last executing test programs: 12m28.369242517s ago: executing program 0 (id=26): socket$unix(0x1, 0x5, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000180)={0x401, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000480), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nilfs2\x00', 0x0, 0x0) dup(r0) 12m26.028600522s ago: executing program 0 (id=31): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a859000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x205d57183b8f518c, 0x10000000000001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x800000, 0x33565348, 0x0, [], [0x0, 0x4]}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x2140) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x10004, 0x1, 0xeeee8000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xf, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='cachefiles_read\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x4, 0x300) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000002c0)={0x2, 0x9}) sendto$packet(r4, 0x0, 0x0, 0x20008000, &(0x7f0000000600)={0x11, 0xf8, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000083a00db8000000000000000000000000000bb20010000000000000000000000d500008f009078ab000000ad1f0403f214f59032629284021e0db584290299224a8b69688bc4d20d21239fcd40fcf6f28b7e242814600e380993ff03c7db8852358f12c2b30378d30fd0ba9d3ea4d38bcf85124d3d381b04388aa1f9f5eb6f6c1192caf4c4a394ac15d85d6965c741ef3fafeac3dcf7fbaf30aeaa5f47bb930579cc8afcd6b65ca4f03511aa528776efb0bad24fd1651d2900"/218], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 12m23.057780456s ago: executing program 0 (id=38): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x0, 0xfffffffb, 0x1000000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) acct(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x0, 0x220, 0x220, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010101, [0xffffffff, 0xff, 0xff000000], 0x4e23, 0x4e21, 0x4e22, 0x4e24, 0x2c0000, 0x28, 0x9, 0x0, 0x2}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x4, 0x0, [0xfffe, 0x2, 0x3, 0x81, 0x7, 0x1, 0x2a, 0x8065, 0x7, 0x7, 0x6, 0xff, 0x7, 0x1, 0x70]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffffff, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xffffff00], 'tunl0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x67, 0x2, 0x6, 0x18}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x84d4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='./file0\x00', 0x84000002) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x11c}}, 0x810) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x2b, 0x0, &(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) 12m22.864540727s ago: executing program 0 (id=40): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') modify_ldt$write(0x1, &(0x7f0000000000)={0x200, 0x100000, 0x400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 12m20.194685408s ago: executing program 0 (id=46): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018200000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 12m19.601565239s ago: executing program 0 (id=47): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0bdee5f4c95efa835f6bf197", 0xc) (async) listen(r0, 0x4007fff) (async) socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) (async) socket$netlink(0x10, 0x3, 0x4) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x805, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='hfs\x00', 0x10, &(0x7f0000000240)='\x00') (async) connect$tipc(r3, 0x0, 0x0) (async) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2) (async) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @mcast1, 0x6}}, 0x24) 12m4.61907563s ago: executing program 32 (id=47): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0bdee5f4c95efa835f6bf197", 0xc) (async) listen(r0, 0x4007fff) (async) socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) (async) socket$netlink(0x10, 0x3, 0x4) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x1e, 0x805, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='hfs\x00', 0x10, &(0x7f0000000240)='\x00') (async) connect$tipc(r3, 0x0, 0x0) (async) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x2) (async) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @mcast1, 0x6}}, 0x24) 6m40.103576341s ago: executing program 3 (id=1119): r0 = socket$packet(0x11, 0xa2d148e0376d264b, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x38, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x2000000, 0xa, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x80000000, 0x1}}, 0x20) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000340)='p', 0x1, 0xeffdffffffffffff}]) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000080)={0x2d, 0x2d, 0x5, 0x6, 0x7, 0xddb, 0x5, 0xfa, 0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) 6m39.789386572s ago: executing program 3 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') modify_ldt$write(0x1, &(0x7f0000000000)={0x200, 0x100000, 0x400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 6m38.957532165s ago: executing program 3 (id=1124): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000001500000d0000000c000300686173623a69700005000400000000000900020073797a31000000000c000780080008400200005305000500020000000500010006000000"], 0x50}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) 6m38.148598253s ago: executing program 3 (id=1131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0x20, 0x0, 0x0, 0x0}) r4 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_pktinfo(r4, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) 6m34.387737265s ago: executing program 3 (id=1143): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r0}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x800002, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x200000000080000) write$FUSE_INIT(r1, 0x0, 0x0) 6m33.933399014s ago: executing program 3 (id=1147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') modify_ldt$write(0x1, &(0x7f0000000000)={0x200, 0x100000, 0x400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 6m18.790742577s ago: executing program 33 (id=1147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') modify_ldt$write(0x1, &(0x7f0000000000)={0x200, 0x100000, 0x400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 4m44.139403176s ago: executing program 4 (id=1506): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002380), 0x80082, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xfffffffffffffca3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)=@userptr={0x0, 0x4, 0x4, 0x10000, 0x0, {}, {0x4, 0x2, 0x9, 0xf7, 0xe, 0xa, "0f23077d"}, 0xa, 0x2, {&(0x7f00000002c0)}, 0x200, 0x0, r2}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) ioprio_set$pid(0x0, 0x0, 0x2007) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x5, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000000, 0x3}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426", 0x28}], 0x1) 4m43.110500454s ago: executing program 4 (id=1513): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000880)=0xe) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x11, &(0x7f0000000100)="c51d0c421f", 0x5) write$binfmt_elf64(r2, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x7, 0x8, 0x0, 0x2, 0x3e, 0x1, 0x145, 0x40, 0xab, 0xa, 0x401, 0x38, 0x3, 0x81, 0x12, 0x2}, [{0x3, 0x2, 0xb, 0x1ff, 0x7, 0xd22, 0x4, 0x1}, {0x70000000, 0x0, 0x4, 0xada8, 0x4, 0x9, 0x4, 0x294}, {0x6474e551, 0x7fff, 0x7fffffff, 0x0, 0xe, 0x101, 0x688a, 0x401}], "cd7910daf45a78b6297736c24cedf8d8f0b1a3ae26a22445cd50977192f4336bc81cf2f7bea15c8b87a8205b1a5166ffbbb80f62b7291324a0e8e07fa7c9e34b4a41ac1edd672b5ace46f966536b79684e2148b4e5e7eae4aa3e2a7c041161f47cf08e6f474f49c9fe01331d239c477c82c3300878059820c6", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa61) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r6, 0xee72) sendfile(r5, r6, 0x0, 0x8000fffffffe) write$tun(r5, &(0x7f0000000640)={@val={0x0, 0x8100}, @val={0x0, 0x4, 0x1, 0x588, 0x780, 0x9}, @eth={@remote, @local, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x5, 0x1}}, {@generic={0x86dd, "fe4e30103230a3f059660311213f528166206a31d4bed7fd1b2965988375034c0f3cd8081d5235c3fcbc3317759e0c748d6228bd21435bc3d7f790970ec5558fb976b254f06ab5b3d71d714ad778a95b124dc0"}}}}, 0x77) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000180)={0x0, 0x14, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x0, 0x3, 0xd9, {0xd9, 0x2, "651d1b3b7adae44f54dad548f8cd893fddd714b894b793bcda022958a66982a13ce423536a0da2b1d1f8e903588bbe5c985f959b1663aeedcc2f33be4c8fb4453d6463bbbdf333c6df0315407b456f78fbf438025455cdafd3ba9e6ef7799cd93d4f2f5fde90e7aeceda7b23466bb9d80091b0eb5cd1caa59cd58a623ef660eed90f4e0ed991aca23ba4664e1d9b1e3a9a658f4ca0eafb345c45f3c52c07ab6ed6fe173bcc0ce6e503f88e2e24cb8eb80d75efef7fbbd869bc9fd54210ecdfb3d5184f152bfaa79014747c0d0c47e89bf5b226f0fc96b4"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x40, 0x17, 0x8c, "637d728632a2bfad8306b75f1dea785336829978793fb255cdd86b040c6649e0879f38a476c1aec2a00578a2489949176584a2e950fb69dead179da0803ecfc12ecfaad867977826f41a2e159b13c1b678ea524023da8fc8ad66bad3c90c9b0544873f3554a00c95276665fed857f3c7f55b4e8ecddda37b85aa156fc1477d4dcb786251f15202b585f2accc"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x81, 0x1, '6'}, &(0x7f00000004c0)={0x20, 0x82, 0x1, ' '}, &(0x7f0000000500)={0x20, 0x83, 0x2, "8130"}, &(0x7f0000000540)={0x20, 0x84, 0x4, "ab5df4b3"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "42da83"}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x422080, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x212080, 0x1a, 0x8}, 0x18) write(r7, &(0x7f0000000140)="8f1cdfa3346aac085fa0458d085698cc9950", 0x12) 4m39.665585015s ago: executing program 4 (id=1527): openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r0, 0x2}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000140)={r3, 0x7}, 0x8) 4m39.545434369s ago: executing program 4 (id=1528): r0 = add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="fb22342da1f86577d25acb83eef5bfa79a830c678480ad27fa38d3c831086e3c1265c6bf695b8e0ac964ea9a16e0b1e4d3abc38c4ee58ec524a524409c98fd2825ea13da9835b35063532fa4be15bdc827ab9cda61c2dac5c3a9fc74d3f5505994b79536d2346abe5838ffc9391a1de6d3106f", 0x73, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x22) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', r5, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r5, &(0x7f0000000280)='./file0\x00', r5, &(0x7f0000000200)='.\x00', 0x277) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000000c0)={0x0, 0x13, 0x49, "fc97acece623725d3d5a5d7f0433c4576f1338b83f9488c6369aebba0649be1270de8c11a241bb50c5a509b3e761162d04001fcb09e53e1f3e0d4dc7af404f7b8b2341d22fa21fe285"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x0, 0x0, 0x9}}) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESHEX=r4], 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="fb22342da1f86577d25acb83eef5bfa79a830c678480ad27fa38d3c831086e3c1265c6bf695b8e0ac964ea9a16e0b1e4d3abc38c4ee58ec524a524409c98fd2825ea13da9835b35063532fa4be15bdc827ab9cda61c2dac5c3a9fc74d3f5505994b79536d2346abe5838ffc9391a1de6d3106f", 0x73, 0xfffffffffffffffb) (async) pipe2$watch_queue(&(0x7f0000000280), 0x80) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x22) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) syz_usb_control_io(r4, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r6, &(0x7f0000000040)='.\x00', r5, &(0x7f0000000580)='./file0\x00', 0x0) (async) move_mount(r5, &(0x7f0000000280)='./file0\x00', r5, &(0x7f0000000200)='.\x00', 0x277) (async) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000000c0)={0x0, 0x13, 0x49, "fc97acece623725d3d5a5d7f0433c4576f1338b83f9488c6369aebba0649be1270de8c11a241bb50c5a509b3e761162d04001fcb09e53e1f3e0d4dc7af404f7b8b2341d22fa21fe285"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x0, 0x0, 0x9}}) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESHEX=r4], 0x8) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) (async) 4m37.640689073s ago: executing program 4 (id=1537): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 4m20.229598946s ago: executing program 4 (id=1540): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x0, 0xfffffffb, 0x1000000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) acct(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='./file0\x00', 0x84000002) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x11c}}, 0x810) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4m20.229340529s ago: executing program 34 (id=1540): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0x0, 0xfffffffb, 0x1000000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) acct(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='./file0\x00', 0x84000002) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x11c}}, 0x810) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca\xae\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce*\xa4\x8aJ$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\xfe\x1e\xb6\xf47u\xa7\x1c\xf5\"K\f\x03i\xba', 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 27.379933614s ago: executing program 5 (id=2342): r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0x7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000240)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x79f6ca1aba2f775d, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@dev}, {@in=@rand_addr=0x1, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffffd}, {0x0, 0x3188, 0x20}, {0x4}, 0x0, 0x0, 0x2, 0x0, 0x7}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x4c804) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x12, 0x610, 0x0, 0x202, 0x240, 0x2e8, 0x2e8, 0x240, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private2, @mcast2, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x4000003f, 0x0, 0x0, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 25.488636195s ago: executing program 5 (id=2348): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0500560000005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000f7000000000000000000002c"], 0xfdef) 25.287483274s ago: executing program 5 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = inotify_init1(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x40}, {0x6, 0x0, 0x40}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x7}}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "98d2f5", 0x10, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0xdcc1, 0x4a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) splice(r4, &(0x7f00000001c0)=0x1, r4, &(0x7f0000000280)=0x1, 0x99, 0x5) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000018140100000000000300000008000100000000000800030001"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff010000"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.62944037s ago: executing program 5 (id=2361): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200004000000000000000000000008500000039000000"], &(0x7f0000000280)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) 20.387561965s ago: executing program 5 (id=2364): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x3, 0x0, {0x11, 0x8, 0x0, 0x0, 0x6, 0x62, 0x1, 0x4, 0x1}}) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x0, 0x0) 18.974542003s ago: executing program 5 (id=2367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000200)) 4.863586795s ago: executing program 6 (id=2421): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r2, 0x0, 0x0, 0x0) 4.220841157s ago: executing program 2 (id=2424): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}}, 0x24}}, 0x0) close(r1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x4}}, 0x30) 3.593169368s ago: executing program 35 (id=2367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000200)) 3.549184472s ago: executing program 6 (id=2426): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000001c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe00, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8, 0x0, 0x1}, 0x18) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000240)={0x2, 0x4}, 0x2) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x20000000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "af20ef2647380be9", "ce7ae392b29ccb3f396c20bf277a4f6380326d5de7b5c5c7b8760630a72bc3d5", "d3af1db6", "10e0a087f3e187d8"}, 0x38) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x7}, 0x8) 3.548581518s ago: executing program 7 (id=2427): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) 3.531753287s ago: executing program 1 (id=2428): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002900000406e050c0100b9000000010902240001000000000904000002030043000921000000012207000905810300"], 0x0) shutdown(0xffffffffffffffff, 0x1) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) epoll_create1(0x80000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400405"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x62, 0x8, 0x0, 0xffffffffffffffff, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000180)={0x40, 0x0, 0x7, {0x7, 0x21, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.684799464s ago: executing program 2 (id=2429): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.389420684s ago: executing program 7 (id=2430): syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='g', 0x1}], 0x1}, 0x0) recvmmsg$unix(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) (async) recvmmsg$unix(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r4, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/38, 0x26}, 0x22) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45}}, 0x50) close(r2) (async) close(r2) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x1ff, 0x6}}, 0x28) 2.299775444s ago: executing program 2 (id=2431): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.176610692s ago: executing program 2 (id=2432): creat(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x11b0, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000003c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x197a, 0x4) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003540)=""/126, 0x7e}, 0xe2}], 0x400000000000160, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) 2.117374012s ago: executing program 7 (id=2433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x5b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setreuid(0xee00, 0xee00) fsopen(0x0, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ee2d010203010902120001000000000904000500b0871d00"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x10d, {}, {0xee01}, 0x9, 0x100000001}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x8000, 0xe0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x0, 0x2, 0x40, 0x0, 0x400001}, {0x0, 0x0, 0xff, 0xfe, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x4}, {0x7, 0x0, 0x0, 0x11, 0x5, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ec}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.865628936s ago: executing program 1 (id=2434): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/ip6_mr_vif\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pread64(r1, &(0x7f00000002c0)=""/130, 0x82, 0x1400000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r1}) getsockname$packet(r1, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14) bind$xdp(r3, &(0x7f00000009c0)={0x2c, 0x1, r6, 0x3d, r1}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r8, 0x0, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a0400"], 0x38}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0xc0844123, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000280)={0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r12, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x7b8}}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x30}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000851) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xb9}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x234, r12, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x168, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81fe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x710}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdb0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6d}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6a}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x949e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff8}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000800}, 0x48004) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x0, r1}) membarrier(0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000480)={&(0x7f0000000400)=[r5, r10, r11, r14, r15], &(0x7f0000000440)=[0x6647ce27, 0x10000, 0xe], 0x0, 0x5, 0x2}) 1.792840055s ago: executing program 6 (id=2435): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x400454a4, &(0x7f0000000080)) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1.657553412s ago: executing program 6 (id=2436): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r2, &(0x7f0000000740), 0x0, 0x0) 1.475291165s ago: executing program 1 (id=2437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(r2, 0xc0384707, 0x20000000) ioctl$TCFLSH(r2, 0x40384708, 0x20000000) r3 = socket$inet(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r4, &(0x7f0000000300)="7b9c350b63330f53b93053907461b2eb5330f25fdfa9ad1260d7c7139ee1832189650a09547c39cf593e040bc5cf009f20bde0c4b5ffd7f1bcf4d33b0b1cd106e733bb75a89b817bdad3da70696d0fbf5b5420d6e9d2483c6dfd06710d87623e9cdc0841fffcd3b56a8f2c514fb1bdf04bb33370a94a83e7bf24e7063072186b7531f1b5530879044936d31e56ba49bc426f1b7ed486678efbbfe82cb76e175fa30a71ed0a83187e369d0b7c51716f8be78bc601d5bc2e", 0xb7, 0x4, &(0x7f0000000200)={0xa, 0x4e21, 0x2, @mcast1, 0x8001}, 0x1c) sendmsg(r3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') getrlimit(0x9, &(0x7f0000000040)) read$FUSE(r5, &(0x7f0000012400)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='@-}\xe7-!*\x00', &(0x7f00000000c0)='-[\x00', 0x0) 1.387786105s ago: executing program 7 (id=2438): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "19893bbb"}, 0x0, 0x4, {0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x1, 0x7fff, 0x0, 0xffff8001}}, 0x50) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="290000000300000000000000000000000100000000000000080000000000000067726f75705f696400549f541a212eb774347a30f9c6ec545561c23382cb96243190b50526c8b64af7c9cc319c2c26d3514f407e6169d75403172a2a70a2bbbda917722a4f06ff047f0be6cfca091d716adca4a46be38acf128e0e67f246ea06f3fcda"], 0x29) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.113564326s ago: executing program 1 (id=2439): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x30040, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x596}}}}]}}]}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) flistxattr(r1, &(0x7f0000000100)=""/198, 0xc6) 1.11257396s ago: executing program 2 (id=2440): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101402, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000f80)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = fanotify_init(0x200, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000200)) chdir(&(0x7f0000000700)='./file0\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x59835a02}}, './file1\x00'}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000200)="ae2b8181ef0408ced093582e7614e5eb30183fad9617d3b90776821e7575ed6c4b4703bfc48973d1e26adf13", 0x2c}, {&(0x7f0000000480)="bbc9816251ef4df5aeadb445cbe6a40c5a81808b1b0d9aafff447e060c8014a9d01d0fe5e1720899f1b54d95d4026042194c703543eb54a11de0274f499dec44b02badd73012f0c9fd7ce4dbf38d5d8af8e3e505029eecd686e951abee92cc3db7feab40fa9380f9dd719428168aacd0510c2c40d487bb94141b40e112252570c914062ff7f85410f78b7988669d882e2ff5668e0eb6783940c2c544f945bd965603cebb17282127276b49e2094b957a66524d19e046c66e455d20a2a272f92ece53f1a0c28ebfd29962cde4a20564531df88f3ee5d69b5ada1e89bcd1ba682d0758bf5a3c463a47fe4f38fae802c019451f64857a", 0xf5}, {&(0x7f0000000240)="c8e95194118e710b216cb4c1d751793de5e620c4412719d46d67ad51fb71ba49181c53c784b1cff1ffdc10f0727c0a054e75985e462aa937", 0x38}, {&(0x7f0000000580)="ce8fc007e9d5f454fa377749d3fb59685cd502091842a8ad7a72d378be32048de94cb16404018313460c4752f87956af5fac60687d8715dc2c0e4e1c4ca651c8ff65e61c3127678efe630c580200000000000000811ac4a058afeb4ef3412c1c31979a3a2432787e04fddad79904e3b11a03eefdc5b751fc4a3ebd61939f070f08", 0x81}, {&(0x7f0000000280)="b1a1c406a3ffac09df69490053dbf72bb5a232d58c94f9b1e34b8f077a158da30d52c4fa21e6acaabbee170cdb220186d3764be363bf8451e680c80a955464b7ce0bec375293ed38b7a4b2a3bc8d72dd1e3b01b083fe82255c89dc1e671a", 0x5e}], 0x5, 0x0, 0x0, 0x24000040}}], 0x1, 0x4000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file1\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c756e616d653d2c69676e6f7265274a2b0bf5f270ff7c53762c64666c747569643df7ee4adebaee0e34c5f1ef970983fbaa52873a4742b02229594af428d814526d3e3bea470fab0b595e66c798e0846874b05df67cdf7893b90622c2de0da3f1e2484d39e16ab46716ed14f4a0538baef61a1ef1eaf141ce38c11f799749d646739e6b946f40302a3ae2d772fd4b2abb7542789de506756055e130a2adc5a34d790f62cdaeaa9de24b5b25bab28848ec5ec4f46f91ea42ad13109cdcfce71895cc15516bd67bad2ffb7649f769a1766a0200"/235, @ANYRESHEX, @ANYBLOB=',pcr=00000000000000000058,pcr=00000000000000000061,subj_user=//)&,:,defcontext=root,smackfshat=autofs\x00,\x00']) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x100) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r5, 0x8044610a, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$sndseq(r6, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) read$FUSE(r4, &(0x7f0000001b80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000f00)='./file2\x00', &(0x7f0000000f40)='system.posix_acl_default\x00', &(0x7f0000001580)={{}, {0x1, 0x1}, [{0x2, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x1}, {}, {}], {0x4, 0x3}, [{0x8, 0x7}, {0x8, 0x3}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x7}, {}, {0x8, 0x5, r7}, {0x8, 0x6, 0xee01}], {}, {0x20, 0x1}}, 0xa4, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="623154c49aee5dcb79a65eca90b08ef3db635f8a806999ca5424eb88b12e8a1c6a3bf6cd0310a2eb24b57cbdc586af8517cdd828cdd063072a68a241d02280f38b75743910d5b3bbb374e0474d7d103984f9c41cd508b00c3a364f368f799d9a591da3be49efe2ad05c116e4ee33ed786bf2573ee91cc1b48875cb144d7f2b98540109a4579afa144be41caf381c70c4da03b2977d53c0", @ANYRESDEC], 0x448}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000780)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e366dfd899a612b1b5c8df2cb153ac79fae2cb6c", 0x3f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000007c0)="23f8ec6ab536aa726d800de675fc6201c44e72fb51293b3c49f262624214e9f59b2fff1eef044c44886337a1165371925a65cf7de9e8b3b8f0c484ae08fcebdc0afb18914a470a9c735f3c2335ed1c2eab7d5aeb9589d4da968c3fd0e313e8b1ba6a7bf852bfff726a9d9b98cb4c61be6fdbd9b154a61b919b3bc6963c90dca97d1aa8e94f8321be758cdf3a55ce409d29679f09f2cc840353e1237b5ca353f5f7b0f4b07a7ce0f6dabbea76", 0xac}, {&(0x7f0000000880)="813f5a53cfe2b8ce7fd4767be997e10166dd190f535f859ad81abd83290eddb7c9947455b4cdce17fce3df5caa43df8801e1b88622d404347a999c5ac11a71cae8357b379b3405615093e2bf2f047d4d90fba253898aea5448764c5ede59636213555b284aeb84c56a795755013b7034da4a974acb64aefe3e4562340b0fbc86bc6e596203", 0x85}, {&(0x7f0000000940)="fda88c64bab55d5fb8e552df262c489513206d4b998b350a39f957a16a594aadf0b8a587a3b1335128865b5e4de3e67e251e18a704703bc2d400adaca814835699ad8fd01316d0493c9608dfbc626eaa", 0x50}, {&(0x7f00000009c0)="f2189386ce9a0b10baaff85776871c262da440f8ceeda608d0e80945a77c2e09845551e8374ca7dbfb83b7f5926d99e70daf715bfd322bfb486bdcbddbcf06a8ecc7ccfba186b7c39ad75df5d9fe90e9c96f616070a4014c1908578a5b8ad901", 0x60}, {&(0x7f0000000a40)="c6dd0a263e4163403c1f1dcbae098da4954bd01e0bceb184dd3e7df15df1e45fb0f23998f7427de71ccacacc502240ac2037bd22eac371e81be86cfe3a48a078aee0e03f00b78d288cce5db4205ce193d0d82d86a2e1166a8cb1ea", 0x5b}, {&(0x7f0000000e40)="1a839489110c92ccd908f8b4dc23892f51b574e22d32e6c157a004bc1a70c68cfca013351577f856b0771f23c817817ae9185a315e03ffcc9bac60c8dffc6b620f114deb42f18f2e000abe64721b6a9d0ecbf8fea62c7ac5f870b91bbfd2998b", 0x60}, {&(0x7f0000000b00)="668863a4a16585c8a515269bce130ffa147e63d89524a104f703f4eae7594962915d277a6b00f46671de1f3e086ed968693a9af2b722d34d43b668fd0b347fd9fbd21a6d0d04ac9c12f74f760acc3f2957a9a51fa05fade95b7eb34f8b6f231e3ea2fe990ca0550bd4dc8daf6cfc7d7701aebbd5ba1aeebcdf2032f9d8b52443a52a168a2a72dbb06a525d12f36d4789c66117cf53a84aa20281f5e5885079301d63e9cc32789f913f0017cb4c5be48c8000afc299c6228c925c0668fa0fe276525db90da9bd3e161bccdc44cd64ea4397d12585b35f1b56c45c402b29816788b4178737895b", 0xe6}, {&(0x7f0000000c00)="666e3571c5c7c76cd4ee7fadc2c4ba5e755e692a4c8c8aa59f179fb766027974fd5e706c619fe544c64148f7808cb2103b2947091aad9b2f1fb85c2f378efb4ea4f3ac8f6efcfb96e286add6c94ed84df0043d57af724aa32c0e9aa063cbe7d19950158cdb4896a9450eb075ecc10e0bbd01ded7fce5d2af2543b02f5b0ea641d106d075b91464170d8fa4a2dd885f507c58bbb8f052cf6039fa63b0b69ea6b1718ecce0e664959fa35c418673deb76e452163bbe034148468e7ce93ee7fa897dc8085ce51c0da918d08eb184b80f71b9b8bf1cd67b940525e0ad601", 0xdc}, {&(0x7f0000000d00)="c8b179d116039c860c9e2ed819776ec2f45a4acea2be484af48a0abe7cf6dd03738e270d7c4bc114a9ecd4aa224ccd19c8c4d26d70ba6640754db52e80654fec472cd3128a872e205b7ecc9d42997c6d0525e7032baa7c237acdd74edac35a94aac5", 0x62}], 0x9}}], 0x2, 0x0) 426.141625ms ago: executing program 1 (id=2441): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f000016f000/0x2000)=nil, 0x2000}}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {0x14}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x24}}, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0xfffe, 0xb5e, 0x4, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000200)={'veth0_to_bond\x00', @ifru_ivalue=0x5}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 425.285342ms ago: executing program 7 (id=2442): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 414.541864ms ago: executing program 6 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @private=0xa010101}}, [0x7, 0x4, 0x10001, 0xaf37, 0x6, 0x3, 0x1, 0x7ed, 0x80000000, 0xfb, 0x6, 0x6, 0xfffffffffffffff7, 0x7, 0x3ff]}, &(0x7f0000000040)=0x100) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) read(r4, &(0x7f0000000240)=""/235, 0xeb) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r6], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000100003052cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00005226337c6d79292e1d7ecf1b49126100006a090000"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 221.105743ms ago: executing program 2 (id=2444): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000001c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe00, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r8, 0x0, 0x1}, 0x18) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000240)={0x2, 0x4}, 0x2) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x20000000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "af20ef2647380be9", "ce7ae392b29ccb3f396c20bf277a4f6380326d5de7b5c5c7b8760630a72bc3d5", "d3af1db6", "10e0a087f3e187d8"}, 0x38) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x7}, 0x8) 95.625368ms ago: executing program 1 (id=2445): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x14002003ce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x81) mkdirat(r2, 0x0, 0x151) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xd371, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r4, 0xc0045878, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir}, {@xino_off}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) 63.244614ms ago: executing program 7 (id=2446): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigaction(0x40, &(0x7f0000000380)={0x0, 0x2, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000005c0)) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0xc942, 0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x989680}}, 0x0) r1 = gettid() tkill(r0, 0x19) tkill(r1, 0x14) 0s ago: executing program 6 (id=2447): r0 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000036dbeb5bcabc115", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r1, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x22) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x87, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711081050cebb731444fd60000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58010000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fedbdf2516000000580001800800030009000000080003000600000044000280080003000600000008000200040000000800020009200000080004000000000008000200010000b20800030051ea0000080003002f0c000008000200d00b00001800048014000780080002000700000008000300060000004c0004800c00078008000400090000001c0007800800030003000000080003000600000008000400040000001c00078008000300060d0000de080018000300000008000400060000000400078014000980080002000200000002803c000380080002000800000008000200000000000800020005000000080002000700000008000200ee00000008000200eccf000008000200050000000c00038008000100166d482c0400040010008a4d2d21aa8ddade2aa4cbbf83c676e007800c00040003f6592f4f00000014000380080002000700000008"], 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x800) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r6, 0x4028}], 0x1, &(0x7f0000000140), 0x0, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x8, &(0x7f0000000500), 0x4) kernel console output (not intermixed with test programs): ities [ 629.841302][T12766] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.851089][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.181395][T12766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.236643][T12766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.365512][T12766] veth0_vlan: left allmulticast mode [ 630.390335][T12766] vlan0: left allmulticast mode [ 630.518904][T12766] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.548646][T12766] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.579000][T12766] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.609373][T12766] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.936340][ T5822] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 630.944177][ T5822] Bluetooth: hci0: command 0x1407 tx timeout [ 631.566196][ C1] net_ratelimit: 28 callbacks suppressed [ 631.566220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.752346][T12779] fuse: Bad value for 'user_id' [ 631.757428][T12779] fuse: Bad value for 'user_id' [ 631.809514][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.818189][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.895671][T12784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.911879][ T5867] usb 2-1: USB disconnect, device number 41 [ 631.956263][T12786] No control pipe specified [ 632.012510][T12784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.074496][T12784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.099311][T12784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.206980][T12793] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 632.272030][ T5897] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 632.405109][T12802] NILFS (loop1): device size too small [ 632.606063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.927293][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.012597][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.021314][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.030178][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.038622][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.108299][ T5897] usb 7-1: config 3 has an invalid interface number: 179 but max is 0 [ 633.121578][ T5897] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 633.137338][ T5897] usb 7-1: config 3 has an invalid descriptor of length 147, skipping remainder of the config [ 633.341541][ T5897] usb 7-1: config 3 has no interface number 0 [ 633.348285][ T5897] usb 7-1: config 3 interface 179 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 633.359572][ T5897] usb 7-1: config 3 interface 179 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 633.371236][ T5897] usb 7-1: config 3 interface 179 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 633.382481][ T5897] usb 7-1: config 3 interface 179 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 633.393598][ T5897] usb 7-1: config 3 interface 179 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 633.404625][ T5897] usb 7-1: config 3 interface 179 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 633.416036][ T5897] usb 7-1: config 3 interface 179 altsetting 9 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 633.429571][ T5897] usb 7-1: config 3 interface 179 has no altsetting 0 [ 633.441670][ T5897] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=7f.7b [ 633.451193][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.459836][ T5897] usb 7-1: Product: 䀊 [ 633.464623][ T5897] usb 7-1: Manufacturer: ᰁ [ 633.473830][T12777] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 633.646118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.689092][T12777] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1783'. [ 633.733733][ T5897] usb 7-1: USB disconnect, device number 14 [ 634.998272][T12843] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1800'. [ 635.315832][T12849] NILFS (loop7): device size too small [ 635.467879][ T5868] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 635.727415][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 635.992078][ T5868] usb 6-1: unable to get BOS descriptor or descriptor too short [ 636.006279][ T5897] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 636.031336][ T5868] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 636.054119][ T5868] usb 6-1: can't read configurations, error -71 [ 636.085356][T12854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1803'. [ 636.156805][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 636.184165][ T5897] usb 7-1: unable to get BOS descriptor or descriptor too short [ 636.212925][ T5897] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 636.224661][ T5897] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 636.238949][ T5897] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 636.255563][ T5897] usb 7-1: config 128 has no interface number 0 [ 636.269205][T12859] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 636.272782][ T5897] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 636.299396][ T5897] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.309720][ T5897] usb 7-1: config 128 interface 127 has no altsetting 0 [ 636.325643][ T5897] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 636.335102][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.349488][ T5897] usb 7-1: Product: syz [ 636.435442][ T5897] usb 7-1: Manufacturer: syz [ 636.448089][ T5897] usb 7-1: SerialNumber: syz [ 636.766138][ C1] net_ratelimit: 13 callbacks suppressed [ 636.766168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.088510][T12866] netlink: 'syz.1.1808': attribute type 10 has an invalid length. [ 637.191861][T12866] syz_tun: entered promiscuous mode [ 637.359102][T12871] fuse: Bad value for 'rootmode' [ 637.375507][T12871] 9pnet_fd: Insufficient options for proto=fd [ 637.421989][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.855160][ T5897] usb 7-1: USB disconnect, device number 15 [ 637.908427][T12866] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 638.061668][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.131789][ T29] audit: type=1326 audit(1737301766.749:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12873 comm="syz.2.1811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f992ab85d29 code=0x0 [ 638.768037][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.937765][T12879] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1813'. [ 639.491605][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.819598][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.898596][T12902] NILFS (loop5): device size too small [ 640.855912][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.259662][ T3429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.597159][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 641.624868][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 641.646355][T12928] netlink: 'syz.2.1822': attribute type 14 has an invalid length. [ 641.655984][T12928] netlink: 'syz.2.1822': attribute type 11 has an invalid length. [ 641.711078][T12932] sp0: Synchronizing with TNC [ 641.886433][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.988532][ T29] audit: type=1326 audit(1737301770.609:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12940 comm="syz.5.1827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa459385d29 code=0x0 [ 642.300410][T12949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.309926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.523288][T12953] NILFS (loop1): device size too small [ 643.155294][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.165623][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.186458][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.496201][ T5897] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 643.636712][ T5868] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 643.803937][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 644.027878][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 644.235991][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.259917][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.309321][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.331211][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.342127][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.352292][ T5868] usb 2-1: config 245 has an invalid descriptor of length 0, skipping remainder of the config [ 644.362913][ T5868] usb 2-1: config 245 has 0 interfaces, different from the descriptor's value: 3 [ 644.372417][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.384834][ T5868] usb 2-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= 6.62 [ 644.394108][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.395417][ T5897] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 644.406302][ T5868] usb 2-1: Product: syz [ 644.415812][ T5868] usb 2-1: Manufacturer: syz [ 644.420965][ T5868] usb 2-1: SerialNumber: syz [ 644.442698][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.470499][ T5897] usb 6-1: config 0 descriptor?? [ 644.638888][T12955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.654042][T12955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.704883][T12955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.715285][T12955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.922174][ T5897] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 644.940339][ T5897] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 644.944489][ T5868] usb 2-1: USB disconnect, device number 42 [ 646.311279][ T29] audit: type=1326 audit(1737301774.929:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12985 comm="syz.2.1839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f992ab85d29 code=0x0 [ 647.201865][ T11] net_ratelimit: 2 callbacks suppressed [ 647.201892][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.337267][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.356155][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 647.414266][ T5897] arvo 0003:1E7D:30D4.0015: couldn't init struct arvo_device [ 647.447919][ T5897] arvo 0003:1E7D:30D4.0015: couldn't install keyboard [ 647.497443][ T5897] arvo 0003:1E7D:30D4.0015: probe with driver arvo failed with error -71 [ 647.566476][ T5897] usb 6-1: USB disconnect, device number 45 [ 647.692998][T13000] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 648.206086][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 648.389189][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.246094][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 649.829137][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.837989][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.876792][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.296046][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 650.299760][ T29] audit: type=1326 audit(1737301778.919:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13031 comm="syz.2.1852" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f992ab85d29 code=0x0 [ 650.889892][T13047] atomic_op ffff888055d2c198 conn xmit_atomic 0000000000000000 [ 652.076541][T11986] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 652.216999][T11986] usb 6-1: device descriptor read/64, error -71 [ 652.366025][ C1] net_ratelimit: 3 callbacks suppressed [ 652.366047][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 652.386497][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.428699][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 652.436081][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 652.466829][T11986] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 653.215496][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.237509][T13065] ceph: No mds server is up or the cluster is laggy [ 653.248985][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.266095][T11986] usb 6-1: device descriptor read/64, error -71 [ 653.388881][T11986] usb usb6-port1: attempt power cycle [ 653.416336][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 653.813831][T13082] ebtables: ebtables: counters copy to user failed while replacing table [ 654.446025][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 654.476655][T11986] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 654.502157][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.611426][T11986] usb 6-1: device descriptor read/8, error -71 [ 654.951771][T13096] 9pnet_fd: Insufficient options for proto=fd [ 654.979218][ T29] audit: type=1326 audit(1737301783.589:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13097 comm="syz.6.1870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe286b85d29 code=0x0 [ 655.134953][T13100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.327411][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.276159][T11986] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 656.406192][T11986] usb 7-1: device descriptor read/64, error -71 [ 656.519169][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1878'. [ 656.676727][T11986] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 656.846516][T11986] usb 7-1: device descriptor read/64, error -71 [ 657.022500][T11986] usb usb7-port1: attempt power cycle [ 657.382361][T11986] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 657.438438][T11986] usb 7-1: device descriptor read/8, error -71 [ 657.489587][ T3494] net_ratelimit: 5 callbacks suppressed [ 657.489611][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.528617][T13130] IPv4: Oversized IP packet from 127.202.26.0 [ 657.566040][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 657.653982][T13131] FAULT_INJECTION: forcing a failure. [ 657.653982][T13131] name failslab, interval 1, probability 0, space 0, times 0 [ 657.654212][T13131] CPU: 0 UID: 0 PID: 13131 Comm: syz.1.1881 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 657.654241][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 657.654254][T13131] Call Trace: [ 657.654260][T13131] [ 657.654267][T13131] dump_stack_lvl+0x241/0x360 [ 657.654294][T13131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.654310][T13131] ? __pfx__printk+0x10/0x10 [ 657.654326][T13131] ? __kmalloc_cache_noprof+0x48/0x390 [ 657.654341][T13131] ? __pfx___might_resched+0x10/0x10 [ 657.654359][T13131] ? lockdep_init_map_type+0xa1/0x910 [ 657.654377][T13131] should_fail_ex+0x3b0/0x4e0 [ 657.654393][T13131] should_failslab+0xac/0x100 [ 657.654413][T13131] __kmalloc_cache_noprof+0x70/0x390 [ 657.654431][T13131] ? drm_atomic_state_alloc+0xa6/0x100 [ 657.654452][T13131] drm_atomic_state_alloc+0xa6/0x100 [ 657.654467][T13131] drm_client_modeset_commit_atomic+0xda/0x7d0 [ 657.654486][T13131] ? __mutex_lock+0x37f/0xee0 [ 657.654509][T13131] ? __pfx_lock_release+0x10/0x10 [ 657.654521][T13131] ? rcu_is_watching+0x15/0xb0 [ 657.654537][T13131] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 657.654550][T13131] ? trace_contention_end+0x3c/0x120 [ 657.654577][T13131] ? __pfx___mutex_lock+0x10/0x10 [ 657.654601][T13131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 657.654624][T13131] drm_client_modeset_commit_locked+0xe0/0x520 [ 657.654641][T13131] drm_fb_helper_pan_display+0x379/0xc10 [ 657.654661][T13131] ? fb_pan_display+0x380/0x680 [ 657.654680][T13131] fb_pan_display+0x3a3/0x680 [ 657.654691][T13131] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 657.654712][T13131] bit_update_start+0x4d/0x1c0 [ 657.654727][T13131] fbcon_modechanged+0xb7b/0x1200 [ 657.654752][T13131] do_fb_ioctl+0x71b/0x7b0 [ 657.654769][T13131] ? __pfx_do_fb_ioctl+0x10/0x10 [ 657.654796][T13131] ? __asan_memset+0x23/0x50 [ 657.654810][T13131] ? smack_file_ioctl+0x29e/0x3a0 [ 657.654824][T13131] ? __pfx_smack_file_ioctl+0x10/0x10 [ 657.654839][T13131] ? __fget_files+0x2a/0x410 [ 657.654854][T13131] ? __fget_files+0x2a/0x410 [ 657.654868][T13131] ? __pfx_fb_ioctl+0x10/0x10 [ 657.654884][T13131] __se_sys_ioctl+0xf5/0x170 [ 657.654900][T13131] do_syscall_64+0xf3/0x230 [ 657.654911][T13131] ? clear_bhb_loop+0x35/0x90 [ 657.654926][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.654943][T13131] RIP: 0033:0x7f5dfa585d29 [ 657.654957][T13131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.654967][T13131] RSP: 002b:00007f5dfb458038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.654983][T13131] RAX: ffffffffffffffda RBX: 00007f5dfa776080 RCX: 00007f5dfa585d29 [ 657.654992][T13131] RDX: 0000000020001080 RSI: 0000000000004601 RDI: 0000000000000003 [ 657.655001][T13131] RBP: 00007f5dfb458090 R08: 0000000000000000 R09: 0000000000000000 [ 657.655009][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.655017][T13131] R13: 0000000000000000 R14: 00007f5dfa776080 R15: 00007ffcdea853b8 [ 657.655036][T13131] [ 657.927385][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.420660][T11986] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 658.486360][T11986] usb 7-1: device descriptor read/8, error -71 [ 658.606121][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 658.695296][T11986] usb usb7-port1: unable to enumerate USB device [ 658.724171][T13141] vivid-007: disconnect [ 658.730431][T13141] 9pnet_fd: Insufficient options for proto=fd [ 658.738705][T13142] 9pnet_fd: Insufficient options for proto=fd [ 659.027194][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.516877][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.529298][T13133] vivid-007: reconnect [ 659.656054][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 659.917973][T13153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.971466][T13153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.046253][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.116115][ T5868] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 660.306313][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 660.322750][T13158] overlayfs: failed to resolve './file0': -2 [ 660.326360][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.362029][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1890'. [ 660.491244][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.542032][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.659338][ T5868] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 660.686047][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 660.766366][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.845745][ T5868] usb 7-1: config 0 descriptor?? [ 660.913532][ T5868] usb 7-1: can't set config #0, error -71 [ 660.981257][ T5868] usb 7-1: USB disconnect, device number 20 [ 661.836558][ T973] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 661.979095][ T973] usb 7-1: device descriptor read/64, error -71 [ 662.046377][T11986] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 662.216101][T11986] usb 3-1: Using ep0 maxpacket: 16 [ 662.222388][T11986] usb 3-1: too many configurations: 158, using maximum allowed: 8 [ 662.240021][T11986] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 242 [ 662.258613][T11986] usb 3-1: can't read configurations, error -22 [ 662.376047][ T973] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 662.426226][T11986] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 662.516484][ T973] usb 7-1: device descriptor read/64, error -71 [ 662.526261][ T5897] net_ratelimit: 4 callbacks suppressed [ 662.526282][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.540399][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.596273][T11986] usb 3-1: Using ep0 maxpacket: 16 [ 662.605344][T11986] usb 3-1: too many configurations: 158, using maximum allowed: 8 [ 662.615428][T11986] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 242 [ 662.624508][T11986] usb 3-1: can't read configurations, error -22 [ 662.631421][T11986] usb usb3-port1: attempt power cycle [ 662.637352][ T973] usb usb7-port1: attempt power cycle [ 662.766016][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 662.976192][T11986] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 662.998423][T11986] usb 3-1: Using ep0 maxpacket: 16 [ 663.004527][T11986] usb 3-1: too many configurations: 158, using maximum allowed: 8 [ 663.014628][T11986] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 242 [ 663.026047][T11986] usb 3-1: can't read configurations, error -22 [ 663.032612][ T973] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 663.076843][ T973] usb 7-1: device descriptor read/8, error -71 [ 663.166236][T11986] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 663.166574][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.201012][T11986] usb 3-1: Using ep0 maxpacket: 16 [ 663.210863][T11986] usb 3-1: too many configurations: 158, using maximum allowed: 8 [ 663.240397][T11986] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 242 [ 663.266324][T11986] usb 3-1: can't read configurations, error -22 [ 663.286438][T11986] usb usb3-port1: unable to enumerate USB device [ 663.316045][ T973] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 663.367355][ T973] usb 7-1: device descriptor read/8, error -71 [ 663.487495][ T973] usb usb7-port1: unable to enumerate USB device [ 663.764805][T13199] FAULT_INJECTION: forcing a failure. [ 663.764805][T13199] name failslab, interval 1, probability 0, space 0, times 0 [ 663.781604][T13199] CPU: 0 UID: 0 PID: 13199 Comm: syz.1.1904 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 663.792455][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 663.802560][T13199] Call Trace: [ 663.805866][T13199] [ 663.808824][T13199] dump_stack_lvl+0x241/0x360 [ 663.813550][T13199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.818809][T13199] ? __pfx__printk+0x10/0x10 [ 663.823469][T13199] ? fs_reclaim_acquire+0x93/0x130 [ 663.828651][T13199] ? __pfx___might_resched+0x10/0x10 [ 663.834013][T13199] should_fail_ex+0x3b0/0x4e0 [ 663.836436][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 663.838712][T13199] should_failslab+0xac/0x100 [ 663.850383][T13199] __kmalloc_noprof+0xdd/0x4c0 [ 663.855160][T13199] ? tomoyo_encode+0x26f/0x540 [ 663.859929][T13199] tomoyo_encode+0x26f/0x540 [ 663.864527][T13199] tomoyo_realpath_from_path+0x59e/0x5e0 [ 663.870168][T13199] tomoyo_path_number_perm+0x236/0x860 [ 663.875625][T13199] ? __lock_acquire+0x1397/0x2100 [ 663.880671][T13199] ? tomoyo_path_number_perm+0x206/0x860 [ 663.886317][T13199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 663.892334][T13199] ? __fget_files+0x2a/0x410 [ 663.896941][T13199] ? __fget_files+0x2a/0x410 [ 663.901563][T13199] security_file_ioctl+0xc6/0x2a0 [ 663.906613][T13199] __se_sys_ioctl+0x46/0x170 [ 663.911225][T13199] do_syscall_64+0xf3/0x230 [ 663.915730][T13199] ? clear_bhb_loop+0x35/0x90 [ 663.920414][T13199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.926316][T13199] RIP: 0033:0x7f5dfa585d29 [ 663.930771][T13199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.950495][T13199] RSP: 002b:00007f5dfb479038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.958921][T13199] RAX: ffffffffffffffda RBX: 00007f5dfa775fa0 RCX: 00007f5dfa585d29 [ 663.966892][T13199] RDX: 0000000020000040 RSI: 00000000c0045002 RDI: 0000000000000003 [ 663.974862][T13199] RBP: 00007f5dfb479090 R08: 0000000000000000 R09: 0000000000000000 [ 663.982830][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.990824][T13199] R13: 0000000000000000 R14: 00007f5dfa775fa0 R15: 00007ffcdea853b8 [ 663.998816][T13199] [ 664.022472][T13199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.206475][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.496439][ T973] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 664.814930][T13209] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1909'. [ 664.826287][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 664.833199][ T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.846025][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 664.853421][ T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.865449][ T973] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.875116][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.892164][ T973] usb 2-1: Product: syz [ 664.897867][ T973] usb 2-1: Manufacturer: syz [ 664.902727][ T973] usb 2-1: SerialNumber: syz [ 665.228311][ T973] usb 2-1: 0:2 : does not exist [ 665.281943][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.644284][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.647213][T13221] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.662122][T13221] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.670898][T13221] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.680051][T13221] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.896025][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 666.068014][ T973] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 666.145824][T13224] FAULT_INJECTION: forcing a failure. [ 666.145824][T13224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.174212][T13224] CPU: 1 UID: 0 PID: 13224 Comm: syz.5.1915 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 666.185154][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 666.196317][T13224] Call Trace: [ 666.199644][T13224] [ 666.202653][T13224] dump_stack_lvl+0x241/0x360 [ 666.211092][T13224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.217463][T13224] ? __pfx__printk+0x10/0x10 [ 666.222902][T13224] ? __pfx_lock_release+0x10/0x10 [ 666.230582][T13224] should_fail_ex+0x3b0/0x4e0 [ 666.236361][T13224] _copy_from_iter+0x1e9/0x1c20 [ 666.242423][T13224] ? skb_set_owner_w+0x246/0x380 [ 666.248814][T13224] ? __pfx__copy_from_iter+0x10/0x10 [ 666.255901][T13224] ? __pfx__copy_from_iter+0x10/0x10 [ 666.263155][T13224] ? page_copy_sane+0x154/0x260 [ 666.268446][T13224] copy_page_from_iter+0x7a/0x100 [ 666.274724][T13224] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 666.281036][T13224] packet_sendmsg+0x4465/0x6a40 [ 666.296384][T13224] ? smack_socket_sendmsg+0x1bb/0x540 [ 666.302317][T13224] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 666.311141][T13224] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 666.324325][T13224] ? __pfx_packet_sendmsg+0x10/0x10 [ 666.331426][T13224] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 666.340422][T13224] ? __fget_files+0x2a/0x410 [ 666.345481][T13224] ? __might_fault+0xaa/0x120 [ 666.353190][T13224] ? __pfx_packet_sendmsg+0x10/0x10 [ 666.360386][T13224] __sock_sendmsg+0x221/0x270 [ 666.365999][T13224] __sys_sendto+0x363/0x4c0 [ 666.372349][T13224] ? __pfx___sys_sendto+0x10/0x10 [ 666.378918][T13224] ? __mutex_unlock_slowpath+0x21e/0x790 [ 666.386154][T13224] ? __fget_files+0x2a/0x410 [ 666.393727][T13224] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 666.403007][T13224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 666.410014][T13224] __x64_sys_sendto+0xde/0x100 [ 666.415781][T13224] do_syscall_64+0xf3/0x230 [ 666.421518][T13224] ? clear_bhb_loop+0x35/0x90 [ 666.427718][T13224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.434732][T13224] RIP: 0033:0x7fa459385d29 [ 666.440122][T13224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.463531][T13224] RSP: 002b:00007fa45a1b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 666.473129][T13224] RAX: ffffffffffffffda RBX: 00007fa459575fa0 RCX: 00007fa459385d29 [ 666.482272][T13224] RDX: 000000000001000a RSI: 0000000020000180 RDI: 0000000000000005 [ 666.492672][T13224] RBP: 00007fa45a1b9090 R08: 0000000020000140 R09: 0000000000000014 [ 666.501722][T13224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 666.510528][T13224] R13: 0000000000000000 R14: 00007fa459575fa0 R15: 00007fff1d5c2ce8 [ 666.518638][T13224] [ 666.790491][ T973] usb 2-1: USB disconnect, device number 43 [ 666.964815][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1921'. [ 667.134116][ T29] audit: type=1326 audit(1737301795.749:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.2.1925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f992ab85d29 code=0x0 [ 667.167072][ T5868] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 667.184512][T13252] geneve2: entered promiscuous mode [ 667.306167][ T5868] usb 7-1: device descriptor read/64, error -71 [ 667.606704][ T5868] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 667.746700][ T5868] usb 7-1: device descriptor read/64, error -71 [ 667.872785][ T5868] usb usb7-port1: attempt power cycle [ 667.976045][ C1] net_ratelimit: 3 callbacks suppressed [ 667.976069][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 668.043549][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.174588][ T3429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.334074][T13269] FAULT_INJECTION: forcing a failure. [ 668.334074][T13269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.348549][T13269] CPU: 0 UID: 0 PID: 13269 Comm: syz.1.1931 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 668.360147][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 668.370410][T13269] Call Trace: [ 668.374780][T13269] [ 668.377903][T13269] dump_stack_lvl+0x241/0x360 [ 668.383690][T13269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.390419][T13269] ? __pfx__printk+0x10/0x10 [ 668.396259][T13269] ? snprintf+0xda/0x120 [ 668.401775][T13269] should_fail_ex+0x3b0/0x4e0 [ 668.406496][T13269] _copy_to_user+0x31/0xb0 [ 668.411340][T13269] simple_read_from_buffer+0xca/0x150 [ 668.417641][T13269] proc_fail_nth_read+0x1e9/0x250 [ 668.423311][T13269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.430421][T13269] ? rw_verify_area+0x55e/0x6f0 [ 668.436866][T13269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.442913][T13269] vfs_read+0x1fc/0xb70 [ 668.447817][T13269] ? __pfx_vfs_read+0x10/0x10 [ 668.452928][T13269] ? smack_file_ioctl+0x2f7/0x3a0 [ 668.459372][T13269] ? __pfx_smack_file_ioctl+0x10/0x10 [ 668.465243][T13269] ksys_read+0x18f/0x2b0 [ 668.469535][T13269] ? __pfx_ksys_read+0x10/0x10 [ 668.474456][T13269] ? do_syscall_64+0x100/0x230 [ 668.479891][T13269] ? do_syscall_64+0xb6/0x230 [ 668.484633][T13269] do_syscall_64+0xf3/0x230 [ 668.489156][T13269] ? clear_bhb_loop+0x35/0x90 [ 668.494302][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.501059][T13269] RIP: 0033:0x7f5dfa58473c [ 668.505735][T13269] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 668.526059][T13269] RSP: 002b:00007f5dfb479030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 668.535755][T13269] RAX: ffffffffffffffda RBX: 00007f5dfa775fa0 RCX: 00007f5dfa58473c [ 668.544372][T13269] RDX: 000000000000000f RSI: 00007f5dfb4790a0 RDI: 0000000000000006 [ 668.552983][T13269] RBP: 00007f5dfb479090 R08: 0000000000000000 R09: 0000000000000000 [ 668.561158][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.571225][T13269] R13: 0000000000000000 R14: 00007f5dfa775fa0 R15: 00007ffcdea853b8 [ 668.581259][T13269] [ 668.603986][ T5868] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 668.640972][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1934'. [ 668.845413][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.943672][ T5868] usb 7-1: device descriptor read/8, error -71 [ 669.006047][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 669.121369][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.966923][ T5868] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 670.046047][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 670.198093][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.096142][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 671.578699][ T5868] usb 7-1: device descriptor read/8, error -71 [ 671.746065][T13303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.068274][ T5868] usb usb7-port1: unable to enumerate USB device [ 673.069592][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1946'. [ 673.128025][ T5867] net_ratelimit: 10 callbacks suppressed [ 673.128047][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.176034][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 673.913842][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.206040][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 674.929528][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.156704][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.246101][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 675.348320][T13338] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1949'. [ 675.426193][ T5874] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 675.566121][ T5874] usb 7-1: device descriptor read/64, error -71 [ 676.286063][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 676.400466][ T5874] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 676.655205][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.296393][ T5874] usb 7-1: device descriptor read/64, error -71 [ 677.336070][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 677.406679][ T5874] usb usb7-port1: attempt power cycle [ 677.651449][T13372] dummy0: entered promiscuous mode [ 677.669666][T13372] dummy0: left promiscuous mode [ 677.766345][ T5874] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 677.801066][ T5874] usb 7-1: device descriptor read/8, error -71 [ 678.016671][T13384] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1963'. [ 678.257764][ T5874] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 678.274624][ T5898] net_ratelimit: 2 callbacks suppressed [ 678.274648][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.366310][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 678.636174][ T5822] Bluetooth: hci0: command 0x1407 tx timeout [ 678.743656][ T5874] usb 7-1: device not accepting address 32, error -71 [ 678.753863][ T5874] usb usb7-port1: unable to enumerate USB device [ 679.365850][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.406076][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 679.683008][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.367168][ T6352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.377903][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.397294][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.408606][T13410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 680.419528][T13410] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 680.446049][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 680.497563][T13409] kAFS: unparsable volume name [ 680.517957][T13410] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 680.524723][T13410] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 680.542144][T13410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 680.550123][T13410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 680.556723][T13410] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 680.966241][ T973] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 681.345585][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.746114][ T973] usb 6-1: device descriptor read/64, error -71 [ 682.257503][ T973] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 682.450736][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 682.535733][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 682.606218][ T5822] Bluetooth: hci0: command 0x1407 tx timeout [ 682.614955][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 682.776539][ T973] usb 6-1: device descriptor read/64, error -71 [ 683.216439][T13449] o2cb: This node has not been configured. [ 683.260417][T13449] o2cb: Cluster check failed. Fix errors before retrying. [ 683.312672][T13449] (syz.6.1982,13449,0):user_dlm_register:674 ERROR: status = -22 [ 683.341747][T13449] (syz.6.1982,13449,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 683.486362][ T11] net_ratelimit: 6 callbacks suppressed [ 683.486385][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.555491][ T973] usb usb6-port1: attempt power cycle [ 683.566038][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 683.714190][T13462] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 683.773089][T13462] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1984'. [ 684.585307][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.595473][T13350] Bluetooth: hci3: command 0x0406 tx timeout [ 684.607215][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 684.636132][T13350] Bluetooth: hci5: command 0x0406 tx timeout [ 684.666738][ T5874] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 684.689885][T13350] Bluetooth: hci0: command 0x1407 tx timeout [ 684.726076][ T5832] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 684.776267][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.026309][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 685.053481][ T5832] usb 2-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 685.091238][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.105991][ T5832] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 685.118826][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.155156][ T5832] usb 2-1: New USB device found, idVendor=061d, idProduct=a150, bcdDevice=ce.6f [ 685.241649][ T5874] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 685.266761][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.281943][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 685.291228][ T5832] usb 2-1: Product: syz [ 685.295752][ T5832] usb 2-1: Manufacturer: syz [ 685.306338][ T5874] usb 3-1: SerialNumber: syz [ 685.320040][ T5832] usb 2-1: SerialNumber: syz [ 685.425704][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.444358][ T5832] usb 2-1: config 0 descriptor?? [ 685.646015][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 685.755252][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.765231][ T5874] usb 3-1: 0:2 : does not exist [ 685.793431][ T5874] usb 3-1: USB disconnect, device number 49 [ 686.061631][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.425689][T13491] fuse: Bad value for 'rootmode' [ 686.433488][T13491] 9pnet_fd: Insufficient options for proto=fd [ 686.686240][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 687.288106][ T5832] usb 2-1: USB disconnect, device number 44 [ 688.505995][ T5898] net_ratelimit: 3 callbacks suppressed [ 688.506016][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.766271][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 689.002970][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.263687][ T3494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.663157][T13507] dccp_invalid_packet: P.Data Offset(4) too small [ 689.806036][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 690.247665][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.322310][T13514] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 690.726280][ T5898] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 690.846071][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 690.891299][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2000'. [ 690.898578][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.920290][ T5898] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.932059][ T5898] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 690.934507][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2000'. [ 690.943695][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.982806][ T5898] usb 3-1: config 0 descriptor?? [ 691.195511][ T3429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.744970][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.895580][T13522] o2cb: This node has not been configured. [ 691.913317][T13522] o2cb: Cluster check failed. Fix errors before retrying. [ 691.926403][T13522] (syz.6.2004,13522,0):user_dlm_register:674 ERROR: status = -22 [ 691.955274][T13522] (syz.6.2004,13522,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 693.966092][ C1] net_ratelimit: 4 callbacks suppressed [ 693.966115][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 694.035136][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.126545][T13558] misc userio: The device must be registered before sending interrupts [ 694.143596][T13558] sctp: [Deprecated]: syz.6.2012 (pid 13558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.143596][T13558] Use struct sctp_sack_info instead [ 694.932111][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.006105][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 695.029832][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.052479][ T973] usb 3-1: USB disconnect, device number 50 [ 695.069141][T13563] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 695.095998][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.097515][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2013'. [ 695.129601][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 695.146219][T13563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2015'. [ 695.492492][T13564] syz.7.2010: attempt to access beyond end of device [ 695.492492][T13564] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 695.563626][T13568] overlayfs: missing 'workdir' [ 696.046021][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 696.136960][T13564] EXT4-fs (loop7): unable to read superblock [ 696.153160][T13569] ptrace attach of ""[13572] was attempted by "./syz-executor exec"[13569] [ 696.333633][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.369721][T13573] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2016'. [ 696.938193][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.086105][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 697.516097][ T29] audit: type=1326 audit(1737301826.129:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.539293][ T29] audit: type=1326 audit(1737301826.129:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.572335][ T29] audit: type=1326 audit(1737301826.179:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.598965][ T29] audit: type=1326 audit(1737301826.179:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.624448][ T29] audit: type=1326 audit(1737301826.179:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.654416][ T29] audit: type=1326 audit(1737301826.179:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.677334][ T29] audit: type=1326 audit(1737301826.179:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.701139][ T29] audit: type=1326 audit(1737301826.179:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.723444][ T29] audit: type=1326 audit(1737301826.179:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 697.723482][ T29] audit: type=1326 audit(1737301826.179:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13590 comm="syz.6.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe286b85d29 code=0x7ffc0000 [ 698.721673][T13610] sctp: [Deprecated]: syz.2.2024 (pid 13610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 698.721673][T13610] Use struct sctp_sack_info instead [ 699.166113][ C1] net_ratelimit: 4 callbacks suppressed [ 699.166144][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 699.870419][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.071797][T13613] ubi0: attaching mtd0 [ 700.188688][T13613] ubi0: scanning is finished [ 700.193399][T13613] ubi0: empty MTD device detected [ 700.206024][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 700.262928][T13621] Bluetooth: MGMT ver 1.23 [ 700.460799][T13624] netlink: 'syz.1.2028': attribute type 26 has an invalid length. [ 700.614223][T13613] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 700.647908][T13613] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 700.674295][T13613] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 700.682264][T13613] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 700.691596][T13613] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 700.724917][T13613] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 700.768325][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.963533][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 700.999805][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.009910][T13613] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2308664112 [ 701.034456][T13613] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 701.047716][T13626] ubi0: background thread "ubi_bgt0d" started, PID 13626 [ 701.246035][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 701.687568][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.286014][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 702.313556][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.769942][ T3429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.292071][ T973] net_ratelimit: 1 callbacks suppressed [ 704.292100][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.366033][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 705.406029][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 705.469357][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.514500][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.792578][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2039'. [ 706.446027][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 706.534577][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.542868][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.131815][T13695] vivid-007: disconnect [ 707.171380][T13695] 9pnet_fd: Insufficient options for proto=fd [ 707.479529][T13690] vivid-007: reconnect [ 707.496049][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 707.632089][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.832821][T13705] loop7: detected capacity change from 0 to 16384 [ 708.366509][T13706] loop7: detected capacity change from 16384 to 16383 [ 709.406477][ T5898] net_ratelimit: 2 callbacks suppressed [ 709.406501][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.424370][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.566072][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 710.616070][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 710.768885][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.846255][T13716] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2054'. [ 711.647105][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 711.647492][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.930399][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.446312][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.686038][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 712.896461][ T5832] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 712.941213][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'. [ 713.060461][ T5832] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 713.097885][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 713.165237][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 713.214953][ T5832] usb 2-1: SerialNumber: syz [ 713.248118][ T5832] usb 2-1: bad CDC descriptors [ 713.487801][T11986] usb 2-1: USB disconnect, device number 45 [ 713.985396][T13749] misc userio: The device must be registered before sending interrupts [ 713.995224][T13749] sctp: [Deprecated]: syz.6.2063 (pid 13749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 713.995224][T13749] Use struct sctp_sack_info instead [ 714.766079][ C1] net_ratelimit: 4 callbacks suppressed [ 714.766103][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 714.816981][T13760] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2066'. [ 714.838370][T13755] vivid-007: disconnect [ 714.845631][T13755] vivid-007: reconnect [ 715.178075][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.535609][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.806043][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 716.433999][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.846027][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 717.413702][ T9535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.462345][T13838] FAULT_INJECTION: forcing a failure. [ 717.462345][T13838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.500623][T13838] CPU: 0 UID: 0 PID: 13838 Comm: syz.5.2078 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 717.514980][T13838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 717.525877][T13838] Call Trace: [ 717.527669][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.530205][T13838] [ 717.543104][T13838] dump_stack_lvl+0x241/0x360 [ 717.548007][T13838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.553779][T13838] ? __pfx__printk+0x10/0x10 [ 717.559447][T13838] ? snprintf+0xda/0x120 [ 717.564975][T13838] should_fail_ex+0x3b0/0x4e0 [ 717.572149][T13838] _copy_to_user+0x31/0xb0 [ 717.579161][T13838] simple_read_from_buffer+0xca/0x150 [ 717.586823][T13838] proc_fail_nth_read+0x1e9/0x250 [ 717.594620][T13838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.604141][T13838] ? rw_verify_area+0x55e/0x6f0 [ 717.611952][T13838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.620441][T13838] vfs_read+0x1fc/0xb70 [ 717.625601][T13838] ? __pfx___mutex_lock+0x10/0x10 [ 717.632329][T13838] ? __pfx_vfs_read+0x10/0x10 [ 717.637683][T13838] ? __fget_files+0x2a/0x410 [ 717.644448][T13838] ? __fget_files+0x395/0x410 [ 717.649621][T13838] ? __fget_files+0x2a/0x410 [ 717.654369][T13838] ksys_read+0x18f/0x2b0 [ 717.658670][T13838] ? __pfx_ksys_read+0x10/0x10 [ 717.663680][T13838] ? do_syscall_64+0x100/0x230 [ 717.668844][T13838] ? do_syscall_64+0xb6/0x230 [ 717.674177][T13838] do_syscall_64+0xf3/0x230 [ 717.678715][T13838] ? clear_bhb_loop+0x35/0x90 [ 717.684830][T13838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.691128][T13838] RIP: 0033:0x7fa45938473c [ 717.696145][T13838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 717.716748][T13838] RSP: 002b:00007fa45a177030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.726791][T13838] RAX: ffffffffffffffda RBX: 00007fa459576160 RCX: 00007fa45938473c [ 717.734940][T13838] RDX: 000000000000000f RSI: 00007fa45a1770a0 RDI: 0000000000000006 [ 717.743056][T13838] RBP: 00007fa45a177090 R08: 0000000000000000 R09: 0000000000000000 [ 717.751083][T13838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.759189][T13838] R13: 0000000000000000 R14: 00007fa459576160 R15: 00007fff1d5c2ce8 [ 717.767407][T13838] [ 717.886030][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 717.911168][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2075'. [ 718.084409][T13843] vivid-007: disconnect [ 718.526460][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.553067][T13840] vivid-007: reconnect [ 718.632007][T13848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2079'. [ 719.873631][ T5832] net_ratelimit: 3 callbacks suppressed [ 719.873653][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.976075][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 720.364188][T13876] binder: BINDER_SET_CONTEXT_MGR already set [ 720.401064][T13876] binder: 13875:13876 ioctl 4018620d 20000040 returned -16 [ 720.969511][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.006041][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 721.670519][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.679532][T13902] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2093'. [ 722.046069][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 722.277604][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.086124][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 723.170527][ T9535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.375452][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.806676][ T5874] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 724.578841][ T5874] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.595056][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 724.609966][ T5874] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.624875][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.671697][ T5874] usb 7-1: Product: syz [ 724.684904][T13935] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2103'. [ 724.836878][ T5874] usb 7-1: Manufacturer: syz [ 724.852025][ T5874] usb 7-1: SerialNumber: syz [ 725.166034][ C1] net_ratelimit: 4 callbacks suppressed [ 725.166057][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 725.526764][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.537894][T13935] /dev/sg0: Can't lookup blockdev [ 725.788929][T13922] netlink: 'syz.6.2098': attribute type 11 has an invalid length. [ 725.823774][T13945] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2105'. [ 726.206138][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 726.447695][T13961] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2107'. [ 726.631407][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.246040][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 727.806524][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.877440][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.889829][ T5874] usb 7-1: 0:2 : does not exist [ 727.902418][ T5874] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 728.286067][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 728.988572][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.031231][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.056152][ T5874] usb 7-1: USB disconnect, device number 33 [ 729.494906][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2113'. [ 729.893745][T13997] fuse: Bad value for 'rootmode' [ 729.901781][T13997] 9pnet_fd: Insufficient options for proto=fd [ 729.919188][T13996] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 729.926397][T13996] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 729.993301][T13996] vhci_hcd vhci_hcd.0: Device attached [ 730.034199][T13998] vhci_hcd: connection closed [ 730.040590][ T32] vhci_hcd: stop threads [ 730.081977][ T32] vhci_hcd: release socket [ 730.105710][ T32] vhci_hcd: disconnect device [ 730.207276][ T6352] net_ratelimit: 1 callbacks suppressed [ 730.207300][ T6352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.232682][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.296134][ T25] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 730.366060][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 730.558417][ T25] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 730.569273][ T25] usb 6-1: config 0 has no interface number 0 [ 730.598915][ T25] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 730.629396][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.656099][ T25] usb 6-1: Product: syz [ 730.666269][ T25] usb 6-1: Manufacturer: syz [ 730.675569][ T25] usb 6-1: SerialNumber: syz [ 730.687545][T14001] fuse: Bad value for 'rootmode' [ 730.694816][T14001] 9pnet_fd: Insufficient options for proto=fd [ 730.710730][ T25] usb 6-1: config 0 descriptor?? [ 730.925875][ T25] usb 6-1: USB disconnect, device number 53 [ 731.106146][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.343643][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.358709][T14012] netlink: 'syz.7.2121': attribute type 2 has an invalid length. [ 731.406065][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 731.861388][T14019] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 732.337510][T14029] misc userio: Invalid payload size [ 732.366275][ T25] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 732.446067][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 733.177539][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.352837][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2126'. [ 733.363255][T14029] openvswitch: netlink: EtherType 50a is less than min 600 [ 733.486024][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 733.618088][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.705595][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 734.718882][ T25] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 734.732356][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.747943][ T25] usb 2-1: config 0 descriptor?? [ 734.757316][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 735.008999][ T25] usb 2-1: USB disconnect, device number 46 [ 735.063029][T14046] loop2: detected capacity change from 0 to 7 [ 735.113465][T14046] Dev loop2: unable to read RDB block 7 [ 735.125726][T14046] loop2: unable to read partition table [ 735.137802][T14046] loop2: partition table beyond EOD, truncated [ 735.145637][T14046] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 735.454160][T14061] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 735.566049][ C1] net_ratelimit: 6 callbacks suppressed [ 735.566074][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 736.426076][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 736.440564][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.606097][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 737.533387][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.548487][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.646074][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 738.686033][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 738.762438][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.173537][ T25] usb 3-1: device descriptor read/all, error -71 [ 739.280795][T14091] netlink: 'syz.7.2144': attribute type 12 has an invalid length. [ 739.616170][ T5924] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 739.726028][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 739.776230][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 739.802114][ T5924] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 739.829447][ T5924] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 739.840270][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.844067][ T5924] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 739.891987][ T5924] usb 6-1: config 250 has no interface number 0 [ 739.900076][ T5924] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 739.929668][ T5924] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 739.945118][ T5924] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 739.963758][ T5924] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 739.982077][ T5924] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 740.006234][ T5924] usb 6-1: config 250 interface 228 has no altsetting 0 [ 740.015886][ T5924] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 740.032002][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 740.040989][ T5924] usb 6-1: Product: syz [ 740.045194][ T5924] usb 6-1: SerialNumber: syz [ 740.065894][ T5924] hub 6-1:250.228: bad descriptor, ignoring hub [ 740.081293][ T5924] hub 6-1:250.228: probe with driver hub failed with error -5 [ 740.383756][ T5924] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 740.766034][ C1] net_ratelimit: 1 callbacks suppressed [ 740.766058][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 740.811623][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.862580][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.951330][ T5897] usb 6-1: USB disconnect, device number 54 [ 740.965547][ T5897] usblp0: removed [ 740.977940][T14113] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 741.806408][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 741.960655][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.971072][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.159324][T14124] binder: 14118:14124 ioctl c0306201 20000940 returned -14 [ 742.366201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.626368][T11986] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 742.846151][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 742.847969][T11986] usb 7-1: Using ep0 maxpacket: 16 [ 742.910535][T11986] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.935685][T11986] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 743.201255][T11986] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 743.210957][T11986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.219122][T11986] usb 7-1: Product: syz [ 743.223575][T11986] usb 7-1: Manufacturer: syz [ 743.228519][T11986] usb 7-1: SerialNumber: syz [ 743.886032][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 744.066250][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.313797][T11986] usb 7-1: 0:2 : does not exist [ 744.328461][T11986] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 745.331328][T14077] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 745.372074][T11986] usb 7-1: USB disconnect, device number 34 [ 745.966053][ C1] net_ratelimit: 5 callbacks suppressed [ 745.966103][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 746.143337][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.152311][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.206795][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.490128][T14150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2158'. [ 746.534242][T13350] Bluetooth: hci5: unexpected event for opcode 0x040e [ 746.759075][T14077] usb 6-1: device not accepting address 55, error -71 [ 747.006039][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 747.165997][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.385256][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.394594][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.403015][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.416836][T14164] vivid-007: disconnect [ 747.422208][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.468225][T14164] 9pnet_fd: Insufficient options for proto=fd [ 747.635241][T14165] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 748.141495][T14161] vivid-007: reconnect [ 749.587290][ T5897] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 750.195077][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 750.224929][ T5897] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 750.243627][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 750.284391][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.317512][T14191] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 750.328227][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.366579][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 751.046449][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 751.055180][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.071309][T14077] net_ratelimit: 9 callbacks suppressed [ 751.071334][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.146674][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.155341][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.164318][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.173353][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 751.317944][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 751.331581][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.340856][ T5868] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 751.476799][ T25] usb 2-1: Product: syz [ 751.500760][ T25] usb 2-1: Manufacturer: syz [ 751.542728][ T25] usb 2-1: SerialNumber: syz [ 751.606026][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 751.620451][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.761132][ T5868] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 751.860199][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 751.899903][ T25] usb 2-1: 0:2 : does not exist [ 751.910079][ T5868] usb 7-1: SerialNumber: syz [ 751.931368][ T25] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 751.953636][ T5868] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 751.970045][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.985298][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.206297][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 752.927422][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.946526][ T5868] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 752.953651][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.219276][ T5868] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 753.248672][ T25] usb 2-1: USB disconnect, device number 47 [ 753.256071][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 753.365143][ T5897] usb 3-1: USB disconnect, device number 53 [ 753.405609][ T973] usb 7-1: USB disconnect, device number 35 [ 753.410697][T14232] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 753.916094][T11986] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 754.218824][T11986] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 754.241832][T11986] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 754.273139][T11986] usb 3-1: config 1 interface 0 has no altsetting 0 [ 754.323344][T11986] usb 3-1: string descriptor 0 read error: -22 [ 754.331588][T11986] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 754.348992][T11986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.385107][T14240] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 754.404595][T14240] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 754.450340][T11986] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 754.859185][T11986] usb 3-1: USB disconnect, device number 54 [ 756.366063][ C1] net_ratelimit: 9 callbacks suppressed [ 756.366087][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 756.473030][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.473584][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.607176][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.277179][ T25] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 757.285002][ T973] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 757.369938][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.406416][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 757.419694][T14284] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2194'. [ 757.696784][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.709400][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.728837][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.934991][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 757.943173][ T973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.955806][ T973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 757.965667][ T25] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 757.977501][ T25] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 757.987669][ T25] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 757.997098][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.008036][ T973] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 758.018609][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.027766][ T973] usb 6-1: Product: syz [ 758.031996][ T973] usb 6-1: Manufacturer: syz [ 758.037328][ T973] usb 6-1: SerialNumber: syz [ 758.073456][T14278] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 758.101338][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.376780][ T973] usb 6-1: 0:2 : does not exist [ 758.446027][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 759.078788][ T973] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 759.120212][ T973] usb 6-1: USB disconnect, device number 57 [ 759.163031][T14303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2199'. [ 760.709291][ T973] usb 7-1: USB disconnect, device number 36 [ 761.566143][ C1] net_ratelimit: 16 callbacks suppressed [ 761.566171][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 762.349867][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.606230][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 763.017434][T14340] misc userio: The device must be registered before sending interrupts [ 763.039484][T14340] sctp: [Deprecated]: syz.2.2206 (pid 14340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 763.039484][T14340] Use struct sctp_sack_info instead [ 763.237760][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.246340][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.493875][ T3429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.646054][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 763.678006][T14345] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 763.737020][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.195814][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.696012][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 765.766085][ T5874] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 766.742847][ T973] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 766.766165][ C1] net_ratelimit: 7 callbacks suppressed [ 766.766200][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 766.766426][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.786439][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.805011][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.049816][ T5874] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 767.060469][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.071064][ T5874] usb 2-1: config 0 descriptor?? [ 767.080164][ T5874] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 767.138508][ T973] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 767.156160][ T973] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 767.170998][ T973] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 767.189367][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.287761][T14368] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 767.314510][ T973] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 767.816214][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 768.008761][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.055091][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.112083][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2225'. [ 768.207838][T14396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.217667][T14396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.226778][T14396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.406133][T14398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 768.415832][T14398] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 769.166806][T14364] netlink: 'syz.1.2217': attribute type 29 has an invalid length. [ 769.320572][T14381] tty tty34: ldisc open failed (-12), clearing slot 33 [ 769.358199][T14077] usb 7-1: USB disconnect, device number 37 [ 769.399767][ T5874] usb 2-1: USB disconnect, device number 48 [ 770.936829][ T5897] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 771.161036][T14077] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 771.236234][ T5898] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 771.258009][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 771.291151][ T5897] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 771.360577][T14077] usb 3-1: Using ep0 maxpacket: 16 [ 771.429498][T14077] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.502201][ T5897] usb 6-1: config 0 has no interface number 0 [ 771.616958][T14077] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 771.664313][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.779805][ T25] net_ratelimit: 14 callbacks suppressed [ 771.779829][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.789477][ T5897] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 771.794052][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.821370][ T5898] usb 2-1: config 0 has no interface number 0 [ 771.832902][T14077] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 771.848892][ T5898] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 771.867886][T14077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.876281][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.884311][ T5897] usb 6-1: Product: syz [ 771.910589][ T5898] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 771.924422][T14077] usb 3-1: Product: syz [ 771.931225][ T5897] usb 6-1: Manufacturer: syz [ 771.936410][T14077] usb 3-1: Manufacturer: syz [ 771.941056][T14077] usb 3-1: SerialNumber: syz [ 771.947333][ T5897] usb 6-1: SerialNumber: syz [ 771.952440][ T5898] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 771.966095][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 771.980081][ T5897] usb 6-1: config 0 descriptor?? [ 771.997110][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.020049][ T5897] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 772.043415][ T5898] usb 2-1: config 0 descriptor?? [ 772.075025][T14422] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 772.093129][ T5898] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 772.126383][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.181082][T14077] usb 3-1: 0:2 : does not exist [ 772.192932][T14077] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 772.227989][T14077] usb 3-1: USB disconnect, device number 55 [ 772.286256][ T5822] Bluetooth: hci0: command 0x1407 tx timeout [ 772.299811][T13350] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 772.429110][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.446728][T14077] usb 2-1: USB disconnect, device number 49 [ 772.447456][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.806924][ T5874] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 772.848425][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.856671][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.857000][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.990409][ T5874] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 773.006036][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 773.026128][ T5874] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 773.036943][ T5874] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 773.046998][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.058900][T14441] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 773.069670][ T5874] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 773.417841][T14455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.470215][T14455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.513925][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.552134][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.568687][ T5897] gspca_topro: reg_w err -71 [ 773.596257][ T5897] gspca_topro: Sensor soi763a [ 773.623905][ T5897] usb 6-1: USB disconnect, device number 58 [ 773.839324][T14461] FAULT_INJECTION: forcing a failure. [ 773.839324][T14461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.866382][T14461] CPU: 1 UID: 0 PID: 14461 Comm: syz.1.2244 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 773.879492][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 773.891192][T14461] Call Trace: [ 773.895668][T14461] [ 773.899535][T14461] dump_stack_lvl+0x241/0x360 [ 773.904869][T14461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.911967][T14461] ? __pfx__printk+0x10/0x10 [ 773.917982][T14461] ? snprintf+0xda/0x120 [ 773.923315][T14461] should_fail_ex+0x3b0/0x4e0 [ 773.928655][T14461] _copy_to_user+0x31/0xb0 [ 773.933645][T14461] simple_read_from_buffer+0xca/0x150 [ 773.940657][T14461] proc_fail_nth_read+0x1e9/0x250 [ 773.946907][T14461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.953129][T14461] ? rw_verify_area+0x55e/0x6f0 [ 773.959203][T14461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.967477][T14461] vfs_read+0x1fc/0xb70 [ 773.974590][T14461] ? __pfx___mutex_lock+0x10/0x10 [ 773.980835][T14461] ? __pfx_vfs_read+0x10/0x10 [ 773.986606][T14461] ? __fget_files+0x2a/0x410 [ 773.993152][T14461] ? __fget_files+0x395/0x410 [ 773.997884][T14461] ? __fget_files+0x2a/0x410 [ 774.002750][T14461] ksys_read+0x18f/0x2b0 [ 774.008948][T14461] ? __pfx_ksys_read+0x10/0x10 [ 774.014980][T14461] ? do_syscall_64+0x100/0x230 [ 774.021946][T14461] ? do_syscall_64+0xb6/0x230 [ 774.026848][T14461] do_syscall_64+0xf3/0x230 [ 774.031847][T14461] ? clear_bhb_loop+0x35/0x90 [ 774.037004][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.042954][T14461] RIP: 0033:0x7f5dfa58473c [ 774.047561][T14461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 774.070625][T14461] RSP: 002b:00007f5dfb479030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 774.082962][T14461] RAX: ffffffffffffffda RBX: 00007f5dfa775fa0 RCX: 00007f5dfa58473c [ 774.093060][T14461] RDX: 000000000000000f RSI: 00007f5dfb4790a0 RDI: 0000000000000004 [ 774.103110][T14461] RBP: 00007f5dfb479090 R08: 0000000000000000 R09: 0000000000000000 [ 774.111543][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.121047][T14461] R13: 0000000000000000 R14: 00007f5dfa775fa0 R15: 00007ffcdea853b8 [ 774.132381][T14461] [ 776.079628][T14484] tipc: Trying to set illegal importance in message [ 776.282103][T14482] program syz.2.2252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.670725][ T5897] usb 7-1: USB disconnect, device number 38 [ 776.813804][ T5868] net_ratelimit: 17 callbacks suppressed [ 776.813828][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.246040][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 777.435837][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.888973][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.225793][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.286059][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 778.710853][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.722058][T14503] netlink: 'syz.7.2257': attribute type 4 has an invalid length. [ 778.749287][T14503] netlink: 'syz.7.2257': attribute type 4 has an invalid length. [ 778.926428][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.982461][T14509] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2256'. [ 779.326021][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 779.574914][ T25] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 779.914222][ T5868] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 780.283027][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.648060][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.658871][ T5868] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 780.670180][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.683837][ T5868] usb 7-1: config 0 descriptor?? [ 780.694478][ T5868] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 780.708753][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 780.738825][ T25] usb 6-1: config 1 interface 0 has no altsetting 0 [ 780.766925][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=00b9, bcdDevice= 0.40 [ 780.781813][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.797597][ T25] usb 6-1: Product: 〉 [ 780.809176][T14504] can0: slcan on ttyS3. [ 780.819024][ T25] usb 6-1: Manufacturer: Ц [ 780.826466][ T25] usb 6-1: SerialNumber:   [ 780.927416][T11986] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 781.008515][T14501] can0 (unregistered): slcan off ttyS3. [ 781.099588][T11986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.148757][T11986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.194121][T11986] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 781.244788][T11986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.274458][T11986] usb 3-1: config 0 descriptor?? [ 781.551315][ T25] usbhid 6-1:1.0: can't add hid device: -71 [ 781.566534][ T25] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 781.602454][ T25] usb 6-1: USB disconnect, device number 59 [ 781.727784][T11986] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 781.759328][T11986] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0016/input/input20 [ 782.446248][ C1] net_ratelimit: 9 callbacks suppressed [ 782.446275][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 782.700844][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.711123][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.887229][T11986] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 782.984187][T11986] usb 3-1: USB disconnect, device number 56 [ 783.256415][ T5898] usb 7-1: USB disconnect, device number 39 [ 783.441450][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.462393][T14555] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2271'. [ 783.486095][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 783.624328][T14566] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 783.734347][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.876663][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.526031][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 784.695993][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.815819][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.187151][T14588] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 785.747144][ T5898] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 786.234801][T14604] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2282'. [ 786.935976][ T5898] usb 7-1: not running at top speed; connect to a high speed hub [ 786.944961][ T5898] usb 7-1: config 7 has an invalid interface number: 164 but max is 0 [ 786.969991][ T5898] usb 7-1: config 7 has no interface number 0 [ 787.058126][ T5898] usb 7-1: config 7 interface 164 has no altsetting 0 [ 787.180165][ T5898] usb 7-1: New USB device found, idVendor=1e2d, idProduct=004a, bcdDevice=f3.d1 [ 787.193723][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.205163][ T5898] usb 7-1: Product: Ѕ [ 787.211362][ T5898] usb 7-1: SerialNumber: ᐊ [ 787.311544][T14614] wg2: entered promiscuous mode [ 787.389604][T14614] wg2: entered allmulticast mode [ 787.417430][T14616] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2285'. [ 787.462982][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2279'. [ 787.648373][ C1] net_ratelimit: 17 callbacks suppressed [ 787.648399][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 787.725297][ T5898] option 7-1:7.164: GSM modem (1-port) converter detected [ 787.747467][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.792472][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'. [ 787.797782][ T5898] usb 7-1: USB disconnect, device number 40 [ 787.801902][T14624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2288'. [ 787.846529][ T5898] option 7-1:7.164: device disconnected [ 788.321833][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.334557][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.525875][T14633] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 788.686092][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 789.291642][T14642] Process accounting resumed [ 789.346530][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.436496][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.499374][T14649] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2297'. [ 789.546819][ T5897] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 789.626183][ T5874] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 789.726058][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 789.727645][ T5897] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 789.751321][ T5897] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 789.762763][ T5897] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 789.766248][ T5874] usb 7-1: device descriptor read/64, error -71 [ 789.779506][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.791427][T14645] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 789.802397][ T5897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 789.976373][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 790.018856][ T5874] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 790.069512][ T5897] usb 6-1: USB disconnect, device number 60 [ 790.136181][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 790.156286][ T5874] usb 7-1: device descriptor read/64, error -71 [ 790.163209][ T25] usb 3-1: config 0 has an invalid interface number: 228 but max is 0 [ 790.189827][ T25] usb 3-1: config 0 has no interface number 0 [ 790.202919][ T25] usb 3-1: config 0 interface 228 has no altsetting 0 [ 790.238421][ T25] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 790.254296][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.265172][ T25] usb 3-1: Product: syz [ 790.274434][ T5874] usb usb7-port1: attempt power cycle [ 790.283845][ T25] usb 3-1: Manufacturer: syz [ 790.310320][ T25] usb 3-1: SerialNumber: syz [ 790.320145][ T25] usb 3-1: config 0 descriptor?? [ 790.342726][ T25] go7007 3-1:0.228: probe with driver go7007 failed with error -12 [ 790.372341][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.416388][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.137341][T14672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.147385][T14672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.443262][ T5874] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 791.467008][ T5874] usb 7-1: device descriptor read/8, error -71 [ 791.746831][ T5874] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 791.852515][ T5874] usb 7-1: device descriptor read/8, error -71 [ 792.110073][ T5874] usb usb7-port1: unable to enumerate USB device [ 792.331193][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 792.331213][ T29] audit: type=1326 audit(1737301921.954:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa45937cce7 code=0x7ffc0000 [ 792.401207][T14689] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20001 [ 792.421232][ T29] audit: type=1326 audit(1737301922.014:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa459321f29 code=0x7ffc0000 [ 792.444145][ T29] audit: type=1326 audit(1737301922.014:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa459385d29 code=0x7ffc0000 [ 792.469059][ T29] audit: type=1326 audit(1737301922.014:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa459385d29 code=0x7ffc0000 [ 792.493276][ T29] audit: type=1326 audit(1737301922.024:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa459385d29 code=0x7ffc0000 [ 792.515501][ T29] audit: type=1326 audit(1737301922.034:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa45937cce7 code=0x7ffc0000 [ 792.538707][ T29] audit: type=1326 audit(1737301922.034:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa459321f29 code=0x7ffc0000 [ 792.563239][ T29] audit: type=1326 audit(1737301922.034:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa459385d29 code=0x7ffc0000 [ 792.587899][ T29] audit: type=1326 audit(1737301922.034:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa459385d29 code=0x7ffc0000 [ 792.611646][ T29] audit: type=1326 audit(1737301922.034:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14686 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa459385d29 code=0x7ffc0000 [ 792.748168][T11986] usb 3-1: USB disconnect, device number 57 [ 792.761266][T14697] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2309'. [ 792.846050][ C1] net_ratelimit: 10 callbacks suppressed [ 792.846078][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 793.099484][ T5868] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 793.498587][ T5868] usb 6-1: Using ep0 maxpacket: 32 [ 793.502392][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.523346][ T5868] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 793.535368][ T5868] usb 6-1: config 0 has no interface number 0 [ 793.550983][ T5868] usb 6-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 793.608274][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.620267][ T5868] usb 6-1: Product: syz [ 793.626777][ T5868] usb 6-1: Manufacturer: syz [ 793.633846][ T5868] usb 6-1: SerialNumber: syz [ 793.642451][ T5868] usb 6-1: config 0 descriptor?? [ 793.844080][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.886044][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 793.909548][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.937392][ T5868] kaweth 6-1:0.235: Firmware present in device. [ 794.897526][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.925389][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.926171][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 794.956352][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.971257][ T5868] kaweth 6-1:0.235: Statistics collection: 0 [ 795.558201][ T5868] kaweth 6-1:0.235: Multicast filter limit: 0 [ 795.565890][ T5868] kaweth 6-1:0.235: MTU: 0 [ 795.572359][ T5868] kaweth 6-1:0.235: Read MAC address 00:00:00:00:00:00 [ 795.752636][T14729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.763490][T14729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.916791][T14733] loop7: detected capacity change from 0 to 16384 [ 795.966195][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 796.145728][T14733] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 0 [ 796.206649][ T5868] kaweth 6-1:0.235: Error setting receive filter [ 796.218093][ T5868] kaweth 6-1:0.235: probe with driver kaweth failed with error -5 [ 796.309233][T14733] I/O error, dev loop7, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 796.386226][ T5868] usb 6-1: USB disconnect, device number 61 [ 796.429068][T14733] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 796.506158][T14733] Buffer I/O error on dev loop7, logical block 97, async page read [ 796.591457][T14733] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 796.621500][T14733] Buffer I/O error on dev loop7, logical block 97, async page read [ 796.643541][T14733] I/O error, dev loop7, sector 776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 796.664548][T14733] Buffer I/O error on dev loop7, logical block 97, async page read [ 796.700363][T14733] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 97 prio class 0 [ 796.763729][T14733] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 796.792004][T14733] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 796.812357][T14733] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 796.843405][T14733] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 796.864407][T14733] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 796.895134][T14733] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 796.911918][T14733] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 797.007472][T14752] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2323'. [ 797.251572][T14758] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2324'. [ 798.046129][ C1] net_ratelimit: 8 callbacks suppressed [ 798.046156][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 798.359411][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.371003][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.441238][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.470385][T14769] kvm: kvm [14764]: vcpu0, guest rIP: 0x188 Unhandled WRMSR(0xc2) = 0x5a0000991c [ 798.481510][T14769] kvm: kvm [14764]: vcpu0, guest rIP: 0x188 Unhandled WRMSR(0x186) = 0x7c0000b904 [ 798.494795][T14769] kvm: kvm [14764]: vcpu0, guest rIP: 0x188 Unhandled WRMSR(0x187) = 0xa10000d5a0 [ 798.530371][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.086066][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 799.415023][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.425002][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.570725][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.126260][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 801.836288][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 801.836312][ T29] audit: type=1326 audit(1737301931.434:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 801.915657][ T29] audit: type=1326 audit(1737301931.434:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 801.961975][T14820] xt_HMARK: spi-set and port-set can't be combined [ 802.031012][ T29] audit: type=1326 audit(1737301931.434:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 802.057566][ T29] audit: type=1326 audit(1737301931.434:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 802.083393][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.099667][ T29] audit: type=1326 audit(1737301931.434:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 802.124783][ T29] audit: type=1326 audit(1737301931.434:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 802.574359][ T29] audit: type=1326 audit(1737301931.434:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 802.598133][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.951405][ T29] audit: type=1326 audit(1737301931.434:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 803.087350][ T29] audit: type=1326 audit(1737301931.434:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 803.111527][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.227341][ T29] audit: type=1326 audit(1737301931.434:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14796 comm="syz.7.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4c385d29 code=0x7ffc0000 [ 803.246062][ C1] net_ratelimit: 24 callbacks suppressed [ 803.246090][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 803.554397][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 804.277600][ T9535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.286078][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 804.306800][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.320201][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.554274][T14861] futex_wake_op: syz.1.2353 tries to shift op by -1; fix this program [ 805.326193][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 805.575551][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.590259][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.600129][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.609554][ T3455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.722412][T14872] misc userio: The device must be registered before sending interrupts [ 806.791205][T14872] sctp: [Deprecated]: syz.2.2354 (pid 14872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.791205][T14872] Use struct sctp_sack_info instead [ 807.663950][T14874] Bluetooth: MGMT ver 1.23 [ 808.314276][ T5897] net_ratelimit: 17 callbacks suppressed [ 808.314302][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.331861][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.342482][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.356826][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.446050][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 808.517186][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.527488][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.536887][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.546613][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.556691][T14890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.024746][T14892] syz.5.2364: attempt to access beyond end of device [ 809.024746][T14892] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 809.058896][T14892] hpfs: hpfs_map_sector(): read error [ 810.111782][T14902] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 810.977371][T14914] lo speed is unknown, defaulting to 1000 [ 811.006191][T14914] lo speed is unknown, defaulting to 1000 [ 811.025071][T14914] lo speed is unknown, defaulting to 1000 [ 811.089442][T14914] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 811.158023][T14914] lo speed is unknown, defaulting to 1000 [ 811.176232][T14914] lo speed is unknown, defaulting to 1000 [ 811.196240][T14914] lo speed is unknown, defaulting to 1000 [ 811.230787][T14914] lo speed is unknown, defaulting to 1000 [ 811.259566][T14914] lo speed is unknown, defaulting to 1000 [ 812.253250][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 812.253273][ T29] audit: type=1326 audit(1737301941.874:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14929 comm="syz.2.2377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f992ab85d29 code=0x0 [ 812.405426][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2372'. [ 812.496260][ T5898] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 812.559690][T14911] delete_channel: no stack [ 812.660165][ T5898] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 812.676045][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.684450][ T5898] usb 7-1: Product: syz [ 812.706059][ T5898] usb 7-1: Manufacturer: syz [ 812.710735][ T5898] usb 7-1: SerialNumber: syz [ 812.727988][ T5898] usb 7-1: config 0 descriptor?? [ 812.747158][ T5898] ch341 7-1:0.0: ch341-uart converter detected [ 813.646033][ C1] net_ratelimit: 23 callbacks suppressed [ 813.646061][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 813.816939][ T5898] usb 7-1: failed to send control message: -71 [ 813.824973][ T5898] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 813.895585][ T5898] usb 7-1: USB disconnect, device number 45 [ 813.913384][ T5898] ch341 7-1:0.0: device disconnected [ 814.386090][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.394968][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.465650][T14949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2382'. [ 814.686032][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 814.694207][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.913939][T14963] syzkaller1: entered promiscuous mode [ 814.936244][T14963] syzkaller1: entered allmulticast mode [ 815.177826][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.492514][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.501119][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.534646][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.667433][T14977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2385'. [ 815.726031][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 815.750325][ T29] audit: type=1326 audit(1737301945.374:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14981 comm="syz.1.2391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dfa585d29 code=0x0 [ 815.912272][T14991] bridge0: port 3(veth0_to_bridge) entered blocking state [ 815.921216][T14991] bridge0: port 3(veth0_to_bridge) entered disabled state [ 815.929920][T14991] veth0_to_bridge: entered allmulticast mode [ 815.939649][T14991] veth0_to_bridge: entered promiscuous mode [ 815.945861][T14991] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 815.960797][T14991] bridge0: port 3(veth0_to_bridge) entered blocking state [ 815.968323][T14991] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 816.206077][ T5868] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 817.161440][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2395'. [ 817.171904][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2395'. [ 817.187469][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.199170][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.210009][ T5868] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 817.219506][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.245111][ T5868] usb 7-1: config 0 descriptor?? [ 817.403432][T15002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2397'. [ 817.412648][T15002] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2397'. [ 818.115612][ T5868] usbhid 7-1:0.0: can't add hid device: -71 [ 818.121798][ T5868] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 818.132436][ T5868] usb 7-1: USB disconnect, device number 46 [ 818.313632][T15017] create_pit_timer: 17 callbacks suppressed [ 818.313648][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 818.328380][T15017] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 818.336499][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 818.344317][T15017] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 818.352965][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 818.365311][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 818.373613][T15017] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 818.382075][T15017] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 818.390308][T15017] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 818.398576][T15017] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 818.539335][ T29] audit: type=1326 audit(1737301948.164:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15026 comm="syz.1.2407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dfa585d29 code=0x0 [ 818.681428][T15025] qrtr: Invalid version 80 [ 818.846046][ C1] net_ratelimit: 11 callbacks suppressed [ 818.846074][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 819.886501][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 820.071643][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.080577][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.936037][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 821.473582][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.481767][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.490448][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.583088][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.861560][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.893627][T15050] misc userio: The device must be registered before sending interrupts [ 821.903779][T15050] sctp: [Deprecated]: syz.6.2414 (pid 15050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.903779][T15050] Use struct sctp_sack_info instead [ 822.014460][T15052] sctp: [Deprecated]: syz.1.2415 (pid 15052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.014460][T15052] Use struct sctp_sack_info instead [ 822.689905][ T5897] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 822.848242][ T5897] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 823.002389][ T5897] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40 [ 823.014997][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.023248][ T5897] usb 3-1: Product: syz [ 823.027736][ T5897] usb 3-1: Manufacturer: syz [ 823.032443][ T5897] usb 3-1: SerialNumber: syz [ 823.043649][T15041] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 823.084892][T15058] 9pnet_fd: Insufficient options for proto=fd [ 823.148204][T15058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2418'. [ 823.874490][ T29] audit: type=1326 audit(1737301953.494:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15071 comm="syz.6.2421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe286b85d29 code=0x0 [ 823.907824][ T973] net_ratelimit: 5 callbacks suppressed [ 823.907848][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.921996][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.046042][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 824.428964][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input21 [ 824.447259][ T5897] usb 3-1: USB disconnect, device number 58 [ 824.591340][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.808978][T14077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.986219][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.995219][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.086161][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 826.126142][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 826.229608][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.282961][T15089] misc userio: The device must be registered before sending interrupts [ 826.303135][T15089] sctp: [Deprecated]: syz.6.2426 (pid 15089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.303135][T15089] Use struct sctp_sack_info instead [ 826.422849][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 826.435382][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 826.446085][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 826.457654][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 826.466620][ T5822] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 826.474016][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 826.581165][T15104] create_pit_timer: 5 callbacks suppressed [ 826.581188][T15104] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 826.595317][T15104] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 826.605525][T15104] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 826.616775][T15104] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 826.624966][T15104] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 826.633085][T15104] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 826.640840][T15098] lo speed is unknown, defaulting to 1000 [ 826.650657][T15104] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 826.658864][T15104] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 826.666909][T15104] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 826.675050][T15104] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 826.862025][T15098] chnl_net:caif_netlink_parms(): no params data found [ 827.023825][ T29] audit: type=1326 audit(1737301956.644:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15123 comm="syz.6.2436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe286b85d29 code=0x0 [ 827.047308][T15098] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.059571][T15098] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.067791][T15098] bridge_slave_0: entered allmulticast mode [ 827.078167][T15098] bridge_slave_0: entered promiscuous mode [ 827.092733][T15116] geneve2: entered promiscuous mode [ 827.107423][T15098] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.114749][T15098] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.122879][T15098] bridge_slave_1: entered allmulticast mode [ 827.130652][T15098] bridge_slave_1: entered promiscuous mode [ 827.161939][T15098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.175306][T15098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.225498][T15098] team0: Port device team_slave_0 added [ 827.235004][T15098] team0: Port device team_slave_1 added [ 827.291093][T15098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.305798][T15098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.352598][T15098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.374359][T15098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.383895][T15098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.587467][T15098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.208974][ T5897] kernel write not supported for file /vcsu (pid: 5897 comm: kworker/0:4) [ 828.376959][T15098] hsr_slave_0: entered promiscuous mode [ 828.386685][T15098] hsr_slave_1: entered promiscuous mode [ 828.394582][T15141] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2443'. [ 828.406302][T15098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.430428][T15098] Cannot create hsr debugfs directory [ 828.604683][T13350] Bluetooth: hci4: command tx timeout [ 828.648167][T15149] misc userio: The device must be registered before sending interrupts [ 828.658176][T15149] sctp: [Deprecated]: syz.2.2444 (pid 15149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 828.658176][T15149] Use struct sctp_sack_info instead [ 828.778691][ C0] ------------[ cut here ]------------ [ 828.784965][ C0] WARNING: CPU: 0 PID: 15152 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xa08/0xce0 [ 828.794890][ C0] Modules linked in: [ 828.798834][ C0] CPU: 0 UID: 0 PID: 15152 Comm: syz.7.2446 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 828.809643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 828.819739][ C0] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 828.826133][ C0] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 1e 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 828.845777][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00010086 [ 828.851841][ C0] RAX: dffffc0000000000 RBX: 1ffff1100d7d3e5b RCX: ffff88807c031e00 [ 828.859804][ C0] RDX: 0000000000010000 RSI: 0000000000002000 RDI: 0000000000000000 [ 828.867866][ C0] RBP: ffffc90000007cf8 R08: ffffffff81646100 R09: 1ffffffff284ef12 [ 828.875860][ C0] R10: dffffc0000000000 R11: fffffbfff284ef13 R12: ffff88806be9f2c0 [ 828.883857][ C0] R13: 1ffff1100d7d3e68 R14: ffff88806be9f2d8 R15: ffff88806be9f380 [ 828.891825][ C0] FS: 00007efc4d1e46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 828.900741][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 828.907313][ C0] CR2: 0000000020044000 CR3: 000000007d56e000 CR4: 00000000003526f0 [ 828.915277][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 828.923236][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 828.931630][ C0] Call Trace: [ 828.934898][ C0] [ 828.937738][ C0] ? __warn+0x165/0x4d0 [ 828.941887][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 828.947601][ C0] ? report_bug+0x2b3/0x500 [ 828.952094][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 828.957837][ C0] ? handle_bug+0x60/0x90 [ 828.962158][ C0] ? exc_invalid_op+0x1a/0x50 [ 828.966827][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 828.971851][ C0] ? prepare_signal+0x6c0/0xc90 [ 828.976783][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 828.982511][ C0] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 828.988174][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 828.994354][ C0] posix_timer_fn+0xe2/0x160 [ 828.998963][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 829.004151][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 829.009351][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 829.015062][ C0] ? sched_clock+0x4a/0x70 [ 829.019472][ C0] ? read_tsc+0x9/0x20 [ 829.023558][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 829.029618][ C0] hrtimer_interrupt+0x403/0xa40 [ 829.034568][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 829.040641][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 829.046320][ C0] [ 829.049247][ C0] [ 829.052178][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 829.058152][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 829.064663][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 2e 64 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 96 a9 f5 65 8b 05 84 e7 3f 74 85 c0 74 43 48 c7 04 24 0e 36 [ 829.084278][ C0] RSP: 0018:ffffc9000e29fc60 EFLAGS: 00000206 [ 829.090341][ C0] RAX: 0fd25f3369a3ec00 RBX: 1ffff92001c53f90 RCX: ffffffff9a37e903 [ 829.098302][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000001 [ 829.106299][ C0] RBP: ffffc9000e29fcf0 R08: ffffffff901889b7 R09: 1ffffffff2031136 [ 829.114331][ C0] R10: dffffc0000000000 R11: fffffbfff2031137 R12: dffffc0000000000 [ 829.122334][ C0] R13: 1ffff92001c53f8c R14: ffffc9000e29fc80 R15: 0000000000000246 [ 829.130346][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 829.136700][ C0] do_timer_settime+0x37f/0x3e0 [ 829.141583][ C0] ? __pfx_do_timer_settime+0x10/0x10 [ 829.147062][ C0] ? __pfx_do_futex+0x10/0x10 [ 829.151774][ C0] __x64_sys_timer_settime+0x19e/0x240 [ 829.157340][ C0] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 829.163352][ C0] ? do_syscall_64+0x100/0x230 [ 829.168249][ C0] ? do_syscall_64+0xb6/0x230 [ 829.172955][ C0] do_syscall_64+0xf3/0x230 [ 829.177467][ C0] ? clear_bhb_loop+0x35/0x90 [ 829.182176][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.188079][ C0] RIP: 0033:0x7efc4c385d29 [ 829.192584][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.212531][ C0] RSP: 002b:00007efc4d1e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 829.220936][ C0] RAX: ffffffffffffffda RBX: 00007efc4c575fa0 RCX: 00007efc4c385d29 [ 829.229090][ C0] RDX: 0000000020040fe0 RSI: 0000000000000001 RDI: 0000000000000000 [ 829.237192][ C0] RBP: 00007efc4c401b08 R08: 0000000000000000 R09: 0000000000000000 [ 829.245279][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.253277][ C0] R13: 0000000000000000 R14: 00007efc4c575fa0 R15: 00007ffdc0966ab8 [ 829.261283][ C0] [ 829.264337][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 829.272125][ C0] CPU: 0 UID: 0 PID: 15152 Comm: syz.7.2446 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 829.282864][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 829.292993][ C0] Call Trace: [ 829.296265][ C0] [ 829.299095][ C0] dump_stack_lvl+0x241/0x360 [ 829.303765][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.308971][ C0] ? __pfx__printk+0x10/0x10 [ 829.313595][ C0] ? _printk+0xd5/0x120 [ 829.317840][ C0] ? __init_begin+0x41000/0x41000 [ 829.322895][ C0] ? vscnprintf+0x5d/0x90 [ 829.327334][ C0] panic+0x349/0x880 [ 829.331254][ C0] ? __warn+0x174/0x4d0 [ 829.335502][ C0] ? __pfx_panic+0x10/0x10 [ 829.339950][ C0] __warn+0x344/0x4d0 [ 829.343933][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 829.349671][ C0] report_bug+0x2b3/0x500 [ 829.354019][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 829.359821][ C0] handle_bug+0x60/0x90 [ 829.363965][ C0] exc_invalid_op+0x1a/0x50 [ 829.368556][ C0] asm_exc_invalid_op+0x1a/0x20 [ 829.373416][ C0] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 829.379761][ C0] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 1e 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 829.399484][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00010086 [ 829.405548][ C0] RAX: dffffc0000000000 RBX: 1ffff1100d7d3e5b RCX: ffff88807c031e00 [ 829.413613][ C0] RDX: 0000000000010000 RSI: 0000000000002000 RDI: 0000000000000000 [ 829.421613][ C0] RBP: ffffc90000007cf8 R08: ffffffff81646100 R09: 1ffffffff284ef12 [ 829.430158][ C0] R10: dffffc0000000000 R11: fffffbfff284ef13 R12: ffff88806be9f2c0 [ 829.438415][ C0] R13: 1ffff1100d7d3e68 R14: ffff88806be9f2d8 R15: ffff88806be9f380 [ 829.446390][ C0] ? prepare_signal+0x6c0/0xc90 [ 829.451267][ C0] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 829.457025][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 829.463088][ C0] posix_timer_fn+0xe2/0x160 [ 829.467801][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 829.473038][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 829.478293][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 829.484078][ C0] ? sched_clock+0x4a/0x70 [ 829.488538][ C0] ? read_tsc+0x9/0x20 [ 829.492716][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 829.498919][ C0] hrtimer_interrupt+0x403/0xa40 [ 829.503904][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 829.510048][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 829.515719][ C0] [ 829.518734][ C0] [ 829.521690][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 829.527709][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 829.534238][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 2e 64 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 96 a9 f5 65 8b 05 84 e7 3f 74 85 c0 74 43 48 c7 04 24 0e 36 [ 829.553951][ C0] RSP: 0018:ffffc9000e29fc60 EFLAGS: 00000206 [ 829.560066][ C0] RAX: 0fd25f3369a3ec00 RBX: 1ffff92001c53f90 RCX: ffffffff9a37e903 [ 829.568144][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000001 [ 829.576126][ C0] RBP: ffffc9000e29fcf0 R08: ffffffff901889b7 R09: 1ffffffff2031136 [ 829.584103][ C0] R10: dffffc0000000000 R11: fffffbfff2031137 R12: dffffc0000000000 [ 829.592098][ C0] R13: 1ffff92001c53f8c R14: ffffc9000e29fc80 R15: 0000000000000246 [ 829.600115][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 829.606498][ C0] do_timer_settime+0x37f/0x3e0 [ 829.611382][ C0] ? __pfx_do_timer_settime+0x10/0x10 [ 829.616744][ C0] ? __pfx_do_futex+0x10/0x10 [ 829.621458][ C0] __x64_sys_timer_settime+0x19e/0x240 [ 829.627031][ C0] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 829.633095][ C0] ? do_syscall_64+0x100/0x230 [ 829.637891][ C0] ? do_syscall_64+0xb6/0x230 [ 829.642578][ C0] do_syscall_64+0xf3/0x230 [ 829.647075][ C0] ? clear_bhb_loop+0x35/0x90 [ 829.651757][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.657649][ C0] RIP: 0033:0x7efc4c385d29 [ 829.662055][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.681740][ C0] RSP: 002b:00007efc4d1e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 829.690172][ C0] RAX: ffffffffffffffda RBX: 00007efc4c575fa0 RCX: 00007efc4c385d29 [ 829.698133][ C0] RDX: 0000000020040fe0 RSI: 0000000000000001 RDI: 0000000000000000 [ 829.706100][ C0] RBP: 00007efc4c401b08 R08: 0000000000000000 R09: 0000000000000000 [ 829.714194][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.722179][ C0] R13: 0000000000000000 R14: 00007efc4c575fa0 R15: 00007ffdc0966ab8 [ 829.730162][ C0] [ 830.808820][ C0] Shutting down cpus with NMI [ 830.813721][ C0] Kernel Offset: disabled [ 830.818364][ C0] Rebooting in 86400 seconds..