last executing test programs: 11.965756727s ago: executing program 0 (id=4373): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="11fe8dcb928a75ca31f3310adde1c9"]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a2ef124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r5, 0xffffffffffffffff}) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000280)=@filename='./file0\x00', r8, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000240)={0x0, 0x800000, 0x10001, 0xffff}, 0x10) close_range(r3, r4, 0x0) poll(&(0x7f00000001c0)=[{r6, 0xb2}], 0x1, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, 0x0, 0x0) 11.343720542s ago: executing program 4 (id=4327): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_open_dev$video(&(0x7f0000000100), 0x77a3, 0x8000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x2c, r3, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x2c}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e076a5bad7c14093d14b828f95c9606c173eafe0d073b83110902c163de9f183dec193919afdc1f02768f1e1c82d3ae0c782822815be5aeddc27c7f6cda827b56e9280a28d1a9907c9d19bb3c27d43"], 0x48) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="b2", 0x1}], 0x1}}], 0x1, 0x400c081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000200), 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0x0, 0xfb4, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc00, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000064c0)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000540)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000000200)='syzkaller\x00', 0xffffff67, 0xe4, &(0x7f0000000600)=""/228, 0x41000, 0x27, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r0, r4, r6, r0, r7], &(0x7f0000000740)=[{0x0, 0x2, 0x3, 0x7}, {0x5, 0x5, 0x2}, {0x4, 0x3, 0x8}, {0x1, 0x1, 0x2, 0x6}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) 11.278949211s ago: executing program 2 (id=4375): socket$kcm(0x10, 0x2, 0x4) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x11, r4, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) socket(0x15, 0x5, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}]}, 0x44}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000002"], 0x24d8}], 0x1}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 11.220210196s ago: executing program 0 (id=4376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180600000000000000000000000000001830000000000000000000000020000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa2}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="04000000", @ANYRES16=r6, @ANYBLOB="000227bd7000fbdbdf25040000002000018008000300020000001400020077673100"/46], 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x4000) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000280), 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400), 0x8008, &(0x7f0000001480)=ANY=[@ANYBLOB='hu\be=aais']) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x1000, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r7, r7, 0x33, 0x0, @void}, 0x10) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8, 0x0) 11.188458791s ago: executing program 1 (id=4378): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0x8000000}, 0x69) 9.692726413s ago: executing program 1 (id=4379): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xf0}}, 0x44040) 9.685631209s ago: executing program 3 (id=4380): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000009000000d7f5cb406a9b04595bf2c07b", @ANYRES32=0x1, @ANYBLOB="ff00"/15, @ANYRES32, @ANYBLOB="0500000003000000010000000c00"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x80) finit_module(r2, 0x0, 0x0) r3 = io_uring_setup(0x547f, &(0x7f0000000080)={0x0, 0xf7d1, 0x0, 0x0, 0xfffffffe, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/549, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 9.685210249s ago: executing program 4 (id=4381): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='W', 0x1}], 0x1) rt_sigaction(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0xc480, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000180)={0xc, r6}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000440)={0x28, 0x6, r7, r6, 0x157b16, 0x2}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000240)={0x8, r6}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) 9.433547601s ago: executing program 2 (id=4382): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}], 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/235, 0xeb}], 0x1, 0x0, 0xffffffffffffffb9}, 0x10101) 9.072747336s ago: executing program 2 (id=4383): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x24) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[], [0x0, 0x0, 0x20000000, 0x0, 0xfffffffc], [0x0, 0x7]], '\x00', [{}, {}, {}, {0xbd2c}, {0x0, 0x3}, {}, {0x10}, {0x0, 0x800}, {}, {0x0, 0x10}]}) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000f50300030000000000000000003800000000000000000000000000200080"], 0x158) write$binfmt_elf64(r0, &(0x7f0000003080)=ANY=[], 0xee0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="a3"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = syz_clone(0x8002c00, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) recvmsg(r2, &(0x7f0000000200)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/254, 0xfe}], 0x1, &(0x7f00000003c0)=""/200, 0xc8}, 0x100) ptrace(0x10, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.892799713s ago: executing program 0 (id=4384): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='W', 0x1}], 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000180)={0xc, r5}) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000240)={0x8, r5}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) 8.708325739s ago: executing program 1 (id=4385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket(0xb, 0x80000, 0x600) socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) 8.006060007s ago: executing program 3 (id=4386): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x5, 0x18}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x2, 0x0, 0x1, 0x2, 0x0, 0x2, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 7.505638951s ago: executing program 0 (id=4387): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc2, 0x58, 0x37, 0x20, 0x54c, 0x25, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004380)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810540010000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r5 = io_uring_setup(0x70f8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x4000000}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r7, &(0x7f0000000100)=@abs={0x27}, 0x6e) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001000000000000000000008500000027000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_open_dev$video4linux(&(0x7f0000002d80), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r9, 0x80405600, &(0x7f0000002dc0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6035a2f"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000380)="e02742e8680d85ff9782762f88a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 7.219124551s ago: executing program 1 (id=4388): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x7fff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0xb8800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x44, &(0x7f0000000040)=0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x7c8adc90, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000000c0), 0x4) r4 = socket$nl_audit(0x10, 0x3, 0x9) open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8947, &(0x7f0000000580)={'bond0\x00', 0x10001}) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') sendmsg$AUDIT_LIST_RULES(r4, 0x0, 0x800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000016c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000001680)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES64], 0x2b4}}, 0x800) symlinkat(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a00000000000100000a"], 0x14}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00'}) 7.057457774s ago: executing program 3 (id=4389): socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6b60, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r4 = syz_io_uring_complete(0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r7, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) (async) sendmmsg$inet(r9, &(0x7f0000000c00), 0x0, 0xc000) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r11, &(0x7f0000000180), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x840000}, @ldst={0x0, 0x1, 0x3, 0x7, 0x4, 0xfffffffffffffff8, 0x1}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x1000, 0xe4, &(0x7f00000005c0)=""/228, 0x41000, 0x5d, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xa, 0xffffffff, 0x5}, 0x10, r3, r4, 0x2, &(0x7f0000000a40)=[r5, r6, 0x1, 0x1, r7, r9, r11], &(0x7f0000000a80)=[{0x5, 0x3, 0x5, 0x7}, {0x0, 0x1, 0xb, 0xc}], 0x10, 0x0, @void, @value}, 0x94) (async) r12 = socket(0x23, 0x80801, 0x1) ioctl$TIOCGICOUNT(r7, 0x545d, 0x0) (async) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x10, &(0x7f0000000000)=""/16, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_DSTOPTS(r12, 0x29, 0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="0098350020000000"], 0x8) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x35}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (rerun: 64) 6.743753653s ago: executing program 1 (id=4390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r3 = syz_clone(0x0, 0x0, 0x900, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 6.713102224s ago: executing program 4 (id=4391): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msgctl$IPC_RMID(0x0, 0x0) 6.656003789s ago: executing program 3 (id=4392): socket$kcm(0x10, 0x2, 0x4) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x11, r4, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) socket(0x15, 0x5, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}]}, 0x44}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000002"], 0x24d8}], 0x1}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 4.181138558s ago: executing program 1 (id=4393): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/235, 0xeb}], 0x1, 0x0, 0xffffffffffffffb9}, 0x10101) 3.097831593s ago: executing program 2 (id=4394): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file2\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0xb) 2.692358212s ago: executing program 0 (id=4395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xf0}}, 0x44040) 2.601675629s ago: executing program 2 (id=4396): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000009000000d7f5cb406a9b04595bf2c07b", @ANYRES32=0x1, @ANYBLOB="ff00"/18, @ANYRES32, @ANYBLOB="0500000003000000010000000c00"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x80) finit_module(r2, 0x0, 0x0) r3 = io_uring_setup(0x547f, &(0x7f0000000080)={0x0, 0xf7d1, 0x0, 0x0, 0xfffffffe, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800f04a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/549, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 2.445296317s ago: executing program 3 (id=4397): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='W', 0x1}], 0x1) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000180)={0xc, r6}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f0000000240)={0x8, r6}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) 2.352397011s ago: executing program 4 (id=4398): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f00000007c0), 0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000840)={@private2, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x5, 0x9, 0x4a, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7800, 0x4, 0x4}}) sendmmsg$inet(r2, &(0x7f0000002880)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)="bc68e036ae704c7f57f675abbe549b060ddfcd07c45f5060a9c0fa35b2f07564aadf6f0b10f4f5c05de4951b88d0caceddff71959a98766b62efbb8ab659192a0959d8de885760fbe39aff6c455f162357989d83b12ebe5e8dd455d0d57e0b1e965c81cf14a9d850224d2fa5f4362d0585df9ccce06e6173c23b3a7cac7a5d6ef090075a44c4ebd76d5321d450350d52e420a94efbcf", 0x96}, {&(0x7f0000000140)="365ac333c842fb77f95691c14389ece8595873526e7eafe8131e1544c7619d78b9b1062da72846bd0918ddcc7b4a55b608e5aa39c401a396bd45a6bf8387763687ef77276050113f2236adf8cd9df18e5e275d3c921320d6a0e1460c2b313f7ca9d1c09909cf8d0ecf800c4b0dddba587156060f6fc7fe2a63b650ba827fac475cba89a409f41fcabb8b1c1aed174ef1f62d6784fa566cf4b5fa9062a58f208a95d46ff7", 0xa4}, {&(0x7f0000000200)="3a2a3d962cbf83f3b83e898ab8d27b8c7234d1a61b9bac1a6b9b084a3176c4e7dd924cfd8987887afa0822e83d2f394603ec5b9b785d4a9fda9437b36a5ebe3532f92b7dce28fa12a5527b89ceacf968700c74f945009382baf6ef7f1e7708c32eaa209f3da1616cd4aa4a5974e1f4dc5970bc83245335d2bfe7", 0x7a}], 0x3, &(0x7f0000000300)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xaa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}], 0x68}}, {{&(0x7f00000003c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)="6ff9d758b499cddc06", 0x9}, {&(0x7f0000000440)="df8f3dad1d8eeb96e51f52d05884f16ff7e72a82302b28b9bfed599539f56838f5526a8016671b0311e046c79fcd7dd2c6aa99105cdae7313bf53ed4d8b294e32572f86b8f6e1da8846fb0bf84352d9b34a48ec61544945c0261dc32e2e7d703c249ebfd51a5fb761dba6234de359b605ccb2dd2cdfbffef402a7a20d880ff8a39da40d02dfca4571fee8cd85f769088f49dedbce18a02003355274e10eeae3f056b9c76b043e339ba00671868f06ecbbf1a08658cb897ae337cd9a8330bce", 0xbf}, {&(0x7f0000000500)="fd5d4cffcf2c5a565ae355dab04312da95047de75cfbecee62f377d80333bbacd1b00a11a89990300c7611d3f3c0d57643fcafc05cbde6c7666359063eb3312c8044d60deb66b7dbf60a6e1adced60c0d54ad94fcd683fb7dfecd92812ff3f77f376900ee5812a16f3690400f4939caca3240395146260cc6aead094ed488d52c7b4fe7329d828685cc3cf2f1e889820035a111f8fa83d59dfa7688faf67c6723aba8699374c9a8beb95045e74493794ef0798fdc06611250594aba31d78f2a9c8b7595576faf86312b84f12c6027694", 0xd0}, {&(0x7f0000000600)="789c7fec56a2f6361dabc281201abbe5db9da853afdef6fb09571f4c7a65e17744c69d2faa7f869071b39c76e0", 0x2d}, {&(0x7f0000002ac0)="ee1f6c587ed64e8216bed65c12627065153746f6de78f4f4830c65cdc88eb746de71fd2d52eea808dab43dc07782e92cbdc2c0b7cbe9450b5d4941f3b6711d5dc1845294a444e1f389c670da6d58646790f32aeb974b7b8bece3b94899283374a0fb6e543bc3a3f838a9f6a7863ff77ea8a4821c1015f1ad138094220c2a2a4449568d3ec963c3c75985848b1a2d3523248dce29eb5ef4fe11273a881f2f7075e0bbc76e969c6d4d2bfea61710d67ad153db64aed3396128b827", 0xba}, {&(0x7f0000000680)="2767125322b181d18f133e7fa36e58efb163ef4ebf94bbdf77a78e83f333c64d6775ed972abbd679872c5863ee91f772637940345d97b9be7ed35c322f35d962b81fcd34f6281a0ee84e48c2520bc819986d20765b095c830bc5058690a950d9a6f42206bac8729530e36762c5b92e18252fdad8dc0a89f5ec529bc5201744a3e31ad95b37aed6cbdd72f545637fe6effe18d6ce21e9fdb675c79029382c59fea64ef1f56be5af53f639f420248a6d97699ca114056fb300d14758eda5622975e4238cba25914187b1f03638eb6ae4f5ec756f0006274a2021ef9c16262b63b9e06710e630ff7a38", 0xe8}, {&(0x7f0000002a00)="e1c1ddd20c19683877b68672bbe35892de5ebc2bd11068a4b2864107dd6596d39eaece89b12102a8e2801e55d9f07d0930b38da5c3273dc4762a2cdefb90e1c578dc92a8a3a7d26a5b79e2b715c2505d142a3edcb6b3840035ee9b2cfdba6ee45e4a7b9209e7ce5f4583aa83e3c2319543a5b0692ac92a7f90f08f09b95c080000007e1c6360f57cf877ba3a351eab725c4f86748102c21d5e5e941c8fb775de4065fa8ed4b22d899d1d5484bb0dc663000000000000000000", 0xb9}], 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="14000000f4000000000000000200000001000000000000f21b000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ac14141fac1414aa000000001400000000000000000000000200000040000000000000001400000000000000000000000200000000010000000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ac1414bbac1414bb000000001400000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="e00000027f00000100000000480000000000000000000000070000000713f4ac1414aa0a010101ac1e0101640101000189236bac1e000100000000ac1e0001e000000100000000ffffffff7f000001ac1414aa00"], 0x108}}, {{&(0x7f0000000ac0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000000b00)="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", 0xff}, {&(0x7f0000000c00)="7ebb2669b5582a25ad229ff56a53d479f52c822cbb6d1c9cf4dac5e9b8931857b1c39673f6e39fe7368df88400035c6a2965961de86e09fc952da62495787324dc1fdf209470ab1486249422f774d5c590d98b5d66ca241a86d1ec4675d8b4cdaf4af41e2007bcaab5c236189787bbb4da2026799c", 0x75}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)="7adeab6eba8b1263080568a42516229fd1d7b4a48910237047c8cc00bfc7fa511e4e7289c7a467e7b25a736cd54bf63c74a510789bf2c816", 0x38}, {&(0x7f0000000dc0)="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", 0x76e}, {&(0x7f0000001dc0)="a38ff6828a0f986e9bcab343b70c47552350a03ad8c99dc4567f46d8ac82", 0x1e}], 0x6, &(0x7f0000001e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x234d}}], 0x18}}, {{&(0x7f0000001ec0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000001f00)="b0a5dacddb0927238e322773cf8a163a50ade06676a0872f346d8597646fa09226267d7c8bc1ae58c40d7c89d71b31837fdde1e4e00363d8d5cb9d096cab0451ae3cc3aaba426b58105f126386f0997f7399ef432ca2dc118e3749c4f12efe55564b255be7df560a26bd759c051035bdbb8057c2f9eaafface5c8a29c9e5ee0f2320e9c8329584e7557d7a9ecfd0255c0d079c43fb4d4d06e5bec9b52fd0f2c37646a21ec3080c16b7e38f9d983dcec0af20c412", 0xb4}], 0x1, &(0x7f0000002000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x30}}, {{&(0x7f0000002040)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000002400)=[{&(0x7f0000002080)="b148e3c0608e5aa6a16d00f59aa4909718a6bc158a7b5e52eb0b2170013bb7455f40384793e641960adfa88a72c8e54e00ee4c607e77ea62ab7b7fddcbc32e146dbeb2f1c0439d7e66575ea10e739c7bd32f520227c2e0f1fd2bb85b9ccabcb23d179ba011316f8df1bfc5353b5dea10973f2b74560aff6fafec9d50e2f2e39d157c0df05e98dbe5b4b5bb", 0x8b}, {&(0x7f0000002140)="6f652bbbc32fdede745cef466ef79b63bea1b56f5cc76a8991e0206771ae98ea7ec67d762885b1c9620c8d64f7f3f5e92b4293219bb4b907a1f8fd5b228d0231cecbf8f42055d2c1a6a25cd8bcefec2eb289d85228a58f7d78724fc19bdf4b4e88a7663aa58ffad006f1a4ee6ecfd487852dac5287628803c3acb2102045e0bc429c264f314c62cb1edc04b2a19428", 0x8f}, {&(0x7f0000002200)="725bf00630856e4f7ba1e0ff3fc5bb168855add50b859a391d40b100da0c53c1df315e09053a710268db5c9db03871f5a8cc8af2a2b7f7997ad81160d253752baeaa86d0", 0x44}, {&(0x7f0000002300)="658934c3be960da8fd527663224a90f86975186e95765dc578c3029c768c44ec4a72565552085f8effcbff10fab9f6de0e95ec138fe9c677ee808f27e81a698423c55e9a340803ab4c8405948160ca2c76c325c204886648f955c50b744a78ad6d83bc70e91da70994733d36507dbd3e4ae8670ee593f8d18303", 0x7a}, {&(0x7f0000002380)="a2ac923e0b7029078e6800a60cfd72db62c45398d5193e7f3c93d763c6f512c33abaa8896d8b6c3836ad6e483a86918417b14793a66a302d66418dfe6e4375d3cb85f99c5fc6cb0e57bf0aac8d4c6760c3a3a64730d778f16ed9006c18dc5b54", 0x60}], 0x5, &(0x7f0000002480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x57}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0xf, 0x75, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}, @local]}, @lsrr={0x83, 0x3, 0xba}, @lsrr={0x83, 0x3, 0xed}, @end]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x3, 0xa9}, @ssrr={0x89, 0xf, 0x5c, [@broadcast, @loopback, @multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xcf1}}], 0xd0}}, {{&(0x7f0000002580)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000027c0)=[{&(0x7f00000025c0)="c29efb8d858d5e17e05b9da2df77de0136d5589a71b77d9216db5b96132ef749b240f579d458033b521b2d109c00975e74d7e83b6d66788bf88ca0a6438bccf6191922f0431a689e5bea598960e52ccb6500d2adbf981e84826eb5335e8ebbb220c17a256fdbc435ea5e5f74fc6e8b8aca", 0x71}, {&(0x7f0000002640)="7f9c3c58c692", 0x6}, {0x0}, {&(0x7f0000002680)}, {&(0x7f00000026c0)="ae0b59aad764a3d4b7dbfa4ecce4b80ee9e624310b9a772a85b42395e0d7e3d2be18fdfd23225607c79c24769007d044c9391106640922436a137f467675c38692479190fe0a226015cae3980a55771dbf33d92b32521bb8c5e2191b52fe1f6fdfe79a0dcef904ace69f281aa0e615a88b936dff02596f8f241b9cbcf63fcf65bf8c48047122ff7ffb0b681aa93d50d133e7a01577248fcedb2cc9c89147865a9bb734a5c0813e6360612b958e", 0xad}, {&(0x7f0000002780)="1a3bd9", 0x3}], 0x6, &(0x7f0000002840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x6, 0x44) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_open_procfs(0x0, 0x0) read(r11, &(0x7f0000000000)=""/185, 0xb9) r12 = open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) sendfile(r12, r11, 0x0, 0x3) 1.265704503s ago: executing program 4 (id=4399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket(0xb, 0x80000, 0x600) socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) 1.04541651s ago: executing program 3 (id=4400): r0 = socket$alg(0x26, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000830000002c000e80389b"], 0x40}}, 0x8080) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f000001a4c0)=ANY=[@ANYBLOB="3a739750d895bf86dd308d17aa793db757c3e3f346e61b142737634400e97928c9a204cc0c91098858a3b09ed7f77aed717008c69f2ab7f1f0abddfb29f75984d460b838a6b165ec58ecf17415cddff8f031a6deee5a474f53556878ee172842ada29eb3926af36c8e29e52458c9fe1cd6ba"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000980)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="000213000000130000000000000000001942c3fdfcc025ad3e"], &(0x7f0000000840)={0x0, 0x3, 0x26, @string={0x26, 0x3, "74d4b3e2e95766124b9692c913f535281ade0b665192e7b310439a6c07a2ee6bfa2a88d2"}}, &(0x7f00000007c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0xff, 0xe5, "a290387c", "b62175c3"}}, &(0x7f0000000940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x80, 0x2, 0xe, 0x3, 0x4}}}, &(0x7f0000000e40)={0x84, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000f40)=ANY=[@ANYBLOB="20220800000020000000f000000099a6bf4ff1b0d6f286adc068db0425bdb4999eb753c10971c35a495d72ad455e570b98b82b51dd99af9e57569e0d56b7c9ada4877174e4dca6a74f022a267b35b67587feaf7ca532e2038bb910ba267adfa09d9a9c97432ca9fd3b49e2a8893e67caa192bf4e737254dd5f3a88c816ac"], &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "b95b"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d00)={0x40, 0x19, 0x2, ': '}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x6c}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io(r6, &(0x7f0000000280)={0xffffffffffffff01, &(0x7f000001a000)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)=ANY=[@ANYBLOB="000f2f000000050f2f00050710020a120600bfde95be97ee664602000b140100e80004e2ac000000000000"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x18, 0x89, 0x1, "0300", "2b0388f8"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x4, 0x6, 0x1, 0x40, 0x6}}}, &(0x7f0000000740)={0x84, &(0x7f000001a140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x6, 0x1}}, &(0x7f0000000400)=ANY=[@ANYRES32=r2], &(0x7f0000000440)={0x40, 0x7, 0x2, 0x153}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000500)={0x40, 0xb, 0x2, "7fbb"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6}, &(0x7f0000000600)={0x40, 0x19, 0x2, "f8a7"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x83}}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000002340)={'ip_vti0\x00', &(0x7f00000022c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000bc0), 0x80002, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x15) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, &(0x7f0000000240)={0x40, 0xa, 0xe2, {0xe2, 0x7, "35966d79a6f38316b7fd29ea408bb53cd631dc4054e4cc1a1b43b293d8ab9f13c5c95943cb69d791bf6c09dd62b47a813e95ad51f75dd5349c749660ac60d95a1888f310aa5b8531e4993667751cedba3ecffcf8349eabc4b4b3ccd9a18d17eb422285f985f8c6f97d93f4f4687ba0055c993d599911e3beedd161a88e01d34581aa48bdc39596045b1dbced1037a90169dd077f23e02798de338e7f12e588408cf8eab48f6b2144232635ac53e176ed8ad3c8d7858dffe9937900ad7581f2708968759933b0b2cfba97dc36d85aed2b956fc527923336460e0403f17b1310ed"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@main=@item_012={0x1, 0x0, 0xb, "b4"}, @local=@item_012={0x1, 0x2, 0x5, "16"}, @global=@item_4={0x3, 0x1, 0x7, "73132263"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0xf53}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x0, 0x9, 0x66, "7ede9b4429f4ce267609bdbaf4c1c0cf3f6d22f379fcb077a4a514b8439baefc341c0ac21eb3443e07d36f6777952d62ffad7add35891b737351efbedcfec6bb1280e75bd62e1940bfde61860b7d50757343bcc26f3d30970aa84e99e0f7034fb229b68ec9a1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x51}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x7}}) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 792.228098ms ago: executing program 0 (id=4401): r0 = socket$inet6(0xa, 0x200000000003, 0x87) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001280), 0xaa000, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000b1908fd00a48afd38557c154a614c9f9df4e50018c3ebd919a228aeab8839460eeabaf37aa5350c9ae5645aa45133767d99b793c139d2a3198b41b245df4025e8af8ce2d488cd32cde3a42755255aa9861226d222ccb2", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000500000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r7, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x301d80) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r11, 0x0, r10, 0x0, 0x14, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) stat(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x30, 0x2b, 0x0, @empty, @local, {[@hopopts={0x87, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x80}, @ra={0x5, 0x2, 0x6}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 324.347366ms ago: executing program 2 (id=4402): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='W', 0x1}], 0x1) rt_sigaction(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0xc480, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000180)={0xc, r6}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_IOAS_COPY$syz(r5, 0x3b83, &(0x7f0000000440)={0x28, 0x6, r7, r6, 0x157b16, 0x2}) ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000240)={0x8, r6}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) 0s ago: executing program 4 (id=4403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ecff0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000001040)) kernel console output (not intermixed with test programs): robe with driver gspca_pac7302 failed with error -71 [ 2182.605817][T12144] usb 5-1: USB disconnect, device number 68 [ 2182.620671][ T1172] usb usb3-port1: attempt power cycle [ 2183.241605][T18538] Bluetooth: hci7: command 0x0406 tx timeout [ 2183.248303][T18538] Bluetooth: hci2: command 0x0406 tx timeout [ 2184.461157][T19438] fuse: Unknown parameter 'grou00000000000000000000' [ 2187.908385][T19466] netlink: 'syz.4.3749': attribute type 1 has an invalid length. [ 2187.916190][T19466] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.3749'. [ 2187.925318][T19466] netlink: 'syz.4.3749': attribute type 1 has an invalid length. [ 2188.501525][T19464] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3748'. [ 2188.512762][T19464] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 2188.560046][T19464] binder: BINDER_SET_CONTEXT_MGR already set [ 2188.576198][T19464] binder: 19463:19464 ioctl 4018620d 200002c0 returned -16 [ 2188.829470][ T5343] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2188.841114][T19477] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 2189.053013][ T5343] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2189.077500][ T5343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 48428, setting to 64 [ 2189.128751][ T5343] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2189.209460][ T5343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.241425][ T5343] usb 4-1: config 0 descriptor?? [ 2189.618089][ T5343] smsusb:smsusb_probe: board id=8, interface number 0 [ 2189.626274][ T5343] smsusb:smsusb_probe: Device initialized with return code -19 [ 2190.412800][T19489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3756'. [ 2191.541570][T12956] usb 4-1: USB disconnect, device number 74 [ 2193.796154][T19508] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 2193.804136][T19508] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.3761'. [ 2193.813406][T19508] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 2195.393847][T19516] overlayfs: failed to resolve './file0': -2 [ 2196.402275][T18872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2196.487987][T18872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2196.609910][T18538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2196.627474][T18538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2196.638627][T18538] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2196.659746][T18538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2197.509844][ T5279] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 2197.899005][ T5279] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2198.059926][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.150961][ T5279] usb 2-1: config 0 descriptor?? [ 2198.210632][ T5279] usb 2-1: selecting invalid altsetting 3 [ 2198.216438][ T5279] comedi comedi0: could not set alternate setting 3 in high speed [ 2198.289459][ T5279] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 2198.310056][ T5279] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 2198.383461][ T5279] usb 2-1: USB disconnect, device number 82 [ 2199.193038][T18538] Bluetooth: hci0: command tx timeout [ 2199.799225][ T9712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2204.022013][T18538] Bluetooth: hci0: command tx timeout [ 2204.400558][T12956] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2205.655070][ T9712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.686691][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2205.696933][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2205.717280][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2205.726443][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2205.734371][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2205.742382][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2205.954734][T19575] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3781'. [ 2206.100232][T18538] Bluetooth: hci0: command tx timeout [ 2206.457242][T12956] usb 2-1: device not accepting address 83, error -71 [ 2206.684251][ T9712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.806455][T19523] chnl_net:caif_netlink_parms(): no params data found [ 2207.126978][ T9712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.874841][T18538] Bluetooth: hci3: command tx timeout [ 2208.179617][T18538] Bluetooth: hci0: command tx timeout [ 2209.978151][T19523] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.988617][T19523] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.997985][T19523] bridge_slave_0: entered allmulticast mode [ 2210.005888][T19523] bridge_slave_0: entered promiscuous mode [ 2210.017185][T19523] bridge0: port 2(bridge_slave_1) entered blocking state [ 2210.024603][T19523] bridge0: port 2(bridge_slave_1) entered disabled state [ 2210.032040][T19523] bridge_slave_1: entered allmulticast mode [ 2210.039843][T19523] bridge_slave_1: entered promiscuous mode [ 2210.255420][T18538] Bluetooth: hci3: command tx timeout [ 2210.750021][ T5327] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2211.009504][ T5327] usb 4-1: Using ep0 maxpacket: 16 [ 2211.703980][T19523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2211.744424][ T9712] bridge_slave_1: left allmulticast mode [ 2211.793542][ T9712] bridge_slave_1: left promiscuous mode [ 2211.835773][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 2211.931362][ T9712] bridge_slave_0: left allmulticast mode [ 2211.982428][ T9712] bridge_slave_0: left promiscuous mode [ 2212.027274][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.339701][T18538] Bluetooth: hci3: command tx timeout [ 2213.126307][ T5327] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2213.134189][ T5327] usb 4-1: can't read configurations, error -71 [ 2214.419582][T18538] Bluetooth: hci3: command tx timeout [ 2214.961393][T19625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3791'. [ 2216.040055][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3794'. [ 2216.243842][ T1172] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2217.219662][ T1172] usb 2-1: Using ep0 maxpacket: 16 [ 2217.231569][ T1172] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2217.255928][ T9712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2217.270084][ T1172] usb 2-1: config 0 has no interface number 0 [ 2217.276233][ T1172] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2217.324017][ T1172] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2217.329450][ T9712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2217.339398][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2217.400308][ T1172] usb 2-1: Product: syz [ 2217.405554][ T1172] usb 2-1: SerialNumber: syz [ 2217.415278][ T1172] usb 2-1: config 0 descriptor?? [ 2217.415379][ T9712] bond0 (unregistering): Released all slaves [ 2217.430038][T19640] tmpfs: Unknown parameter 'usrquota5x}2aH";&-dv9tO5o$v"a:#qHR@E\kmߐ61քleVAGNzyoYf[ѻRjls~Ҫk Z`e' [ 2217.435854][ T1172] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 2218.078822][T19640] gfs2: not a GFS2 filesystem [ 2218.292132][ T1172] usb 2-1: USB disconnect, device number 85 [ 2218.442744][T19523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2218.746494][T19523] team0: Port device team_slave_0 added [ 2218.769848][T19523] team0: Port device team_slave_1 added [ 2218.875694][T19568] chnl_net:caif_netlink_parms(): no params data found [ 2218.899580][T12956] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2219.067952][T19523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2219.079354][T19523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2219.109692][T12956] usb 3-1: Using ep0 maxpacket: 16 [ 2219.117165][T12956] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2219.125631][T12956] usb 3-1: config 0 has no interface number 0 [ 2219.152300][T12956] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2219.152990][T19523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2219.428009][T12956] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2219.455033][T12956] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2219.479368][T12956] usb 3-1: Product: syz [ 2219.483797][T12956] usb 3-1: SerialNumber: syz [ 2219.511751][T12956] usb 3-1: config 0 descriptor?? [ 2219.543199][T12956] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 2219.593879][T19523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2219.601120][T19523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2219.689492][T19523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2219.974459][ T9712] hsr_slave_0: left promiscuous mode [ 2220.000339][ T9712] hsr_slave_1: left promiscuous mode [ 2220.019081][ T9712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2220.039573][ T9712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2220.086944][T12956] usb 3-1: USB disconnect, device number 72 [ 2220.097210][ T9712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2220.117495][ T9712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2220.200933][ T9712] veth1_macvtap: left promiscuous mode [ 2220.206526][ T9712] veth0_macvtap: left promiscuous mode [ 2220.229498][ T9712] veth1_vlan: left promiscuous mode [ 2220.234879][ T9712] veth0_vlan: left promiscuous mode [ 2221.051160][T19668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3803'. [ 2222.119771][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.128318][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.899859][ T1172] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2223.629376][T12956] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 2223.828258][ T1172] usb 2-1: Using ep0 maxpacket: 16 [ 2223.851869][ T1172] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2223.860783][ T1172] usb 2-1: config 0 has no interface number 0 [ 2223.871324][ T1172] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2224.963455][T12956] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2224.989346][T12956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.997764][ T1172] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2225.008275][T12956] usb 3-1: config 0 descriptor?? [ 2225.027367][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2225.037243][T12956] usb 3-1: selecting invalid altsetting 3 [ 2225.069185][T12956] comedi comedi0: could not set alternate setting 3 in high speed [ 2225.076764][ T1172] usb 2-1: Product: syz [ 2225.084999][ T1172] usb 2-1: SerialNumber: syz [ 2225.096336][T12956] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 2225.098767][ T1172] usb 2-1: config 0 descriptor?? [ 2225.120303][T12956] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 2225.153638][ T1172] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 2225.309891][ T5327] usb 3-1: USB disconnect, device number 73 [ 2225.377761][T12956] usb 2-1: USB disconnect, device number 86 [ 2225.470882][ T9712] team0 (unregistering): Port device team_slave_1 removed [ 2225.663666][ T9712] team0 (unregistering): Port device team_slave_0 removed [ 2226.459983][T12956] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2226.629516][T12956] usb 3-1: device descriptor read/64, error -71 [ 2226.909539][T12956] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2227.089721][T12956] usb 3-1: device descriptor read/64, error -71 [ 2227.234318][T12956] usb usb3-port1: attempt power cycle [ 2227.476060][T19702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3815'. [ 2228.511886][T12956] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2228.580020][T12956] usb 3-1: device descriptor read/8, error -71 [ 2228.694558][T19707] Bluetooth: MGMT ver 1.23 [ 2229.978313][T19568] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.003668][T19568] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.026497][T19568] bridge_slave_0: entered allmulticast mode [ 2230.056917][T19568] bridge_slave_0: entered promiscuous mode [ 2230.089730][T19523] hsr_slave_0: entered promiscuous mode [ 2230.112685][T19523] hsr_slave_1: entered promiscuous mode [ 2230.133401][T19523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2230.153631][T19523] Cannot create hsr debugfs directory [ 2230.191961][T19568] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.217081][T19568] bridge0: port 2(bridge_slave_1) entered disabled state [ 2230.240711][T19568] bridge_slave_1: entered allmulticast mode [ 2230.280463][T19568] bridge_slave_1: entered promiscuous mode [ 2232.211031][T19732] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3824'. [ 2232.717565][T19568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2233.022405][T19568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2234.300159][T19568] team0: Port device team_slave_0 added [ 2234.361068][T19568] team0: Port device team_slave_1 added [ 2234.566870][T19568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2234.584114][T19568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.661500][T19568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2234.737608][T19568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2234.771883][T19568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2234.797920][ C1] vkms_vblank_simulate: vblank timer overrun [ 2234.869444][T19568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2235.013230][ T9712] bridge_slave_1: left allmulticast mode [ 2235.019030][ T9712] bridge_slave_1: left promiscuous mode [ 2235.047382][ T9712] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.076161][ T9712] bridge_slave_0: left allmulticast mode [ 2235.088068][ T9712] bridge_slave_0: left promiscuous mode [ 2235.117607][ T9712] bridge0: port 1(bridge_slave_0) entered disabled state [ 2237.629039][T19768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3836'. [ 2238.719384][ T5343] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2238.802847][T19773] tmpfs: Unknown parameter 'usrquota5x}2aH";&-dv9tO5o$v"a:#qHR@E\kmߐ61քleVAGNzyoYf[ѻRjls~Ҫk Z`e' [ 2238.919764][ T5343] usb 4-1: Using ep0 maxpacket: 8 [ 2238.930151][ T5343] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 2238.938358][ T5343] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2238.967948][T19773] gfs2: not a GFS2 filesystem [ 2239.719979][ T5343] usb 4-1: config 0 has no interface number 0 [ 2239.769367][ T5343] usb 4-1: config 0 interface 116 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2239.823287][ T5343] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=f4.58 [ 2239.849432][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.857489][ T5343] usb 4-1: Product: syz [ 2239.894786][ T5343] usb 4-1: Manufacturer: syz [ 2239.899687][ T5343] usb 4-1: SerialNumber: syz [ 2239.926879][ T5343] usb 4-1: config 0 descriptor?? [ 2239.948793][ T5343] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.116/input/input67 [ 2240.134820][ T9712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2240.147786][ T9712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2240.160661][ T9712] bond0 (unregistering): Released all slaves [ 2240.213822][ T4661] bcm5974 4-1:0.116: could not read from device [ 2240.214365][T11210] usb 4-1: USB disconnect, device number 77 [ 2240.365245][T19568] hsr_slave_0: entered promiscuous mode [ 2240.412354][T19568] hsr_slave_1: entered promiscuous mode [ 2240.437096][T19568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2240.455040][T19568] Cannot create hsr debugfs directory [ 2242.453574][ T9712] hsr_slave_0: left promiscuous mode [ 2242.494242][ T9712] hsr_slave_1: left promiscuous mode [ 2242.509772][ T9712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2242.527488][ T9712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2242.543755][T19798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3846'. [ 2242.558079][ T9712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2243.550357][ T9712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2243.773533][ T9712] veth1_macvtap: left promiscuous mode [ 2243.789571][ T9712] veth0_macvtap: left promiscuous mode [ 2243.813215][ T9712] veth1_vlan: left promiscuous mode [ 2243.827537][ T9712] veth0_vlan: left promiscuous mode [ 2245.438199][T19815] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2246.346415][T19819] 9pnet_fd: p9_fd_create_unix (19819): problem connecting socket: ./file0/file0: -20 [ 2247.127832][ T9712] team0 (unregistering): Port device team_slave_1 removed [ 2247.303928][ T9712] team0 (unregistering): Port device team_slave_0 removed [ 2249.870010][T18538] Bluetooth: hci5: command 0x0406 tx timeout [ 2249.876359][T18538] Bluetooth: hci1: command 0x0406 tx timeout [ 2250.119744][T19833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3855'. [ 2251.049635][T19818] netlink: 'syz.1.3851': attribute type 12 has an invalid length. [ 2251.266732][T19523] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2251.304180][T19523] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2251.344636][T19523] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2252.112054][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3857'. [ 2252.311405][T19523] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2253.212081][T19568] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.684622][ T9712] IPVS: stop unused estimator thread 0... [ 2253.942285][T19568] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.067893][T19860] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2255.294316][T19568] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.467292][T19872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3865'. [ 2256.522154][T19568] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.140281][T18872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2258.162147][T18872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2258.178593][T19568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2258.187254][T18872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2258.203587][T18872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2258.212812][T18872] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2258.223044][T18872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2258.248886][T19568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2258.329504][T12956] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 2258.363306][T19568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2258.422079][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 2258.566361][T12956] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 2258.587087][T12956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.607702][T12956] usb 4-1: config 0 descriptor?? [ 2258.632704][T12956] usb 4-1: selecting invalid altsetting 3 [ 2258.647564][T19568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2258.649860][T12956] comedi comedi0: could not set alternate setting 3 in high speed [ 2259.152417][T12956] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 2259.500474][T12956] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 2259.612201][T12956] usb 4-1: USB disconnect, device number 78 [ 2260.340623][T11976] Bluetooth: hci6: command tx timeout [ 2262.431233][T11976] Bluetooth: hci6: command tx timeout [ 2263.109245][T19913] ./bus: Can't lookup blockdev [ 2263.955193][T18872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2263.965943][T18872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2263.974521][T18872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2264.559206][T18872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2264.566526][T18872] Bluetooth: hci6: command tx timeout [ 2266.830053][T19928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2269.646926][T18872] Bluetooth: hci6: command tx timeout [ 2269.850999][T18538] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2269.858650][T18538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2271.951559][T19887] chnl_net:caif_netlink_parms(): no params data found [ 2272.179850][T11976] Bluetooth: hci0: command tx timeout [ 2273.376815][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3880'. [ 2273.601660][T19887] bridge0: port 1(bridge_slave_0) entered blocking state [ 2273.629774][T19887] bridge0: port 1(bridge_slave_0) entered disabled state [ 2273.637114][T19887] bridge_slave_0: entered allmulticast mode [ 2273.666656][T19887] bridge_slave_0: entered promiscuous mode [ 2273.686828][T19887] bridge0: port 2(bridge_slave_1) entered blocking state [ 2273.704915][T19887] bridge0: port 2(bridge_slave_1) entered disabled state [ 2273.825513][T19887] bridge_slave_1: entered allmulticast mode [ 2273.859570][T19887] bridge_slave_1: entered promiscuous mode [ 2274.259408][T11976] Bluetooth: hci0: command tx timeout [ 2274.359651][T17591] bridge_slave_1: left allmulticast mode [ 2274.473563][T17591] bridge_slave_1: left promiscuous mode [ 2274.610899][T17591] bridge0: port 2(bridge_slave_1) entered disabled state [ 2274.651192][T17591] bridge_slave_0: left allmulticast mode [ 2274.656889][T17591] bridge_slave_0: left promiscuous mode [ 2274.707383][T17591] bridge0: port 1(bridge_slave_0) entered disabled state [ 2276.336215][T19982] VFS: could not find a valid V7 on nullb0. [ 2276.360939][T11976] Bluetooth: hci0: command tx timeout [ 2279.726638][T11976] Bluetooth: hci0: command tx timeout [ 2282.320018][T17591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2282.518312][T17591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2282.543846][T17591] bond0 (unregistering): Released all slaves [ 2283.475172][T19887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2283.517111][T19887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2283.555026][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.561910][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.959596][T17591] hsr_slave_0: left promiscuous mode [ 2284.000709][T17591] hsr_slave_1: left promiscuous mode [ 2284.979610][T17591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2285.001698][T17591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2285.525535][T17591] team0 (unregistering): Port device team_slave_1 removed [ 2285.607732][T17591] team0 (unregistering): Port device team_slave_0 removed [ 2287.338250][T19887] team0: Port device team_slave_0 added [ 2287.440714][T19887] team0: Port device team_slave_1 added [ 2287.602977][T19887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2287.629334][T19887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2287.842528][T19887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2287.864912][T19887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2287.875923][T20022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2287.887909][T19887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2287.979457][T19887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2287.990416][ T5343] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2288.013614][T19919] chnl_net:caif_netlink_parms(): no params data found [ 2288.189565][ T5343] usb 2-1: Using ep0 maxpacket: 16 [ 2288.197226][ T5343] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2288.215765][ T5343] usb 2-1: config 0 has no interface number 0 [ 2288.250260][ T5343] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2288.294273][ T5343] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2288.328823][T19887] hsr_slave_0: entered promiscuous mode [ 2288.335057][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2288.366688][T19887] hsr_slave_1: entered promiscuous mode [ 2288.372562][ T5343] usb 2-1: Product: syz [ 2288.376907][ T5343] usb 2-1: SerialNumber: syz [ 2288.399215][T19887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2288.406988][T19887] Cannot create hsr debugfs directory [ 2288.413916][ T5343] usb 2-1: config 0 descriptor?? [ 2288.437308][ T5343] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 2288.786084][ T5327] usb 2-1: USB disconnect, device number 87 [ 2289.077166][T19919] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.099635][T19919] bridge0: port 1(bridge_slave_0) entered disabled state [ 2289.127497][T19919] bridge_slave_0: entered allmulticast mode [ 2289.148302][T19919] bridge_slave_0: entered promiscuous mode [ 2289.181387][T19919] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.207318][T19919] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.221359][T19919] bridge_slave_1: entered allmulticast mode [ 2289.232782][T19919] bridge_slave_1: entered promiscuous mode [ 2289.604222][T19919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2289.927797][T19919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2290.721880][T19919] team0: Port device team_slave_0 added [ 2290.810026][T19919] team0: Port device team_slave_1 added [ 2290.960380][T20052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3906'. [ 2291.095608][T19919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2291.134084][T19919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.162750][T19919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2291.220351][T19919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2291.240589][T19919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.256133][T20055] fuse: Unknown parameter 'group_id00000000000000000000' [ 2291.309565][T19919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2291.583454][T17591] bridge_slave_1: left allmulticast mode [ 2291.606702][T17591] bridge_slave_1: left promiscuous mode [ 2291.622966][T17591] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.658293][T17591] bridge_slave_0: left allmulticast mode [ 2291.678708][T17591] bridge_slave_0: left promiscuous mode [ 2291.693018][T17591] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.150033][T17591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2292.201926][T17591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2292.259638][T17591] bond0 (unregistering): Released all slaves [ 2292.409661][T20059] veth1_macvtap: mtu greater than device maximum [ 2292.586862][T20065] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2292.709575][T20067] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2292.793743][T19919] hsr_slave_0: entered promiscuous mode [ 2292.846021][T19919] hsr_slave_1: entered promiscuous mode [ 2292.899408][T19919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2292.907030][T19919] Cannot create hsr debugfs directory [ 2293.086348][T17591] hsr_slave_0: left promiscuous mode [ 2293.122939][T17591] hsr_slave_1: left promiscuous mode [ 2293.169560][T17591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2293.170916][T12144] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2293.190454][T17591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2293.329418][T12144] usb 2-1: device descriptor read/64, error -71 [ 2293.619633][T12144] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2293.895605][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3912'. [ 2293.919438][T12144] usb 2-1: device descriptor read/64, error -71 [ 2294.064287][T12144] usb usb2-port1: attempt power cycle [ 2294.459654][T17591] team0 (unregistering): Port device team_slave_1 removed [ 2294.477486][T20084] Bluetooth: hci3: Frame reassembly failed (-84) [ 2294.487284][ T1128] Bluetooth: hci3: Frame reassembly failed (-84) [ 2294.758245][T17591] team0 (unregistering): Port device team_slave_0 removed [ 2295.076212][T12144] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2295.120016][T12144] usb 2-1: device descriptor read/8, error -71 [ 2295.393345][T12144] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2295.447253][T12144] usb 2-1: device descriptor read/8, error -71 [ 2295.569804][T12144] usb usb2-port1: unable to enumerate USB device [ 2295.793297][T19887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2295.899471][T20093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3918'. [ 2295.914974][T19887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2295.945064][T19887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2295.973284][T19887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2296.024742][T20095] FAULT_INJECTION: forcing a failure. [ 2296.024742][T20095] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.038288][T20095] CPU: 1 UID: 0 PID: 20095 Comm: syz.1.3919 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2296.049155][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2296.059247][T20095] Call Trace: [ 2296.062560][T20095] [ 2296.065516][T20095] dump_stack_lvl+0x241/0x360 [ 2296.070244][T20095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2296.075489][T20095] ? __pfx__printk+0x10/0x10 [ 2296.080143][T20095] should_fail_ex+0x3b0/0x4e0 [ 2296.084870][T20095] ? skb_clone+0x20c/0x390 [ 2296.089326][T20095] should_failslab+0xac/0x100 [ 2296.094036][T20095] ? skb_clone+0x20c/0x390 [ 2296.098465][T20095] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2296.103848][T20095] skb_clone+0x20c/0x390 [ 2296.108107][T20095] ? dev_queue_xmit_nit+0x220/0xc10 [ 2296.113309][T20095] dev_queue_xmit_nit+0x419/0xc10 [ 2296.118334][T20095] ? dev_queue_xmit_nit+0x2b/0xc10 [ 2296.123465][T20095] ? validate_xmit_skb+0x9f9/0x1120 [ 2296.128681][T20095] dev_hard_start_xmit+0x15f/0x7e0 [ 2296.133805][T20095] ? __pfx_validate_xmit_skb+0x10/0x10 [ 2296.139288][T20095] __dev_queue_xmit+0x1b63/0x3e90 [ 2296.144343][T20095] ? netlink_unicast+0x7f6/0x990 [ 2296.149298][T20095] ? ____sys_sendmsg+0x525/0x7d0 [ 2296.154247][T20095] ? do_syscall_64+0xf3/0x230 [ 2296.158933][T20095] ? __dev_queue_xmit+0x2da/0x3e90 [ 2296.164067][T20095] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2296.169461][T20095] ? __copy_skb_header+0x437/0x5b0 [ 2296.174581][T20095] ? __asan_memcpy+0x40/0x70 [ 2296.179210][T20095] ? __copy_skb_header+0x437/0x5b0 [ 2296.184339][T20095] ? __skb_clone+0x454/0x6c0 [ 2296.188951][T20095] ? skb_clone+0x240/0x390 [ 2296.193396][T20095] __netlink_deliver_tap+0x54d/0x7c0 [ 2296.198798][T20095] ? netlink_deliver_tap+0x2e/0x1b0 [ 2296.203996][T20095] netlink_deliver_tap+0x19d/0x1b0 [ 2296.209119][T20095] netlink_sendskb+0x68/0x140 [ 2296.213817][T20095] netlink_unicast+0x39d/0x990 [ 2296.218586][T20095] ? __asan_memcpy+0x40/0x70 [ 2296.223197][T20095] ? __pfx_netlink_unicast+0x10/0x10 [ 2296.228528][T20095] netlink_rcv_skb+0x262/0x430 [ 2296.233303][T20095] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2296.238767][T20095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2296.244085][T20095] ? netlink_deliver_tap+0x2e/0x1b0 [ 2296.249303][T20095] netlink_unicast+0x7f6/0x990 [ 2296.254090][T20095] ? __pfx_netlink_unicast+0x10/0x10 [ 2296.259397][T20095] ? __virt_addr_valid+0x183/0x530 [ 2296.264521][T20095] ? __check_object_size+0x49c/0x900 [ 2296.269817][T20095] ? bpf_lsm_netlink_send+0x9/0x10 [ 2296.274960][T20095] netlink_sendmsg+0x8e4/0xcb0 [ 2296.279742][T20095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2296.285057][T20095] ? __import_iovec+0x536/0x820 [ 2296.289921][T20095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2296.295232][T20095] ? security_socket_sendmsg+0x87/0xb0 [ 2296.300702][T20095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2296.305996][T20095] __sock_sendmsg+0x221/0x270 [ 2296.310687][T20095] ____sys_sendmsg+0x525/0x7d0 [ 2296.315736][T20095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2296.321053][T20095] __sys_sendmmsg+0x3b2/0x740 [ 2296.325779][T20095] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2296.331035][T20095] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2296.336942][T20095] ? ksys_write+0x23e/0x2c0 [ 2296.341485][T20095] ? __pfx_lock_release+0x10/0x10 [ 2296.346540][T20095] ? vfs_write+0x7c4/0xc90 [ 2296.350975][T20095] ? __mutex_unlock_slowpath+0x21d/0x750 [ 2296.356627][T20095] ? __pfx_vfs_write+0x10/0x10 [ 2296.361418][T20095] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2296.367401][T20095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2296.373741][T20095] ? do_syscall_64+0x100/0x230 [ 2296.378518][T20095] __x64_sys_sendmmsg+0xa0/0xb0 [ 2296.383391][T20095] do_syscall_64+0xf3/0x230 [ 2296.387899][T20095] ? clear_bhb_loop+0x35/0x90 [ 2296.392586][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2296.398512][T20095] RIP: 0033:0x7fa9e777def9 [ 2296.402950][T20095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2296.422574][T20095] RSP: 002b:00007fa9e8611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2296.430999][T20095] RAX: ffffffffffffffda RBX: 00007fa9e7935f80 RCX: 00007fa9e777def9 [ 2296.438987][T20095] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 2296.446976][T20095] RBP: 00007fa9e8611090 R08: 0000000000000000 R09: 0000000000000000 [ 2296.454965][T20095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2296.462947][T20095] R13: 0000000000000000 R14: 00007fa9e7935f80 R15: 00007ffd993ef1c8 [ 2296.470978][T20095] [ 2296.503585][T18538] Bluetooth: hci3: command 0x1003 tx timeout [ 2296.521921][T11976] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2296.930015][T19887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.973687][T19887] 8021q: adding VLAN 0 to HW filter on device team0 [ 2297.783205][T16370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2297.790426][T16370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2297.952185][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 2297.959432][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2298.396071][T20112] input: syz1 as /devices/virtual/input/input68 [ 2299.154233][T20115] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3925'. [ 2299.509209][T19919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2299.565361][T19919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2299.601266][T19919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2299.627176][T19919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2299.649782][ T5343] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2299.805494][T19887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2299.869795][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 2300.226428][ T5343] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2300.256505][ T5343] usb 4-1: config 0 has no interface number 0 [ 2300.291834][ T5343] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2300.323822][ T5343] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2300.370752][ T5343] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2300.379786][ T5343] usb 4-1: Product: syz [ 2300.384636][ T5343] usb 4-1: SerialNumber: syz [ 2300.397661][ T5343] usb 4-1: config 0 descriptor?? [ 2300.410662][ T5343] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 2300.435041][T20135] xt_cluster: node mask cannot exceed total number of nodes [ 2300.462998][T19919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2300.561622][T19887] veth0_vlan: entered promiscuous mode [ 2300.624462][T19919] 8021q: adding VLAN 0 to HW filter on device team0 [ 2300.694818][T19887] veth1_vlan: entered promiscuous mode [ 2300.754201][T17591] bridge0: port 1(bridge_slave_0) entered blocking state [ 2300.761369][T17591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2300.802805][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 2300.810124][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2301.834975][T19887] veth0_macvtap: entered promiscuous mode [ 2301.896022][ T5343] usb 4-1: USB disconnect, device number 79 [ 2301.915100][T19887] veth1_macvtap: entered promiscuous mode [ 2302.177606][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.201856][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.224982][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.237996][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.247915][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.258485][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.268970][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.280528][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.291222][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.301820][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.313655][T19887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2302.346082][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.357019][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.370345][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.382879][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.392862][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.403515][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.413812][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.424512][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.455074][T19887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.512941][T19887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.532358][T19887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2302.556730][T19887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.575895][T19887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.586992][T20156] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3936'. [ 2302.597699][T19887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.608733][T19887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.046352][T13471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2303.057236][T13471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2303.939100][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2304.159297][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2304.598986][T20177] overlayfs: overlapping lowerdir path [ 2305.284664][T19919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2306.329198][T20182] xt_cluster: node mask cannot exceed total number of nodes [ 2306.337258][T20183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 2307.125827][T20196] xt_cluster: node mask cannot exceed total number of nodes [ 2307.420000][T19919] veth0_vlan: entered promiscuous mode [ 2307.515600][T19919] veth1_vlan: entered promiscuous mode [ 2308.087276][T19919] veth0_macvtap: entered promiscuous mode [ 2308.223058][T19919] veth1_macvtap: entered promiscuous mode [ 2308.520448][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.554385][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.592515][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.639025][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.692917][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.733724][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.764173][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.797682][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2308.836165][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2308.860310][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.612571][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2310.348686][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.405597][T19919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2310.557665][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.621787][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.672573][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.715269][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.759410][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.796629][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.859408][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.879326][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.889219][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.919348][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.939319][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.956207][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.998276][T19919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2311.082599][T19919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.136925][T19919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.148640][T19919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.157658][T19919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.189147][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 2311.207906][T20237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3950'. [ 2311.362906][T20239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3951'. [ 2311.478745][ T9712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2311.513212][ T9712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2311.670133][ T9712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2311.696590][ T9712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2311.722468][T20226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2311.729879][T20226] IPv6: NLM_F_CREATE should be set when creating new route [ 2313.104268][T20248] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 2313.112058][T20248] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.3772'. [ 2313.121338][T20248] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 2316.984299][T20284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3960'. [ 2318.244488][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'. [ 2319.283996][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3963'. [ 2320.357174][T20307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3965'. [ 2320.487594][T20312] Unsupported ieee802154 address type: 0 [ 2325.442377][T20353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3979'. [ 2326.421390][T20350] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2326.496696][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3978'. [ 2328.987207][T20377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2329.229731][ T5327] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2329.260283][T20380] overlayfs: missing 'lowerdir' [ 2329.461887][ T5327] usb 3-1: config 52 has too many interfaces: 57, using maximum allowed: 32 [ 2329.496304][ T5327] usb 3-1: config 52 has an invalid descriptor of length 163, skipping remainder of the config [ 2329.530224][ T5327] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 57 [ 2329.743691][ T5327] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 2329.923386][ T5327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.933022][ T5327] usb 3-1: Product: syz [ 2329.937788][ T5327] usb 3-1: Manufacturer: syz [ 2329.942961][ T5327] usb 3-1: SerialNumber: syz [ 2332.508838][ T29] audit: type=1326 audit(1726073759.131:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2332.539153][ T29] audit: type=1326 audit(1726073759.131:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2332.561886][ T29] audit: type=1326 audit(1726073759.131:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2333.059402][ T29] audit: type=1326 audit(1726073759.131:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2333.090627][ T5327] usb 3-1: USB disconnect, device number 78 [ 2333.107003][ T29] audit: type=1326 audit(1726073759.131:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2333.140038][ T29] audit: type=1326 audit(1726073759.131:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2333.225577][ T29] audit: type=1326 audit(1726073759.131:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2333.254333][ T29] audit: type=1326 audit(1726073759.131:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2333.276930][ T29] audit: type=1326 audit(1726073759.131:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2333.312903][ T29] audit: type=1326 audit(1726073759.131:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20389 comm="syz.0.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af657def9 code=0x7ffc0000 [ 2333.489684][ T5343] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2333.679462][ T5327] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2333.687250][T12956] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2334.198298][ T5343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 6513, setting to 1024 [ 2334.211386][ T5343] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2334.229568][ T5343] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 2334.242111][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.250348][ T5343] usb 5-1: Product: syz [ 2334.254737][ T5343] usb 5-1: Manufacturer: syz [ 2334.260854][ T5343] usb 5-1: SerialNumber: syz [ 2334.281450][ T5343] usb 5-1: config 0 descriptor?? [ 2334.305692][T20402] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2334.321834][ T5343] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2334.359433][ T5327] usb 3-1: Using ep0 maxpacket: 16 [ 2334.369381][T12956] usb 4-1: Using ep0 maxpacket: 8 [ 2334.388206][ T5327] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2334.410193][T12956] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2334.440377][ T5327] usb 3-1: config 0 has no interface number 0 [ 2334.466220][ T5327] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2334.484199][T12956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2334.515463][T12956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 2334.544277][ T5327] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2334.580303][T12956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2334.594463][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2334.621971][ T5327] usb 3-1: Product: syz [ 2334.626207][T12956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2334.637471][ T5327] usb 3-1: SerialNumber: syz [ 2334.650730][ T5327] usb 3-1: config 0 descriptor?? [ 2334.678349][T12956] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 2334.704946][ T5327] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 2334.714991][T12956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.743827][T12956] usb 4-1: Product: syz [ 2334.748019][T12956] usb 4-1: Manufacturer: syz [ 2334.758711][T12956] usb 4-1: SerialNumber: syz [ 2334.779449][T12956] usb 4-1: config 0 descriptor?? [ 2334.784985][ T5343] usb 5-1: USB disconnect, device number 69 [ 2334.792703][T12956] kvaser_usb 4-1:0.0: Cannot get software info, error -90 [ 2334.810798][T12956] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2335.091652][T12956] usb 4-1: USB disconnect, device number 80 [ 2336.565426][ T9033] usb 3-1: USB disconnect, device number 79 [ 2337.492595][T20436] overlayfs: missing 'lowerdir' [ 2338.079360][ T5343] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2338.417464][ T5343] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 2338.438318][ T5343] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2338.446168][ T5343] usb 5-1: language id specifier not provided by device, defaulting to English [ 2339.197304][ T5343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2339.229675][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4005'. [ 2339.247347][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.289271][ T5343] usb 5-1: Product: syz [ 2339.293541][ T5343] usb 5-1: Manufacturer: ㎳椔 [ 2339.298417][ T5343] usb 5-1: SerialNumber: syz [ 2339.384418][T20447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2340.411989][T12144] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2340.528238][T20477] fuse: Unknown parameter 'groXp_hgàEFu !'3ޑAKm&؉-O1HRe' [ 2340.616786][T20470] ALSA: seq fatal error: cannot create timer (-19) [ 2340.632136][T12144] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2340.736481][T12144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 48428, setting to 64 [ 2340.777527][T12144] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2340.831464][T12144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.896334][T12144] usb 2-1: config 0 descriptor?? [ 2340.897320][T20478] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2340.915471][T12144] smsusb:smsusb_probe: board id=8, interface number 0 [ 2340.960324][T12144] smsusb:smsusb_probe: Device initialized with return code -19 [ 2342.414572][T20488] overlayfs: missing 'lowerdir' [ 2342.437001][ T5343] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 2342.531264][ T5343] usb 5-1: USB disconnect, device number 70 [ 2342.566331][ T5343] usblp0: removed [ 2343.857151][ T46] usb 2-1: USB disconnect, device number 92 [ 2344.481086][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4021'. [ 2344.759412][ T5343] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2344.984383][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.991002][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.481400][ T5343] usb 2-1: config 52 has too many interfaces: 57, using maximum allowed: 32 [ 2345.500806][T20522] tmpfs: Unknown parameter '00000000000000000004' [ 2345.510380][T20522] overlay: Unknown parameter 'mask' [ 2345.689437][ T5343] usb 2-1: config 52 has an invalid descriptor of length 163, skipping remainder of the config [ 2345.705326][ T5343] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 57 [ 2345.772664][ T5343] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 2345.787454][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.815102][ T5343] usb 2-1: Product: syz [ 2345.832181][ T5343] usb 2-1: Manufacturer: syz [ 2345.844362][ T5343] usb 2-1: SerialNumber: syz [ 2346.271566][T20536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4028'. [ 2346.328070][T20532] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2346.381421][ T46] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2346.549419][ T8] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2346.591945][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2346.631696][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2346.664840][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2346.685195][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2346.704638][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2346.715076][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2346.737320][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2346.754764][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2346.774579][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2346.786293][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2346.805074][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2346.807501][ T46] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2346.840709][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2346.851531][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2346.883417][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 2347.094403][ T46] usb 5-1: SerialNumber: syz [ 2347.137448][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.235761][ T8] usb 1-1: config 0 descriptor?? [ 2348.473800][ T5343] usb 2-1: USB disconnect, device number 93 [ 2349.103818][ T8] logitech-djreceiver 0003:046D:C71B.002F: unbalanced collection at end of report description [ 2349.122833][ T8] logitech-djreceiver 0003:046D:C71B.002F: logi_dj_probe: parse failed [ 2349.133350][ T8] logitech-djreceiver 0003:046D:C71B.002F: probe with driver logitech-djreceiver failed with error -22 [ 2349.245451][ T46] usb 5-1: USB disconnect, device number 71 [ 2349.875253][ T9033] usb 1-1: USB disconnect, device number 45 [ 2350.101963][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4037'. [ 2350.429301][ T9033] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 2350.641877][ T9033] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2350.673280][ T9033] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2350.704754][ T9033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 2350.788509][T20574] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2350.797548][ T9033] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2350.847126][ T9033] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2350.865884][ T9033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.911139][ T9033] usb 3-1: Product: syz [ 2350.935760][ T9033] usb 3-1: Manufacturer: syz [ 2350.953588][ T9033] usb 3-1: SerialNumber: syz [ 2350.993131][ T9033] usb 3-1: config 0 descriptor?? [ 2350.999632][T20572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2351.008041][T20582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4042'. [ 2351.067791][T20587] netlink: 'syz.4.4044': attribute type 12 has an invalid length. [ 2351.136425][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2351.219823][ T9033] rc_core: IR keymap rc-imon-rsc not found [ 2351.252642][ T9033] Registered IR keymap rc-empty [ 2351.288081][ T9033] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2351.348907][ T9033] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input71 [ 2351.358807][T12144] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2351.452696][ T9033] usb 3-1: USB disconnect, device number 80 [ 2351.488862][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 2351.735126][T12144] usb 2-1: config 52 has too many interfaces: 57, using maximum allowed: 32 [ 2351.765144][T12144] usb 2-1: config 52 has an invalid descriptor of length 163, skipping remainder of the config [ 2352.556433][T12144] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 57 [ 2352.590694][T12144] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 2352.600831][T12144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2352.610047][T12144] usb 2-1: Product: syz [ 2352.614465][T12144] usb 2-1: Manufacturer: syz [ 2352.619789][T12144] usb 2-1: SerialNumber: syz [ 2353.214718][T20603] xt_bpf: check failed: parse error [ 2354.291568][T20605] netlink: 'syz.3.4051': attribute type 1 has an invalid length. [ 2354.300317][T20605] netlink: 9356 bytes leftover after parsing attributes in process `syz.3.4051'. [ 2354.309499][T20605] netlink: 'syz.3.4051': attribute type 1 has an invalid length. [ 2354.360953][T12144] usb 2-1: USB disconnect, device number 94 [ 2354.426972][T20609] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4052'. [ 2354.445786][T20612] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2354.452353][T20612] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2354.529390][T20612] vhci_hcd vhci_hcd.0: Device attached [ 2354.529573][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4050'. [ 2355.639828][T11210] usb 14-1: SetAddress Request (2) to port 0 [ 2355.695216][T11210] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2355.737865][T20613] vhci_hcd: connection closed [ 2355.739014][ T1128] vhci_hcd: stop threads [ 2355.772305][ T1128] vhci_hcd: release socket [ 2355.776989][ T1128] vhci_hcd: disconnect device [ 2356.665242][T20641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4059'. [ 2360.021656][T15680] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2360.033035][T20676] tmpfs: Unknown parameter 'usrquota5x}2aH";&-dv9tO5o$v"a:#qHR@E\kmߐ61քleVAGNzyoYf[ѻRjls~Ҫk Z`e' [ 2360.137524][T20676] gfs2: not a GFS2 filesystem [ 2360.819402][T11210] usb 14-1: device descriptor read/8, error -110 [ 2360.873274][T15680] usb 2-1: config 52 has too many interfaces: 57, using maximum allowed: 32 [ 2361.061114][T15680] usb 2-1: config 52 has an invalid descriptor of length 163, skipping remainder of the config [ 2361.075652][T15680] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 57 [ 2361.200441][T15680] usb 2-1: string descriptor 0 read error: -71 [ 2361.235862][T15680] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 2361.468010][T11210] usb usb14-port1: attempt power cycle [ 2361.531004][T15680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.564552][T15680] usb 2-1: can't set config #52, error -71 [ 2361.809592][T15680] usb 2-1: USB disconnect, device number 95 [ 2362.147350][T11210] usb usb14-port1: unable to enumerate USB device [ 2362.159524][ T5327] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2362.310399][T20699] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2362.379429][ T5327] usb 3-1: Using ep0 maxpacket: 16 [ 2362.396577][ T5327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2362.428276][ T5327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2362.448340][ T5327] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2362.482102][ T5327] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 2362.519324][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.549383][T12144] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2362.576320][ T5327] usb 3-1: config 0 descriptor?? [ 2362.901378][T12144] usb 2-1: Using ep0 maxpacket: 16 [ 2362.909335][T12144] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2362.918289][T12144] usb 2-1: config 0 has no interface number 0 [ 2362.925708][T12144] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2363.957805][T12144] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2363.969672][T12144] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2363.977792][T12144] usb 2-1: Product: syz [ 2363.999684][T12144] usb 2-1: SerialNumber: syz [ 2364.009821][T20697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4077'. [ 2364.016314][T12144] usb 2-1: config 0 descriptor?? [ 2364.025078][T20697] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4077'. [ 2364.061435][T12144] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 2364.620783][ T5327] usbhid 3-1:0.0: can't add hid device: -71 [ 2364.644764][ T5327] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2364.689153][ T5327] usb 3-1: USB disconnect, device number 81 [ 2364.787306][T15680] usb 2-1: USB disconnect, device number 96 [ 2367.770309][ T5343] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 2367.990193][ T5343] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2368.023850][ T5343] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2368.043335][ T5343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2368.043399][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.043423][ T5343] usb 4-1: Product: ᰉ [ 2368.043441][ T5343] usb 4-1: Manufacturer: 莟䠎붦⧲돶䅭睊曉샇喉镼祰Ჸヌ䇩蝪ダ᯷ᘞꫛﴺ융뉗鯙ᄖ㟩ᵣʍ먼ᬬ郂嶉ⴁ稡틋ᐼ뒋䷑콆臠ꀕ尊⽐睃䂰䉼鹯鄻꧃⡢闞퍈ޢႮג㶁毺腓ᆲ崾䦐爣➔窌鶓掃떙ཟ唽봖᝿춘ﺥ⌤Ḝ♀疜⭬㯹諜纆⨊ [ 2368.043474][ T5343] usb 4-1: SerialNumber: 喪ⷅ볽廬뇢⯼㾳톬늴왑ᵠ㾗⏉圤뭬쎈媨ᐠኢ榭ᩪ⽛淕稲꫗ċ쉢카믟虋ᠺ箨렃梣⢪↓裹䡁뷈賱籕薦喧傄糔㡈燐퐎䥙癌₃㍽띫⫲મ䖅ﳬꂒ싱樓设큛뒞⯿簃吞ꃖ╻봾쵲邋㟫嵕⴦ꨕ⾣劽躐䝍㩍臋멀냲烛ΐ䧘⤤⬬䴥먻굻弎⎬ꤽ唶羅අꃺ䁳鹉혞䝠篭 [ 2368.075909][T20745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2369.434914][ T5343] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 2369.439014][ T5343] usb 4-1: USB disconnect, device number 81 [ 2369.444176][ T5343] usblp0: removed [ 2369.606060][T20770] Bluetooth: MGMT ver 1.23 [ 2370.366537][T20760] tty tty4: ldisc open failed (-12), clearing slot 3 [ 2370.775174][T11210] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2370.899313][T17610] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2370.979356][T11210] usb 1-1: Using ep0 maxpacket: 16 [ 2370.988078][T11210] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 2371.006929][T11210] usb 1-1: config 0 has no interface number 0 [ 2371.039451][T11210] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2371.125624][T17610] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2371.136658][T11210] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2371.150166][T17610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.168024][T17610] usb 2-1: Product: syz [ 2371.176639][T11210] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2371.189238][T17610] usb 2-1: Manufacturer: syz [ 2371.194668][T17610] usb 2-1: SerialNumber: syz [ 2371.228377][T11210] usb 1-1: Product: syz [ 2371.238516][T11210] usb 1-1: SerialNumber: syz [ 2371.296978][T17610] usb 2-1: config 0 descriptor?? [ 2371.305901][T11210] usb 1-1: config 0 descriptor?? [ 2371.363296][T20794] netlink: 'syz.2.4106': attribute type 4 has an invalid length. [ 2371.416536][T11210] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 2371.583815][T17610] hso 2-1:0.0: Failed to find INT IN ep [ 2371.594505][T17610] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2371.861055][T20776] netlink: 'syz.1.4101': attribute type 1 has an invalid length. [ 2372.068637][T17610] usb 1-1: USB disconnect, device number 46 [ 2372.142505][ T5343] usb 2-1: USB disconnect, device number 97 [ 2372.798168][T20813] nullb0: AHDI p1 p2 [ 2372.819455][T20813] nullb0: p1 start 3945035761 is beyond EOD, truncated [ 2373.710929][T20813] vivid-003: disconnect [ 2373.856540][T20812] vivid-003: reconnect [ 2373.951880][T20821] FAULT_INJECTION: forcing a failure. [ 2373.951880][T20821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2373.989330][T20821] CPU: 1 UID: 0 PID: 20821 Comm: syz.0.4112 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2374.000142][T20821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2374.010199][T20821] Call Trace: [ 2374.013503][T20821] [ 2374.016435][T20821] dump_stack_lvl+0x241/0x360 [ 2374.021128][T20821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2374.026321][T20821] ? __pfx__printk+0x10/0x10 [ 2374.030910][T20821] ? __pfx_lock_release+0x10/0x10 [ 2374.035946][T20821] should_fail_ex+0x3b0/0x4e0 [ 2374.040641][T20821] _copy_from_iter+0x43a/0x1960 [ 2374.045514][T20821] ? __virt_addr_valid+0x183/0x530 [ 2374.050645][T20821] ? __pfx__copy_from_iter+0x10/0x10 [ 2374.055935][T20821] ? __virt_addr_valid+0x183/0x530 [ 2374.061049][T20821] ? __virt_addr_valid+0x183/0x530 [ 2374.066157][T20821] ? __virt_addr_valid+0x45f/0x530 [ 2374.071271][T20821] ? __check_object_size+0x49c/0x900 [ 2374.076572][T20821] kernfs_fop_write_iter+0x1aa/0x500 [ 2374.081869][T20821] do_iter_readv_writev+0x60a/0x890 [ 2374.087078][T20821] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2374.092814][T20821] ? rcu_read_lock_any_held+0xb7/0x160 [ 2374.098300][T20821] vfs_writev+0x37c/0xbb0 [ 2374.102640][T20821] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2374.108575][T20821] ? rcu_is_watching+0x15/0xb0 [ 2374.113364][T20821] ? __pfx_vfs_writev+0x10/0x10 [ 2374.118222][T20821] ? vfs_write+0x7c4/0xc90 [ 2374.122662][T20821] ? __fget_files+0x29/0x470 [ 2374.127268][T20821] do_writev+0x1b1/0x350 [ 2374.131522][T20821] ? __pfx_do_writev+0x10/0x10 [ 2374.136293][T20821] ? do_syscall_64+0x100/0x230 [ 2374.141071][T20821] ? do_syscall_64+0xb6/0x230 [ 2374.145756][T20821] do_syscall_64+0xf3/0x230 [ 2374.150266][T20821] ? clear_bhb_loop+0x35/0x90 [ 2374.154958][T20821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2374.160860][T20821] RIP: 0033:0x7f6af657def9 [ 2374.165286][T20821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2374.184911][T20821] RSP: 002b:00007f6af72db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2374.193331][T20821] RAX: ffffffffffffffda RBX: 00007f6af6735f80 RCX: 00007f6af657def9 [ 2374.201304][T20821] RDX: 0000000000000008 RSI: 0000000020001400 RDI: 0000000000000003 [ 2374.209278][T20821] RBP: 00007f6af72db090 R08: 0000000000000000 R09: 0000000000000000 [ 2374.217269][T20821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2374.225248][T20821] R13: 0000000000000000 R14: 00007f6af6735f80 R15: 00007ffc054c8b18 [ 2374.233256][T20821] [ 2374.261840][ T5327] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2374.568905][ T5327] usb 3-1: config 52 has too many interfaces: 57, using maximum allowed: 32 [ 2374.633645][ T5327] usb 3-1: config 52 has an invalid descriptor of length 163, skipping remainder of the config [ 2374.666811][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 2374.666831][ T29] audit: type=1326 audit(1726073801.291:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403b7def9 code=0x7ffc0000 [ 2374.719533][ T5327] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 57 [ 2374.747590][ T5327] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 2374.772646][ T5327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.797503][ T5327] usb 3-1: Product: syz [ 2374.813754][ T5327] usb 3-1: Manufacturer: syz [ 2374.829427][ T29] audit: type=1326 audit(1726073801.291:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403b7def9 code=0x7ffc0000 [ 2374.833148][ T5327] usb 3-1: SerialNumber: syz [ 2374.907128][ T29] audit: type=1326 audit(1726073801.291:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f8403b7def9 code=0x7ffc0000 [ 2374.964283][ T29] audit: type=1326 audit(1726073801.291:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403b7def9 code=0x7ffc0000 [ 2374.998058][ T29] audit: type=1326 audit(1726073801.291:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403b7def9 code=0x7ffc0000 [ 2375.167958][ T29] audit: type=1326 audit(1726073801.291:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8403b7c890 code=0x7ffc0000 [ 2375.297171][ T29] audit: type=1326 audit(1726073801.291:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8403b7f727 code=0x7ffc0000 [ 2375.571758][ T29] audit: type=1326 audit(1726073801.291:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8403b7def9 code=0x7ffc0000 [ 2375.607224][ T29] audit: type=1326 audit(1726073801.291:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8403b7f727 code=0x7ffc0000 [ 2376.531660][ T29] audit: type=1326 audit(1726073801.291:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20827 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8403b7cb8a code=0x7ffc0000 [ 2376.562971][ T5327] usb 3-1: USB disconnect, device number 82 [ 2376.974810][T20847] can: request_module (can-proto-0) failed. [ 2376.999541][T11210] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2377.359347][T11210] usb 4-1: Using ep0 maxpacket: 16 [ 2378.427776][T11210] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2378.441482][T11210] usb 4-1: config 0 has no interface number 0 [ 2378.447711][T11210] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2378.463549][T11210] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2378.507156][T11210] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2378.526807][T11210] usb 4-1: Product: syz [ 2378.536360][T11210] usb 4-1: SerialNumber: syz [ 2378.566443][T11210] usb 4-1: config 0 descriptor?? [ 2379.378502][T11210] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 2379.862870][T11210] usb 4-1: USB disconnect, device number 82 [ 2384.801449][T11976] Bluetooth: hci6: command 0x0406 tx timeout [ 2387.694683][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4135'. [ 2387.928228][T20900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4134'. [ 2391.419554][ T46] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2393.210681][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4147'. [ 2393.239331][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 2393.246067][ T46] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2393.257218][T20945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4148'. [ 2393.269478][ T46] usb 4-1: config 0 has no interface number 0 [ 2393.292800][ T46] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2393.354162][ T46] usb 4-1: string descriptor 0 read error: -71 [ 2393.382468][ T46] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2393.415206][ T46] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2393.449086][ T46] usb 4-1: config 0 descriptor?? [ 2394.331210][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4149'. [ 2394.350392][ T46] usb 4-1: can't set config #0, error -71 [ 2394.371732][ T46] usb 4-1: USB disconnect, device number 83 [ 2394.824982][T20962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4153'. [ 2396.299721][ T25] kworker/1:0 (25) used greatest stack depth: 18216 bytes left [ 2396.309027][T11210] IPVS: starting estimator thread 0... [ 2396.581604][T20976] IPVS: using max 24 ests per chain, 57600 per kthread [ 2397.220137][ T8] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2397.898182][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 2397.912086][ T8] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 2397.944840][ T8] usb 4-1: config 0 has no interface number 0 [ 2397.998352][ T8] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2398.027942][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2398.045927][ T8] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2398.074801][ T8] usb 4-1: Product: syz [ 2398.086850][ T8] usb 4-1: SerialNumber: syz [ 2398.126160][ T8] usb 4-1: config 0 descriptor?? [ 2398.154928][ T8] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 2398.450447][ T5327] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2398.573127][T21000] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 2398.586292][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4166'. [ 2398.631145][ T5343] usb 4-1: USB disconnect, device number 84 [ 2398.669681][ T5327] usb 3-1: Using ep0 maxpacket: 32 [ 2398.681896][ T5327] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2398.692619][ T5327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.751369][ T5327] usb 3-1: config 0 descriptor?? [ 2398.823177][ T5327] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2400.291830][ T5327] gspca_sunplus: reg_r err -110 [ 2400.296780][ T5327] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 2400.680121][T20996] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 2404.607197][T21026] TCP: TCP_TX_DELAY enabled [ 2404.704586][ T8] usb 3-1: USB disconnect, device number 83 [ 2404.894295][T21032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4175'. [ 2404.927736][T21032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2404.994878][T21032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2405.002233][T21032] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 2405.013506][T21032] bond1: (slave vti0): Error -95 calling set_mac_address [ 2406.119344][ T8] IPVS: starting estimator thread 0... [ 2406.971992][T21042] IPVS: using max 18 ests per chain, 43200 per kthread [ 2407.313932][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2407.323503][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2409.529509][ T1172] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2409.589319][ T5327] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2409.755762][ T1172] usb 5-1: Using ep0 maxpacket: 16 [ 2409.769490][ T5327] usb 1-1: device descriptor read/64, error -71 [ 2409.771823][ T1172] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 2409.837694][ T1172] usb 5-1: config 0 has no interface number 0 [ 2409.858035][ T1172] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2410.705285][ T5327] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2410.869585][ T5327] usb 1-1: device descriptor read/64, error -71 [ 2410.879554][ T1172] usb 5-1: string descriptor 0 read error: -71 [ 2410.885859][ T1172] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2410.939591][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2410.958789][ T1172] usb 5-1: config 0 descriptor?? [ 2410.979466][ T1172] usb 5-1: can't set config #0, error -71 [ 2411.009901][ T5327] usb usb1-port1: attempt power cycle [ 2411.011481][ T1172] usb 5-1: USB disconnect, device number 72 [ 2411.062011][T21074] team_slave_0: entered promiscuous mode [ 2411.068077][T21074] team_slave_1: entered promiscuous mode [ 2411.100267][T21074] team_slave_0: left promiscuous mode [ 2411.105808][T21074] team_slave_1: left promiscuous mode [ 2411.258294][T21078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4186'. [ 2411.268101][T21081] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 2411.469403][T15680] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2411.592934][T21084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4188'. [ 2411.662614][T15680] usb 3-1: config 52 has too many interfaces: 57, using maximum allowed: 32 [ 2411.688803][T15680] usb 3-1: config 52 has an invalid descriptor of length 163, skipping remainder of the config [ 2411.721406][T15680] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 57 [ 2411.746550][T15680] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 2411.781763][T15680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.993462][T15680] usb 3-1: Product: syz [ 2412.018819][T15680] usb 3-1: Manufacturer: syz [ 2412.033100][T15680] usb 3-1: SerialNumber: syz [ 2413.049562][T21096] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4193'. [ 2413.063998][T21096] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4193'. [ 2413.948774][T21100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4191'. [ 2415.194266][T15680] usb 3-1: USB disconnect, device number 84 [ 2415.431052][ T5327] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2415.639764][ T5327] usb 5-1: Using ep0 maxpacket: 16 [ 2415.646731][ T5327] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 2415.667944][ T5327] usb 5-1: config 0 has no interface number 0 [ 2415.709331][T15680] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2415.719446][ T5327] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2415.751536][ T5327] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2415.764648][ T5327] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2415.782395][ T5327] usb 5-1: Product: syz [ 2415.789423][ T5327] usb 5-1: SerialNumber: syz [ 2415.817539][ T5327] usb 5-1: config 0 descriptor?? [ 2415.855846][ T5327] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 2415.890781][T21123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4201'. [ 2415.919396][T15680] usb 3-1: Using ep0 maxpacket: 16 [ 2415.928317][T15680] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2415.947433][T15680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.979846][T15680] usb 3-1: Product: syz [ 2415.984089][T15680] usb 3-1: Manufacturer: syz [ 2415.987557][T21122] netlink: 828 bytes leftover after parsing attributes in process `syz.0.4200'. [ 2415.988691][T15680] usb 3-1: SerialNumber: syz [ 2416.044842][T15680] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2416.107315][T15680] r8152-cfgselector 3-1: config 0 descriptor?? [ 2416.404935][ T5327] usb 5-1: USB disconnect, device number 73 [ 2417.288245][T21132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4204'. [ 2418.647800][T21145] syz.1.4205: attempt to access beyond end of device [ 2418.647800][T21145] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2418.699319][T21145] SQUASHFS error: Failed to read block 0x0: -5 [ 2418.713366][T21145] unable to read squashfs_super_block [ 2418.953052][ T1172] r8152-cfgselector 3-1: USB disconnect, device number 85 [ 2419.075522][T21156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4209'. [ 2420.226896][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 2420.226922][ T29] audit: type=1326 audit(1726073846.861:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21158 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4537def9 code=0x7ffc0000 [ 2420.403788][ T29] audit: type=1326 audit(1726073846.861:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21158 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4537def9 code=0x7ffc0000 [ 2420.654924][ T29] audit: type=1326 audit(1726073846.961:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21158 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5c4537def9 code=0x7ffc0000 [ 2420.686408][ T29] audit: type=1326 audit(1726073846.961:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21158 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4537def9 code=0x7ffc0000 [ 2421.005616][ T29] audit: type=1326 audit(1726073846.961:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21158 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4537def9 code=0x7ffc0000 [ 2422.378550][T21181] FAULT_INJECTION: forcing a failure. [ 2422.378550][T21181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2422.468383][T21181] CPU: 1 UID: 0 PID: 21181 Comm: syz.4.4216 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2422.479278][T21181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2422.489331][T21181] Call Trace: [ 2422.492608][T21181] [ 2422.495543][T21181] dump_stack_lvl+0x241/0x360 [ 2422.500233][T21181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2422.505465][T21181] ? __pfx__printk+0x10/0x10 [ 2422.510067][T21181] ? snprintf+0xda/0x120 [ 2422.514350][T21181] should_fail_ex+0x3b0/0x4e0 [ 2422.519041][T21181] _copy_to_user+0x2f/0xb0 [ 2422.523482][T21181] simple_read_from_buffer+0xca/0x150 [ 2422.528869][T21181] proc_fail_nth_read+0x1ec/0x260 [ 2422.533901][T21181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2422.539452][T21181] ? rw_verify_area+0x520/0x6b0 [ 2422.544308][T21181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2422.549863][T21181] vfs_read+0x204/0xbc0 [ 2422.554038][T21181] ? __pfx_lock_release+0x10/0x10 [ 2422.559093][T21181] ? __pfx_vfs_read+0x10/0x10 [ 2422.563778][T21181] ? __fget_files+0x29/0x470 [ 2422.568394][T21181] ? __fget_files+0x3f6/0x470 [ 2422.573079][T21181] ksys_read+0x1a0/0x2c0 [ 2422.577329][T21181] ? __pfx_ksys_read+0x10/0x10 [ 2422.582091][T21181] ? do_syscall_64+0x100/0x230 [ 2422.586872][T21181] ? do_syscall_64+0xb6/0x230 [ 2422.591544][T21181] do_syscall_64+0xf3/0x230 [ 2422.596047][T21181] ? clear_bhb_loop+0x35/0x90 [ 2422.600736][T21181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2422.606684][T21181] RIP: 0033:0x7f8403b7c93c [ 2422.611106][T21181] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2422.630719][T21181] RSP: 002b:00007f84035de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2422.639137][T21181] RAX: ffffffffffffffda RBX: 00007f8403d36058 RCX: 00007f8403b7c93c [ 2422.647132][T21181] RDX: 000000000000000f RSI: 00007f84035de0a0 RDI: 0000000000000003 [ 2422.655098][T21181] RBP: 00007f84035de090 R08: 0000000000000000 R09: 0000000000000000 [ 2422.663097][T21181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2422.671083][T21181] R13: 0000000000000000 R14: 00007f8403d36058 R15: 00007ffe12d007a8 [ 2422.679071][T21181] [ 2424.207448][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4217'. [ 2424.549641][T17610] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2424.757135][T21202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4223'. [ 2424.811228][T17610] usb 1-1: Using ep0 maxpacket: 16 [ 2424.914498][T17610] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 2424.944364][T17610] usb 1-1: config 0 has no interface number 0 [ 2425.160081][T17610] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2426.088427][T17610] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2426.107153][T17610] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2426.141589][T17610] usb 1-1: Product: syz [ 2426.145821][T17610] usb 1-1: SerialNumber: syz [ 2426.164551][T17610] usb 1-1: config 0 descriptor?? [ 2426.336323][T17610] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 2427.408093][T21211] ubi: mtd0 is already attached to ubi0 [ 2427.989523][ T1172] usb 1-1: USB disconnect, device number 50 [ 2429.059349][ T46] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2429.067115][T15680] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2430.049980][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 2430.055311][T15680] usb 3-1: Using ep0 maxpacket: 8 [ 2430.064867][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2430.079796][T15680] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 2430.095969][T15680] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 2430.096077][ T46] usb 2-1: config 125 has an invalid interface number: 27 but max is 0 [ 2430.112961][T15680] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 2430.144594][T15680] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 2430.156835][ T46] usb 2-1: config 125 has no interface number 0 [ 2430.167069][ T46] usb 2-1: config 125 interface 27 has no altsetting 0 [ 2430.179991][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 2430.202279][ T46] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 2430.219821][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.228119][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 2430.256522][ T46] usb 2-1: Product: syz [ 2430.261812][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59391, setting to 1024 [ 2430.273897][ T46] usb 2-1: Manufacturer: syz [ 2430.286835][ T46] usb 2-1: SerialNumber: syz [ 2430.307548][T15680] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 2430.319503][T17610] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 2430.326769][T15680] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 2430.338529][T15680] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 2430.411854][T15680] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 2430.433042][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 2430.461170][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 2430.498989][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59391, setting to 1024 [ 2430.521841][T17610] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2430.545349][T17610] usb 4-1: config 0 has no interface number 0 [ 2430.545747][ T46] hub 2-1:125.27: bad descriptor, ignoring hub [ 2430.563452][T15680] usb 3-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 2430.579562][T17610] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2430.584887][T15680] usb 3-1: config 246 descriptor has 1 excess byte, ignoring [ 2430.600103][ T46] hub 2-1:125.27: probe with driver hub failed with error -5 [ 2430.608564][ T46] sierra 2-1:125.27: Sierra USB modem converter detected [ 2430.615787][T17610] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2430.637007][T15680] usb 3-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 2430.656896][ T46] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 2430.678254][T15680] usb 3-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 2430.678262][T17610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2430.678291][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 2430.900519][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 2430.913090][T15680] usb 3-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59391, setting to 1024 [ 2430.935247][ T46] usb 2-1: USB disconnect, device number 98 [ 2430.944682][ T46] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2430.954104][ T46] sierra 2-1:125.27: device disconnected [ 2431.011481][T15680] usb 3-1: string descriptor 0 read error: -22 [ 2431.213993][T17610] usb 4-1: config 0 descriptor?? [ 2431.227338][T15680] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2431.243223][T15680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2431.257170][T17610] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2431.327854][T15680] usb 3-1: can't set config #246, error -71 [ 2431.347938][T15680] usb 3-1: USB disconnect, device number 86 [ 2431.446431][T21250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4236'. [ 2431.565081][ T46] usb 4-1: USB disconnect, device number 85 [ 2431.580485][T21250] vlan2: entered allmulticast mode [ 2431.617622][ T46] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 2432.966560][T21262] xt_TCPMSS: Only works on TCP SYN packets [ 2433.165077][T21257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4237'. [ 2433.309746][ T1172] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2433.509270][ T1172] usb 5-1: Using ep0 maxpacket: 16 [ 2433.523690][ T1172] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 2433.532081][ T1172] usb 5-1: config 0 has no interface number 0 [ 2433.538271][ T1172] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2433.563422][ T1172] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2433.584904][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2433.604481][ T1172] usb 5-1: Product: syz [ 2433.615093][ T1172] usb 5-1: SerialNumber: syz [ 2433.633037][ T1172] usb 5-1: config 0 descriptor?? [ 2433.651193][ T1172] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 2435.990568][ T46] usb 5-1: USB disconnect, device number 74 [ 2436.449369][ T1172] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2436.913775][ T1172] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 2436.922992][ T1172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.931233][ T1172] usb 4-1: Product: syz [ 2436.936187][ T1172] usb 4-1: Manufacturer: syz [ 2436.940908][ T1172] usb 4-1: SerialNumber: syz [ 2437.181118][ T1172] usb 4-1: config 0 descriptor?? [ 2437.497567][T21284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2437.550066][T21284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2437.569460][T21284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2437.609529][T21284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2437.622077][ T1172] usb 4-1: USB disconnect, device number 87 [ 2438.706834][T21307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4252'. [ 2442.325899][T21319] netlink: 'syz.2.4253': attribute type 1 has an invalid length. [ 2442.351497][T21319] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4253'. [ 2442.417558][T21319] netlink: 'syz.2.4253': attribute type 1 has an invalid length. [ 2442.491839][T21324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4254'. [ 2449.259957][ T1172] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2449.737153][T21356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4265'. [ 2451.302401][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 2452.939819][ T8] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2452.968526][T21386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4271'. [ 2453.155251][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 2453.208530][ T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 2453.234898][ T8] usb 5-1: config 0 has no interface number 0 [ 2453.264153][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2453.298237][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2453.328375][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2453.345063][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2453.409335][ T8] usb 5-1: Product: syz [ 2453.443721][ T8] usb 5-1: SerialNumber: syz [ 2453.484202][ T8] usb 5-1: config 0 descriptor?? [ 2453.510669][ T8] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 2453.532592][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input72 [ 2453.649800][ T5343] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2453.735325][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 2453.790095][ T1172] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2453.860630][ T5343] usb 1-1: Using ep0 maxpacket: 16 [ 2453.871071][ T5343] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2453.893887][ T5343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2454.104263][ T5343] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2454.104298][ T5343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.104341][ T5343] usb 1-1: Product: syz [ 2454.104358][ T5343] usb 1-1: Manufacturer: syz [ 2454.104375][ T5343] usb 1-1: SerialNumber: syz [ 2454.111935][ T5343] usb 1-1: config 0 descriptor?? [ 2454.329419][ T1172] usb 3-1: Using ep0 maxpacket: 16 [ 2454.450509][T11210] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2455.144308][ T5343] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2455.154365][ T5343] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 2455.168255][ T1172] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 2455.205165][ T1172] usb 3-1: config 0 has no interface number 0 [ 2455.237738][ T1172] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2455.275142][T11210] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2455.298433][T11210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2455.309984][ T1172] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2455.329319][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2455.348531][T11210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2455.359257][ T1172] usb 3-1: Product: syz [ 2455.363624][ T1172] usb 3-1: SerialNumber: syz [ 2455.600277][ T1172] usb 3-1: config 0 descriptor?? [ 2455.605500][T11210] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2455.843266][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2455.844064][ T8] usb 5-1: USB disconnect, device number 75 [ 2455.850258][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2455.931188][ T8] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2456.150776][T11210] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2456.220405][T11210] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2456.228615][T11210] usb 2-1: Manufacturer: syz [ 2456.237067][T11210] usb 2-1: config 0 descriptor?? [ 2456.791155][ T5343] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2456.802314][ T1172] usb 3-1: can't set config #0, error -71 [ 2456.807039][ T5343] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 2456.840428][ T5343] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 2456.850016][ T5343] em28xx 1-1:0.0: No AC97 audio processor [ 2456.878254][ T1172] usb 3-1: USB disconnect, device number 88 [ 2457.005901][T21410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4278'. [ 2457.040679][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4277'. [ 2457.643041][T11210] appleir 0003:05AC:8243.0030: unknown main item tag 0x0 [ 2457.653754][T11210] appleir 0003:05AC:8243.0030: No inputs registered, leaving [ 2457.670833][T11210] appleir 0003:05AC:8243.0030: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2458.119934][T18921] usb 2-1: USB disconnect, device number 99 [ 2459.420534][T18921] usb 1-1: USB disconnect, device number 51 [ 2459.570970][T18921] em28xx 1-1:0.0: Disconnecting em28xx [ 2460.018013][T18921] em28xx 1-1:0.0: Freeing device [ 2460.865542][T21444] VFS: could not find a valid V7 on nullb0. [ 2462.309337][ T29] audit: type=1326 audit(1726073888.941:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21450 comm="syz.2.4288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c4537def9 code=0x0 [ 2462.432490][T21458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4290'. [ 2462.668458][T15680] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2463.891774][T15680] usb 2-1: Using ep0 maxpacket: 16 [ 2463.916866][T15680] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2463.937462][T15680] usb 2-1: config 0 has no interface number 0 [ 2463.962327][T15680] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2464.005321][T15680] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2464.033442][T15680] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2464.062319][T15680] usb 2-1: Product: syz [ 2464.082596][T15680] usb 2-1: SerialNumber: syz [ 2464.098394][T15680] usb 2-1: config 0 descriptor?? [ 2464.866544][T15680] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 2465.213118][T21489] VFS: could not find a valid V7 on nullb0. [ 2466.935188][T15680] usb 2-1: USB disconnect, device number 100 [ 2467.070070][T21492] netlink: 'syz.0.4298': attribute type 30 has an invalid length. [ 2467.890588][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.903012][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.482846][T21507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4303'. [ 2468.509842][T21505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4304'. [ 2468.575916][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 2468.586782][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4301'. [ 2468.989263][T11210] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2469.316659][ T5343] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2469.351269][T11210] usb 2-1: config index 0 descriptor too short (expected 7718, got 38) [ 2469.388433][T21514] tmpfs: Unknown parameter 'usrquota5x}2aH";&-dv9tO5o$v"a:#qHR@E\kmߐ61քleVAGNzyoYf[ѻRjls~Ҫk Z`e' [ 2469.428468][T11210] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 2469.442099][T11210] usb 2-1: config 0 interface 0 altsetting 153 has an invalid descriptor for endpoint zero, skipping [ 2469.489035][T11210] usb 2-1: config 0 interface 0 altsetting 153 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 2469.519724][T11210] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2469.526419][T11210] usb 2-1: New USB device found, idVendor=0403, idProduct=ff00, bcdDevice=5c.04 [ 2469.540200][ T5343] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2469.584707][T21513] gfs2: not a GFS2 filesystem [ 2469.681339][T11210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2469.958680][ T5343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2469.964297][T11210] usb 2-1: config 0 descriptor?? [ 2469.975643][T11210] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2470.032279][T11210] ftdi_sio ttyUSB0: unknown device type: 0x5c04 [ 2470.039042][ T5343] usb 1-1: Product: syz [ 2470.069964][ T5343] usb 1-1: Manufacturer: syz [ 2470.074629][ T5343] usb 1-1: SerialNumber: syz [ 2470.140962][ T5343] usb 1-1: config 0 descriptor?? [ 2470.446992][T18921] usb 1-1: USB disconnect, device number 52 [ 2471.577853][ T9033] usb 2-1: USB disconnect, device number 101 [ 2471.602708][ T9033] ftdi_sio 2-1:0.0: device disconnected [ 2471.818449][T21533] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4311'. [ 2473.225684][T21547] IPVS: Error connecting to the multicast addr [ 2473.581191][T21552] VFS: could not find a valid V7 on nullb0. [ 2474.533234][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4316'. [ 2476.616854][T21573] veth0_to_bridge: entered promiscuous mode [ 2476.748025][T21583] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4324'. [ 2476.999387][ T1172] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 2477.083846][T21588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4325'. [ 2477.402242][ T1172] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2477.951501][ T1172] usb 1-1: not running at top speed; connect to a high speed hub [ 2478.019630][ T1172] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 2478.028055][ T1172] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 2478.055874][ T1172] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2478.078749][ T1172] usb 1-1: config 129 has no interface number 0 [ 2478.098856][ T1172] usb 1-1: config 129 has no interface number 1 [ 2478.129321][ T1172] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2478.208878][ T1172] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2478.279451][ T1172] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2478.370439][ T1172] usb 1-1: config 129 interface 135 has no altsetting 0 [ 2478.413586][ T1172] usb 1-1: config 129 interface 5 has no altsetting 0 [ 2478.591543][ T1172] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 2478.604787][T21599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4329'. [ 2478.673293][ T1172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.697677][ T1172] usb 1-1: Product: syz [ 2478.707510][ T1172] usb 1-1: Manufacturer: syz [ 2478.724650][ T1172] usb 1-1: SerialNumber: syz [ 2478.759085][T11976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2478.773938][T11976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2478.790579][T11976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2478.803260][T11976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2478.817488][T11976] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2478.825978][T15680] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2478.844405][T11976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2479.012299][T15680] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2479.036992][T15680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 48428, setting to 64 [ 2479.094202][ T1172] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2479.111771][T15680] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2479.122858][ T1172] usb 1-1: MIDIStreaming interface descriptor not found [ 2479.145286][T15680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2479.147034][T21572] veth0_to_bridge: left promiscuous mode [ 2479.237560][T15680] usb 3-1: config 0 descriptor?? [ 2479.270132][ T1172] usb 1-1: USB disconnect, device number 53 [ 2479.292343][T15680] smsusb:smsusb_probe: board id=8, interface number 0 [ 2479.343632][T15680] smsusb:smsusb_probe: Device initialized with return code -19 [ 2480.334298][T21604] chnl_net:caif_netlink_parms(): no params data found [ 2480.556820][T21613] IPv6: addrconf: prefix option has invalid lifetime [ 2480.848139][T21604] bridge0: port 1(bridge_slave_0) entered blocking state [ 2480.871070][T21604] bridge0: port 1(bridge_slave_0) entered disabled state [ 2481.020339][ T8] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2481.031758][T11976] Bluetooth: hci0: command tx timeout [ 2481.032545][T21604] bridge_slave_0: entered allmulticast mode [ 2481.054359][T21604] bridge_slave_0: entered promiscuous mode [ 2481.095297][T21604] bridge0: port 2(bridge_slave_1) entered blocking state [ 2481.107960][T21604] bridge0: port 2(bridge_slave_1) entered disabled state [ 2481.121760][T21604] bridge_slave_1: entered allmulticast mode [ 2481.137253][T21604] bridge_slave_1: entered promiscuous mode [ 2481.225113][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 2481.262480][T21604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2481.265623][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 2481.298742][T21604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2481.299581][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.342120][ T8] usb 4-1: Product: syz [ 2481.354877][ T8] usb 4-1: Manufacturer: syz [ 2481.365155][ T8] usb 4-1: SerialNumber: syz [ 2481.534736][ T8] usb 4-1: config 0 descriptor?? [ 2481.544941][ T8] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 2481.906472][T15680] usb 3-1: USB disconnect, device number 89 [ 2481.918961][T21604] team0: Port device team_slave_0 added [ 2481.998071][T21604] team0: Port device team_slave_1 added [ 2482.067533][T21620] 9pnet: p9_errstr2errno: server reported unknown error ΜN/Y80娪m=|g [ 2482.642207][T21643] VFS: could not find a valid V7 on nullb0. [ 2482.916673][ T8] pwc: Failed to set LED on/off time (-71) [ 2482.942262][ T8] pwc: send_video_command error -71 [ 2482.948547][ T8] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2482.966731][ T8] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 2482.978336][T21604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2483.001197][T21604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2483.042443][ T8] usb 4-1: USB disconnect, device number 88 [ 2483.059986][T11976] Bluetooth: hci0: command tx timeout [ 2483.075579][T21604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2483.145342][T21651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4339'. [ 2483.333286][T21604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2483.357806][T21604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2483.974897][T21604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2484.196670][T21604] hsr_slave_0: entered promiscuous mode [ 2484.238478][T21604] hsr_slave_1: entered promiscuous mode [ 2484.324895][T21604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2484.345665][T21604] Cannot create hsr debugfs directory [ 2486.171249][T11976] Bluetooth: hci0: command tx timeout [ 2488.261025][T11976] Bluetooth: hci0: command tx timeout [ 2491.604475][T21604] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.093351][ T8] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2492.262037][T21604] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2492.293585][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2492.320487][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 48428, setting to 64 [ 2492.356005][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2492.378048][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.406032][ T8] usb 1-1: config 0 descriptor?? [ 2492.436216][ T8] smsusb:smsusb_probe: board id=8, interface number 0 [ 2492.464356][ T8] smsusb:smsusb_probe: Device initialized with return code -19 [ 2492.614598][T21604] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2493.298274][T21694] VFS: could not find a valid V7 on nullb0. [ 2493.522587][T12144] usb 1-1: USB disconnect, device number 54 [ 2494.171128][T21604] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2495.188131][T21703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2495.472095][T21604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2495.535182][T21604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2495.558339][T21604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2495.587344][T21604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2500.071664][T21604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2500.145556][T21604] 8021q: adding VLAN 0 to HW filter on device team0 [ 2500.390981][T13472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2500.398207][T13472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2500.691079][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 2500.698318][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2501.131234][T21733] VFS: could not find a valid V7 on nullb0. [ 2502.168405][T11210] IPVS: starting estimator thread 0... [ 2502.400187][T21743] IPVS: using max 29 ests per chain, 69600 per kthread [ 2502.808816][T21604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2502.937787][T12144] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2503.338469][T12144] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2503.923591][T21762] netlink: 'syz.1.4365': attribute type 1 has an invalid length. [ 2503.931658][T21762] netlink: 9356 bytes leftover after parsing attributes in process `syz.1.4365'. [ 2503.941482][T21762] netlink: 'syz.1.4365': attribute type 1 has an invalid length. [ 2504.615582][T12144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 48428, setting to 64 [ 2504.632428][T12144] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2504.649283][T12144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.670249][T12144] usb 1-1: config 0 descriptor?? [ 2504.694578][T12144] smsusb:smsusb_probe: board id=8, interface number 0 [ 2504.705472][T12144] smsusb:smsusb_probe: Device initialized with return code -19 [ 2504.894782][T21604] veth0_vlan: entered promiscuous mode [ 2505.015657][T21604] veth1_vlan: entered promiscuous mode [ 2505.435730][T21604] veth0_macvtap: entered promiscuous mode [ 2505.446292][T21604] veth1_macvtap: entered promiscuous mode [ 2505.464359][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2505.476336][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.486500][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2505.498549][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.525470][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2505.536021][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.547118][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2505.557810][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.567966][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2505.578652][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.591318][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2505.602812][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.614040][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2505.631525][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.643968][T21604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2505.654328][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2505.664825][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.674774][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2505.685307][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.695794][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2505.706790][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.718698][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2505.730030][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.740010][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2505.751479][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.785988][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2505.813116][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.830600][T21604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2505.841349][T21604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2505.854911][T21604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2505.883101][T21604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2505.902133][T21604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2505.918675][T21604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2505.933379][T21604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2506.362856][T11210] usb 1-1: USB disconnect, device number 55 [ 2506.655684][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2506.689383][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2506.745245][T21792] VFS: could not find a valid V7 on nullb0. [ 2506.841782][T21794] nfs: Unknown parameter '0xffffffffffffffff˒u11 [ 2506.841782][T21794] ' [ 2506.846237][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2506.898073][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2507.137510][T21796] No control pipe specified [ 2508.366740][T21807] netlink: 'syz.2.4375': attribute type 1 has an invalid length. [ 2508.375366][T21807] netlink: 9356 bytes leftover after parsing attributes in process `syz.2.4375'. [ 2508.385157][T21807] netlink: 'syz.2.4375': attribute type 1 has an invalid length. [ 2509.790210][ T5343] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2510.336798][ T5343] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 2510.362385][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 48428, setting to 64 [ 2510.380746][ T5343] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2510.390701][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.411111][ T5343] usb 3-1: config 0 descriptor?? [ 2510.420250][ T5343] smsusb:smsusb_probe: board id=8, interface number 0 [ 2510.437881][ T5343] smsusb:smsusb_probe: Device initialized with return code -19 [ 2510.894665][T21838] VFS: could not find a valid V7 on nullb0. [ 2511.679282][ T9033] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2514.199374][ T9033] usb 1-1: Using ep0 maxpacket: 32 [ 2514.205727][ T5343] usb 3-1: USB disconnect, device number 90 [ 2514.241931][ T9033] usb 1-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 2514.293555][ T9033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2514.458651][ T9033] usb 1-1: Product: syz [ 2514.462975][ T9033] usb 1-1: Manufacturer: syz [ 2514.467599][ T9033] usb 1-1: SerialNumber: syz [ 2514.478334][ T9033] usb 1-1: config 0 descriptor?? [ 2515.231147][T21863] netlink: 'syz.3.4392': attribute type 1 has an invalid length. [ 2515.238943][T21863] netlink: 9356 bytes leftover after parsing attributes in process `syz.3.4392'. [ 2515.248747][T21863] netlink: 'syz.3.4392': attribute type 1 has an invalid length. [ 2515.605297][ T9033] usb 1-1: can't set config #0, error -71 [ 2515.636163][ T9033] usb 1-1: USB disconnect, device number 56 [ 2516.988911][T21874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4398'. [ 2517.712950][T21890] VFS: could not find a valid V7 on nullb0. [ 2518.159908][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4400'. [ 2518.194741][T21893] fuse: Bad value for 'user_id' [ 2518.202871][T21893] fuse: Bad value for 'user_id' [ 2518.549530][T11210] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2661.909112][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2661.916110][ C0] rcu: (detected by 0, t=10502 jiffies, g=216381, q=440 ncpus=2) [ 2661.923937][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295203277-4295192775), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 2661.937318][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g216381 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2661.948614][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2661.958593][ C0] rcu: RCU grace-period kthread stack dump: [ 2661.964493][ C0] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2661.976253][ C0] Call Trace: [ 2661.979544][ C0] [ 2661.982529][ C0] __schedule+0x17ae/0x4a10 [ 2661.987087][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2661.993451][ C0] ? __pfx___schedule+0x10/0x10 [ 2661.998337][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2662.003563][ C0] ? mark_lock+0x9a/0x350 [ 2662.007927][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 2662.013078][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2662.018862][ C0] irqentry_exit+0x5e/0x90 [ 2662.023316][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2662.029326][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 2662.034637][ C0] Code: 2b 00 74 08 4c 89 f7 e8 7a e1 87 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 2662.054257][ C0] RSP: 0018:ffffc900001675c0 EFLAGS: 00000206 [ 2662.060353][ C0] RAX: 0000000000000001 RBX: 1ffff9200002cec4 RCX: 8d3d6174948c6d00 [ 2662.068360][ C0] RDX: dffffc0000000000 RSI: ffffffff8beae6e0 RDI: ffffffff8c3fbb00 [ 2662.076363][ C0] RBP: ffffc90000167708 R08: ffffffff93fa6847 R09: 1ffffffff27f4d08 [ 2662.084410][ C0] R10: dffffc0000000000 R11: fffffbfff27f4d09 R12: 1ffff9200002cec0 [ 2662.092593][ C0] R13: dffffc0000000000 R14: ffffc90000167620 R15: 0000000000000246 [ 2662.100620][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2662.105689][ C0] ? __pfx_validate_chain+0x10/0x10 [ 2662.110920][ C0] ? __lock_acquire+0x137a/0x2040 [ 2662.115999][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 2662.121588][ C0] debug_objects_fill_pool+0x9f/0x9b0 [ 2662.126986][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 2662.132559][ C0] ? look_up_lock_class+0x77/0x160 [ 2662.137727][ C0] ? register_lock_class+0x102/0x980 [ 2662.143057][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 2662.149064][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2662.154121][ C0] ? mark_lock+0x9a/0x350 [ 2662.158498][ C0] ? __lock_acquire+0x137a/0x2040 [ 2662.163565][ C0] debug_object_assert_init+0x12e/0x440 [ 2662.169161][ C0] ? __pfx_debug_object_assert_init+0x10/0x10 [ 2662.175272][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2662.180343][ C0] __try_to_del_timer_sync+0xaa/0x340 [ 2662.185753][ C0] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 2662.191790][ C0] ? __timer_delete_sync+0x15c/0x310 [ 2662.197117][ C0] __timer_delete_sync+0x245/0x310 [ 2662.202270][ C0] ? __pfx___timer_delete_sync+0x10/0x10 [ 2662.207929][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2662.214307][ C0] ? schedule+0x90/0x320 [ 2662.218585][ C0] ? schedule+0x90/0x320 [ 2662.222855][ C0] ? schedule+0x155/0x320 [ 2662.227220][ C0] schedule_timeout+0x1c8/0x310 [ 2662.232099][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2662.237493][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2662.242812][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 2662.248393][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 2662.253271][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2662.258493][ C0] ? rcu_gp_init+0x1256/0x1630 [ 2662.263293][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2662.268258][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2662.273569][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2662.279506][ C0] ? finish_swait+0xd4/0x1e0 [ 2662.284137][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 2662.288759][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2662.294001][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2662.299931][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2662.305125][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2662.310365][ C0] kthread+0x2f0/0x390 [ 2662.314478][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2662.319701][ C0] ? __pfx_kthread+0x10/0x10 [ 2662.324359][ C0] ret_from_fork+0x4b/0x80 [ 2662.328815][ C0] ? __pfx_kthread+0x10/0x10 [ 2662.333433][ C0] ret_from_fork_asm+0x1a/0x30 [ 2662.338236][ C0] [ 2662.341268][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2662.347601][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 2662.357935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2662.368007][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 2662.373321][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d b5 2f 98 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 2662.392953][ C0] RSP: 0018:ffffffff8e407ca8 EFLAGS: 00000246 [ 2662.399082][ C0] RAX: ffffffff8e494680 RBX: ffff888021291864 RCX: 0000000002dc8179 [ 2662.407069][ C0] RDX: 0000000000000001 RSI: ffff888021291800 RDI: ffff888021291864 [ 2662.415077][ C0] RBP: 000000000003a638 R08: ffff8880b8837c7b R09: 1ffff11017106f8f [ 2662.423081][ C0] R10: dffffc0000000000 R11: ffffffff8bb13cc0 R12: ffff88801bb47000 [ 2662.431081][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eed1d40 [ 2662.439102][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 2662.448052][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2662.454655][ C0] CR2: 00007f4c6ccbb0f0 CR3: 0000000032f44000 CR4: 00000000003506f0 [ 2662.462655][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2662.470653][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2662.478682][ C0] Call Trace: [ 2662.481985][ C0] [ 2662.484846][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 2662.491221][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 2662.496944][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 2662.502781][ C0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 2662.508012][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 2662.514298][ C0] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 2662.519712][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2662.525380][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 2662.530619][ C0] ? update_process_times+0x1ce/0x230 [ 2662.536036][ C0] ? tick_nohz_handler+0x37c/0x500 [ 2662.541180][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2662.546719][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 2662.552107][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 2662.558132][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2662.563875][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 2662.569974][ C0] ? hrtimer_interrupt+0x396/0x990 [ 2662.575160][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 2662.581354][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2662.587183][ C0] [ 2662.590217][ C0] [ 2662.593167][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2662.599348][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 2662.604663][ C0] ? acpi_safe_halt+0x21/0x30 [ 2662.609370][ C0] acpi_idle_enter+0xe4/0x140 [ 2662.614080][ C0] cpuidle_enter_state+0x112/0x480 [ 2662.619231][ C0] ? __pfx_menu_select+0x10/0x10 [ 2662.624216][ C0] cpuidle_enter+0x5d/0xa0 [ 2662.628664][ C0] do_idle+0x375/0x5d0 [ 2662.632768][ C0] ? __pfx_do_idle+0x10/0x10 [ 2662.637391][ C0] ? poll_idle+0xb0/0xb0 [ 2662.641672][ C0] ? rest_init+0x31/0x300 [ 2662.646030][ C0] cpu_startup_entry+0x42/0x60 [ 2662.650818][ C0] rest_init+0x2dc/0x300 [ 2662.655097][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2662.660688][ C0] start_kernel+0x47a/0x500 [ 2662.665244][ C0] x86_64_start_reservations+0x2a/0x30 [ 2662.670735][ C0] x86_64_start_kernel+0x9f/0xa0 [ 2662.675705][ C0] common_startup_64+0x13e/0x147 [ 2662.680686][ C0]