370 [ 1917.709488][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.715147][ C1] ? find_held_lock+0x2d/0x110 [ 1917.719937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.725595][ C1] ? __hrtimer_run_queues+0x53d/0xae0 [ 1917.730986][ C1] ? __pfx_lock_release+0x10/0x10 [ 1917.736021][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1917.740976][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.746813][ C1] ? mark_held_locks+0x9f/0xe0 [ 1917.751590][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1917.757413][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1917.762370][ C1] __hrtimer_run_queues+0x20d/0xae0 [ 1917.767597][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1917.773336][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.779004][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1917.784138][ C1] handle_softirqs+0x216/0x8f0 [ 1917.788920][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1917.794223][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.799883][ C1] __irq_exit_rcu+0x109/0x170 [ 1917.804576][ C1] irq_exit_rcu+0x9/0x30 [ 1917.808831][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1917.814480][ C1] [ 1917.817405][ C1] [ 1917.820334][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1917.826337][ C1] RIP: 0010:batadv_nc_process_nc_paths.part.0+0x304/0x3e0 [ 1917.833475][ C1] Code: c8 8c c6 05 4c fd 51 05 01 e8 78 28 80 f6 e9 10 fe ff ff e8 6e 1b a4 f6 e8 a9 a3 89 f6 31 ff 89 c3 89 c6 e8 3e 1d a4 f6 84 db <0f> 85 f8 fe ff ff e8 51 1b a4 f6 e8 7c 80 31 00 31 ff 89 c3 89 c6 [ 1917.853176][ C1] RSP: 0018:ffffc90000117b20 EFLAGS: 00000202 [ 1917.859249][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8af5f962 [ 1917.867223][ C1] RDX: ffff88801d6b5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 1917.875197][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1917.883167][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: dffffc0000000000 [ 1917.891137][ C1] R13: ffff88805d3e18a8 R14: 0000000000000064 R15: ffffffff8af5edb0 [ 1917.899109][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1917.904769][ C1] ? batadv_nc_process_nc_paths.part.0+0x302/0x3e0 [ 1917.911305][ C1] batadv_nc_worker+0xcc8/0x1060 [ 1917.916270][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1917.921665][ C1] ? rcu_is_watching+0x12/0xc0 [ 1917.926447][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.932113][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1917.937335][ C1] ? process_one_work+0x921/0x1ba0 [ 1917.942483][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.948140][ C1] ? lock_acquire+0x2f/0xb0 [ 1917.952652][ C1] ? process_one_work+0x921/0x1ba0 [ 1917.957776][ C1] process_one_work+0x9c8/0x1ba0 [ 1917.962728][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1917.968123][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1917.973504][ C1] ? rcu_is_watching+0x12/0xc0 [ 1917.978286][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.983948][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1917.989779][ C1] ? assign_work+0x1a0/0x250 [ 1917.994379][ C1] worker_thread+0x6c8/0xf00 [ 1917.999075][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1918.004201][ C1] kthread+0x2c4/0x3a0 [ 1918.008287][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1918.013499][ C1] ? __pfx_kthread+0x10/0x10 [ 1918.018108][ C1] ret_from_fork+0x48/0x80 [ 1918.022533][ C1] ? __pfx_kthread+0x10/0x10 [ 1918.027230][ C1] ret_from_fork_asm+0x1a/0x30 [ 1918.032024][ C1] [ 1918.035039][ C1] [ 1918.037351][ C1] Allocated by task 5923: [ 1918.041669][ C1] kasan_save_stack+0x33/0x60 [ 1918.046348][ C1] kasan_save_track+0x14/0x30 [ 1918.051027][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1918.055638][ C1] xpad_probe+0x27e/0x1f50 [ 1918.060064][ C1] usb_probe_interface+0x303/0x9c0 [ 1918.065216][ C1] really_probe+0x241/0xa90 [ 1918.069740][ C1] __driver_probe_device+0x1de/0x440 [ 1918.075038][ C1] driver_probe_device+0x4c/0x1b0 [ 1918.080268][ C1] __device_attach_driver+0x1df/0x310 [ 1918.085662][ C1] bus_for_each_drv+0x15a/0x1e0 [ 1918.090516][ C1] __device_attach+0x1e8/0x4b0 [ 1918.095295][ C1] bus_probe_device+0x17f/0x1c0 [ 1918.100157][ C1] device_add+0x114b/0x1a70 [ 1918.104677][ C1] usb_set_configuration+0x10cb/0x1c50 [ 1918.110143][ C1] usb_generic_driver_probe+0xb1/0x110 [ 1918.115619][ C1] usb_probe_device+0xef/0x3e0 [ 1918.120385][ C1] really_probe+0x241/0xa90 [ 1918.124896][ C1] __driver_probe_device+0x1de/0x440 [ 1918.130193][ C1] driver_probe_device+0x4c/0x1b0 [ 1918.135230][ C1] __device_attach_driver+0x1df/0x310 [ 1918.140624][ C1] bus_for_each_drv+0x15a/0x1e0 [ 1918.145475][ C1] __device_attach+0x1e8/0x4b0 [ 1918.150428][ C1] bus_probe_device+0x17f/0x1c0 [ 1918.155394][ C1] device_add+0x114b/0x1a70 [ 1918.159914][ C1] usb_new_device+0xd90/0x1a10 [ 1918.164678][ C1] hub_event+0x2d9a/0x4e10 [ 1918.169104][ C1] process_one_work+0x9c8/0x1ba0 [ 1918.174311][ C1] worker_thread+0x6c8/0xf00 [ 1918.178906][ C1] kthread+0x2c4/0x3a0 [ 1918.182987][ C1] ret_from_fork+0x48/0x80 [ 1918.187409][ C1] ret_from_fork_asm+0x1a/0x30 [ 1918.192192][ C1] [ 1918.194510][ C1] Freed by task 22678: [ 1918.198572][ C1] kasan_save_stack+0x33/0x60 [ 1918.203251][ C1] kasan_save_track+0x14/0x30 [ 1918.207929][ C1] kasan_save_free_info+0x3b/0x60 [ 1918.212968][ C1] __kasan_slab_free+0x51/0x70 [ 1918.217733][ C1] kfree+0x14f/0x4b0 [ 1918.221643][ C1] xpad_disconnect+0x1cf/0x580 [ 1918.226433][ C1] usb_unbind_interface+0x1e5/0x960 [ 1918.231640][ C1] device_remove+0x125/0x170 [ 1918.236241][ C1] device_release_driver_internal+0x44a/0x610 [ 1918.242325][ C1] bus_remove_device+0x22f/0x420 [ 1918.247270][ C1] device_del+0x396/0x9f0 [ 1918.251613][ C1] usb_disable_device+0x36c/0x7f0 [ 1918.256666][ C1] usb_disconnect+0x2e1/0x920 [ 1918.261379][ C1] hub_event+0x1da5/0x4e10 [ 1918.265810][ C1] process_one_work+0x9c8/0x1ba0 [ 1918.270760][ C1] worker_thread+0x6c8/0xf00 [ 1918.275356][ C1] kthread+0x2c4/0x3a0 [ 1918.279439][ C1] ret_from_fork+0x48/0x80 [ 1918.283861][ C1] ret_from_fork_asm+0x1a/0x30 [ 1918.288642][ C1] [ 1918.290982][ C1] The buggy address belongs to the object at ffff88808592a800 [ 1918.290982][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 1918.305035][ C1] The buggy address is located 145 bytes inside of [ 1918.305035][ C1] freed 1024-byte region [ffff88808592a800, ffff88808592ac00) [ 1918.318921][ C1] [ 1918.321258][ C1] The buggy address belongs to the physical page: [ 1918.327661][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x85928 [ 1918.336441][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1918.344961][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1918.352504][ C1] page_type: f5(slab) [ 1918.356487][ C1] raw: 00fff00000000040 ffff88801b041dc0 ffffea0000d26200 dead000000000002 [ 1918.365076][ C1] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1918.373779][ C1] head: 00fff00000000040 ffff88801b041dc0 ffffea0000d26200 dead000000000002 [ 1918.382455][ C1] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1918.391130][ C1] head: 00fff00000000003 ffffea0002164a01 ffffffffffffffff 0000000000000000 [ 1918.399809][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1918.408477][ C1] page dumped because: kasan: bad access detected [ 1918.414882][ C1] page_owner tracks the page as allocated [ 1918.420589][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 381264485995, free_ts 356668515303 [ 1918.439449][ C1] post_alloc_hook+0x2d1/0x350 [ 1918.444238][ C1] get_page_from_freelist+0xfce/0x2f80 [ 1918.449704][ C1] __alloc_pages_noprof+0x223/0x25b0 [ 1918.454997][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1918.460479][ C1] new_slab+0x2c9/0x410 [ 1918.464651][ C1] ___slab_alloc+0xd7d/0x17a0 [ 1918.469345][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 1918.474744][ C1] __kmalloc_noprof+0x2ec/0x510 [ 1918.479599][ C1] ieee802_11_parse_elems_full+0xea/0x1680 [ 1918.485418][ C1] ieee80211_inform_bss+0xfd/0x1100 [ 1918.490626][ C1] cfg80211_inform_single_bss_data+0x8fc/0x1df0 [ 1918.496892][ C1] cfg80211_inform_bss_data+0x205/0x3ba0 [ 1918.502536][ C1] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 1918.508615][ C1] ieee80211_bss_info_update+0x311/0xab0 [ 1918.514260][ C1] ieee80211_scan_rx+0x474/0xac0 [ 1918.519208][ C1] ieee80211_rx_list+0x1bd7/0x2970 [ 1918.524334][ C1] page last free pid 7309 tgid 7309 stack trace: [ 1918.530655][ C1] free_unref_folios+0xa7b/0x14f0 [ 1918.535690][ C1] folios_put_refs+0x587/0x7b0 [ 1918.540479][ C1] shmem_undo_range+0x586/0x1170 [ 1918.545432][ C1] shmem_evict_inode+0x3a3/0xba0 [ 1918.550386][ C1] evict+0x40c/0x960 [ 1918.554290][ C1] iput+0x52a/0x890 [ 1918.558146][ C1] do_unlinkat+0x5c3/0x760 [ 1918.562743][ C1] __x64_sys_unlink+0xc5/0x110 [ 1918.567507][ C1] do_syscall_64+0xcd/0x250 [ 1918.572029][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.577940][ C1] [ 1918.580257][ C1] Memory state around the buggy address: [ 1918.585880][ C1] ffff88808592a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1918.594204][ C1] ffff88808592a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1918.602267][ C1] >ffff88808592a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1918.610322][ C1] ^ [ 1918.614901][ C1] ffff88808592a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1918.622960][ C1] ffff88808592a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1918.631014][ C1] ================================================================== [ 1918.639097][ C1] Disabling lock debugging due to kernel taint [ 1918.645258][ C1] ================================================================== [ 1918.653398][ C1] BUG: KASAN: slab-use-after-free in register_lock_class+0x1089/0x1240 [ 1918.661743][ C1] Read of size 1 at addr ffff88808592a890 by task kworker/u8:1/12 [ 1918.669550][ C1] [ 1918.671878][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1918.684053][ C1] Tainted: [B]=BAD_PAGE [ 1918.688201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1918.698259][ C1] Workqueue: bat_events batadv_nc_worker [ 1918.703923][ C1] Call Trace: [ 1918.707201][ C1] [ 1918.710043][ C1] dump_stack_lvl+0x116/0x1f0 [ 1918.714830][ C1] print_report+0xc3/0x620 [ 1918.719262][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.724921][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.730579][ C1] ? __phys_addr+0xc6/0x150 [ 1918.735106][ C1] kasan_report+0xd9/0x110 [ 1918.739537][ C1] ? register_lock_class+0x1089/0x1240 [ 1918.745016][ C1] ? register_lock_class+0x1089/0x1240 [ 1918.750494][ C1] register_lock_class+0x1089/0x1240 [ 1918.755795][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 1918.761446][ C1] __lock_acquire+0x135/0x3c40 [ 1918.766227][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1918.771436][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1918.776652][ C1] lock_acquire.part.0+0x11b/0x380 [ 1918.781775][ C1] ? __wake_up+0x1c/0x60 [ 1918.786026][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1918.791847][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.797513][ C1] ? rcu_is_watching+0x12/0xc0 [ 1918.802304][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.807968][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1918.813189][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1918.818578][ C1] ? __wake_up+0x1c/0x60 [ 1918.822827][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.828492][ C1] ? lock_acquire+0x2f/0xb0 [ 1918.833004][ C1] ? __wake_up+0x1c/0x60 [ 1918.837261][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 1918.842474][ C1] ? __wake_up+0x1c/0x60 [ 1918.846812][ C1] __wake_up+0x1c/0x60 [ 1918.850890][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 1918.856373][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 1918.861762][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 1918.866974][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.872640][ C1] dummy_timer+0x17f7/0x3960 [ 1918.877254][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.882915][ C1] ? mark_lock+0xb5/0xc60 [ 1918.887344][ C1] ? __pfx_lock_release+0x10/0x10 [ 1918.892380][ C1] ? lock_acquire+0x2f/0xb0 [ 1918.896892][ C1] ? debug_object_deactivate+0x13b/0x370 [ 1918.902538][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.908198][ C1] ? find_held_lock+0x2d/0x110 [ 1918.912985][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.918650][ C1] ? __hrtimer_run_queues+0x53d/0xae0 [ 1918.924044][ C1] ? __pfx_lock_release+0x10/0x10 [ 1918.929081][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1918.934037][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.939711][ C1] ? mark_held_locks+0x9f/0xe0 [ 1918.944489][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1918.950314][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1918.955270][ C1] __hrtimer_run_queues+0x20d/0xae0 [ 1918.960496][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1918.966321][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.971984][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1918.977117][ C1] handle_softirqs+0x216/0x8f0 [ 1918.981992][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1918.987295][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1918.992958][ C1] __irq_exit_rcu+0x109/0x170 [ 1918.997655][ C1] irq_exit_rcu+0x9/0x30 [ 1919.001911][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1919.007563][ C1] [ 1919.010492][ C1] [ 1919.013609][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1919.019617][ C1] RIP: 0010:batadv_nc_process_nc_paths.part.0+0x304/0x3e0 [ 1919.026765][ C1] Code: c8 8c c6 05 4c fd 51 05 01 e8 78 28 80 f6 e9 10 fe ff ff e8 6e 1b a4 f6 e8 a9 a3 89 f6 31 ff 89 c3 89 c6 e8 3e 1d a4 f6 84 db <0f> 85 f8 fe ff ff e8 51 1b a4 f6 e8 7c 80 31 00 31 ff 89 c3 89 c6 [ 1919.046382][ C1] RSP: 0018:ffffc90000117b20 EFLAGS: 00000202 [ 1919.052474][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8af5f962 [ 1919.060450][ C1] RDX: ffff88801d6b5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 1919.068424][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1919.076398][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: dffffc0000000000 [ 1919.084407][ C1] R13: ffff88805d3e18a8 R14: 0000000000000064 R15: ffffffff8af5edb0 [ 1919.092384][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1919.098051][ C1] ? batadv_nc_process_nc_paths.part.0+0x302/0x3e0 [ 1919.104592][ C1] batadv_nc_worker+0xcc8/0x1060 [ 1919.109563][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1919.114962][ C1] ? rcu_is_watching+0x12/0xc0 [ 1919.119748][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.125411][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1919.130635][ C1] ? process_one_work+0x921/0x1ba0 [ 1919.135762][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.141422][ C1] ? lock_acquire+0x2f/0xb0 [ 1919.145935][ C1] ? process_one_work+0x921/0x1ba0 [ 1919.151061][ C1] process_one_work+0x9c8/0x1ba0 [ 1919.156016][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1919.161419][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1919.166799][ C1] ? rcu_is_watching+0x12/0xc0 [ 1919.171581][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.177248][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.182906][ C1] ? assign_work+0x1a0/0x250 [ 1919.187503][ C1] worker_thread+0x6c8/0xf00 [ 1919.192114][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1919.197241][ C1] kthread+0x2c4/0x3a0 [ 1919.201329][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1919.206540][ C1] ? __pfx_kthread+0x10/0x10 [ 1919.211186][ C1] ret_from_fork+0x48/0x80 [ 1919.215628][ C1] ? __pfx_kthread+0x10/0x10 [ 1919.220239][ C1] ret_from_fork_asm+0x1a/0x30 [ 1919.225033][ C1] [ 1919.228047][ C1] [ 1919.230447][ C1] Allocated by task 5923: [ 1919.234769][ C1] kasan_save_stack+0x33/0x60 [ 1919.239795][ C1] kasan_save_track+0x14/0x30 [ 1919.244473][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1919.249084][ C1] xpad_probe+0x27e/0x1f50 [ 1919.253509][ C1] usb_probe_interface+0x303/0x9c0 [ 1919.258630][ C1] really_probe+0x241/0xa90 [ 1919.263172][ C1] __driver_probe_device+0x1de/0x440 [ 1919.268472][ C1] driver_probe_device+0x4c/0x1b0 [ 1919.273508][ C1] __device_attach_driver+0x1df/0x310 [ 1919.278979][ C1] bus_for_each_drv+0x15a/0x1e0 [ 1919.283834][ C1] __device_attach+0x1e8/0x4b0 [ 1919.288611][ C1] bus_probe_device+0x17f/0x1c0 [ 1919.293494][ C1] device_add+0x114b/0x1a70 [ 1919.298017][ C1] usb_set_configuration+0x10cb/0x1c50 [ 1919.303741][ C1] usb_generic_driver_probe+0xb1/0x110 [ 1919.309220][ C1] usb_probe_device+0xef/0x3e0 [ 1919.313988][ C1] really_probe+0x241/0xa90 [ 1919.318502][ C1] __driver_probe_device+0x1de/0x440 [ 1919.323800][ C1] driver_probe_device+0x4c/0x1b0 [ 1919.328836][ C1] __device_attach_driver+0x1df/0x310 [ 1919.334221][ C1] bus_for_each_drv+0x15a/0x1e0 [ 1919.339075][ C1] __device_attach+0x1e8/0x4b0 [ 1919.343853][ C1] bus_probe_device+0x17f/0x1c0 [ 1919.348711][ C1] device_add+0x114b/0x1a70 [ 1919.353231][ C1] usb_new_device+0xd90/0x1a10 [ 1919.357999][ C1] hub_event+0x2d9a/0x4e10 [ 1919.362420][ C1] process_one_work+0x9c8/0x1ba0 [ 1919.367365][ C1] worker_thread+0x6c8/0xf00 [ 1919.371959][ C1] kthread+0x2c4/0x3a0 [ 1919.376044][ C1] ret_from_fork+0x48/0x80 [ 1919.380464][ C1] ret_from_fork_asm+0x1a/0x30 [ 1919.385247][ C1] [ 1919.387567][ C1] Freed by task 22678: [ 1919.391627][ C1] kasan_save_stack+0x33/0x60 [ 1919.396306][ C1] kasan_save_track+0x14/0x30 [ 1919.400988][ C1] kasan_save_free_info+0x3b/0x60 [ 1919.406029][ C1] __kasan_slab_free+0x51/0x70 [ 1919.410796][ C1] kfree+0x14f/0x4b0 [ 1919.414710][ C1] xpad_disconnect+0x1cf/0x580 [ 1919.419573][ C1] usb_unbind_interface+0x1e5/0x960 [ 1919.424780][ C1] device_remove+0x125/0x170 [ 1919.429383][ C1] device_release_driver_internal+0x44a/0x610 [ 1919.435469][ C1] bus_remove_device+0x22f/0x420 [ 1919.440415][ C1] device_del+0x396/0x9f0 [ 1919.444762][ C1] usb_disable_device+0x36c/0x7f0 [ 1919.449788][ C1] usb_disconnect+0x2e1/0x920 [ 1919.454559][ C1] hub_event+0x1da5/0x4e10 [ 1919.458977][ C1] process_one_work+0x9c8/0x1ba0 [ 1919.463920][ C1] worker_thread+0x6c8/0xf00 [ 1919.468517][ C1] kthread+0x2c4/0x3a0 [ 1919.472602][ C1] ret_from_fork+0x48/0x80 [ 1919.477026][ C1] ret_from_fork_asm+0x1a/0x30 [ 1919.481808][ C1] [ 1919.484122][ C1] The buggy address belongs to the object at ffff88808592a800 [ 1919.484122][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 1919.498180][ C1] The buggy address is located 144 bytes inside of [ 1919.498180][ C1] freed 1024-byte region [ffff88808592a800, ffff88808592ac00) [ 1919.512065][ C1] [ 1919.514383][ C1] The buggy address belongs to the physical page: [ 1919.520781][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x85928 [ 1919.529540][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1919.538038][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1919.545580][ C1] page_type: f5(slab) [ 1919.549561][ C1] raw: 00fff00000000040 ffff88801b041dc0 ffffea0000d26200 dead000000000002 [ 1919.558151][ C1] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1919.566744][ C1] head: 00fff00000000040 ffff88801b041dc0 ffffea0000d26200 dead000000000002 [ 1919.575421][ C1] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1919.584098][ C1] head: 00fff00000000003 ffffea0002164a01 ffffffffffffffff 0000000000000000 [ 1919.592770][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1919.601435][ C1] page dumped because: kasan: bad access detected [ 1919.607840][ C1] page_owner tracks the page as allocated [ 1919.613545][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 381264485995, free_ts 356668515303 [ 1919.632225][ C1] post_alloc_hook+0x2d1/0x350 [ 1919.637013][ C1] get_page_from_freelist+0xfce/0x2f80 [ 1919.642478][ C1] __alloc_pages_noprof+0x223/0x25b0 [ 1919.647766][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1919.653238][ C1] new_slab+0x2c9/0x410 [ 1919.657411][ C1] ___slab_alloc+0xd7d/0x17a0 [ 1919.662194][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 1919.667759][ C1] __kmalloc_noprof+0x2ec/0x510 [ 1919.672613][ C1] ieee802_11_parse_elems_full+0xea/0x1680 [ 1919.678439][ C1] ieee80211_inform_bss+0xfd/0x1100 [ 1919.683648][ C1] cfg80211_inform_single_bss_data+0x8fc/0x1df0 [ 1919.690166][ C1] cfg80211_inform_bss_data+0x205/0x3ba0 [ 1919.695804][ C1] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 1919.701876][ C1] ieee80211_bss_info_update+0x311/0xab0 [ 1919.707519][ C1] ieee80211_scan_rx+0x474/0xac0 [ 1919.712463][ C1] ieee80211_rx_list+0x1bd7/0x2970 [ 1919.717596][ C1] page last free pid 7309 tgid 7309 stack trace: [ 1919.723913][ C1] free_unref_folios+0xa7b/0x14f0 [ 1919.728941][ C1] folios_put_refs+0x587/0x7b0 [ 1919.733763][ C1] shmem_undo_range+0x586/0x1170 [ 1919.738719][ C1] shmem_evict_inode+0x3a3/0xba0 [ 1919.743674][ C1] evict+0x40c/0x960 [ 1919.747575][ C1] iput+0x52a/0x890 [ 1919.751391][ C1] do_unlinkat+0x5c3/0x760 [ 1919.755807][ C1] __x64_sys_unlink+0xc5/0x110 [ 1919.760572][ C1] do_syscall_64+0xcd/0x250 [ 1919.765102][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.771016][ C1] [ 1919.773331][ C1] Memory state around the buggy address: [ 1919.779301][ C1] ffff88808592a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1919.787359][ C1] ffff88808592a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.795505][ C1] >ffff88808592a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.803559][ C1] ^ [ 1919.808141][ C1] ffff88808592a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.816206][ C1] ffff88808592a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1919.824262][ C1] ================================================================== [ 1919.832312][ C1] ================================================================== [ 1919.840361][ C1] BUG: KASAN: slab-use-after-free in register_lock_class+0x10df/0x1240 [ 1919.848613][ C1] Read of size 1 at addr ffff88808592a892 by task kworker/u8:1/12 [ 1919.856416][ C1] [ 1919.858737][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1919.870903][ C1] Tainted: [B]=BAD_PAGE [ 1919.875050][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1919.885106][ C1] Workqueue: bat_events batadv_nc_worker [ 1919.890772][ C1] Call Trace: [ 1919.894046][ C1] [ 1919.896889][ C1] dump_stack_lvl+0x116/0x1f0 [ 1919.901587][ C1] print_report+0xc3/0x620 [ 1919.906014][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.911674][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.917333][ C1] ? __phys_addr+0xc6/0x150 [ 1919.921857][ C1] kasan_report+0xd9/0x110 [ 1919.926282][ C1] ? register_lock_class+0x10df/0x1240 [ 1919.931755][ C1] ? register_lock_class+0x10df/0x1240 [ 1919.937230][ C1] register_lock_class+0x10df/0x1240 [ 1919.942536][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 1919.948191][ C1] __lock_acquire+0x135/0x3c40 [ 1919.952972][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1919.958182][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1919.963394][ C1] lock_acquire.part.0+0x11b/0x380 [ 1919.968516][ C1] ? __wake_up+0x1c/0x60 [ 1919.972768][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1919.978413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.984070][ C1] ? rcu_is_watching+0x12/0xc0 [ 1919.988852][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1919.994535][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1919.999779][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1920.005175][ C1] ? __wake_up+0x1c/0x60 [ 1920.009535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.015199][ C1] ? lock_acquire+0x2f/0xb0 [ 1920.019714][ C1] ? __wake_up+0x1c/0x60 [ 1920.023965][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 1920.029176][ C1] ? __wake_up+0x1c/0x60 [ 1920.033424][ C1] __wake_up+0x1c/0x60 [ 1920.037507][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 1920.042989][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 1920.048377][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 1920.053591][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.059254][ C1] dummy_timer+0x17f7/0x3960 [ 1920.063867][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.069526][ C1] ? mark_lock+0xb5/0xc60 [ 1920.073865][ C1] ? __pfx_lock_release+0x10/0x10 [ 1920.078903][ C1] ? lock_acquire+0x2f/0xb0 [ 1920.083415][ C1] ? debug_object_deactivate+0x13b/0x370 [ 1920.089501][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.095161][ C1] ? find_held_lock+0x2d/0x110 [ 1920.099947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.105605][ C1] ? __hrtimer_run_queues+0x53d/0xae0 [ 1920.110995][ C1] ? __pfx_lock_release+0x10/0x10 [ 1920.116030][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1920.120983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.126639][ C1] ? mark_held_locks+0x9f/0xe0 [ 1920.131414][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1920.137242][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1920.142193][ C1] __hrtimer_run_queues+0x20d/0xae0 [ 1920.147416][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1920.153158][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.158823][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1920.163961][ C1] handle_softirqs+0x216/0x8f0 [ 1920.168742][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1920.174132][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.179793][ C1] __irq_exit_rcu+0x109/0x170 [ 1920.184488][ C1] irq_exit_rcu+0x9/0x30 [ 1920.188743][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1920.194395][ C1] [ 1920.197321][ C1] [ 1920.200248][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1920.206253][ C1] RIP: 0010:batadv_nc_process_nc_paths.part.0+0x304/0x3e0 [ 1920.213393][ C1] Code: c8 8c c6 05 4c fd 51 05 01 e8 78 28 80 f6 e9 10 fe ff ff e8 6e 1b a4 f6 e8 a9 a3 89 f6 31 ff 89 c3 89 c6 e8 3e 1d a4 f6 84 db <0f> 85 f8 fe ff ff e8 51 1b a4 f6 e8 7c 80 31 00 31 ff 89 c3 89 c6 [ 1920.233021][ C1] RSP: 0018:ffffc90000117b20 EFLAGS: 00000202 [ 1920.239102][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8af5f962 [ 1920.247074][ C1] RDX: ffff88801d6b5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 1920.255045][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1920.263016][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: dffffc0000000000 [ 1920.270987][ C1] R13: ffff88805d3e18a8 R14: 0000000000000064 R15: ffffffff8af5edb0 [ 1920.278960][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1920.284627][ C1] ? batadv_nc_process_nc_paths.part.0+0x302/0x3e0 [ 1920.291166][ C1] batadv_nc_worker+0xcc8/0x1060 [ 1920.296136][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1920.301534][ C1] ? rcu_is_watching+0x12/0xc0 [ 1920.306316][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.311981][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1920.317208][ C1] ? process_one_work+0x921/0x1ba0 [ 1920.322329][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.327990][ C1] ? lock_acquire+0x2f/0xb0 [ 1920.332506][ C1] ? process_one_work+0x921/0x1ba0 [ 1920.337630][ C1] process_one_work+0x9c8/0x1ba0 [ 1920.342583][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1920.347979][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1920.353360][ C1] ? rcu_is_watching+0x12/0xc0 [ 1920.358142][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.363808][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1920.369645][ C1] ? assign_work+0x1a0/0x250 [ 1920.374249][ C1] worker_thread+0x6c8/0xf00 [ 1920.378857][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1920.383979][ C1] kthread+0x2c4/0x3a0 [ 1920.388068][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1920.393278][ C1] ? __pfx_kthread+0x10/0x10 [ 1920.397891][ C1] ret_from_fork+0x48/0x80 [ 1920.402402][ C1] ? __pfx_kthread+0x10/0x10 [ 1920.407011][ C1] ret_from_fork_asm+0x1a/0x30 [ 1920.411804][ C1] [ 1920.414816][ C1] [ 1920.417130][ C1] Allocated by task 5923: [ 1920.421451][ C1] kasan_save_stack+0x33/0x60 [ 1920.426140][ C1] kasan_save_track+0x14/0x30 [ 1920.430821][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1920.435434][ C1] xpad_probe+0x27e/0x1f50 [ 1920.439858][ C1] usb_probe_interface+0x303/0x9c0 [ 1920.444979][ C1] really_probe+0x241/0xa90 [ 1920.449495][ C1] __driver_probe_device+0x1de/0x440 [ 1920.454792][ C1] driver_probe_device+0x4c/0x1b0 [ 1920.459831][ C1] __device_attach_driver+0x1df/0x310 [ 1920.465217][ C1] bus_for_each_drv+0x15a/0x1e0 [ 1920.470070][ C1] __device_attach+0x1e8/0x4b0 [ 1920.474846][ C1] bus_probe_device+0x17f/0x1c0 [ 1920.479701][ C1] device_add+0x114b/0x1a70 [ 1920.484224][ C1] usb_set_configuration+0x10cb/0x1c50 [ 1920.489689][ C1] usb_generic_driver_probe+0xb1/0x110 [ 1920.495169][ C1] usb_probe_device+0xef/0x3e0 [ 1920.499941][ C1] really_probe+0x241/0xa90 [ 1920.504454][ C1] __driver_probe_device+0x1de/0x440 [ 1920.509753][ C1] driver_probe_device+0x4c/0x1b0 [ 1920.514789][ C1] __device_attach_driver+0x1df/0x310 [ 1920.520178][ C1] bus_for_each_drv+0x15a/0x1e0 [ 1920.525039][ C1] __device_attach+0x1e8/0x4b0 [ 1920.529814][ C1] bus_probe_device+0x17f/0x1c0 [ 1920.534673][ C1] device_add+0x114b/0x1a70 [ 1920.539198][ C1] usb_new_device+0xd90/0x1a10 [ 1920.543972][ C1] hub_event+0x2d9a/0x4e10 [ 1920.548391][ C1] process_one_work+0x9c8/0x1ba0 [ 1920.553365][ C1] worker_thread+0x6c8/0xf00 [ 1920.557961][ C1] kthread+0x2c4/0x3a0 [ 1920.562042][ C1] ret_from_fork+0x48/0x80 [ 1920.566461][ C1] ret_from_fork_asm+0x1a/0x30 [ 1920.571241][ C1] [ 1920.573553][ C1] Freed by task 22678: [ 1920.577609][ C1] kasan_save_stack+0x33/0x60 [ 1920.582289][ C1] kasan_save_track+0x14/0x30 [ 1920.586965][ C1] kasan_save_free_info+0x3b/0x60 [ 1920.592005][ C1] __kasan_slab_free+0x51/0x70 [ 1920.596769][ C1] kfree+0x14f/0x4b0 [ 1920.600679][ C1] xpad_disconnect+0x1cf/0x580 [ 1920.605451][ C1] usb_unbind_interface+0x1e5/0x960 [ 1920.610665][ C1] device_remove+0x125/0x170 [ 1920.615264][ C1] device_release_driver_internal+0x44a/0x610 [ 1920.621458][ C1] bus_remove_device+0x22f/0x420 [ 1920.626405][ C1] device_del+0x396/0x9f0 [ 1920.630743][ C1] usb_disable_device+0x36c/0x7f0 [ 1920.635768][ C1] usb_disconnect+0x2e1/0x920 [ 1920.640443][ C1] hub_event+0x1da5/0x4e10 [ 1920.644859][ C1] process_one_work+0x9c8/0x1ba0 [ 1920.649800][ C1] worker_thread+0x6c8/0xf00 [ 1920.654395][ C1] kthread+0x2c4/0x3a0 [ 1920.658478][ C1] ret_from_fork+0x48/0x80 [ 1920.662897][ C1] ret_from_fork_asm+0x1a/0x30 [ 1920.667676][ C1] [ 1920.669989][ C1] The buggy address belongs to the object at ffff88808592a800 [ 1920.669989][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 1920.684040][ C1] The buggy address is located 146 bytes inside of [ 1920.684040][ C1] freed 1024-byte region [ffff88808592a800, ffff88808592ac00) [ 1920.697925][ C1] [ 1920.700239][ C1] The buggy address belongs to the physical page: [ 1920.706639][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x85928 [ 1920.715829][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1920.724326][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1920.731866][ C1] page_type: f5(slab) [ 1920.735847][ C1] raw: 00fff00000000040 ffff88801b041dc0 ffffea0000d26200 dead000000000002 [ 1920.744435][ C1] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1920.753199][ C1] head: 00fff00000000040 ffff88801b041dc0 ffffea0000d26200 dead000000000002 [ 1920.761873][ C1] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1920.770545][ C1] head: 00fff00000000003 ffffea0002164a01 ffffffffffffffff 0000000000000000 [ 1920.779218][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1920.787878][ C1] page dumped because: kasan: bad access detected [ 1920.794323][ C1] page_owner tracks the page as allocated [ 1920.800032][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 381264485995, free_ts 356668515303 [ 1920.818834][ C1] post_alloc_hook+0x2d1/0x350 [ 1920.823625][ C1] get_page_from_freelist+0xfce/0x2f80 [ 1920.829090][ C1] __alloc_pages_noprof+0x223/0x25b0 [ 1920.834385][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1920.839857][ C1] new_slab+0x2c9/0x410 [ 1920.844028][ C1] ___slab_alloc+0xd7d/0x17a0 [ 1920.848725][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 1920.854131][ C1] __kmalloc_noprof+0x2ec/0x510 [ 1920.858986][ C1] ieee802_11_parse_elems_full+0xea/0x1680 [ 1920.864804][ C1] ieee80211_inform_bss+0xfd/0x1100 [ 1920.870013][ C1] cfg80211_inform_single_bss_data+0x8fc/0x1df0 [ 1920.876262][ C1] cfg80211_inform_bss_data+0x205/0x3ba0 [ 1920.882272][ C1] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 1920.888344][ C1] ieee80211_bss_info_update+0x311/0xab0 [ 1920.893987][ C1] ieee80211_scan_rx+0x474/0xac0 [ 1920.898932][ C1] ieee80211_rx_list+0x1bd7/0x2970 [ 1920.904055][ C1] page last free pid 7309 tgid 7309 stack trace: [ 1920.910374][ C1] free_unref_folios+0xa7b/0x14f0 [ 1920.915407][ C1] folios_put_refs+0x587/0x7b0 [ 1920.920197][ C1] shmem_undo_range+0x586/0x1170 [ 1920.925155][ C1] shmem_evict_inode+0x3a3/0xba0 [ 1920.930111][ C1] evict+0x40c/0x960 [ 1920.934014][ C1] iput+0x52a/0x890 [ 1920.937827][ C1] do_unlinkat+0x5c3/0x760 [ 1920.942243][ C1] __x64_sys_unlink+0xc5/0x110 [ 1920.947008][ C1] do_syscall_64+0xcd/0x250 [ 1920.951527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.957438][ C1] [ 1920.959752][ C1] Memory state around the buggy address: [ 1920.965377][ C1] ffff88808592a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1920.973435][ C1] ffff88808592a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1920.981497][ C1] >ffff88808592a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1920.989557][ C1] ^ [ 1920.994170][ C1] ffff88808592a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1921.002238][ C1] ffff88808592a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1921.010294][ C1] ================================================================== [ 1921.018354][ C1] ================================================================== [ 1921.026434][ C1] BUG: KASAN: slab-use-after-free in register_lock_class+0xccf/0x1240 [ 1921.034634][ C1] Write of size 8 at addr ffff88808592a878 by task kworker/u8:1/12 [ 1921.042552][ C1] [ 1921.044898][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1921.057099][ C1] Tainted: [B]=BAD_PAGE [ 1921.061356][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1921.063049][T21021] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1921.071414][ C1] Workqueue: bat_events batadv_nc_worker [ 1921.071481][ C1] Call Trace: [ 1921.071495][ C1] [ 1921.071510][ C1] dump_stack_lvl+0x116/0x1f0 [ 1921.071566][ C1] print_report+0xc3/0x620 [ 1921.071609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.071676][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.071743][ C1] ? __phys_addr+0xc6/0x150 [ 1921.071801][ C1] kasan_report+0xd9/0x110 [ 1921.071843][ C1] ? register_lock_class+0xccf/0x1240 [ 1921.071894][ C1] ? register_lock_class+0xccf/0x1240 [ 1921.071949][ C1] register_lock_class+0xccf/0x1240 [ 1921.072002][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 1921.072058][ C1] __lock_acquire+0x135/0x3c40 [ 1921.072112][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1921.072158][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1921.072216][ C1] lock_acquire.part.0+0x11b/0x380 [ 1921.164764][ C1] ? __wake_up+0x1c/0x60 [ 1921.169031][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1921.174706][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.180374][ C1] ? rcu_is_watching+0x12/0xc0 [ 1921.185166][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.190836][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1921.196062][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1921.201459][ C1] ? __wake_up+0x1c/0x60 [ 1921.205711][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.211374][ C1] ? lock_acquire+0x2f/0xb0 [ 1921.215910][ C1] ? __wake_up+0x1c/0x60 [ 1921.220170][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 1921.225394][ C1] ? __wake_up+0x1c/0x60 [ 1921.229650][ C1] __wake_up+0x1c/0x60 [ 1921.233732][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 1921.239227][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 1921.244622][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 1921.249840][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.255529][ C1] dummy_timer+0x17f7/0x3960 [ 1921.260180][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.266059][ C1] ? mark_lock+0xb5/0xc60 [ 1921.270516][ C1] ? __pfx_lock_release+0x10/0x10 [ 1921.275594][ C1] ? lock_acquire+0x2f/0xb0 [ 1921.280138][ C1] ? debug_object_deactivate+0x13b/0x370 [ 1921.285828][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.291524][ C1] ? find_held_lock+0x2d/0x110 [ 1921.296339][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.302005][ C1] ? __hrtimer_run_queues+0x53d/0xae0 [ 1921.307400][ C1] ? __pfx_lock_release+0x10/0x10 [ 1921.312449][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1921.317413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.323250][ C1] ? mark_held_locks+0x9f/0xe0 [ 1921.328027][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1921.333855][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1921.338811][ C1] __hrtimer_run_queues+0x20d/0xae0 [ 1921.344040][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1921.349786][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.355457][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1921.360606][ C1] handle_softirqs+0x216/0x8f0 [ 1921.365401][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1921.370717][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.376408][ C1] __irq_exit_rcu+0x109/0x170 [ 1921.381108][ C1] irq_exit_rcu+0x9/0x30 [ 1921.385369][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1921.391022][ C1] [ 1921.393966][ C1] [ 1921.396893][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1921.402905][ C1] RIP: 0010:batadv_nc_process_nc_paths.part.0+0x304/0x3e0 [ 1921.410050][ C1] Code: c8 8c c6 05 4c fd 51 05 01 e8 78 28 80 f6 e9 10 fe ff ff e8 6e 1b a4 f6 e8 a9 a3 89 f6 31 ff 89 c3 89 c6 e8 3e 1d a4 f6 84 db <0f> 85 f8 fe ff ff e8 51 1b a4 f6 e8 7c 80 31 00 31 ff 89 c3 89 c6 [ 1921.429675][ C1] RSP: 0018:ffffc90000117b20 EFLAGS: 00000202 [ 1921.435766][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8af5f962 [ 1921.443742][ C1] RDX: ffff88801d6b5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 1921.451725][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1921.459723][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: dffffc0000000000 [ 1921.467717][ C1] R13: ffff88805d3e18a8 R14: 0000000000000064 R15: ffffffff8af5edb0 [ 1921.475733][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1921.481662][ C1] ? batadv_nc_process_nc_paths.part.0+0x302/0x3e0 [ 1921.488211][ C1] batadv_nc_worker+0xcc8/0x1060 [ 1921.493187][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1921.498588][ C1] ? rcu_is_watching+0x12/0xc0 [ 1921.503378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.509051][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1921.514291][ C1] ? process_one_work+0x921/0x1ba0 [ 1921.519431][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.525143][ C1] ? lock_acquire+0x2f/0xb0 [ 1921.529659][ C1] ? process_one_work+0x921/0x1ba0 [ 1921.534788][ C1] process_one_work+0x9c8/0x1ba0 [ 1921.539747][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1921.545151][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1921.550542][ C1] ? rcu_is_watching+0x12/0xc0 [ 1921.555329][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.560998][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1921.566666][ C1] ? assign_work+0x1a0/0x250 [ 1921.571272][ C1] worker_thread+0x6c8/0xf00 [ 1921.575885][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1921.581011][ C1] kthread+0x2c4/0x3a0 [ 1921.585102][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1921.590325][ C1] ? __pfx_kthread+0x10/0x10 [ 1921.594946][ C1] ret_from_fork+0x48/0x80 [ 1921.599374][ C1] ? __pfx_kthread+0x10/0x10 [ 1921.603986][ C1] ret_from_fork_asm+0x1a/0x30 [ 1921.608780][ C1] [ 1921.611795][ C1] [ 1921.614130][ C1] Allocated by task 5923: [ 1921.618449][ C1] kasan_save_stack+0x33/0x60 [ 1921.623130][ C1] kasan_save_track+0x14/0x30 [ 1921.627812][ C1] __kasan_kmalloc+0xaa/0xb0 [ 1921.632427][ C1] xpad_probe+0x27e/0x1f50 [ 1921.636881][ C1] usb_probe_interface+0x303/0x9c0 [ 1921.642006][ C1] really_probe+0x241/0xa90 [ 1921.646524][ C1] __driver_probe_device+0x1de/0x440 [ 1921.651828][ C1] driver_probe_device+0x4c/0x1b0 [ 1921.656869][ C1] __device_attach_driver+0x1df/0x310 [ 1921.662263][ C1] bus_for_each_drv+0x15a/0x1e0 [ 1921.667146][ C1] __device_attach+0x1e8/0x4b0 [ 1921.671930][ C1] bus_probe_device+0x17f/0x1c0 [ 1921.677052][ C1] device_add+0x114b/0x1a70 [ 1921.681577][ C1] usb_set_configuration+0x10cb/0x1c50 [ 1921.687045][ C1] usb_generic_driver_probe+0xb1/0x110 [ 1921.692529][ C1] usb_probe_device+0xef/0x3e0 [ 1921.697304][ C1] really_probe+0x241/0xa90 [ 1921.701824][ C1] __driver_probe_device+0x1de/0x440 [ 1921.707126][ C1] driver_probe_device+0x4c/0x1b0 [ 1921.712169][ C1] __device_attach_driver+0x1df/0x310 [ 1921.717565][ C1] bus_for_each_drv+0x15a/0x1e0 [ 1921.722425][ C1] __device_attach+0x1e8/0x4b0 [ 1921.727208][ C1] bus_probe_device+0x17f/0x1c0 [ 1921.732072][ C1] device_add+0x114b/0x1a70 [ 1921.736684][ C1] usb_new_device+0xd90/0x1a10 [ 1921.741455][ C1] hub_event+0x2d9a/0x4e10 [ 1921.745880][ C1] process_one_work+0x9c8/0x1ba0 [ 1921.750827][ C1] worker_thread+0x6c8/0xf00 [ 1921.755428][ C1] kthread+0x2c4/0x3a0 [ 1921.759523][ C1] ret_from_fork+0x48/0x80 [ 1921.763968][ C1] ret_from_fork_asm+0x1a/0x30 [ 1921.768753][ C1] [ 1921.771072][ C1] Freed by task 22678: [ 1921.775131][ C1] kasan_save_stack+0x33/0x60 [ 1921.779822][ C1] kasan_save_track+0x14/0x30 [ 1921.784500][ C1] kasan_save_free_info+0x3b/0x60 [ 1921.789549][ C1] __kasan_slab_free+0x51/0x70 [ 1921.794335][ C1] kfree+0x14f/0x4b0 [ 1921.798252][ C1] xpad_disconnect+0x1cf/0x580 [ 1921.803030][ C1] usb_unbind_interface+0x1e5/0x960 [ 1921.808244][ C1] device_remove+0x125/0x170 [ 1921.812849][ C1] device_release_driver_internal+0x44a/0x610 [ 1921.818937][ C1] bus_remove_device+0x22f/0x420 [ 1921.823894][ C1] device_del+0x396/0x9f0 [ 1921.828240][ C1] usb_disable_device+0x36c/0x7f0 [ 1921.833273][ C1] usb_disconnect+0x2e1/0x920 [ 1921.837955][ C1] hub_event+0x1da5/0x4e10 [ 1921.842383][ C1] process_one_work+0x9c8/0x1ba0 [ 1921.847331][ C1] worker_thread+0x6c8/0xf00 [ 1921.851933][ C1] kthread+0x2c4/0x3a0 [ 1921.856016][ C1] ret_from_fork+0x48/0x80 [ 1921.860458][ C1] ret_from_fork_asm+0x1a/0x30 [ 1921.865241][ C1] [ 1921.867560][ C1] The buggy address belongs to the object at ffff88808592a800 [ 1921.867560][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 1921.881622][ C1] The buggy address is located 120 bytes inside of [ 1921.881622][ C1] freed 1024-byte region [ffff88808592a800, ffff88808592ac00) [ 1921.895515][ C1] [ 1921.897833][ C1] The buggy address belongs to the physical page: [ 1921.904242][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x85928 [ 1921.913005][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1921.921681][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1921.929240][ C1] page_type: f5(slab) [ 1921.933245][ C1] raw: 00fff00000000040 ffff88801b041dc0 ffffea0000d26200 dead000000000002 [ 1921.941839][ C1] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1921.950433][ C1] head: 00fff00000000040 ffff88801b041dc0 ffffea0000d26200 dead000000000002 [ 1921.959121][ C1] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1921.967801][ C1] head: 00fff00000000003 ffffea0002164a01 ffffffffffffffff 0000000000000000 [ 1921.976478][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1921.985147][ C1] page dumped because: kasan: bad access detected [ 1921.991554][ C1] page_owner tracks the page as allocated [ 1921.997258][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 0, tgid 0 (swapper/1), ts 381264485995, free_ts 356668515303 [ 1922.015939][ C1] post_alloc_hook+0x2d1/0x350 [ 1922.020733][ C1] get_page_from_freelist+0xfce/0x2f80 [ 1922.026198][ C1] __alloc_pages_noprof+0x223/0x25b0 [ 1922.031494][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1922.036966][ C1] new_slab+0x2c9/0x410 [ 1922.041141][ C1] ___slab_alloc+0xd7d/0x17a0 [ 1922.045837][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 1922.051234][ C1] __kmalloc_noprof+0x2ec/0x510 [ 1922.056087][ C1] ieee802_11_parse_elems_full+0xea/0x1680 [ 1922.061910][ C1] ieee80211_inform_bss+0xfd/0x1100 [ 1922.067143][ C1] cfg80211_inform_single_bss_data+0x8fc/0x1df0 [ 1922.073392][ C1] cfg80211_inform_bss_data+0x205/0x3ba0 [ 1922.079043][ C1] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 1922.085136][ C1] ieee80211_bss_info_update+0x311/0xab0 [ 1922.090782][ C1] ieee80211_scan_rx+0x474/0xac0 [ 1922.095750][ C1] ieee80211_rx_list+0x1bd7/0x2970 [ 1922.100895][ C1] page last free pid 7309 tgid 7309 stack trace: [ 1922.107220][ C1] free_unref_folios+0xa7b/0x14f0 [ 1922.112267][ C1] folios_put_refs+0x587/0x7b0 [ 1922.117088][ C1] shmem_undo_range+0x586/0x1170 [ 1922.122050][ C1] shmem_evict_inode+0x3a3/0xba0 [ 1922.127009][ C1] evict+0x40c/0x960 [ 1922.130919][ C1] iput+0x52a/0x890 [ 1922.134739][ C1] do_unlinkat+0x5c3/0x760 [ 1922.139170][ C1] __x64_sys_unlink+0xc5/0x110 [ 1922.143964][ C1] do_syscall_64+0xcd/0x250 [ 1922.148490][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.154408][ C1] [ 1922.156729][ C1] Memory state around the buggy address: [ 1922.162357][ C1] ffff88808592a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1922.170423][ C1] ffff88808592a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1922.178488][ C1] >ffff88808592a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1922.186547][ C1] ^ [ 1922.194526][ C1] ffff88808592a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1922.202593][ C1] ffff88808592a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1922.210653][ C1] ================================================================== [ 1922.218709][ C1] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 1922.226427][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1922.238600][ C1] Tainted: [B]=BAD_PAGE [ 1922.242751][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1922.252813][ C1] Workqueue: bat_events batadv_nc_worker [ 1922.258483][ C1] Call Trace: [ 1922.261774][ C1] [ 1922.264627][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1922.269254][ C1] panic+0x71d/0x800 [ 1922.273200][ C1] ? __pfx_panic+0x10/0x10 [ 1922.277642][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.283305][ C1] ? lock_release+0x4e2/0x6f0 [ 1922.287993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.293672][ C1] end_report+0x169/0x180 [ 1922.298015][ C1] kasan_report+0xe9/0x110 [ 1922.302445][ C1] ? register_lock_class+0xccf/0x1240 [ 1922.307832][ C1] ? register_lock_class+0xccf/0x1240 [ 1922.313227][ C1] register_lock_class+0xccf/0x1240 [ 1922.318531][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 1922.324195][ C1] __lock_acquire+0x135/0x3c40 [ 1922.328978][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1922.334214][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1922.339436][ C1] lock_acquire.part.0+0x11b/0x380 [ 1922.344575][ C1] ? __wake_up+0x1c/0x60 [ 1922.348828][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1922.354477][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.360152][ C1] ? rcu_is_watching+0x12/0xc0 [ 1922.364968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.370634][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1922.375899][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1922.381299][ C1] ? __wake_up+0x1c/0x60 [ 1922.385561][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.391229][ C1] ? lock_acquire+0x2f/0xb0 [ 1922.395747][ C1] ? __wake_up+0x1c/0x60 [ 1922.400007][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 1922.405314][ C1] ? __wake_up+0x1c/0x60 [ 1922.409570][ C1] __wake_up+0x1c/0x60 [ 1922.413656][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 1922.419150][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 1922.424567][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 1922.429796][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.435493][ C1] dummy_timer+0x17f7/0x3960 [ 1922.440110][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.445795][ C1] ? mark_lock+0xb5/0xc60 [ 1922.450142][ C1] ? __pfx_lock_release+0x10/0x10 [ 1922.455192][ C1] ? lock_acquire+0x2f/0xb0 [ 1922.459712][ C1] ? debug_object_deactivate+0x13b/0x370 [ 1922.465449][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.471114][ C1] ? find_held_lock+0x2d/0x110 [ 1922.475907][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.481570][ C1] ? __hrtimer_run_queues+0x53d/0xae0 [ 1922.486970][ C1] ? __pfx_lock_release+0x10/0x10 [ 1922.492012][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1922.496972][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.502635][ C1] ? mark_held_locks+0x9f/0xe0 [ 1922.507414][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1922.513240][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1922.518200][ C1] __hrtimer_run_queues+0x20d/0xae0 [ 1922.523429][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1922.529176][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.534851][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1922.539991][ C1] handle_softirqs+0x216/0x8f0 [ 1922.544789][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1922.550110][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.555780][ C1] __irq_exit_rcu+0x109/0x170 [ 1922.560477][ C1] irq_exit_rcu+0x9/0x30 [ 1922.564737][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1922.570394][ C1] [ 1922.573324][ C1] [ 1922.576263][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1922.582283][ C1] RIP: 0010:batadv_nc_process_nc_paths.part.0+0x304/0x3e0 [ 1922.589430][ C1] Code: c8 8c c6 05 4c fd 51 05 01 e8 78 28 80 f6 e9 10 fe ff ff e8 6e 1b a4 f6 e8 a9 a3 89 f6 31 ff 89 c3 89 c6 e8 3e 1d a4 f6 84 db <0f> 85 f8 fe ff ff e8 51 1b a4 f6 e8 7c 80 31 00 31 ff 89 c3 89 c6 [ 1922.609063][ C1] RSP: 0018:ffffc90000117b20 EFLAGS: 00000202 [ 1922.615146][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8af5f962 [ 1922.623125][ C1] RDX: ffff88801d6b5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 1922.631101][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1922.639084][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: dffffc0000000000 [ 1922.647068][ C1] R13: ffff88805d3e18a8 R14: 0000000000000064 R15: ffffffff8af5edb0 [ 1922.655046][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1922.660714][ C1] ? batadv_nc_process_nc_paths.part.0+0x302/0x3e0 [ 1922.667256][ C1] batadv_nc_worker+0xcc8/0x1060 [ 1922.672227][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1922.677630][ C1] ? rcu_is_watching+0x12/0xc0 [ 1922.682421][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.688087][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1922.693316][ C1] ? process_one_work+0x921/0x1ba0 [ 1922.698443][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.704107][ C1] ? lock_acquire+0x2f/0xb0 [ 1922.708724][ C1] ? process_one_work+0x921/0x1ba0 [ 1922.713856][ C1] process_one_work+0x9c8/0x1ba0 [ 1922.718818][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1922.724224][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1922.729611][ C1] ? rcu_is_watching+0x12/0xc0 [ 1922.734402][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.740074][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1922.745735][ C1] ? assign_work+0x1a0/0x250 [ 1922.750339][ C1] worker_thread+0x6c8/0xf00 [ 1922.754950][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1922.760075][ C1] kthread+0x2c4/0x3a0 [ 1922.764163][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1922.769381][ C1] ? __pfx_kthread+0x10/0x10 [ 1922.773992][ C1] ret_from_fork+0x48/0x80 [ 1922.778419][ C1] ? __pfx_kthread+0x10/0x10 [ 1922.783034][ C1] ret_from_fork_asm+0x1a/0x30 [ 1922.787839][ C1] [ 1922.791070][ C1] Kernel Offset: disabled [ 1922.795395][ C1] Rebooting in 86400 seconds..